On 09.03.09 11:17, Bazooka Joe wrote: > Last week I got a client that wanted me to spam virii filter for their > in house exchange server. > > I changed the mx from mail.domain.tld (their exchange) to > mail2.domain.tld (my sa box) which relayed to mail.domain.tld. > > Last week all worked as expected. The hundreds of spam droped to 0; > until this weekend. Looking at the headers, mail is going directly to > the mail.domain.tld even though it isn't listed as mx anywhere. > > I can tell the exchange server to only except mail from my server but > has anyone else experienced this?
I've already heard that spammers are pushing mail to ns.<domain> even if it was never listed in the MX records. Quite probably they check for mail.<domain> too. That time they were lucky. Admins forget to filter the "ns" machine and viruses got inside. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I wonder how much deeper the ocean would be without sponges.
