[185522] in North American Network Operators' Group
Re: AW: Uptick in spam
daemon@ATHENA.MIT.EDU (Octavio Alvarez)
Mon Oct 26 21:40:12 2015
X-Original-To: nanog@nanog.org
To: =?UTF-8?Q?J=c3=bcrgen_Jaritsch?= <jj@anexia.at>,
"nanog@nanog.org" <nanog@nanog.org>
From: Octavio Alvarez <octalnanog@alvarezp.org>
Date: Mon, 26 Oct 2015 18:40:07 -0700
In-Reply-To: <1aef7cbfffb84dea8461f0c40db9bcec@anx-i-dag02.anx.local>
Errors-To: nanog-bounces@nanog.org
On 26/10/15 11:38, Jürgen Jaritsch wrote:
> Hi,
>
> I added this two lines to our postfix header checks:
>
> /mike@sentex\.net/ DISCARD
> /jdenoy@jdlabs\.fr/ DISCARD
>
> Worked very well:
>
> # grep -i discard /var/log/mail.log | grep -iE "@jdlabs|@sentex" | wc -l
> 408
But it is originating all from different IP addresses. Who knows if this
is an attack to get *@jdlabs.fr blocked from NANOG and is just getting
its goal accomplished.
