Many spammers target secondary MX records specifically for a lack of applied anti-spam technology.
On Jan 24, 2008 4:18 PM, Steve Hart <[EMAIL PROTECTED]> wrote: > > > We have two real world MX records for our domain. The first has a preference > of 10 and points to our main email server, a new E2007 box. The second mx > record has a preference of 200 and points to the email server of one of our > affiliated companies. That server is an old E2000 beast. Both Exchange > servers are part of the same Exchange Organization and there's a point to > point T1 between the sites that provides an alternate means of delivery > should our main internet connection die. > > I'm experimenting with spam filtering on the 2007 box using SpamHaus and > custom words and having quite a bit of success. Spam directly from the > internet passing through the 2007 server is virtually nil. The problem is > that a good portion of our spam (about 20%) seems to be arriving through the > E2000 box across town. Since that server is part of internal system, the new > box isn't filtering the mail. Headers show that even when the addresses are > wrightbg.com, remote servers are routing the mail to wbgppm.com. Is there a > way to fix this, other than deleting the second mx record? > > Steve > > > > > > -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
