A lot of spam getting through

[Steve Campbell]

----- Original Message ----- 
From: "Billy A. Pumphrey" <bpumphrey at woodmclaw.com>
To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
Sent: Monday, April 30, 2007 4:44 PM
Subject: RE: A lot of spam getting through


>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
>> bounces at lists.mailscanner.info] On Behalf Of Steve Campbell
>> Sent: Monday, April 30, 2007 4:39 PM
>> To: MailScanner discussion
>> Subject: Re: A lot of spam getting through
>>
>>
>> ----- Original Message -----
>> From: "Billy A. Pumphrey" <bpumphrey at woodmclaw.com>
>> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
>> Sent: Monday, April 30, 2007 2:58 PM
>> Subject: RE: A lot of spam getting through
>>
>>
>> > I believe that I have a local DNS going.  Do you have a quick way to
>> > check?
>> >
>> I believe if you look in your resolv.conf file on the particular
> server in
>> question, you should see something like 127.0.0.1 as a nameserver.
>>
>> Then do an old fashion nslookup for any address, and it should return
>> 127.0.0.1 as the server that responded.
>>
>> You should also be able to do a 'ps' and determine if any DNS server
> is
>> running (usually 'named' on a RH server.)
>>
>> A local nameserver is not necessarily a local caching nameserver, mind
>> you.
>>
>> I think this is correct, but it'll tell you if you don't have a local
>> nameserver running.
>>
>> Steve
>>
>>
>
> Ok, I had edited this file but it points to my local domain windows dns
> server.  Does that mean that I should change it to something else?
> -- 

You should only change it if you have a caching nameserver on the server 
that is showing a lot of spam. Did you discover whether you are even running 
a local DNS server? What does ps show? What was in the file before you 
edited it?

Steve