On Dec 8, 2010, at 2:29 PM, Marc Perkel wrote: > Virus bots tend to hit all MX records, perhaps randomly. I get millions of > hits every day on the highest numbered MX when there are at least 2 and > sometimes as many as 7 lower numbered MX records.
We too very often see spammers hit the highest MXs first. I think the theory is that spam controls on those might be less. A theory that is probably valid much of the time. The other thing we see that always amazes me is that if we have MXs that are all the same weight, the ones that have the lowest reverse DNS host name get hit higher. So for use we use inbound1 through inbound4 as the host names. All four have the same MX weight. DNS gives out the names in random order when you look up the MX records. Yet inbound1 gets hit almost twice as much as inbound2 and inbound 2 is almost twice what inbound4 is. I really have no idea how much less why this happens. It is sort of frustrating though as it leads to load imbalances. Chris -- ------------------------------------------------------------------------- Chris Owen - Garden City (620) 275-1900 - Lottery (noun): President - Wichita (316) 858-3000 - A stupidity tax Hubris Communications Inc www.hubris.net -------------------------------------------------------------------------
