>However, if they are really clever (this eliminates most) the 
>spammer will use the lowest priority MX to send stuff to you. So why 
>not try this:
>
>   MX 10 mail.realsimsmachine.com
>   MX 20 mail.fakesimsmachine.com
>   MX 30 mail.myisp.net
>   MX 40 mail.fake2simsmachine.com
>
>where the "*simsmachine.com" addresses all resolve to the same IP. I 
>am not a DNS expert by any stretch of the imagination, so I am quite 
>prepared to see this recommendation shot down in flames.

Not at all, this is exactly what I do. I have no statistics on its 
effectiveness. I do note that I see more and more spam getting in 
through my legit secondaries (the ones I cannot block). That means 
either

a) good - about the only spam getting to me is through the 
secondaries, because my regular blocking is almost perfect

b) bad - spammers are increasingly resorting to this trick.


Common sense tells me: b.


Stefan Jeglinski

#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to