On Tue, 8 Jun 2004, Jon Trulson wrote:
> I think at least some of these spammers see that the secondary (at
> least in my case) accepts alot of their spam, so they assume "Ah ha! my
> crap is getting through here!". Though in reality, once the secondary
> tries to deliver it to the primary (with all of the spamassassin goodness
> on it), it gets dumped.
>
> Anybody tried creating a bogus, low numbered secondary? Would be
> neato if the spammers got delayed a bit trying to connect to a
> non-existant machine...
Actually tried this.
Created an alias interface on a machine, DNS listed it as a high MX and
ip-filtered its port 25 (so I could monitor attempts to use it).
Saw numerous spammer hits on it but also saw hits by legitmate
mail sites. Dropped it when I got some complaints from users about
delivery errors from people they corresponded with.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
