I don't have any FILTER_RBL messages. I'm using log-level=2. What log level are you using?
I think that it's appropriate to count each recipient as a separate email. If the message came from a qmail server, it would be that way anyhow. And after all, that's how many messages end up being delivered. Sebastian Grewe wrote: > Hey list, > > I just looked at those stats and compared the output to what I am having > on our boxes and I started wondering: > > When I check the log files, Spamdyke logs the following > > FILTER_RBL_MATCH : When listed in the RDNS > DENIED_RBL_MATCH : For each recipient address in the mail > > So basically it will result in 1 FILTER match but 1 DENIED match for > each mail address. > > Doesn't that mean that using the DENIED match will not result in the > actual denied mails but rather in a much higher number? I am currently > looking for both FILTER_ and DENIED_ flags and sum those up to find out > how many mails I rejected - but I am guessing here that looking for > FILTER_ alone would make more sense. > > Here my output, wrote the script today - Mirkos' output inspired me :) > It's tailored to work for our environment though. > > Total : 1571 (100.0000%) > Legitimate : 123 (7.8200%) > | > |- FILTER_WHITELIST : 61 (49.5900%) > | > |- _RECIPIENT_WHITELIST : 61 (100.0000%) > > Rejected : 1448 (92.1700%) > | > |- FILTER : 539 (37.2200%) > | | > | |- _RDNS_MISSING : 192 (35.6200%) > | |- _OTHER : 12 (2.2200%) > | |- _RBL_MATCH : 297 (55.1000%) > | | > | |- _RBL_MATCH_SPAMHAUS : 171 (57.5700%) > | |- _RBL_MATCH_SPAMCOP : 126 (42.4200%) > | > |- DENIED : 905 (62.5000%) > | | > | |- _RDNS_MISSING : 415 (45.8500%) > | |- _RBL_MATCH : 446 (49.2800%) > | |- _EARLYTALKER : 0 (0%) > | |- _SENDER_NO_MX : 14 (1.5400%) > | |- _TOO_MANY_RECIPIENTS : 0 (0%) > | |- _UNQUALIFIED_RECIPIENT : 0 (0%) > | > |- Clamav : 4 (.2700%) > | > |- Phishing : 4 (100.0000%) > |- Trojan : 0 (0%) > > > On Tue, 2009-09-01 at 15:52 -0500, Sam Clippinger wrote: >>>>> -----Original Message----- >>>>> From: [email protected] >>>>> [mailto:[email protected]] On Behalf Of Mirko >> Buffoni >>>>> Sent: 01 September 2009 14:27 >>>>> To: spamdyke users >>>>> Subject: Re: [spamdyke-users] Spam Stats >>>>> >>>>> Goods average between 500 and 2000 daily. Figures are however >>>>> pretty standard. Spamdyke filters out about 60k attempts daily. >>>>> Here are yesterday stats: >>>>> >>>>> Good : 1025 = 0.68 % >>>>> Unsure : 183 = 0.12 % >>>>> Virus : 62 = 0.04 % >>>>> BAD Sender: 5114 = 3.40 % >>>>> BAD Rcpt : 212 = 0.14 % >>>>> Pure SPAM : 45997 = 30.56 % >>>>> SPAMMER : 97940 = 65.06 % >>>>> | >>>>> \.............BLACKLISTED_KEYWORD : 29608 = 30.23 % >>>>> \..............DENIED_EARLYTALKER : 3 = 0.00 % >>>>> \...............DENIED_IP_IN_RDNS : 30447 = 31.09 % >>>>> \................DENIED_RBL_MATCH : 23268 = 23.76 % >>>>> \.............DENIED_SENDER_NO_MX : 13070 = 13.34 % >>>>> \......DENIED_TOO_MANY_RECIPIENTS : 1 = 0.00 % >>>>> \....DENIED_UNQUALIFIED_RECIPIENT : 1 = 0.00 % >>>>> \.........................TIMEOUT : 1542 = 1.57 % >>>>> >>>>> ------------------------------ >>>>> Total : 150533 = 100.00 % -- -Eric 'shubes' _______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
