At 8:53 PM -0500 2/19/02, Joseph D'Andrea imposed structure on a stream of electrons, yielding: >>...That would be your local blacklist. the 'RBL' settings in SIMS >>typically result in bounces with more specific information. > >I don't have a local blacklist... but here's what we figure is >happening... it's a weird side effect of the spam blocking. First >the background is that we get a lot of spam to invalid addresses. >Actually I don't know if it's spam or not because being to invalid >addresses it never shows up in anyone's mailbox. But anyway, when >this mail is received by the primary mail server during the day from >wherever it comes from and whenever it gets here, it doesn't set off >any "spam attack." But when the primary mailserver goes off the net >(like it did this afternoon), mail backs up in the secondary. So >far, that's a good thing. But then when the secondary tries to >deliver it to the primary once the primary is back up, there's all >this invalid mail (among all the valid mail) that the secondary is >sending. Do you think that this triggering SIMS to think that the >secondary is trying to spam attack the primary? I hope to have >solved this by putting the secondary's IP number in client hosts.... >but does that open up a can of worms with orbs? I seem to recall >that the last time I was configuring this area was because the >secondary accepted messages for anyone at the hosted domains and >that somehow was a no no for orbs.
That shouldn't be an issue for your secondary MX. It may be possible to rig up a test message that would make the combination a multistage relay, but that sort of test is not being done *as far as I know* by any of the testers out there. A test would have to be aimed at something like this: [EMAIL PROTECTED] I'm not even sure that your secondary would not notice that and reject it. There may be a way to make the secondary look for such things. Currently that sort of test would make it through a very large number of the backup MX's in the world and it would take a significant amount of work to do the tests or for spammers to exploit the hole. -- Bill Cole [EMAIL PROTECTED] ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
