Help
Exim statistics from 2006-05-29 00:00:07 to 2006-05-29 23:59:37
Grand total summary
-------------------
At least one address
TOTAL Volume Messages Hosts Delayed Failed
Received 1307MB 8476 2261 350 4.1% 434 5.1%
Delivered 3042MB 19466 1396
User Specified Patterns
-----------------------
Total
Total mail blocked:........................................................................
......... 40137
Verify sender at SMTP time:.......................................................................... 2713
Spam mail blocked by manual blacklist sender at the SMTP time:....................................... 116
Spam mail blocked by manual blacklist host address at the SMTP time:................................. 0
Spam mail blocked by auto black list SA high score at the SMTP time:................................. 6391
Spam mail blocked by invalid HELO at the SMTP time:.................................................. 2543
Spam mail blocked by setting default address to :fail: at the SMTP time:............................. 13664
Spam mail blocked by auto black list after dictionary attack the SMTP time:.......................... 472
Spam mail blocked by RBL at the SMTP time:........................................................... 3019
Spam mail blocked by illegal File extension at the SMTP time and discarded after recieving email:.... 1254
Spam mail blocked by virus scanner at the SMTP time or discarded after recieving email:.............. 523
Spam mail blocked by SA at the SMTP time or discarded after recieving email:......................... 9442
Spam mail discared by SA high score (12-15) after recieving email:................................... 252
NOTE: My SA is running RAZOR, Pyzor, SARE, Custom SA rules, My own SURBL.
There are some optimization made on my server and is not updated in tutorial yet.
You may try it. It consume less CPU.
1. Disable Spam scanning for outgoing email. http://forums.rvskin.com/index.php?s=&...post&p=4901
2. Rearrange the ACL for RBL and unknown user http://forums.rvskin.com/index.php?s=&...post&p=4788
3. Auto blacklist the Server sending high score spam mail to the server.
http://forums.rvskin.com/index.php?s=&...post&p=4739
4. Auto disable spamd if the server is overloading. When the server is overloading, we should skip spam scanning to bring the load down. I am working on it.
My conclusion from the current stat:
- Changing the default email to :fail: is unevitable. You must do it to reduce the server CPU usage.
- Allowing user to run SA per domain basis is not a good idea. It increases the server load. You should not allow user to enable/disable spamassassin per domain basis. The configuration made by my tutorial is enough to catch the SPAM. If it still get through, there is very less chance the per-domain SA will help.
- SPAMs attempt will not decrease. The situation will worsen and worsen.
- You may need to cache RBL, and SURBL data on the local network. I don't run it yet.
Feel free to post your stat here.
Download the attached script to get the stat. Change its name to spamReport.pl.
http://www.rvskin.com/download/spamReport.txt
And run:
CODE
perl spamReport.pl
It will show you the yesterday stat.
#will show today stat
CODE
perl spamReport.pl 0
#will show 7 days old stat
You can set cron to generate the report daily. Run crontab -e and add line.
0 5 * * * perl /var/log/spamReport.pl
