My mailserver is being attacked by what looks like a botnet since December 16 at 6:07 (11:07 UTC). Many hosts all over the world are sending mail purporting to be from many domains all over the world to a few domains in Russia. Most of the IP addresses are blocked by uceprotect.net; a few are blocked by other blocklists. A few are not blocked, but are rejected with "Relay access denied". The messages come at a rate of several per second.
There are 133 emails stuck in leaf's mail queue, but they do not appear to be related to this attack. Pierre -- lo ponse be lo mruli ku po'o cu ga'ezga roda lo ka dinko
