Just got these sporn direct mail to a member in my organization.

cer10mail.com  209.171.40.91  from address  [EMAIL PROTECTED]
renixdesign.com 203.25.208.100 from address [EMAIL PROTECTED]
classiclinx.com  203.15.67.38  from address [EMAIL PROTECTED]

Tried telnet to all servers and no answer except to cer10mail.com

That's not unusual -- roughly half of spam is sent from computers that do not have an SMTP daemon running on them (they are typically open proxies, compromised servers, or occasionally direct-to-MX spamware that runs on the spammer's computer).


Note that those IPs are all listed in quite a few spam databases, so if you are using DNS-based spam tests (DSBL, SPAMCOP, etc.), those E_mails would almost certainly have been caught.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to