Experiment running dynablock and then my subscriber filter, from 00:00 through about 16:00 Wed, the total rejects for each filter:

first dynblock get the msgs:

62116 rejects for RBL dynablock.easynet.nl

If not blocked above, the msg is passed to subscriber filter:

41701 rejects for ACL subscriber network

Looks like dynablock has let quite a few slip through.

The total reject picture at the same point:

      1 SMTP Exceeded Hard Error Limit after END-OF-MESSAGE
      1 SMTP Exceeded Hard Error Limit after CONNECT
      3 RBL opm.blitzed.org
      4 DNS no A/MX for @recipient.domain
      6 ACL helo_hostnames
     14 ACL mta_clients_bw
     15 ACL header checks
     15 SMTP Exceeded Hard Error Limit after ETRN
     17 SMTP helo hostname invalid
     30 ACL bogon network header
     31 ACL unauthorized relay
     32 ETRN Mail theft attempt
     47 SMTP unauthorized pipelining
     72 ACL PTR hostname does not match hostname (forged HELO)
     72 ACL HTML obfuscation
     77 SMTP invalid [EMAIL PROTECTED]
    113 RBL list.dsbl.org
    115 RBL proxies.relays.monkeys.com
    123 RBL relays.ordb.org
    158 SMTP Exceeded Hard Error Limit after MAIL
    211 DNS nxdomain for MTA PTR hostname (forged @sender.domain)
    273 RBL korea.services.net
    332 DNS timeout for MTA PTR hostname (forged @sender.domain)
    364 RBL dnsbl.njabl.org
    393 ACL forged @sender.domain not from sender PTR domain
    447 DNS no A/MX for @sender.domain
    697 ACL from_senders_bw
   1059 SMTP helo hostname is an IP
   1441 SMTP helo hostname not fully qualified
   1780 ACL from_senders_imgfx
   1932 RBL sbl.spamhaus.org
   3488 RBL blackholes.easynet.nl
   9437 ACL from_senders_slet
  11487 ACL mta_clients_dict
  19933 SMTP Exceeded Hard Error Limit after DATA
  41742 ACL subscriber network                      <<<<
  49900 SMTP Exceeded Hard Error Limit after RCPT
  62157 RBL dynablock.easynet.nl                    <<<<
  71785 ACL to_relay_recipients unknown recipient
========================
 279804 TOTAL

You can see why RBL servers don't excite us IMGate people very much.

Move dynablock from the top of the list to where it usually runs near the bottom of the list, and RBL total contributions are marginal (and slow due DNS delays).

Full report this evening.

Len


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to