All my spare time has been filled with OSCP and CISSP study so I haven’t been posting any blog material, but this I had to share.
I do quite a bit of Ironport port work in my job so I am used to seeing very high spam rates but this was a first. A lot of Spammers send spam to the higher weighted MX records in the hope that the company can only afford one anti-spam device and that the device would be located on the primary MX record. Basically most of what we see on secondary devices is spam… but usually not this much spam!!!
What is the world coming to??
I see a similar thing on our secondary MX too. At one stage we had our secondary turned off for a week and when we brought it back up .. oh boy .. did it get hammered, and it was all rubbish!!