In the testing we have done here, less than 1% of connections to our low
priority MX actually cycled around to one of the higher priority MX
systems to deliver the message. I'm still not sure if this is a growing
pattern yet, but it could be a sign of spambots catching on. Whether or
not they hit a *randon* MX record is kind of difficult to determin. As
already mentioned, I would *love* to see this information.

>> But legit email would not hit these higher mx records so I doubt I'll
>> have a problem with false positives.


I think you're mistaken about this. To assume that legitimate mail
servers won't use legitimate methods of delivering mail in the instance
of service unavailability, IMHO, is a mistake.


__
Terry Soucy, Systems Analyst Integrated Technology Services
University of New Brunswick, Fredericton Campus http://www.unbf.ca/its
Voice: 506.447.3018 Fax: 506.453.3590 E-mail: tsoucy@unb.ca
** ITS is a scent-reduced workplace - www.unbf.ca/its/policies **