Christopher Bort wrote: > In all of the relay attempts I'm seeing on this mail server, the > recipient addresses are in domains for which the server is an NS.
They are looking for any connection possible. A nameserver is an association. They will hope that perhaps it allows mail. Unlikely to the extreme but not inconceivable. > I think, that they do care that it's an NS. It seems like they're > looking for hosts that will deliver|relay messages for specific > domains, so why don't they just use the existing MX rather than > trying an NS host with which there's no reasonable expectation that > it will relay for the target domain? You are trying to apply logic to a situation to which no reason can be applied. Spammers do not operate with a sanity of reason and logic. There is intelligence. But bludgeoning others for their own gain only makes sense to them and not to members of society. > I suppose they could be looking for back doors, but that seems like > it would be a very low probability undertaking. Spammers base their existence upon extremely low probabilities multiplied by very large numbers of messages. Bob