nanog mailing list archives

Re: AW: Uptick in spam


From: Octavio Alvarez <octalnanog () alvarezp org>
Date: Mon, 26 Oct 2015 18:40:07 -0700

On 26/10/15 11:38, Jürgen Jaritsch wrote:
Hi,

I added this two lines to our postfix header checks:

/mike@sentex\.net/ DISCARD
/jdenoy@jdlabs\.fr/ DISCARD

Worked very well:

# grep -i discard /var/log/mail.log | grep -iE "@jdlabs|@sentex" | wc -l
408

But it is originating all from different IP addresses. Who knows if this
is an attack to get *@jdlabs.fr blocked from NANOG and is just getting
its goal accomplished.



Current thread: