Autor: Sheen, Tony Datum: To: 'exim-users@exim.org' Betreff: RE: [Exim] exim : inbound attack , please help.
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
--
[ Picked text/plain from multipart/alternative ] > HI,
>
> iam hosting multiple domains ( virtual hosting ) .
>
> iam getting lot of incomming spam mails to perticular domain abc.com
>
> sending lot of zunk mails to random(non existing ) mail address of abc.com
>
> example: 123@??? , sdfs@??? , asdasd@???
>
> server load reached 100 so i removed that domain and even also deleted zone >
> for that domain but still iam getting spam mails
>
> How to stop them , even there is no MX record - how one can send mails to
>
> exim .
The MX records will take time to expire from the caches of remote DNS
servers.
The length of time is dependant on whatever you set in the SOA record for
that
domain. Bear in mind that your value can still be overridden or even ignored
by some DNS servers.
Expect **at least** 24 hours for the MX records to finally expire...
In the meantime, you could block the IP address(es) of the mail hosts that
are
sending you those messages by setting up a denial in one of the ACLs such as
acl_smtp_connect or acl_smtp_mail (etc).
----------------------------------------------------------------------------
--
Tony Sheen
MCI EMEA PostMaster & E-Mail Development
----------------------------------------------------------------------------
--
--