>It looked like the spool folder was working normally, so i dumped all of
>the old queue files
>back into the spool folder (about 30,000 files total, counting the d & the q
>files). Within an hour and a half, the spool folder was down to having only
>300 files in it!
It sounds like Declude Queue is doing its job. :)
>So, what do you think could have caused this? We have had a problem with
>address harvesters for some time but lately it has gotten a lot worse.
Same here. We've had a heavily distributed combination
harvesting/spam-sending job going on, sometimes sending over 10,000 E-mails
per day to a domain that doesn't have any valid accounts on it.
>The funny thing is that out of all our domains, several of which have several
>thousand addresses, the only one they are harvesting is @oct.net which only
>has about 400 accounts !
Nobody said spammers were intelligent. :)
It's probably the 3-character domain name that attracted the spammer. They
don't realize that even if a domain name is rare/valuable/whatever, it
doesn't mean there are necessarily a lot of accounts on it (for example,
"buy.com" likely only has E-mail addresses for employees, who are probably
even less likely to give in to spam than the average user).
>Anyway, these jerques are hitting my server about 50,000 times a day from a
>ton of different ip addresses...
That's a distributed spam attack, like the one we were seeing. Nasty
stuff. I saw this coming about 6 months ago, but very few people cared at
the time. The spammer that I was dealing with then had the capability of
sending over 45,000,000 E-mails/day. With that capacity, you have to
either start making up addresses pretty quickly, or send lots of duplicate
spams.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
