On Nov 26, 2012, at 7:11 PM, Wolfgang Breyha <[email protected]> wrote:
> Usually, if you're using ignore_target_hosts, verification of the domain
> fails since there is no valid MX host left for the domain in question and
> your exim will refuse the domain if used as envelope from.
> 
> Mails in the queue most likely will bounce or doublebounce/freeze. Depends
> which returnpath the messages have. Removing them with -Mrm seems reasonable.
> 
> Can you give some samples of MX entries pointing to bogus IPs other then
> 127.0.0.1 or ::1?


For example, we've seen spam come in from valid domains, but have bogus MX host 
records configured.  They have valid MX's, but the MX's are hostnames that 
resolve to bogus IP space.  So if the spam messages happen to get through 
initial delivery, if there are any bounces that create an NDR for any reason 
the queue will fill up with 100 of messages are  are trying to be delivered to 
an MX published record that points to something like 10.106.1.10 for example.  
It's not a common occurrence, but we've seen it happen more than a few times.  

-- 
Robert Blayzor
INOC, LLC
[email protected]
http://www.inoc.net/~rblayzor/




-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to