On 26/10/15 11:38, Jürgen Jaritsch wrote: > Hi, > > I added this two lines to our postfix header checks: > > /mike@sentex\.net/ DISCARD > /jdenoy@jdlabs\.fr/ DISCARD > > Worked very well: > > # grep -i discard /var/log/mail.log | grep -iE "@jdlabs|@sentex" | wc -l > 408
But it is originating all from different IP addresses. Who knows if this is an attack to get *@jdlabs.fr blocked from NANOG and is just getting its goal accomplished.
