Re: [EXIM] Silly Question

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Tabor J. Wells
Date:  
À: Exim
Sujet: Re: [EXIM] Silly Question
On Wed, Apr 14, 1999 at 07:19:21AM -0400,
Peter Radcliffe <pir@???> is thought to have said:

> Paul Mansfield <paulm@???> probably said:
> > It might also be that the connecting host is really really dumb, and
> > basically picks whatever the first MX record it finds in the DNS
> > lookup response. I've heard that some versions of MS software only
> > handle two MX records anyway, can anyone confirm this?
>
> I've found mail software braindead enough to send mail to any record
> for a domain, even NS records, so I'm sure theres software around
> that'll just handle a small number of MX records ...
>
> P.


Yup.

]# telnet shore.net 25
Trying 207.244.124.201...
Connected to shore.net.
Escape character is '^]'.
554-This machine is not a mail server. If you are receiving this
554-it is because your mail server does not know how to use DNS
554-to deliver mail to the MX records for Shore.Net instead of the A
554-record. Please contact your ISP and have them fix their mail
554 server. If you have any questions, please contact support@???

Since midnight:

# grep no.mail /var/log/secur/wrap.info | wc -l
    100


The current one hitting the hardest is:

]# telnet 203.207.200.56 25
Trying 203.207.200.56...
Connected to 203.207.200.56.
Escape character is '^]'.
220 xj.cei.gov.cn Sendmail 5.x/SMI-SVR4 ready at Wed, 14 Apr 1999 22:22:44
+0900

I'm willing to bet that the 5 attempts we get every few minutes from that
host are spam through an open relay.

Tabor

-- 
___________________________________________________________________________
Tabor J. Wells                                             twells@???
Systems Administration Manager  Just another victim of the ambient morality
Shore.Net  --  High quality Internet access and hosting services since 1993


--
*** Exim information can be found at http://www.exim.org/ ***