Spammer frequently deliver to all MXs listed. Guess their trying to bypass filters hoping your backups aren't as well configured.
David - ----- Original Message ----- From: "Terry Mac Millan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, March 27, 2003 12:43 PM Subject: [IMGate] Re: Overriding MX record > > A simple block would be to port block 25 to your non MX'd server at your > router. Unless you have clients that connect to your mail server remotely. > Terry > ----- Original Message ----- > From: "Chris Scott" <[EMAIL PROTECTED]> > To: "Serhan Sevim" <[EMAIL PROTECTED]> > Sent: Thursday, March 27, 2003 12:14 PM > Subject: [IMGate] Re: Overriding MX record > > > > > > Thursday, March 27, 2003, 11:59:14 AM, [EMAIL PROTECTED] wrote: > > > > > > > Guys,I don't understand but some spams coming right off of the spamming > > > server overriding our first and only MX record. > > > Imail hostname; mail.mezun.com > > > IMGate hostname; mail3.mezun.com > > > > Probably the ratware that sent it uses mail.[domain name of recipient] > > instead of/in addition to the MX for the domain. Usually either a case of > > crappy software or an attempt to bypass filtering servers. > > > > > > > > -- > > Chris Scott > > Host Orlando, Inc. > > http://www.hostorlando.com/ > > > > > > > > >
