Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Too many spams!!
  FAQ FAQ  Forum Search   Register Register  Login Login

Too many spams!!

 Post Reply Post Reply
Author
susheel View Drop Down
Newbie
Newbie
Avatar

Joined: 12 March 2008
Location: Bombay
Status: Offline
Points: 8
Post Options Post Options   Thanks (0) Thanks(0)   Quote susheel Quote  Post ReplyReply Direct Link To This Post Topic: Too many spams!!
    Posted: 07 February 2010 at 2:52pm
Hi Roberto,
 
I am receiving tons of spams lately. I've emailed some of them on your id. Please help me out to get rid of these spams
 
Awaiting,
 
Susheel
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 08 February 2010 at 8:17pm
Susheel,

We've debugged your logs, and found no major issue in them. The email samples your forwarded us the other day look like spam that SpamFilter was simply unable to stop. We've however checked your logs a bit more in detail to get a "big picture" and see overall how your SpamFilter is performing. This is what we see.

On Feb 5, SpamFilter received 258,474 connection attempts. Of these, a huge amount, 236,414 were rejected. That means 91.5% of your incoming connection attempts in 24 hours were rejected.
Out of the 258,474 email attempts, SpamFilter accepted and forwarded 18,005 of them. However 6,066 of these forwarded emails where whitelisted for some reason, leaving only 11,939 emails that were delivered as they were not detected to be spam. That's 11,939 emails out of 258,474, which is only 4.6% of your total incoming traffic. This means that SpamFilter is detecting as "clean" only 4.6% of your incoming emails, and is blocking the rest (unless whitelisted).

To put things into another perspective, assume that, possibly inflating this number and making it pessimistic, one out of every five emails you receive in your mailbox is spam (as are the samples you sent us). If 1 out of 5 emails that are received is spam, that means that SpamFilter is missing, not blocking, 2,388 (11,939 / 5) emails each day. However 2,388 emails out of 258,474 connection attempts equates to 0.9%. This means that SpamFilter is stopping 99.1% of your spam, which is a very good accuracy rate.

We know everyone would like for this number to be 100% accuracy, but unfortunately I do not think any software will be able to be that accurate.

Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
yapadu View Drop Down
Senior Member
Senior Member


Joined: 12 May 2005
Status: Offline
Points: 297
Post Options Post Options   Thanks (0) Thanks(0)   Quote yapadu Quote  Post ReplyReply Direct Link To This Post Posted: 09 February 2010 at 7:22am
Roberto,

I like your numbers, and I assume that most people calculate things like this.  I have been working with sawmill for a few weeks, trying to get stats for our users as well.

Looking at a sampling of domains, I also have been trying to come up with some big number like 99.8% of all spam stopped etc.

Just one problem, using the above as an example.  Out of 258,474 connection attempts - how many of them are to invalid email accounts?  Ones that even if you had no spam protection at all would not end up in any mailbox?

We have a couple of domains that get pounded with connection attempts and they do end up with a ratio of 99.8% of connection attempts are spam.  However, take away attempts of delivery to invalid email address and the ratio is much lower.
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 10 February 2010 at 6:28pm
In Susheel's logs we saw that she wasn't using the AuthorizedTO whitelist, which would have increased SpamFilter's catch ratio quite a bit.

Without using the AuthorizedTO list, SpamFilter does not know which mailboxes are valid and which are not, so it will make statistically no difference to the catch ratio which email addresses are valid and which are not, since they are all treated the same.

The "AuthorizedTO" whitelist contains a list of valid email addresses on your system. If these users are known and can be exported to a file, feeding that to SpamFilter will greatly improve the spam catch ratio, as SpamFilter will be able to block immediately any IP that attempts to guess destination email addresses.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.205 seconds.