What he said. All the way. Funny thing is, the traffic I'm blocking the most are the hits to domains for which I run secondary mail so I'm already the alternate path. One of the big reasons for the plugin was to stop all his double-bounces from gumming up my system.
-Frank On Fri, 21 Nov 2003, Keith C. Ivey wrote: # Skaag Argonius <[EMAIL PROTECTED]> wrote: # # > I noticed some spammers pass through backup MX servers, meaning # > their ip address is not the last one, it's one before last. I # > think perhaps it would be smart to make this plugin check the # > entire chain of servers, because I can see them right before the # > last server, and having that feature would have stopped them # > nice :-) # # The line of servers isn't available except by getting the text # of the message and parsing the "Received" headers. That's the # sort of thing SpamAssassin is good at, so you could add some # custom rules with high scores. # # In any case, if the spam went through your backup server then # rejecting it may not be a good idea. Your backup server has # already received the mail at that point, so if you reject it # the backup server will have to send a bounce, which may go to # an innocent third party whose address the spammer happened to # use. # # You should consider either setting up your backup servers so # that they have as much spam protection as your main server or # perhaps not using backup servers at all. # #
