Can anyone help? I have an email that was rejected first, and then accepted twice, all from the same IP address. Is there a reason someone can explain for why this is happening, or what I can do to capture even more Spam!? The maillog extracts are as follows:
Sep 9 04:26:24 plesk2 relaylock: /var/qmail/bin/relaylock: mail from 217.23.1.32:51669 (pride.hardc0re.org) Sep 9 04:26:33 plesk2 spamdyke[3605]: DENIED_OTHER from: [email protected] to: [email protected] origin_ip: 217.23.1.32 origin_rdns: pride.hardc0re.org auth: (unknown) Sep 9 14:47:04 plesk2 relaylock: /var/qmail/bin/relaylock: mail from 217.23.1.32:33361 (pride.hardc0re.org) Sep 9 14:47:09 plesk2 spamdyke[15524]: ALLOWED from: [email protected] to: [email protected] origin_ip: 217.23.1.32 origin_rdns: pride.hardc0re.org auth: (unknown) Sep 9 16:00:25 plesk2 relaylock: /var/qmail/bin/relaylock: mail from 217.23.1.32:54080 (pride.hardc0re.org) Sep 9 16:00:30 plesk2 spamdyke[25305]: ALLOWED from: [email protected] to: [email protected] origin_ip: 217.23.1.32 origin_rdns: pride.hardc0re.org auth: (unknown) I also think that a lot of emails are getting through because they come from a secondary mail server and we have been told that Spammers often choose the lowest priority MX record and send to that. This then passes the checks which is frustrating (because the IP address that shows is that of the secondary mail server which clearly exists). I wonder whether there is any way to prevent this? Kind regards, Christoph ------- Christoph Kuhle Expat Email Ltd Internet provision, domain hosting, email & business Voice over IP (VoIP) Converging communications! T: +44 (0)1722 770004 F: +44 (0)8700 631 511 www.emailitis.com <http://www.emailitis.com/> Registered in England (No. 05140609) at Bridge House, 11 Creek Road, East Molesey, Surrey, KT8 9BE. VAT No. 843 7166 15
_______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
