<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Tue Feb  9 00:20:47 2010
# stats since Mon Feb  1 00:09:02 2010
5683	hostkarma.junkemailfilter.com
1164	zen.spamhaus.org
385	b.barracudacentral.org
182	in-addr.arpa
34	dnsbl.sorbs.net
2	dnsbl.njabl.org
0	bogons.cymru.com
0	dnsbl.tqmcube.com
0	list.dsbl.org
102	genericPTR
1	BlackList
# 7553	total rejects
#
226	WhiteList
4156	Passed

  SpamCannibal additions
# last update Tue Feb  9 00:20:01 2010
# stats since Fri Jan  1 00:18:01 2010
17841	hostkarma.junkemailfilter.com
2379	dnsbl.sorbs.net
1612	b.barracudacentral.org
406	in-addr.arpa
232	zen.spamhaus.org
145	bl.spamcannibal.org
2	dnsbl.njabl.org
0	bogons.cymru.com
0	dnsbl.tqmcube.com
0	list.dsbl.org
48	genericPTR
2	BlackList
# 22667	total rejects
#
108	WhiteList
917	Passed

  MTA queries (Net::DNSBL::MultiDaemon)
# last update Tue Feb  9 00:20:05 2010
# stats since Mon Feb  1 00:10:03 2010
1474	hostkarma.junkemailfilter.com
905	b.barracudacentral.org
384	zen.spamhaus.org
348	in-addr.arpa
23	dnsbl.sorbs.net
7	dnsbl.tqmcube.com
3	dnsbl.njabl.org
0	bogons.cymru.com
0	list.dsbl.org
9	genericPTR
1	BlackList
# 3154	total rejects
#
49	WhiteList
8411	Passed

  MTA queries (Net::DNSBL::MultiDaemon)
# last update Tue Feb  9 00:22:57 2010
# stats since Fri Jan  1 00:18:01 2010
17682	hostkarma.junkemailfilter.com
2751	b.barracudacentral.org
1683	zen.spamhaus.org
146	bl.spamcannibal.org
133	in-addr.arpa
22	dnsbl.sorbs.net
8	dnsbl.njabl.org
0	bogons.cymru.com
0	dnsbl.tqmcube.com
0	list.dsbl.org
51	genericPTR
2	BlackList
# 22478	total rejects
#
944	WhiteList
6234	Passed

  mimedefang/spamassassin disposition
# last update Tue Feb  9 00:19:33 2010
# stats since Mon Feb  1 00:10:07 2010
265	spamassassin
148	bogus_helo
40	dynamic_IP
33	invalid_recip
1	virus
# 487	total rejects
#
1152	Passed

  mimedefang/spamassassin disposition
# last update Mon Feb  8 14:40:47 2010
# stats since Fri Jan  1 02:34:44 2010
69	bogus_helo
23	dynamic_IP
3	bad_hostname
3	virus
# 98	total rejects
#
6	Passed


yesterday: 2354 messages, 85 passed
oldest ... messages per day, mostly spam ... newest
2655 2563 2559 3110 2795 2735 2782 3020 3102 2551 2601 2418 2621 2884 2562 2406 2261 2407 2223 2356 2645 2489 2030 0 2324 1951 2175 2623 2595 2354





















































































































oldest ... good messages passed ... newest
116 72 69 82 106 105 77 99 63 41 155 122 132 156 109 75 79 127 108 116 87 103 64 0 130 154 189 168 102 85












































































oldest ... moderator rejects ... newest
23 11 9 0 40 0 46 3 42 12 18 22 27 32 8 47 0 43 29 26 37 22 17 0 45 26 45 20 20 0




















































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME