> <http://www.sussex.ac.uk/its/email/stats/>
I can't say whether I've noticed a trend or not since I don't have as much data to go through as you (any more), however checking your stats and comparing from before/after the spike, it seems several areas have more than doubled in volume: Here is a quick before/after list of the things I noticed in your stats: Blacklists : 182119 / 588510 - spamhaus.org : 113879 / 330580 - mail-abuse.com: 64264 / 249970 - dsbl.org : 3974 / 7960 HELO string : 3914 / 9914 - spoofing Sussex : 2668 / 7553 - invalid syntax : 1246 / 2361 - general Sussex spoofing: 404 / 5172 Unknown user : 1077 / 5135 Unrouteable addr: 10873 / 14601 Anti virus : 453 / 1063 That would seem to indicate you might have more than one "problem" happening - the increase in blacklist hits, unknown user and anti virus would indicate a general trend of more/new spam hitting your servers. However, the significant increase in host spoofing might indicate someone trying to dig up account info on your host - or it could just be innocent "smart spam" trying to spoof your own host to get through. Hopefully this is useful jibberish to you, instead of a waste of my time :) Eli. -- ## List details at http://www.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://www.exim.org/eximwiki/
