At 12:17 PM 3/9/2009, you wrote:
Last week I got a client that wanted me to spam virii filter for their
in house exchange server.
I changed the mx from mail.domain.tld (their exchange) to
mail2.domain.tld (my sa box) which relayed to mail.domain.tld.
Last week all worked as expected. The hundreds of spam droped to 0;
until this weekend. Looking at the headers, mail is going directly to
the mail.domain.tld even though it isn't listed as mx anywhere.
I can tell the exchange server to only except mail from my server but
has anyone else experienced this?
Sure.I run my own mail server, and all my mail comes from another
server that runs AV, Antispam, etc. So my firewall rules only allow
port 25 from that host.
If I remove that firewall rule, I'll see spam come directly in.
Are they guessing names? Trying by IP? I don't know. Hostname isn't
anything "mail"'ish , so I can't say for sure. But I've seen what
you're describing. :)
