Hey Eric,

Yeah, my log level is higher - didn't think about that.

I was more thinking about a statistic for the incoming connection. If
you look at it as a mail counter for mails being delivered, yeah, DENIED
makes way more sense.

I will just keep the counters like they are now, they still give me a
pretty good idea of what's going on.

Thanks Eric, as fast as usual!

Sebastian

On Thu, 2009-09-03 at 11:57 -0700, Eric Shubert wrote:
> I don't have any FILTER_RBL messages. I'm using log-level=2.
> What log level are you using?
> 
> I think that it's appropriate to count each recipient as a separate 
> email. If the message came from a qmail server, it would be that way 
> anyhow. And after all, that's how many messages end up being delivered.
> 
> Sebastian Grewe wrote:
> > Hey list,
> > 
> > I just looked at those stats and compared the output to what I am having
> > on our boxes and I started wondering:
> > 
> > When I check the log files, Spamdyke logs the following
> > 
> > FILTER_RBL_MATCH : When listed in the RDNS
> > DENIED_RBL_MATCH : For each recipient address in the mail
> > 
> > So basically it will result in 1 FILTER match but 1 DENIED match for
> > each mail address.
> > 
> > Doesn't that mean that using the DENIED match will not result in the
> > actual denied mails but rather in a much higher number? I am currently
> > looking for both FILTER_ and DENIED_ flags and sum those up to find out
> > how many mails I rejected - but I am guessing here that looking for
> > FILTER_ alone would make more sense.
> > 
> > Here my output, wrote the script today - Mirkos' output inspired me :)
> > It's tailored to work for our environment though.
> > 
> > Total      : 1571    (100.0000%)
> > Legitimate : 123     (7.8200%)
> >    |
> >    |-    FILTER_WHITELIST                     : 61 (49.5900%)
> >                |
> >                |-    _RECIPIENT_WHITELIST     : 61 (100.0000%)
> > 
> > Rejected   : 1448     (92.1700%)
> >    |
> >    |-    FILTER : 539 (37.2200%)
> >    |        |
> >    |        |-  _RDNS_MISSING                 : 192 (35.6200%)
> >    |        |-  _OTHER                        : 12 (2.2200%)
> >    |        |-  _RBL_MATCH                    : 297 (55.1000%)
> >    |                |
> >    |                |- _RBL_MATCH_SPAMHAUS    : 171 (57.5700%)
> >    |                |- _RBL_MATCH_SPAMCOP     : 126 (42.4200%)
> >    |
> >    |-    DENIED : 905 (62.5000%)
> >    |        |
> >    |        |-  _RDNS_MISSING                 : 415 (45.8500%)
> >    |        |-  _RBL_MATCH                    : 446 (49.2800%)
> >    |        |-  _EARLYTALKER                  : 0 (0%)
> >    |        |-  _SENDER_NO_MX                 : 14 (1.5400%)
> >    |        |-  _TOO_MANY_RECIPIENTS          : 0 (0%)
> >    |        |-  _UNQUALIFIED_RECIPIENT        : 0 (0%)
> >    |
> >    |-    Clamav : 4 (.2700%)
> >             |
> >             |-  Phishing                      : 4 (100.0000%)
> >             |-  Trojan                        : 0 (0%)
> > 
> > 
> > On Tue, 2009-09-01 at 15:52 -0500, Sam Clippinger wrote:
> >>>>> -----Original Message-----
> >>>>> From: spamdyke-users-boun...@spamdyke.org
> >>>>> [mailto:spamdyke-users-boun...@spamdyke.org] On Behalf Of Mirko
> >> Buffoni
> >>>>> Sent: 01 September 2009 14:27
> >>>>> To: spamdyke users
> >>>>> Subject: Re: [spamdyke-users] Spam Stats
> >>>>>
> >>>>> Goods average between 500 and 2000 daily.  Figures are however
> >>>>> pretty standard.  Spamdyke filters out about 60k attempts daily.
> >>>>> Here are yesterday stats:
> >>>>>
> >>>>>      Good :   1025 =   0.68 %
> >>>>>     Unsure :    183 =   0.12 %
> >>>>>      Virus :     62 =   0.04 %
> >>>>> BAD Sender:   5114 =   3.40 %
> >>>>> BAD  Rcpt :    212 =   0.14 %
> >>>>> Pure SPAM :  45997 =  30.56 %
> >>>>>    SPAMMER :  97940 =  65.06 %
> >>>>>       |
> >>>>>       \.............BLACKLISTED_KEYWORD :  29608 =  30.23 %
> >>>>>       \..............DENIED_EARLYTALKER :      3 =   0.00 %
> >>>>>       \...............DENIED_IP_IN_RDNS :  30447 =  31.09 %
> >>>>>       \................DENIED_RBL_MATCH :  23268 =  23.76 %
> >>>>>       \.............DENIED_SENDER_NO_MX :  13070 =  13.34 %
> >>>>>       \......DENIED_TOO_MANY_RECIPIENTS :      1 =   0.00 %
> >>>>>       \....DENIED_UNQUALIFIED_RECIPIENT :      1 =   0.00 %
> >>>>>       \.........................TIMEOUT :   1542 =   1.57 %
> >>>>>
> >>>>> ------------------------------
> >>>>>      Total : 150533 = 100.00 %
> 
> 
-- 
Sebastian Grewe
Jammicron | Experts in Powering Online Sales
Phone 604.331.0586 x 104
Fax 604.331.0587
www.jammicron.com | www.qwik.ca


_______________________________________________
spamdyke-users mailing list
spamdyke-users@spamdyke.org
http://www.spamdyke.org/mailman/listinfo/spamdyke-users

Reply via email to