<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<TITLE>Message</TITLE>
<META content="MSHTML 6.00.2600.0" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2><SPAN
class=993203709-04022004>Hi</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=993203709-04022004></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=993203709-04022004>We have two SMTP
servers.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=993203709-04022004></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=993203709-04022004>Our statistics show
that roughly 2/3 of mail comes in through smtp0, and 1/3 through
smtp1.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=993203709-04022004>And until recently,
2/3 of the spam came in through smtp0, and 2/3 of the virus-infected
mail,</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=993203709-04022004>as I would
expect.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=993203709-04022004></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=993203709-04022004>But our logs show
that about 50% of MyDoom-A is coming through smtp0, and 50%
through</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=993203709-04022004>smtp1.</SPAN></FONT><FONT face=Arial size=2><SPAN
class=993203709-04022004> Has anyone else seen such behaviour? And can
anyone explain why it happens ... I</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=993203709-04022004>can only think that
MyDoom gets the MX records of sites, and load balances between all
the</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=993203709-04022004>SMTP servers, but
why?</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=993203709-04022004></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=993203709-04022004>Alan</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=993203709-04022004></SPAN></FONT> </DIV></BODY></HTML>