Those are my own tests to see if I have closed the open relay, the results of which I posted earlier in this thread. I'm closed up now, unfortunately to my remote legitimate users as well. The next reply from Jeff Kinz will help me shut down the boxes that have targeted me and reduce the load on my box.
This will help if they keep coming from the same IP addresses but if they're picking zombied hosts at random to attack you from then you're just playing whack-a-mole.
My remaining problems are: 1) how to open up *safe* relays for legitimate users, the preferred
method being pop-b4-smtp because it is widely supported.
Surely SMTP AUTH is now as widely supported? It's certainly more standards-based.
Paul.
