Text 10719, 40 rader
Skriven 2006-04-13 20:31:14 av Geo (1:379/45)
  Kommentar till text 10717 av Mike '/m' (1:379/45)
Ärende: Re: "Anybody purchasing ActiveX driven software should be fired."
=========================================================================
From: "Geo" <georger@nls.net>

"Mike '/m'" <mike@barkto.com> wrote in message
news:0vft32peje6j8pmt6fbfpj7s4dk263mnst@4ax.com...

> Which reminds us... if you haven't tried our Mail Server Profiler Beta
> yet, you oughta give it a shot.

Well I did and it seems to be a bit behind the times.

For example, one of the current tricks for domains which fit on one server is
to not run an mx backup, instead you use the spam filter box as the MX backup
and your MX record points to this spam box (your real mail server has no MX
pointing at it, if the spambox goes down you can point the MX to the mail
server). Then to keep spambot traffic levels reasonable you setup a couple
other MX records and point them at empty IP addresses (IP's with no machines on
them) in order to slow the spambots without sucking up your resources.

The way it works is you run a blacklist, when a blacklisted spambot tries to
connect to your MX it gets immediately dropped, so naturally it now tries to
connect to the servers listed as the other MX records, and since there isn't
anything there they wait for a timeout, then try the third MX and again wait
for a timeout, then the next bot in the botnet tries to deliver the spam and
goes thru the same routine.

The net result is you see a connections per hour drop of about 50% on your main
MX and the beauty of this is all you did was create a few extra dns records, no
tarpits, no extra servers, nada in the way of costly investments.

Since everyone tries MX records in preference order, this has no effect on
anyone except blacklisted sources since they are the only ones getting dropped
by the main MX. Their test looks at the setup the old fashion way, you need an
MX backup (MX backups are outdated and cause spam blowback which is likely to
get you on the blacklists) and if your MX backups are not reachable then you
have a problem. Neither of which is correct in the above described setup.

Geo.

--- BBBS/NT v4.01 Flag-5
 * Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)