Hi,

Have an IMAP mailserver (Mercury) + IMAP webmail(Lumisoft) on a computer
(192.168.1.1) on DMZ (192.168.1.254/24).
On the LAN (192.168.100.1/24) there is a computer with an email client 
(Thunderbird) address (192.168.100.20).

When it comes to IMAP the config is:

NAT:

WAN  TCP  143 (IMAP)  192.168.1.1  143 (IMAP)


RULES:

WAN:
.
.
TCP  *  	 *  	 192.168.1.1  	 143 (IMAP)
.
.  	
X(block)  *      *       *               *

LAN:
.
.
TCP  LAN net  	 *  	 192.168.1.1  	 143 (IMAP)
.
.
X(block)  *      *       *               *


Everything works perfectly well. BUT in the syslog following appears now
and then:

sis2 @0:17 b 192.168.100.20,1157 -> 192.168.1.1,143 PR tcp len 20 50 -AFP IN

Could anyone explain what this is? Some packages are blocked...LAN rule
pass?

I am just a homeuser so don't make it to complicated. Just want to know
if it is to be expected.

By the way a neat syslog for Windows is to find at www.mikrotik.com

regards
uffe