Do some spammers ignore MX ptrs?

Chris Sweeney csweeney at osubucks.org
Thu Apr 27 15:22:15 IST 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Why have a secondary of you are going to just blacklist everything
from it?  Why not save the power and just have one MX then?

BB wrote:
> I think some do.  I have a secondary MX record for a domain hosted
> by my ISP.  Legitimate traffic really should never be delivered to
> this server when the primary waited zero server is up.
>
> Looks to me all mail coming from this secondary is spam.  Think the
> spammers hope the backup relay does not filter for spam, which
> appears to be true.  And then the primary accepts all from the
> secondary.
>
> I blacklist all mail from this secondary.
>
> Been doing this for three years without any problems.
>
> Your issue might also be related to DNS.
>
> On 4/27/06, * Michael Masse* <mrm at medicine.wisc.edu
> <mailto:mrm at medicine.wisc.edu>> wrote:
>
>     I'm offloading just Mailscanner services from an overloaded
>     email store
>     machine to a new machine and am doing so by pointing the MX
>     record for
>     the domain to the new machine.   The A ptr still points to the old
>     system so that none of the other services this machine provides get
>     interupted.     All legitimate email and most spam is going to
>     the new
>     system like it's supposed to and it then gets relayed to the old
>     store
>     machine, but I'm noticing quite a bit of spam is still being sent
>     directly to the old system.     Does some spam software ignore
>     the MX
>     ptr and go to the A ptr instead, or is this more likely to be a DNS
>     cache issue on the sending systems that will hopefully clear
>     itself out
>     over a few days?
>
>     Mike
>     --
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>     Before posting, read http://wiki.mailscanner.info/posting
>
>     Support MailScanner development - buy the book off the website!
>
>
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>,
> and is
> believed to be clean.

- --
Thanks Chris

Check me out!
Finally setup a MySpace.com account http://www.osubucks.net

csweeney at osubucks.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iD8DBQFEUNOXS9AMNDUYgIcRAufkAKCL9ExreEyYzjAlPKtSDrWnhlXfnQCeMOtL
G88NiER8nHRfm1AQnasttE4=
=G1lS
-----END PGP SIGNATURE-----


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060427/9d194692/attachment.html


More information about the MailScanner mailing list