On Mon, 20 Nov 2006, Leon Kolchinsky wrote: > Hello, > > There is a Mail-Relay administered by another person and its MX record stand > before MX record of my mail server, so theoretically mail should go first > through Mail-Relay to my server. > > The thing is that for some reason there are much e-mails (and spam among them > of course) getting to my server directly and not via Mail-Relay. > > What could be the reason for that? > Is this behavior avoidable at all?
It is a well documented fact that spammers abuse a setup like yours. Yours is a bit unusual in that the low priority MX is the actual delivery site not a fall-back server but spammers don't know nor care. Spammers explicitly target low priority MXs because they believe that those systems are fall-back servers and thus probably less well 'defended' against spam. To stop your abuse, either remove univ.haifa.ac.il from the MX list for "univ.haifa.ac.il" or configure the network fire-wall on univ.haifa.ac.il so that it only accepts SMTP traffic from mr2.haifa.ac.il and mr3.haifa.ac.il -- Dave Funk University of Iowa <dbfunk (at) engineering.uiowa.edu> College of Engineering 319/335-5751 FAX: 319/384-0549 1256 Seamans Center Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527 #include <std_disclaimer.h> Better is not better, 'standard' is better. B{