Wakko Warner wrote: > Mark Smith wrote: >>>Subject: [exim] Weird RCPT TO address >>> >>>a1aaa1azzzz1zaaaaa@<local domain> >>> >>>Anyone else seeing this? >> >>Yes, coming from a variety of zombies. > > > I just recently started seeing this. Wondering if this was due to spammers > trying to exploit servers that accept/bounce. >
Probably. Default exchange(2k) behaviour is to still accept the mail and then bounce it if it can't deliver it anywhere. I've had hits on a number of servers.. 2005-07-27 15:43:04 H=(200-101-188-071.cbrbr200.dial.brasiltelecom.net.br) [200.101.188.71] F=<[EMAIL PROTECTED]> rejected RCPT <[EMAIL PROTECTED]>: Unknown user Also the exact same local part so they're all going to be from the one bot net. Ted. -- ## List details at http://www.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://www.exim.org/eximwiki/
