sobig.f and secondary MX

[Daniel Bird]

Julian Field wrote:

> How about you make them the same priority and just share the load between
> the two?

In theory, that's what I thought. That's exactly what we have but I'm
seeing a skew to one of them. Over the last 24 hours, one of our has
seen 2551 messages, whilst the other has only seen 152. Odd.....

>
>
> At 20:49 21/08/2003, you wrote:
>
>> My secondary MX machine is having a hard time keeping up with the
>> mailscanning of so many sobig.f virus infected emails, while my
>> primary MX machines are not.
>>
>> I have found some clues that sobig.f's SMTP engine likes to send to
>> the secondary MX machine.
>>
>> What happens if I keep my secondary MX machine off line for a few days.
>>
>> Does anybody know what sobig.f does when it can't get thru to the
>> secondary MX.
>>
>> Thanks in advance for any insights.
>>
>> mark
>
>
> --
> Julian Field
> www.MailScanner.info
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
>

--
____________________________________

Daniel Bird
Network & Systems Manager
St. George's Hospital  Medical School
Tooting
London SW17 0RE

P: +44 20 8725 2897
F: +44 20 8725 3583
E: dan at sghms.ac.uk
____________________________________

Hex dump: Where witches put used curses...
"#define QUESTION ((bb) || !(bb)) - Shakespeare."