Hi all. Im trying to turn off a massive spam attack - my first - on our domain so please bear me out. Any help is greatly appreciated.
We had moved the problem domain (it has been constantly spammed by about 7000+ Ip's over the last 10 days) to a machine running Eval Imail 8 from Exchange. We were trying to see if the antispam features would reduce the incoming spam All along the spam consists of emails to unknown email addresses at our domain. As a first attempt we moved the domain for an hour or 2 to test it on the server running Imail 8 and then moved it back to Exchange as we ran into a few problems. After we removed the domain off the IMAIL server, the logs show that email is still coming in to non-existing users of that domain. I assume the spam is being sent to the servers IP and not the domain anymore. 20030701 234559 127.0.0.1 SMTPD (004300D4) [210.3.17.31] HELO bbs-31-17-3-210.on-nets.com 20030701 234607 127.0.0.1 SMTPD (004300D4) [210.3.17.31] MAIL FROM: <[EMAIL PROTECTED]> 20030701 234608 127.0.0.1 SMTPD (004300D4) [210.3.17.31] RCPT TO: <[EMAIL PROTECTED]> 20030701 234608 127.0.0.1 SMTPD (004300D4) [210.3.17.31] ERR OUR.PRIMARYHOST.COM invalid user <[EMAIL PROTECTED]> I had tonnes of these records in the log. To check how the mail server responds I sent an email to a nonexistent user at a nonexistent domain after creating necessary dns entries for it. It seems for all these junk mails coming in the mail server sends a reply back to each one of them My questions a) Is there any way to delete these emails for a NonExistent domain and not bounce them back as that is what the spammer wants. b) Why does the mail server not do any validation / DNS blocklist search on these emails. It has been configured to do that and reports that in the log for another valid domain ( everything from Reverse DNS, MAIL FROM, HELO/EHLO and the subsequent lookups at the DNS lists ). it appears that sending mail to a domain that doesnt exist is an easy way to achieve NDR spam. Unless I can figure out I cant see the point of moving to IMAIL 8. Please help. Searching for the best free email? Try MetaCrawler Mail, from the #1 metasearch service on the Web, http://www.metacrawler.com To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
