What can be done about this? (malicious dns pointing)

2 days ago, one of my servers began choking on mail, load skyrocketed and we began digging into it.

I saw massive amounts of undeliverable email for "lebanon-online.com.lb" here's a few entries:

Nov 11 09:05:39 www18 sendmail[21553]: jABF5Xu21553: from=<mail@lebanon-online.com.lb>, size=71026, class=0, nrcpts=0, msgid=<200511111505.jABF5Xu21553@www18.dixiesys.com>, proto=ESMTP, daemon=MTA, relay=[148.246.117.183]
Nov 11 09:05:39 www18 sendmail[21553]: jABF5Xu21553: to=<brent@lebanon-online.com.lb>, delay=00:00:06, mailer=local, pri=71026, dsn=4.4.3, stat=queued
Nov 11 09:05:39 www18 sendmail[21397]: jABF49u21397: to=<kevin@lebanon-online.com.lb>, delay=00:01:27, mailer=local, pri=194577, dsn=4.4.3, stat=queued
Nov 11 09:05:43 www18 sendmail[21464]: jABF4eu21464: to=<adam@lebanon-online.com.lb>, delay=00:01:02, mailer=local, pri=78246, dsn=4.4.3, stat=queued

So what in the heck can you do about this crap? They're pointing their domain at my server, which does NOT host this web site, and all this massive email is dumping on my system and totally making the server unusable. It's worse than a ddos, well it is a ddos really.

http://www.dnsstuff.com/tools/dnstim....com.lb&type=A

The A record points firmly at my server and it's starting to piss me off.

 

 

 

 

Top