Re: [exim] Innovative Host Blacklisting Idea

Dean Brooks wrote:
> On Fri, Jun 15, 2007 at 07:39:39AM -0700, Marc Perkel wrote:
>
>
>> Only if you start with the highest numbered MX records and connect 25
>> times in a 3 day period.
>>
>
> The biggest concern is if you ever have a problem with your mail
> server that causes connections to either be refused, delayed or
> deferred. It may be rare, but it could happen (i.e. brief
> misconfiguration of Exim that rejects/defers connections, high server
> load, high connection limits reached, etc).
>
> In that event, you could be hit with hundreds (or thousands, whatever)
> of legitimate connection attempts to your higher MX address. You'll
> need to have some mechanism in place to ignore those connections when
> that happens or you'll end up having to manually reset your tracking
> database.
>
>

For that to happen all my servers would have to fail. And one of those
servers is the one counting the bogus MX hits so if my lowest MX is down
so is the spam trap so I don't think false positives is going to be an
issue.