--On 18 July 2007 10:24:35 -0400 Eli <[EMAIL PROTECTED]> wrote:

>>     <http://www.sussex.ac.uk/its/email/stats/>
>
> I can't say whether I've noticed a trend or not since I don't have as much
..... However, the significant increase in host spoofing might indicate 
someone
> trying to dig up account info on your host - or it could just be innocent
> "smart spam" trying to spoof your own host to get through.
>
> Hopefully this is useful jibberish to you, instead of a waste of my time
> :)

Thanks, it is useful! I was asking around because if the answer was "no, 
it's not a general thing", then I'd have a look through my logs to try to 
find out more.

You've picked out the fact that there's been an increase in attempts to 
spoof our addresses as sender, which explains why I've had a few reports of 
massive spam blowback. Actually, we reject messages that spoof our 
addresses, which is what those numbers report. The "general sussex 
spoofing" is return-path spoofing. It looks like a disproportionate rise, 
but isn't a lot compared with the RBL rejects.

> Eli.



-- 
Ian Eiloart
IT Services, University of Sussex
x3148

-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to