Link to home
Start Free TrialLog in
Avatar of DMS-X
DMS-X

asked on

Spammers using my backup mx service to bypass spam filtering

I am Running Exchange Server 2003 SP2. I am using a backup mx service my ISP offers, please see my mx records below. The problem I am having is spammers are sending their email through the backup mx server instead of directly to my server, so when the spam finally ends up getting forwarded from the backup mx server to my email server it seems that both RBL checks and domain validation checks are failing on these spam messages. For now I have blocked all email from the backup mx server by using connection filtering in exchange and blocking the mx servers ip address. What can I do to defeat this work around that the spammers are using to bypass some of my spam filtering in exchange?

nslookup -q=mx
mydomain.com    MX preference = 20, mail exchanger = relay1.sea.eschelon.com
mydomain.com    MX preference = 10, mail exchanger = mail.mydomain.com
Avatar of Sembee
Sembee
Flag of United Kingdom of Great Britain and Northern Ireland image

That is a common spammers method. The reason they are doing it is because it usually bypasses the checks.
If your antispam strategy relies on connection filtering controls then you only have one option - remove the second MX record.

Simon.
Avatar of DMS-X
DMS-X

ASKER

What about if I were to smart host my email server through my isp instead? How would this effect my spam filtering methods in exchange?
ASKER CERTIFIED SOLUTION
Avatar of Sembee
Sembee
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial