A Broadband and ADSL forum. BroadbanterBanter

Welcome to BroadbanterBanter.

You are currently viewing as a guest which gives you limited access to view most discussions and other FREE features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today.

Go Back   Home » BroadbanterBanter forum » Newsgroup Discussions » uk.telecom.broadband (UK broadband)
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

uk.telecom.broadband (UK broadband) (uk.telecom.broadband) Discussion of broadband services, technology and equipment as provided in the UK. Discussions of specific services based on ADSL, cable modems or other broadband technology are also on-topic. Advertising is not allowed.

Spam statistics.



 
 
Thread Tools Display Modes
  #1  
Old August 19th 14, 10:05 AM posted to uk.d-i-y,uk.telecom.broadband
The Natural Philosopher
external usenet poster
 
Posts: 2,728
Default Spam statistics.


A few weeks ago I started to get flooded with spam, and a real effort to
clean up my mail has been undertaken.

I thought the following stats might be of interest

vps:~# grep Unrouteable /var/log/exim4/rejectlog.1 | wc -l
98
vps:~# grep blacklisted /var/log/exim4/rejectlog.1 | wc -l
13
vps:~# grep "relay not permitted" /var/log/exim4/rejectlog.1 | wc -l
43
vps:~# grep "spamhaus" /var/log/exim4/rejectlog.1 | wc -l
138
vps:~# cat /var/log/exim4/rejectlog.1 | wc -l
292

These are from the rejected mail logs of my mail server - I don't use an
ISPs mail service. For a single day. Only two of us have mail accounts
in this machine..

So in a day, we were targeted 292 emails that we really didn't want.
138 were rejected as coming from 'home Pcs' - i.e. addresses in dynamic
pools known to spamhaus that have no business sending email directly.
98 were to people who dont exist in domains that do. Interestingly the
mail setup checks this first, and usually these are in fact from random
PCS and botnets that get rejected if they hit lucky with a username that
does exist, by the first filter.

43 attempts were made to use me to send other peoples mail entirely

and my newest filter, a self maintained blacklist containing nearly 200
domains that are used as sender domains to send pure marketing spam
netted 13 attempts.

4 spams got through and were detected by thunderbird. I will blacklist
them for next time.

In the same day we might expect 10-15 actual real emails.

The ratio of spam to real is about 20:1

I mention this because what prompted the construction of a new filter
was as far as I can make out the 'deregulation' of namespaces in the
domain service. Notably .me and .us have been purchased by a marketing
company that registers about 20 new domains a day - perfectly valid
domains - and sends out spam from perfectly valid servers.

It doesn't help that my oldest email address has been on the internet
for at least 20 years now...it seems to appear twice in a list that
several companies have obtained.

my wife's name only appears in 19 of the rejects...



--
Everything you read in newspapers is absolutely true, except for the
rare story of which you happen to have first-hand knowledge. - Erwin Knoll
  #2  
Old August 19th 14, 03:45 PM posted to uk.telecom.broadband
Brian Gaff[_2_]
external usenet poster
 
Posts: 2
Default Spam statistics.

How do you explain, for example that I have several virginmedia/blueyonder
email addresses, all tend to get spam, but one of the never seems to.
Even though its out there on web sites.
Either virgin have that running just so, or more likely its for some
reasin not being picked up.
its eyecont at blueyonder.co.uk.
I have munged that of course.

I do sometimes have emails vanish and I usually put this down to one of the
servers that virgin uses being blacklisted due to a less than careful user.
Brian

--
From the Sofa of Brian Gaff Reply address is active
"The Natural Philosopher" wrote in message
...

A few weeks ago I started to get flooded with spam, and a real effort to
clean up my mail has been undertaken.

I thought the following stats might be of interest

vps:~# grep Unrouteable /var/log/exim4/rejectlog.1 | wc -l
98
vps:~# grep blacklisted /var/log/exim4/rejectlog.1 | wc -l
13
vps:~# grep "relay not permitted" /var/log/exim4/rejectlog.1 | wc -l
43
vps:~# grep "spamhaus" /var/log/exim4/rejectlog.1 | wc -l
138
vps:~# cat /var/log/exim4/rejectlog.1 | wc -l
292

These are from the rejected mail logs of my mail server - I don't use an
ISPs mail service. For a single day. Only two of us have mail accounts in
this machine..

