-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Martin Hepworth wrote:
> > > > Fred wrote: > >> Ben Hanson wrote: >> >>> Shortly after the first of the year, I noticed the percentage >>> of spam messages for our organization dropped consistently by >>> 10-15%. Ben >> >> >> >> I see between 83-85% spam. We use SARE rules + my own home-brew >> rules + the new BLACK uribl lists + unreleased SARE rules. In the >> past 24 hours the numbers are: spam-reject 55,967 mail-in 11,089 >> total-mail 67,056 >> >> Viruses not included in this count, it would skew things due to >> the recent increase in new viruses lately. >> >> http://www.rulesemporium.com might have some helpful rules for >> you to add to your setup. >> >> On another topic, I see just as many user-unknowns as I reject >> spam. That's cause we are an ISP and customers like to switch >> stuff around often ;) >> >> Frederic Tarasevicius Internet Information Services, Inc. >> http://www.i-is.com/ 810-794-4400 >> > > Fred > > 70% of my inbound traffic is for unknown users, 20% spam/malware > and 10% real mail. > How do you count 'unknown users'? Accurately I mean... Assuming you don't accept email in the first place if the user is unknown (Or you might I guess, but it seems like un-necessary processing to me) most spammers that I can see in our logs just keep re-trying again & again & again... For example on our mail server I reject far more than I accept. Yet the rejects are in most cases repeated. As spammers appear to be a thick bunch & don't take a 5xx very well. Currenty I have 'discussions' with various people round here over the fact that we 'only' catch about 5-10% of our total accepted email in SA as spam, yet MessageLabs et al always like to quote the (To me) alarmist figures of 80% email is spam etc. But then we reject email from un-verified addresses and don't accept email for unknown users at the border MTA, not at SA. (And so don't have an accurate count of them). H -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCi1E9/3QXwQQkZYwRAikAAKC+vNzq1jqEkM7vr8AvevKUI/UWfACgmi3g p72EJoSvuIKc862PAJFbf8c= =OZV3 -----END PGP SIGNATURE-----
