Spam seems to prefer the backup mx
A while ago, I published the following picture to a security mailing list, asking:
I have seen a heavy increase of rejected mails on my mailserver since Sunday:
might be related to
http://www.f-secure.com/weblog/archives/archive-012007.html#00001087
Any thoughts...?-L
The long term picture of this increase looks now like this:
The upper picture is the higher resolution of the jump at beginning week 4.
There are two things visible in the statistics of rejected emails:
- an overall increase
- a jump, beginning week 4
While 1.) is still not clear to me, a plausible reason for 2.) (the heavy increase during begin week 4) is, that my backup mx went down. It looks like, that there is certain spam (or email worms) out there, which tries to connect to the backup mx first instead of the primary mx.
Maybe because the backup mx is usually not as good protected...?
