OT: third party relay attack

Pierre Abbat phma at leaf.dragonflybsd.org
Fri Jan 10 03:04:54 PST 2020


My mailserver is being attacked by what looks like a botnet since December 16 
at 6:07 (11:07 UTC). Many hosts all over the world are sending mail purporting 
to be from many domains all over the world to a few domains in Russia. Most of 
the IP addresses are blocked by uceprotect.net; a few are blocked by other 
blocklists. A few are not blocked, but are rejected with "Relay access 
denied". The messages come at a rate of several per second.

There are 133 emails stuck in leaf's mail queue, but they do not appear to be 
related to this attack.

Pierre
-- 
lo ponse be lo mruli ku po'o cu ga'ezga roda lo ka dinko






More information about the Users mailing list