On Oct 20, 9:30am, Peter J. Holzer wrote:
}
} Is there a reason why a legitimate MTA (talking to MXs, not submission
} servers) would want to hop around in its net?
A legitimate MTA could still be running in a dynamically-assigned space.
In this case it might hop all over the space but probably wouldn't hop
very frequently.
A single MTA host might have multiple NICs each with its own IP, and not
always choose the same interface for the same MX on retry. Here it might
hop quite a lot, but among a limited number of choices.
_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
http://www.irtf.org/mailman/listinfo/asrg