Sneaky Spammers...?
Mike Zanker
mike at ZANKER.ORG
Sun Mar 2 17:40:32 GMT 2003
On 02 March 2003 10:59 -0600 Mike Kercher <mike at CAMAROSS.NET> wrote:
> It looks to me like mail is rejected at the MTA by DNS blacklists.
> The spam is then routed to the backup MX and it seems that when mail
> hits the secondary MX (even though the originating server was
> blacklisted), the backup allows the spam in because it is only
> spooling for the domain (for some reason).
No, it's deliberate - spammers have been using secondary or even
tertiary MX hosts for months now. Some of the spamming software
available does this automatically now.
My secondary MX also got blocked by mailstats.pl. I've left blocking
enabled but fixed mailstats.pl so that it skips my secondary MX.
Mike.
More information about the MailScanner
mailing list