[Mimedefang] Problem with backscatter

[Steffen Kaiser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 24 Mar 2010, Jakub Wasielewski wrote:

>> Why does the mail hit your backup MX in the first place? Is the primary
>> server offline?
>
> Well, we are talking about backscatter done - in purpose - by
> spammers. Why do they connect

So, do you need a backup MX at all, if the primary is online?

>> sendmail[pid]: queueid1: queueid2: DSN: reason
>
> Yes it is. The reason is : User unknown:
> Mar 20 04:54:18 [sm-mta] o2K3sEnS001039: o2K3sInS001048: DSN: User unknown
>
>> log entry. Can you verify that queueid1 is the queueid of the message that
>> entered your host from outside.

What does the other log entries of o2K3sEnS001039 say? Where it is from, 
which relay, ...

Regards,

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBS6oq5UgddVksjRnHAQKNUwf/TFt1lPe28vMJ3L68gOCExLeHl04pFtBv
cjKIU5F+1ofH59mwwjVOZappQ/mqvhBo6EQoyWCR2WilaaQRfO0y6EaLsdY2hH93
WxWn1XE/36aP2pjcoE8u2+L7dOV+SUmsxixhVEVtJxlzSruSOycalE3bYBz7d99V
3VxGt7mSg1/M2fS6QkXscVl4FuSbOwmSn4Xop042b0mXLwKusqa7QG8m1c9ziSEe
iIyEXpgn3KUc1w1ODkSJf5nbFayGg9tAbYpcn/ZUiNYZR0099U5M6lBEGe8ysnJg
jvUd02IUxxIoReAljptIVX7zAFIIoaqUkAA9LsmMBJ4Z+byyZ3xqlw==
=41P+
-----END PGP SIGNATURE-----