<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Tue Aug  4 10:50:03 2015
# stats since Sat Aug  1 00:09:01 2015
703	b.barracudacentral.org
166	in-addr.arpa
86	zen.spamhaus.org
39	hostkarma.junkemailfilter.com
2	dnsbl.sorbs.net
13	genericPTR
0	BlackList
# 1009	total rejects
#
55	WhiteList
695	Passed
  SpamCannibal additions
# last update Tue Aug  4 10:20:01 2015
# stats since Sat Aug  1 00:18:01 2015
119	hostkarma.junkemailfilter.com
33	in-addr.arpa
24	bl.spamcannibal.org
16	zen.spamhaus.org
14	dnsbl.sorbs.net
5	b.barracudacentral.org
0	bogons.cymru.com
1	genericPTR
0	BlackList
# 212	total rejects
#
19	WhiteList
21	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Tue Aug  4 10:48:06 2015
# stats since Sat Aug  1 00:09:01 2015
713	b.barracudacentral.org
106	zen.spamhaus.org
20	hostkarma.junkemailfilter.com
16	in-addr.arpa
2	dnsbl.sorbs.net
6	genericPTR
0	BlackList
# 863	total rejects
#
0	WhiteList
662	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Tue Aug  4 09:30:32 2015
# stats since Sat Aug  1 00:18:01 2015
162	zen.spamhaus.org
23	bl.spamcannibal.org
14	in-addr.arpa
12	hostkarma.junkemailfilter.com
3	b.barracudacentral.org
2	dnsbl.sorbs.net
0	bogons.cymru.com
0	genericPTR
0	BlackList
# 216	total rejects
#
1	WhiteList
20	Passed
  mimedefang/spamassassin disposition
# last update Tue Aug  4 10:49:35 2015
# stats since Sat Aug  1 00:45:03 2015
17	spamassassin
16	invalid_recip
1	message/partial
1	virus
# 35	total rejects
#
548	Passed
  mimedefang/spamassassin disposition

yesterday: 681 messages, 160 passed, 11 moderator rejects (tarpit)
oldest ... messages per day, mostly spam ... newest
362 513 705 614 469 481 428 730 429 587 940 561 428 508 570 470 506 644 562 471 342 315 621 731 559 632 0 632 421 681
























































































oldest ... good messages passed ... newest
35 71 83 120 103 90 53 71 89 136 107 103 75 60 62 97 101 110 85 111 61 34 114 141 98 127 0 231 104 160









































































oldest ... moderator rejects ... newest
26 15 0 27 13 25 7 15 9 18 13 19 15 15 12 19 17 8 20 30 15 10 23 17 8 29 0 9 15 11





















































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME