Thank you, I check our mx-in this evening, and we are see 25 and 587 onslaught. IRC room confirm this problem start saturday sunday and is seen in many part of world so not single attack on only us, most of 2p25 comes from pa.comcast but the submission onslaught comes from pa ma, ga and so on, perhaps comcast should divert all outbond via their mx-outs until they clean this mess.
We do not have contract with spamhaus so are concerning it might violate some limit and spamhaus are to valuable, so now we place full route filter on originate AS7922 as preventing teaching mx-ins is better cure alround On Tue, May 27, 2025 at 2:39 AM Paul Ebersman via mailop <mailop@mailop.org> wrote: > wdgarc88> In past 48 hour we see massive increase in spam attempts, have > wdgarc88> comcast previously blocked port 25 outbound? and now removed > wdgarc88> that block? > > Last I heard, they still block outbound 25 by default for all consumer > connections. But there is one particular spammer that likes to use home > ISP connections to spam that seems to be back to using open comcast > customers heavily as of mid-May. They all get blocked by XBL/SBL but > shouldn't be connecting to port 25 at all. > > There are comcast folks on the list. Hopefully this will get dealt with > soon. > _______________________________________________ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop >
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
