Do some spammers ignore MX ptrs?
Chris Sweeney
csweeney at osubucks.org
Thu Apr 27 15:22:15 IST 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Why have a secondary of you are going to just blacklist everything
from it? Why not save the power and just have one MX then?
BB wrote:
> I think some do. I have a secondary MX record for a domain hosted
> by my ISP. Legitimate traffic really should never be delivered to
> this server when the primary waited zero server is up.
>
> Looks to me all mail coming from this secondary is spam. Think the
> spammers hope the backup relay does not filter for spam, which
> appears to be true. And then the primary accepts all from the
> secondary.
>
> I blacklist all mail from this secondary.
>
> Been doing this for three years without any problems.
>
> Your issue might also be related to DNS.
>
> On 4/27/06, * Michael Masse* <mrm at medicine.wisc.edu
> <mailto:mrm at medicine.wisc.edu>> wrote:
>
> I'm offloading just Mailscanner services from an overloaded
> email store
> machine to a new machine and am doing so by pointing the MX
> record for
> the domain to the new machine. The A ptr still points to the old
> system so that none of the other services this machine provides get
> interupted. All legitimate email and most spam is going to
> the new
> system like it's supposed to and it then gets relayed to the old
> store
> machine, but I'm noticing quite a bit of spam is still being sent
> directly to the old system. Does some spam software ignore
> the MX
> ptr and go to the A ptr instead, or is this more likely to be a DNS
> cache issue on the sending systems that will hopefully clear
> itself out
> over a few days?
>
> Mike
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> <mailto:mailscanner at lists.mailscanner.info>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>,
> and is
> believed to be clean.
- --
Thanks Chris
Check me out!
Finally setup a MySpace.com account http://www.osubucks.net
csweeney at osubucks.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFEUNOXS9AMNDUYgIcRAufkAKCL9ExreEyYzjAlPKtSDrWnhlXfnQCeMOtL
G88NiER8nHRfm1AQnasttE4=
=G1lS
-----END PGP SIGNATURE-----
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060427/9d194692/attachment.html
More information about the MailScanner
mailing list