<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Fri Aug 22 22:30:02 2014
# stats since Fri Aug  1 00:09:02 2014
5416	zen.spamhaus.org
775	hostkarma.junkemailfilter.com
142	in-addr.arpa
140	b.barracudacentral.org
5	dnsbl.sorbs.net
86	genericPTR
0	BlackList
# 6564	total rejects
#
462	WhiteList
4218	Passed
  SpamCannibal additions
# last update Fri Aug 22 22:20:02 2014
# stats since Fri Aug  1 00:18:02 2014
1107	hostkarma.junkemailfilter.com
589	zen.spamhaus.org
109	bl.spamcannibal.org
46	in-addr.arpa
12	b.barracudacentral.org
2	dnsbl.sorbs.net
0	bogons.cymru.com
11	genericPTR
0	BlackList
# 1876	total rejects
#
114	WhiteList
114	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Fri Aug 22 22:23:46 2014
# stats since Fri Aug  1 00:09:02 2014
3700	zen.spamhaus.org
639	hostkarma.junkemailfilter.com
266	b.barracudacentral.org
123	in-addr.arpa
3	dnsbl.sorbs.net
86	genericPTR
0	BlackList
# 4817	total rejects
#
16	WhiteList
4879	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Fri Aug 22 22:05:17 2014
# stats since Fri Aug  1 00:18:02 2014
1374	zen.spamhaus.org
288	hostkarma.junkemailfilter.com
127	bl.spamcannibal.org
46	b.barracudacentral.org
36	in-addr.arpa
4	dnsbl.sorbs.net
0	bogons.cymru.com
0	BlackList
# 1875	total rejects
#
1	WhiteList
181	Passed
  mimedefang/spamassassin disposition
# last update Fri Aug 22 21:42:05 2014
# stats since Fri Aug  1 00:22:12 2014
346	invalid_recip
177	spamassassin
2	bogus_helo
2	virus
# 527	total rejects
#
2893	Passed
  mimedefang/spamassassin disposition
# last update Sat Aug  9 01:46:04 2014
# stats since Fri Aug  1 05:55:57 2014
# 0	total rejects
#
2	Passed

yesterday: 557 messages, 138 passed, 29 moderator rejects (tarpit)
oldest ... messages per day, mostly spam ... newest
776 870 714 423 428 613 563 599 0 790 543 381 781 635 722 703 798 455 508 724 733 707 518 565 526 393 715 614 554 557
























































































oldest ... good messages passed ... newest
119 114 140 72 68 108 104 98 0 311 86 62 152 162 100 177 165 82 99 142 161 127 116 82 72 85 175 149 137 138














































































oldest ... moderator rejects ... newest
25 29 11 23 0 0 0 98 0 23 3 24 24 21 17 21 16 8 14 21 20 29 0 14 42 21 22 17 14 29





















































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME