Am 22.01.25 um 08:21 schrieb Evgeniy Berdnikov via Exim-users:
On Wed, Jan 22, 2025 at 08:02:22AM +0100, Martin Waschbüsch via Exim-users
wrote:
And yes, this is not something to use lightly, but there are literally
several hundred fake domains I identified all using this one MX... I am
quite sure in this instance. ;-)
If so, you can easily block this MX by IP address.
You misunderstand, I think.
The domains have loads of different relays, with loads of different IPs.
The mails are not sent from / by the MX. And none of those IPs match
their MX's IP.
But all domains happen to have the same MX.
--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscr...@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
