On Tuesday 10 November 2009 19:21:04 Chris Arnold wrote:
> OK, nothing stands out from pflogsumm.pl:

Nothing?

> Per-Day Traffic Summary
>     date          received  delivered   deferred    bounced     rejected
>     --------------------------------------------------------------------
>     Nov  9 2009         1          3          1
>     Nov 10 2009     15328      15475        390        127       1115

Wouldn't you say that's a bit of an increase from the previous day?
Perhaps significant?

> What are some things I should be looking for in the pflogsumm.pl
> report? 

0. Not the summary, look at the actual logs.
1. Find a suspected spam. This will be easy if you start with one
   that was rejected by Verizon or other operator.
2. Trace that back to where it entered the queue.
3. Apply LART as necessary.
4. Review DEBUG_README.html#mail if questions still exist at this
   point. You can mung a specific email address if desired, but
   domain names and IP addresses might be very important.
-- 
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header

Reply via email to