Starting Friday night, most of the users of the various domains on my server have been complaining of a massive flood of spam. I would say the spam traffic I have seen has easily tripled or quadrupled this weekend. It's unreal. I myself have received over 800 spam emails in the past 24 hours. The main problem is that Declude is catching much less of it than it usually does. The only tests they are failing is IPNOTINMX, and not much else.
My guess is that they are sending through your backup mailserver(s), and that you don't have an IPBYPASS line for them. That would account for the E-mail failing all the DNS-based spam tests, and failing the IPNOTINMX tests.
If you add an IPBYPASS line for each of your backup mailservers, it may take care of this problem.
If that doesn't explain it, if you post the top Received: header from several of the spams, that may provide more clues (the main question here being whether the IPs that they are coming from are actually listed in any IP-based spam databases).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
