[Gllug] How to handle spam bounces from secondary MX server

[Daniel P. Berrange]

On Tue, Dec 09, 2008 at 11:59:04AM -0000, John Winters wrote:
> > One current spammer technique is to batch-query MX records and publish the
> > results to the botnet. Their cache of MX records is held for a long time,
> > so
> > periodically changing your mailserver IPs can help.
> 
> Alas, I have only one appropriate IPv4 address available.
> 
> OTOH, I have an extremely large number of IPv6 addresses.  Do you think
> publishing only an AAAA record for my mail server would help reduce spam?

Definitely. As an added benefit, it'd also help you avoid all real email
too ;-P

Switching to IPv6 only would help that other thread about SSH portscans
since its not at all practical to port scan the huge IPv6 address range.

Daniel
-- 
|: http://berrange.com/     -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org  -o-  http://virt-manager.org  -o-  http://ovirt.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://freshmeat.net/~danielpb/    -o-   http://gtk-vnc.sourceforge.net :|
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug