<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Sun Nov 23 07:30:02 2014
# stats since Sat Nov  1 00:09:01 2014
5774	b.barracudacentral.org
1406	hostkarma.junkemailfilter.com
735	zen.spamhaus.org
104	in-addr.arpa
13	dnsbl.sorbs.net
76	genericPTR
0	BlackList
# 8108	total rejects
#
458	WhiteList
9784	Passed
  SpamCannibal additions
# last update Sun Nov 23 07:20:01 2014
# stats since Sat Nov  1 00:18:01 2014
1510	zen.spamhaus.org
268	in-addr.arpa
179	hostkarma.junkemailfilter.com
76	bl.spamcannibal.org
26	b.barracudacentral.org
5	dnsbl.sorbs.net
0	bogons.cymru.com
18	genericPTR
0	BlackList
# 2082	total rejects
#
139	WhiteList
108	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Sun Nov 23 07:35:59 2014
# stats since Sat Nov  1 00:09:02 2014
5811	b.barracudacentral.org
882	zen.spamhaus.org
205	hostkarma.junkemailfilter.com
179	in-addr.arpa
10	dnsbl.sorbs.net
49	genericPTR
0	BlackList
# 7136	total rejects
#
0	WhiteList
3590	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Sun Nov 23 07:22:35 2014
# stats since Sat Nov  1 00:18:01 2014
1258	zen.spamhaus.org
607	hostkarma.junkemailfilter.com
91	b.barracudacentral.org
84	bl.spamcannibal.org
36	in-addr.arpa
2	dnsbl.sorbs.net
0	bogons.cymru.com
14	genericPTR
0	BlackList
# 2092	total rejects
#
224	WhiteList
110	Passed
  mimedefang/spamassassin disposition
# last update Sun Nov 23 07:24:41 2014
# stats since Sat Nov  1 00:11:17 2014
133	spamassassin
81	invalid_recip
3	2 bogus_helo
3	virus
1	message/partial
1	suspicious_chars
# 222	total rejects
#
3023	Passed
  mimedefang/spamassassin disposition
# last update Sat Nov 22 10:13:06 2014
# stats since Mon Nov  3 10:09:13 2014
6	bogus_helo
# 6	total rejects
#
2	Passed

yesterday: 1190 messages, 125 passed, 15 moderator rejects (tarpit)
oldest ... messages per day, mostly spam ... newest
1382 854 500 2534 3002 2769 2122 0 347 595 644 688 726 765 801 458 475 981 846 855 764 570 399 404 830 2200 2023 2160 2166 1190


































































































oldest ... good messages passed ... newest
91 95 70 103 120 105 147 0 59 236 160 168 143 160 158 90 90 150 154 151 137 84 42 97 195 160 147 169 161 125















































































oldest ... moderator rejects ... newest
17 78 22 17 20 16 11 0 16 14 29 22 23 18 11 21 10 29 19 26 23 1 0 12 51 18 10 27 14 15

























































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME