<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Thu Sep  2 18:50:02 2010
# stats since Wed Sep  1 00:09:01 2010
1677	hostkarma.junkemailfilter.com
309	b.barracudacentral.org
79	zen.spamhaus.org
20	in-addr.arpa
3	dnsbl.sorbs.net
2	dnsbl.njabl.org
0	bogons.cymru.com
0	dnsbl.tqmcube.com
0	list.dsbl.org
12	genericPTR
0	BlackList
# 2102	total rejects
#
37	WhiteList
336	Passed

  SpamCannibal additions
# last update Thu Sep  2 18:20:02 2010
# stats since Wed Sep  1 00:18:01 2010
1020	b.barracudacentral.org
90	hostkarma.junkemailfilter.com
19	in-addr.arpa
15	zen.spamhaus.org
6	bl.spamcannibal.org
3	dnsbl.sorbs.net
1	bogons.cymru.com
0	dnsbl.njabl.org
0	dnsbl.tqmcube.com
0	list.dsbl.org
1	genericPTR
0	BlackList
# 1155	total rejects
#
11	WhiteList
10	Passed

  MTA queries (Net::DNSBL::MultiDaemon)
# last update Thu Sep  2 18:59:57 2010
# stats since Wed Sep  1 00:09:32 2010
700	hostkarma.junkemailfilter.com
164	b.barracudacentral.org
45	zen.spamhaus.org
13	in-addr.arpa
12	dnsbl.njabl.org
0	bogons.cymru.com
0	dnsbl.sorbs.net
0	dnsbl.tqmcube.com
0	list.dsbl.org
29	genericPTR
0	BlackList
# 963	total rejects
#
4	WhiteList
1815	Passed

  MTA queries (Net::DNSBL::MultiDaemon)
# last update Thu Sep  2 18:19:19 2010
# stats since Wed Sep  1 00:18:32 2010
939	hostkarma.junkemailfilter.com
185	b.barracudacentral.org
66	zen.spamhaus.org
37	in-addr.arpa
17	bl.spamcannibal.org
8	dnsbl.sorbs.net
0	bogons.cymru.com
0	dnsbl.njabl.org
0	dnsbl.tqmcube.com
0	list.dsbl.org
0	genericPTR
0	BlackList
# 1252	total rejects
#
24	WhiteList
68	Passed

  mimedefang/spamassassin disposition
# last update Thu Sep  2 18:55:02 2010
# stats since Wed Sep  1 00:11:25 2010
35	spamassassin
22	invalid_recip
1	message/partial
# 58	total rejects
#
254	Passed

  mimedefang/spamassassin disposition


yesterday: 2105 messages, 130 passed, 30 moderator rejects (tarpit)
oldest ... messages per day, mostly spam ... newest
1900 1788 1943 1906 1569 1906 2118 2171 2131 2013 1594 1487 1278 1592 1590 1766 1945 1817 1512 1413 1563 1672 1524 1537 1474 1155 1230 1470 0 2105





















































































































oldest ... good messages passed ... newest
143 136 118 196 71 73 102 152 155 117 111 61 86 129 191 132 181 145 111 99 136 132 152 194 147 164 107 134 0 130



















































































oldest ... moderator rejects ... newest
13 21 20 0 8 0 15 54 22 9 19 13 0 15 34 18 20 27 9 0 36 23 17 22 13 12 0 40 0 30



















































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME