Author: Jim Cheetham Date: To: exim-users Subject: Re: [exim] open relay aftermath
On 14/02/11 13:53, W B Hacker wrote: > Changing YOUR servers to new IP won't really make much difference. They'll find
> anything with port 25 listening.
Sure; all servers will eventually get probed, on an ongoing basis. If
they are closed, no problem.
However, if the IP in question has been associated with an open relay in
the past you will find people pumping email into it regardless.
Initially just the same servers that originally exploited the original
open relay, but eventually some others. They do not seem to care that
all their messages are being rejected.
If you deny these known bad IP addresses a connection as early as
possible, you will have a lot of network traffic, CPU time and logfile
entries.
