OT: third party relay attack

Pierre Abbat phma at leaf.dragonflybsd.org
Fri Jan 10 03:04:54 PST 2020

My mailserver is being attacked by what looks like a botnet since December 16 
at 6:07 (11:07 UTC). Many hosts all over the world are sending mail purporting 
to be from many domains all over the world to a few domains in Russia. Most of 
the IP addresses are blocked by uceprotect.net; a few are blocked by other 
blocklists. A few are not blocked, but are rejected with "Relay access 
denied". The messages come at a rate of several per second.

There are 133 emails stuck in leaf's mail queue, but they do not appear to be 
related to this attack.

lo ponse be lo mruli ku po'o cu ga'ezga roda lo ka dinko

More information about the Users mailing list