We are running Declude and Sniffer on Imail 8.05. One of our nationally accessed domains, xyz.com, has been under constant dictionary attacks with 320,000 messages per day average for 265 e-mail addresses/aliases.
After I installed our first Linux box as a gateway with Postfix the number dropped to less than a 10th of the original traffic. I made sure the now single dns mx record for the domain points at the Postfix box. (mail04.mainISP.net) I left the original mail.xyz.com A record in place to allow those domain customers to use the same POP/SMTP server settings. I will be adding a second Postfix box to act as a gateway to our backup mail server. Within the last few days it appears the spammers figured it out and are not using the mx record and going direct to the mail server. Anyone seen this? I am trying to avoid changing the smtp/pop server settings for my customers since the spammers may just look at our support pages and bypass our Postfix machine again. Any suggestions??? Pissed but determined in Seattle, Michael Jaworski Puget Sound Network, Inc. (206) 217-0400 (800) 599-9485 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
