Hi Rob-
In addition to IPBYPASS, make sure your gateway "knows" what addresses are
acceptable to the mail server so unacceptable addresses can be dealt with at
the gateway. That will keep dictionary attacks from getting to the server
via the gateway. In fact, this technique is so effective at trapping
dictionary attacks that you might want to consider two gateways and routing
all your mail through them. I have a low-priority MX that swallows about
250,000 dictionary attacks a day.
-Dave Doherty
Skywaves, Inc.
508-425-7176
[EMAIL PROTECTED]
----- Original Message -----
From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]>
To: <declude.junkmail@declude.com>
Sent: Thursday, November 02, 2006 7:26 PM
Subject: Re: [Declude.JunkMail] Backup MX
This is why the "IPBYPASS" is a very good feature. Skip your backup MX
and
process the headers starting at the IP that connected to your backup MX.
Darrell
------------------------------------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude And
Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
MRTG
Integration, and Log Parsers.
----- Original Message -----
From: "Robert Grosshandler" <[EMAIL PROTECTED]>
To: <declude.junkmail@declude.com>
Sent: Thursday, November 02, 2006 6:56 PM
Subject: [Declude.JunkMail] Backup MX
Hi all --
What is the current best practice for handling backup MXs? It appears to
have gotten harder since the bots seem to target the lower priority MXs.
It seems that the lower priority MX accepts the mail, and then passes it
along to us, but since there isn't the same filtering going on on the
backup, a bunch of bad stuff is more likely to get through.
Advice, pointers welcomed. Thanks in advance
Rob
================
Robert N. Grosshandler
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
