On Wednesday, September 15, 2004, 3:01:32 AM, Chris Stenton wrote: > I have been looking at my mail logs and wonder if this is now the norm
> Mail stats for last 24 hours > 3020 Total mail messages > 2143 reject "unknown user" > 206 reject RBL > 39 reject Virus > 158 SPAM messages caught by SA 3.0 > 474 genuine mail messages > The number of "unknown user" rejects has grown really fast over the last 4 > weeks. I am not sure what the spammers motives are as the success rate must > be near zero? > Chris Sounds like your server is being "dictionary attacked", i.e. bad guys are looking for valid mail addresses by trying many different common ones. In other words they try many and the ones that don't result in the "unknown user" response, they add to their spam lists. Unfortunately this is a standard spammer operation. If you can spot what IP address they are coming in from, perhaps you can block it at a networking layer. Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
