Martin A. Brooks wrote:
> Marc Perkel wrote:
>> Anyhow - one of my tricks. Create a third MX that is higher than the
>> other two. Then add this ACL
>>
>> defer log_message = Spammer Connected to FAKE highest MX record
>> condition = ${if
>> match{$interface_address}{69.50.231.7}{true}{false}}
>
> Not wishing to be pedantic, but it's not a fake record, it's a real
> one. Also it's perfectly possible that it's not a spammer, but a host
> that is having trouble reaching your primary MX. You logic assumes that
> a spammer will always and only try the lowest priority MX record, that's
> unlikely to be universally correct.
>
> Regards
>
What I do is create a fake highest MX and then defer everything that
hits it. I get rid of about 120,000 spam attempts a day using it.
