OT: Strange behavior from selfsending mail viruses?

[Craig Daters]

I cannot really say. I seem to get a lot of spam through our
secondary MX which is co-located at the facility who provides our T1.
If it comes to our primary which is housed in-house, they hit
MailScanner/SpamAssassin/ClamAV etc., and are thus blocked. However,
secondary has no such config and somehow spammers know to try this MX
first.

>Hi
>Either Im totally wrong or just missed this information if its been
>discussed before.
>Ive had my primary MX server down for almost 2 weeks and I noticed that the
>viruses coming in has gone down with at least 80%. The only reason I can see
>is that selfsending viruses only try to deliver their contaminated mail to
>the primary MX record and not the second MX.
>Has anybody seen this as well or have I just been lucky the last 2 weeks
>
>/Anders


--
--

Craig Daters (craig at westpress.com)
Systems Administrator
West Press Printing
1663 West Grant Road
Tucson, Arizona 85745-1433

Tel: 520-624-4939
Fax: 520-624-2715

www.westpress.com

--