> > Is it spam or bounces ? RCPT bounces it looks like to unknown users. > > Is addressed to valid users or unknown users ?
invalid users on each domain that this cluster (mini) is accepting. > > Are you rejecting mail to unknown users ? Yes. > > I'm going to guess, since you didn't tell us, that > it's bounces and mail > to unknown users and you aren't rejecting unknown > users for some reason. > > Here's a nice regex for simscan to reject those. > > :clam=yes,spam=yes,regex=^Subject.*failure\snotice.*:^Subject.*Delivery\sStatus\ > sNotification.*:^Subject.*Mail\sdelivery\sfailed.*:^Subject.*Returned\smail.*:^S > ubject.*Undelivered\sMail.*:^Subject.*DELIVERY\sFAILURE.*:^Subject.*Message.Deli > very.Failed.*:^Subject.*Undeliverable.*:^Subject.*mail.delivery.status.*:^Subjec > t.*Undeliverable\sMail.*:^Subject.*Mail\sSystem\sError.*:^Subject.*Returned\sMai > l.*:^Subject.*[D|d]elivery\s[F|f]ail.*:^Subject.*Undelivered\smail.*:^Subject.*f > ailure\snotice.*:^Subject.*Envio\sde\scorreo\sfallido.*:^Subject.*Delivery\sNoti > fication.*:^Subject.*Notificaci.*:^Subject.*Benachrichtung.*:^Subject.*BULK\sEMA > IL\sfrom\syou.*:^Subject.*Delivery_failure.*:^Subject.*bulk\semail\sfilter.*:^Su > bject.*Non\sdelivery\sreport.*:^Subject.*Information > Response from > listserver.* > kewl.. thanks! > Happens here all the time, and we aren't rejecting > unknown users because > we are in the middle of a mail server migration that > hasn't been > completed yet so the forward facing MX servers don't > know which users > are valid. The original problem is the continuation of whats happening now and WHY I put in the toaster as a front end to another qmail server (running Qmail Rocks, which both have good points, but I really like the simplicity set up of Bills toaster.) the main mx server was swamped the first week of december and I quickly acertained its time to split functions (pop/smtp). Small domains with under 500 users total, but still... 1300+ connections continuous is nuts! The problem was that the QMR server needed to be updated with the CHKUSER patch but I also wanted to split things up and put in a cluster where I could easily add more pop or mx servers as needed. Thus I looked at and chose the toaster. VERY happy I did this. Immediately upon moving the old MX server out of the loop, the new MX server (running the toaster) stopped accepting the invalid users via chkuser. (should be noted that I built it with MYsql. I don;t think the instructions shows the requirements for mysql, but thats not a problem.) its been running good stopping things and the more I place blocks on RIPE, APNIC, lacnic sites it calms down. Case in point right now its running on average 36/600 but its after hours and night, in the morning it takes off again. thanks for the response! Nitch. > > Regards, > > Rick > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
