[lug] how many ways to relay port 220?

[D. Stimits]

I've even seen a hit now on a 2nd machine with a different version of 
KRUD on it, whereby the machine local tcp port 6129 is trying to send 
outbound to random (or seemingly so) port 220 tcp ports. I don't think 
the machines are compromised (never know for sure till I figure exactly 
what is going on).

How many ways are there to try and cause a redhat machine to forward to 
imap port 220? Or to relay? What incoming ports can I check? Incoming 25 
and imap are all blocked, and most any vulnerable port is also blocked.

D. Stimits, stimits AT comcast DOT net