Mailing List SIMS@mail.stalker.com Message #6364
From: Anubis <anubis@open.mine.nu>
Subject: Re: spam via mx secondary
Date: Sun, 02 Jul 2000 01:39:00 -0400
To: (SIMS Discussions) <SIMS@mail.stalker.com>
A quick test from here shows that postoffice.telstra.net isn't an open
relay.  Not an extensive test, but I'm wondering if it isn't SIMS telling
you that it's blacklisting that host on its own, because of the invalid
recipient.  Notice it says it's blacklisting the host for so many seconds
each time.

Still learning,
Christopher
--
If we are what we eat, then I'm easy, fast and cheap.

> From: Nick Quinn <nquinn@acm.org>
> Reply-To: <SIMS@mail.stalker.com> (SIMS Discussions)
> Date: 02 Jul 2000 12:00:03 +1000
> To: <SIMS@mail.stalker.com> (SIMS Discussions)
> Subject: spam via mx secondary
>
> hi,
>
> I have just installed SIMS 1.8b8:
>
>> 10:23:20 1 SMTP-768(postoffice.telstra.net) SPAM?
>> Recipient'<MuratSex@email.tc>' rejected: sending host is blacklisted
>
>> 10:23:21 1 SMTP-788([203.50.1.76]) SPAM? Host is in the Blacklist
>
>> 10:23:21 2 SMTP-788([203.50.1.76]) SPAM? Host is banned for another 402
>> seconds
>
> "postoffice.telstra.net" is our secondary mx server!
>
> "MuratSex@email.tc" does not exist (we own and operate the domain "email.tc".
>
> "203.50.1.76" is "postoffice.telstra.net"
>
> it appears that we have chosen a "bad" secondary.
>
> what will happen when we become available after an outage? will we reject our
> own mail?
>
> later I noticed:
>
>> 10:23:57 1 SMTP-806(mts1.internic.net) SPAM? Recipient
>> '<MustafaSexBomb@email.tc>' rejected: sending host is blacklisted
>> 10:23:59 1 SMTP-808([198.41.1.234]) SPAM? Host is in the Blacklist
>> 10:23:59 2 SMTP-808([198.41.1.234]) SPAM? Host is banned for another 100
>> seconds
>
> looks a bit like they are using both our secondary mx and internic.net
> (internic.net= 198.41.1.234), or is this what is called "spoofing"?
>
> ...'spose its a bad time of the year to be asking our colonial brethren :-)
>
> Nick Quinn
> Sunshine Beach Software in OZ

Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster