40 emails per minute :(

[konrath]

Hello

In my server, it has an user that he receives 40 emails per minute

http://www.vipreseller6.net/intenetcom.txt


In this server I have
1) Dictionary Attack ACL installed
2) MailScanner
3) rules to block words in antivirus.exim
4) ClamAV installed

The site was removed from the reseller of my consumer but spam continues arriving.

This user dont have email, catall to :fail:

40 email per minute

some suggestion?

Thank you
Konrath

 

[RickG]

The site was removed from the reseller of my consumer but spam continues arriving.

Have you removed the DNS zone for this domain from your system? From the maillog, it looks like it is still active.

 

[Spiral]

Here's a little trick I use for things like that ....

Re-Add the domain of the deleted account as a new DNS zone
and set the IP address of that domain to 0.0.0.0.

Connection and email attempts for that domain should disappear
very quickly and once the owner of the deleted account changes
their DNS to something other than your DNS then you can remove
the extra DNS zone from your server.