So in a day, we were targeted 292 emails that we really didn't want.
138 were rejected as coming from 'home Pcs' - i.e. addresses in dynamic
pools known to spamhaus that have no business sending email directly.
98 were to people who dont exist in domains that do. Interestingly the
mail setup checks this first, and usually these are in fact from random
PCS and botnets that get rejected if they hit lucky with a username that
does exist, by the first filter.

43 attempts were made to use me to send other peoples mail entirely

and my newest filter, a self maintained blacklist containing nearly 200
domains that are used as sender domains to send pure marketing spam netted
13 attempts.

4 spams got through and were detected by thunderbird. I will blacklist
them for next time.

In the same day we might expect 10-15 actual real emails.

The ratio of spam to real is about 20:1

I mention this because what prompted the construction of a new filter was
as far as I can make out the 'deregulation' of namespaces in the domain
service. Notably .me and .us have been purchased by a marketing company
that registers about 20 new domains a day - perfectly valid domains - and
sends out spam from perfectly valid servers.

It doesn't help that my oldest email address has been on the internet for
at least 20 years now...it seems to appear twice in a list that several
companies have obtained.

my wife's name only appears in 19 of the rejects...



--
Everything you read in newspapers is absolutely true, except for the rare
story of which you happen to have first-hand knowledge. - Erwin Knoll



  #3  
Old August 19th 14, 04:25 PM posted to uk.telecom.broadband
Jb
external usenet poster
 
Posts: 1
Default Spam statistics.


"The Natural Philosopher" wrote in message
...

A few weeks ago I started to get flooded with spam, and a real effort to
clean up my mail has been undertaken.
SNIP


Does this only affect servers or do domestic desktops do the same thing
without us being aware of it?
Jb



---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

  #4  
Old August 19th 14, 04:29 PM posted to uk.telecom.broadband
PlusNet Support Team
external usenet poster
 
Posts: 995
Default Spam statistics.

On 19/08/2014 10:05, The Natural Philosopher wrote:
I mention this because what prompted the construction of a new filter
was as far as I can make out the 'deregulation' of namespaces in the
domain service. Notably .me and .us have been purchased by a marketing
company that registers about 20 new domains a day - perfectly valid
domains - and sends out spam from perfectly valid servers.


I had to move my email hosting elsewhere because of this sort of thing.

Emails sent from .us/.me/.mobi tld's from seemingly legitimate mail
servers, often with valid SPF/DKIM records, which makes it fairly
difficult for your average spam filter to detect.

Barracuda, ivmSIP and Mailspike RBLs (I can't use Spamhaus for reasons
I'll not go into) catch a lot of it.

The rest I've gradually reduced over time by aggressively rejecting mail
from the /24's it's originating from.

--
|Bob Pullen Broadband Solutions for
|Support Home & Business @
|Plusnet Plc. www.plus.net
+--------------- twitter.com/plusnet ----------------
  #5  
Old August 19th 14, 05:07 PM posted to uk.telecom.broadband
The Natural Philosopher
external usenet poster
 
Posts: 2,728
Default Spam statistics.

On 19/08/14 16:25, Jb wrote:
"The Natural Philosopher" wrote in message
...

A few weeks ago I started to get flooded with spam, and a real effort to
clean up my mail has been undertaken.
SNIP


Does this only affect servers or do domestic desktops do the same thing
without us being aware of it?
Jb


ISPs are fairly good at maintaining spam filters themselves


---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com



--
Everything you read in newspapers is absolutely true, except for the
rare story of which you happen to have first-hand knowledge. - Erwin Knoll
  #6  
Old August 19th 14, 08:05 PM posted to uk.telecom.broadband
Vir Campestris
external usenet poster
 
Posts: 255
Default Spam statistics.

