OT? /dev/null 5.1.1 email

Patrick Muldoon doon at inoc.net
Wed Jul 6 02:47:48 UTC 2005


Brad Knowles wrote:

> At 4:00 PM -0400 2005-07-05, Jim Popovitch wrote:
>
>>  However, is seems the problem is over on the secondary MX (Postfix)
>>  which only has a list of legit relay domains for pMX.  When pMX is back
>>  online sMX fwds it's queue, but at that point pMX rejects to sMX...who
>>  then rejects to Sender.
>
>
>     Yup, and a lot of spammers take advantage of this fact by directly 
> connecting to the secondary MXes of their targets, and never 
> connecting to the primary MXes.


What about setting your highest order MX and lowest order MX to point to 
the same set of mail servers, and hide your backup servers in the 
middle. Even better if you can implement something that auto blacklists 
people that connect to your "secondary" MX's when you know that your 
primaries are up and accepting e-mail.

-Patrick




More information about the NANOG mailing list