Fake MX records

Scott Silva ssilva at sgvwater.com
Mon Jul 23 20:45:00 IST 2007


Hugo van der Kooij spake the following on 7/23/2007 11:12 AM:
> On Mon, 23 Jul 2007, Martin.Hepworth wrote:
> 
>> http://wiki.apache.org/spamassassin/OtherTricks (Fake MX Record)
>>
>> on the SA-users list.
>>
>> Looks very useful, anyone here using this technique?
> 
> I use it partially. MX 10 is me. MX 100 is for backups. MX 1000 is me
> again as spammers favored the highest MX (lowest priority) to bypass
> (RBL) filters. Now they seem to take them at random and ignore the
> priorities.
> 
> Hugo.
> 
If your low and high MX are the same address, I think they have some logic to
detect that, because it didn't work for me either.

Since I added the sane sigs to clam, my backup mx gets all the hits. Too bad
for the spammers, because it is running MailScanner also.

-- 

MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!



More information about the MailScanner mailing list