On Thu, Aug 28, 2003 at 04:00:05PM -0400, Daniel Reich wrote: > > The spammer is using their own domain (which I will call badspammer.com). The > MX records for badspammer.com point to either my mail server's IP or localhost > (127.0.0.1). > > Badspammer.com then uses a dictionary to send out a massive email > blast to one of my domains. Qmail happily accepts the mail, puts them > in its queue to try and do a local delivery. Most of these bounce and > qmail attempts to send out a bounce notice to the sender. It looks up > the MX record for badspammer.com and finds 127.0.0.1. So qmail > connects to 127.0.0.1 and attempts to deliver itself the mail. This of > course causes more bounces and winds up in postmaster's mailbox. > > So it's a valid domain and it technically has valid MX records. But the MX > record data itself is not.
http://marc.theaimsgroup.com/?l=qmail&m=97967261918021&w=2 Summing up, put: 127.:allow,RELAYCLIENT="@localrelay" into your tcp.smtp file and setup a virtual domain "localrelay" as all mail being sent from 127.x will have "@localrelay" tagged on at the end. You can either keep those messages or throw them out. I would keep them in a maildir to see if this causes you any problems. Chris
