| East MX STATS | West MX STATS | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Spam Statistics - DNSBL Hits - explanation | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
SpamCannibal additions # last update Wed Mar 10 20:51:25 2010 # stats since Mon Feb 1 00:09:02 2010 23152 hostkarma.junkemailfilter.com 4349 in-addr.arpa 3508 zen.spamhaus.org 947 b.barracudacentral.org 71 dnsbl.sorbs.net 7 dnsbl.njabl.org 2 list.dsbl.org 0 bogons.cymru.com 0 dnsbl.tqmcube.com 65 genericPTR 2 BlackList # 32103 total rejects # 1200 WhiteList 18430 Passed |
SpamCannibal additions # last update Wed Mar 10 20:20:17 2010 # stats since Mon Mar 1 10:52:15 2010 5277 hostkarma.junkemailfilter.com 599 zen.spamhaus.org 46 in-addr.arpa 36 bl.spamcannibal.org 34 dnsbl.sorbs.net 18 b.barracudacentral.org 0 bogons.cymru.com 0 dnsbl.njabl.org 0 dnsbl.tqmcube.com 0 list.dsbl.org 9 genericPTR 0 BlackList # 6019 total rejects # 50 WhiteList 196 Passed | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
MTA queries (Net::DNSBL::MultiDaemon) # last update Wed Mar 10 20:51:59 2010 # stats since Mon Mar 1 00:09:01 2010 2840 zen.spamhaus.org 401 hostkarma.junkemailfilter.com 368 in-addr.arpa 108 b.barracudacentral.org 14 dnsbl.njabl.org 6 dnsbl.sorbs.net 0 bogons.cymru.com 0 dnsbl.tqmcube.com 0 list.dsbl.org 77 genericPTR 0 BlackList # 3814 total rejects # 12 WhiteList 9414 Passed |
MTA queries (Net::DNSBL::MultiDaemon) # last update Wed Mar 10 20:22:52 2010 # stats since Mon Mar 1 10:52:45 2010 5226 hostkarma.junkemailfilter.com 344 zen.spamhaus.org 308 b.barracudacentral.org 45 in-addr.arpa 34 bl.spamcannibal.org 7 dnsbl.sorbs.net 0 bogons.cymru.com 0 dnsbl.njabl.org 0 dnsbl.tqmcube.com 0 list.dsbl.org 8 genericPTR 0 BlackList # 5972 total rejects # 225 WhiteList 1547 Passed | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
mimedefang/spamassassin disposition # last update Wed Mar 10 20:41:14 2010 # stats since Mon Mar 1 00:11:43 2010 211 spamassassin 35 dynamic_IP 27 invalid_recip 1 bogus_helo # 274 total rejects # 1281 Passed |
mimedefang/spamassassin disposition # last update Tue Mar 9 18:14:54 2010 # stats since Mon Mar 1 10:53:50 2010 10 bogus_helo 5 dynamic_IP # 15 total rejects # 2 Passed | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
yesterday: 2012 messages, 169 passed, 31 moderator rejects (tarpit) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.
MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.
mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.
Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.