sobig.f and secondary MX

[Joe Stuart]

>>> mdm at INTERNET-TOOLS.COM 08/21/03 02:49PM >>>
>My secondary MX machine is having a hard time keeping up with the
>mailscanning of so many sobig.f virus infected emails, while my
>primary MX machines are not.

>I have found some clues that sobig.f's SMTP engine likes to send to
>the secondary MX machine.

>What happens if I keep my secondary MX machine off line for a few
days.

>Does anybody know what sobig.f does when it can't get thru to the
secondary MX.

>Thanks in advance for any insights.

>mark


We blocked access to our secondary MX from the outside and we havent
had a virus come in since.

Joe