It's for incoming mail only.
The reason why they send to the backup mailserver is pretty obvious, I can't
block that IP address.
I guess the only solution is to setup a filter on each server.
Jonas Fornander - System Administrator
Netwood Communications, LLC - www.netwood.net
Find out why we're better - 310-442-1530
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Scott Perry
> Sent: Sunday, April 08, 2001 12:27 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [IMail Forum] Spam is relayed via backup server
>
>
> > We have a Linux servers as mail backup server in case our primary
> > goes down. Now spammers are sending the spam directly to the backup
> > server that then tries to send it to our primary server. Since the
> > backup server has to allow incoming mail to store-and-forward in
> > case the primary is down, is there anyway I can avoid this?
>
> Are you talking about incoming spam (mail to your users), our
> outgoing spam (they have hijacked your mail server, sending
> 100,000's of E-mails)?
>
> Some spamware sends E-mail to backup mail server(s) instead of
> the primary (I don't know why). But, if the E-mail is destined
> to your users, they are going to get it either way. FYI, our
> Declude JunkMail software will scan the mail whether it comes
> directly from the source or from your backup mail server.
>
> If you are talking about hijacking, then you clearly need to lock
> down your Linux mail server. The method for doing that will
> depend on the type of mail server software you are running. I'm
> not too familiar with Unix, so I can't help you there. If users
> aren't using the backup mail server to send mail, then you could
> just have it receive mail destined for your domain(s), which
> should be pretty easy to do (no need to deal with trusted IP
> ranged and SMTP AUTH, that is needed if it can be used for
> sending outgoing mail).
>
>
>
> --
> -Scott
>
> Declude: Anti-virus and Anti-spam solutions for IMail.
> http://www.declude.com
> --
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
