Author: Chris Edwards Date: To: Exim User's Mailing List Subject: Re: [exim] Spam engine note
On Fri, 17 Dec 2004, John W. Baxter wrote:
| The DNS change is long enough ago that I believe these to be messages
| from spam engines whose instructions include the IP address to which to
| connect to send the message.
Yup - we found the same.
Looks like IP addresses are hardcoded into the ratware and/or millions CDs.
--
Chris Edwards, Glasgow University Computing Service