Spam Filter ISP Support - Backup Email Servers

Print Page | Close Window

Backup Email Servers

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=4148
Printed Date: 02 July 2025 at 11:47pm

Topic: Backup Email Servers

Posted By: Guests
Subject: Backup Email Servers
Date Posted: 17 August 2004 at 2:30pm

I use a service that will become my backup email server should mine go off-line. It will hold the email and then forward it onto mine when mine is back on-line. The problem is that spamfilter sees this backup email server as the host IP for the email and it will pass everytime because it is not on a blacklist. (lets hope it never is also). Anyway, the other hole this creates it that spammers could intentionally go to my secondary MX records and email directly to it knowing it will validate the IP. Thoughts?

Here is an example: Spamfilter should have processed against 66.165.236.247 not my backup email server 63.219.###.###

08/17/04 13:04:38:015 -- (1508) Resolving 63.219.###.### - mx1.#####.com
08/17/04 13:04:38:156 -- (1508) - SPF analysis done: - none
08/17/04 13:04:38:156 -- (1508) Mail from: mailto:b-0Ywxbcfacahb-jiajjeb-@msg.vintage-bargains.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - b-0Ywxbcfacahb-jiajjeb-@msg.vintage-bargains.com
08/17/04 13:04:43:406 -- (1508) - MAPS search done...
08/17/04 13:04:43:406 -- (1508) RCPT TO: mailto:###@#####.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - ###@#####.com accepted
08/17/04 13:04:43:718 -- (1508) EMail from mailto:b-0Ywxbcfacahb-jiajjeb-@msg.vintage-bargains.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - b-0Ywxbcfacahb-jiajjeb-@msg.vintage-bargains.com to mailto:###@#####.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - ###@#####.com was queued. Size: 3 KB, 3072 bytes
08/17/04 13:04:43:734 -- (700) Sending email from mailto:satellite@consumer-value1.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - satellite@consumer-value1.com to mailto:###@#####.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - ###@#####.com 08/17/04 13:04:43:812 -- (1508) Disconnect
08/17/04 13:04:44:609 -- (700) EMail from mailto:satellite@consumer-value1.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - satellite@consumer-value1.com to mailto:###@#####.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - ###@#####.com was forwarded to cm1.#####.com:25

by ###.com with SMTP; 17 Aug 2004 14:00:10 -0400
Received: from 63.219.###.### by (LogSat Software SMTP Server) Tue, 17 Aug 2004 13:04:43 -0500
Received: (qmail 27359 invoked from network); 17 Aug 2004 15:25:12 -0000
Received: from jjy1.vintage-bargains.com (66.165.236.247)
by mx1.###.com with SMTP; 17 Aug 2004 15:25:12 -0000
Message-Id: <830U35906FD7O367I9GMLWP0N@OEV003ZLU94HZWE5Z20U092Q5>
From: Satellite Television USA <satellite@consumer-value1.com>
To: mailto:###@#####.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - ###@#####.com
Reply-to:<satellite@consumer-value1.com>
Subject: DIRECTV, Tivo + DVD player - no charge
Date: Tue, 17 Aug 2004 10:18:17 -0400
Complain-To: abuse-qwskbcfacahb-jiajjeb-18thstory@msg.consumer-value1.com
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset = "iso-8859-1"
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: mailto:b-0Ywxbcfacahb-jiajjeb-@msg.vintage-bargains.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - b-0Ywxbcfacahb-jiajjeb-@msg.vintage-bargains.com

Replies:

Posted By: LogSat
Date Posted: 17 August 2004 at 11:26pm

Kelsky,

Spammers are known to send spam email to all servers for which an MX record exists. If you have a secondary MX record for your domain(s), it will receive spam. Your backup "service" should run an anti-spam application on their end so they can give you clean email.

When the backup server forwards you the email, as you've seen, SpamFilter will "see" the IP address of that backup server, not the original IP of the sender, so all of SpamFilter's IP-based filter will not work, and you will be left with the keyword and Bayesian filters only. There is not really a workaround for this, as normally users own both primary and secondary MX servers, and install SpamFilter as a gateway for both of them.

Roberto F.
LogSat Software

Posted By: kspare
Date Posted: 18 August 2004 at 10:25am

Kelsky, fire me an email, I can probably help you out with your situation.

You can get me @ mailto:kpare@ksphosting.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - kpare@ksphosting.com

Kevin

Print Page | Close Window