>I've recently noticed in the Logs some connections from the same Hotmail
>accounts occurring every 15 minutes.
that�s not a hotmail account, just a hotmail ip:
[root@mx1 log]# dig -x 64.4.9.82
; <<>> DiG 8.2 <<>> -x
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4
;; QUERY SECTION:
;; 82.9.4.64.in-addr.arpa, type = ANY, class = IN
;; ANSWER SECTION:
82.9.4.64.in--addr.arpa. 6m40s IN PTR f82.law9.hotmail.com.
>The recipient never actually receives any mail from them, so I'm
>wondering why the constant connecting?
something�s probably screwed up at Hotmail.
>Is this a Relay attempt, or worse a successful Relay?
It�s not a relay unitl they send you some messages
Once every 15 min is not often enoug to be a DoS
>There are two different Hotmail accounts this is coming from so far,
>'hawaiiantita89' and 'nedras22'.
Len
http://MenAndMice.com/DNS-training
http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
