[svlug] Spam IS up !

[Drew Bertola]

Drew Bertola wrote:
> I'm now using greylisting via greylist-milter.  It's really been
> effective at lowering my system loads.  I don't do any heavier filtering
> until the server authenticates itself as a proper mail server, and then
> it gets whitelisted for a week or two.  My logs show several servers
> (more likely compromised boxes acting as mail bots) with 100-500 mails
> rejected by greylist-milter every day.  It adds up to about 4000-5000
> that don't even make it onto my system.

Sorry, a better look at the numbers of spam caught or delayed by
greylisting shows a much higher number:

grep "Dec  8.*Greylisting.*please come back" /var/log/maillog | wc -l
94317

That's probably > 99% spam.

This is a new server, so I don't have more than logs going back that far
(late Nov), but, as far as recent increases:

for n in `seq 3 8` ; do
  echo -n "Dec $n: "
  grep "Dec  $n.*Greylisting.*please come back" /var/log/maillog | wc -l
done

Dec 3: 69371 (from 4am on)
Dec 4: 84263
Dec 5: 94610
Dec 6: 90667
Dec 7: 90178
Dec 8: 94317

More:
Nov 27:  2      |
Nov 28:  58655  |
Nov 29: 107751  |
Nov 30:  76738  |   tuning period
Dec  1:  59429  |
Dec  2:  33745  |
Dec  3:  81926
Dec  4:  84263
Dec  5:  94610
Dec  6:  90667
Dec  7:  90178
Dec  8:  94317

--
Drew