On Sat, 2 Sep 2006 06:15:28 -0700, "jdow" <[EMAIL PROTECTED]> wrote:
>From: "Nigel Frankcom" <[EMAIL PROTECTED]> >On Sat, 02 Sep 2006 02:28:14 -0800, John Andersen <[EMAIL PROTECTED]> >wrote: > >>The Register is running an article saying spam is back up to 81% of all >>email traffic due to newer versions of the Mocbot worm. >> >>If anything, my traffic has been less of late, and almost non-existant >>since in installed 3.1.5. >> >>http://www.theregister.com/2006/08/23/mocbot_worm_zombie_surge/ > >I'd agree with el reg, we've seen a large rise in spam and viruses of >late and we are not a large org by any means. > >http://www.blue-canoe.com/stats/index.php?D1=9 > >Nigel > >Hm, I have a suspicion that the spam is being targeted quite differently >then. Until the end of June I used to get about 250 to 300 spams a day. >I am down to 90 to 150 per day now. It's unreal. Note that I am quite >sincerely pleased by this development. > >{^_^} Targeted at a few domains, yes, I'd agree. That said there's a group of 5 networks that work together, we are all seeing similar. I'm getting hit the least. As you can see from the numbers the RBL's deal with most of it and SA only see's a relatively small percentage. One notable feature last month was the large increase in viruses. The single instance of Infected and rejected are related, as is Autoban, though autoban also deals with dictionary attacks and repeat spammers. Send (n) mails to fake addy's or (n) spam and you end up in there. That approach has helped to keep the load on the SA machines manageable. All of the above aside, I'm at a loss as to why some of our domains are hit so hard; the vast majority of that spam is aimed at 6 or 7 domains. Failover is a big attractor, we've combated that by keeping local copies of the users on all machines so that only mail to real users is accepted. I did note a major drop of in June/July, but silly season (august) brought it all back to 'normal' It's quite scary to see just how much rubbish is being dealt with by both the server and SA - I raise my hat to both, between them they make my life a hell of a lot easier :-D Kind regards Nigel