On 19/08/2014 10:05, The Natural Philosopher wrote:

A few weeks ago I started to get flooded with spam, and a real effort to
clean up my mail has been undertaken.


I don't do anything fancy. But a couple of weeks back I had a burst of
"undeliverables" where a couple of hundred emails had been sent with my
address as "from". I wonder how many were actually sent, and thrown
straight in the bin?

Andy
  #7  
Old August 19th 14, 08:59 PM posted to uk.telecom.broadband
Woody
external usenet poster
 
Posts: 750
Default Spam statistics.

"Vir Campestris" wrote in
message
o.uk...
On 19/08/2014 10:05, The Natural Philosopher wrote:

A few weeks ago I started to get flooded with spam, and a
real effort to
clean up my mail has been undertaken.


I don't do anything fancy. But a couple of weeks back I
had a burst of "undeliverables" where a couple of hundred
emails had been sent with my address as "from". I wonder
how many were actually sent, and thrown straight in the
bin?



Are you using a good Internet security package such a
Kaspersky, Bitdefender, or McAfee? If so you should not get
spammed like that.


--
Woody

harrogate three at ntlworld dot com


  #8  
Old August 20th 14, 02:23 PM posted to uk.telecom.broadband
The Natural Philosopher
external usenet poster
 
Posts: 2,728
Default Spam statistics.

On 19/08/14 20:59, Woody wrote:
"Vir Campestris" wrote in
message
o.uk...
On 19/08/2014 10:05, The Natural Philosopher wrote:

A few weeks ago I started to get flooded with spam, and a
real effort to
clean up my mail has been undertaken.


I don't do anything fancy. But a couple of weeks back I
had a burst of "undeliverables" where a couple of hundred
emails had been sent with my address as "from". I wonder
how many were actually sent, and thrown straight in the
bin?



Are you using a good Internet security package such a
Kaspersky, Bitdefender, or McAfee? If so you should not get
spammed like that.


Get real. Its the people with windows PCS that have my address in their
email contacts that need to actually get the virus scanners.

Not me.

I simply have to deal with the results.
And once an address is harvested, these marketing people exchange valid
lists of emails with each other.



--
Everything you read in newspapers is absolutely true, except for the
rare story of which you happen to have first-hand knowledge. - Erwin Knoll
  #9  
Old August 21st 14, 08:29 PM posted to uk.telecom.broadband
Vir Campestris
external usenet poster
 
Posts: 255
Default Spam statistics.

On 20/08/2014 14:23, The Natural Philosopher wrote:
On 19/08/14 20:59, Woody wrote:
"Vir Campestris" wrote in
message
o.uk...
On 19/08/2014 10:05, The Natural Philosopher wrote:

A few weeks ago I started to get flooded with spam, and a
real effort to
clean up my mail has been undertaken.

I don't do anything fancy. But a couple of weeks back I
had a burst of "undeliverables" where a couple of hundred
emails had been sent with my address as "from". I wonder
how many were actually sent, and thrown straight in the
bin?



Are you using a good Internet security package such a
Kaspersky, Bitdefender, or McAfee? If so you should not get
spammed like that.


Get real. Its the people with windows PCS that have my address in their
email contacts that need to actually get the virus scanners.

Not me.

I simply have to deal with the results.
And once an address is harvested, these marketing people exchange valid
lists of emails with each other.


A few of them will be Linux boxes, or Apple. Or maybe even 'phones these
days.

But otherwise - I agree completely.

Andy
 




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Line statistics naza uk.telecom.broadband (UK broadband) 0 March 20th 08 04:30 PM
ADSL STATISTICS Dave Boomhauer uk.telecom.broadband (UK broadband) 12 January 4th 07 10:20 PM
Line statistics George uk.telecom.broadband (UK broadband) 0 October 2nd 06 10:21 AM
Download Statistics Geoff Lane uk.comp.home-networking (UK home networking) 5 February 19th 05 12:29 AM
BT's ADSL Statistics westside uk.telecom.broadband (UK broadband) 4 October 7th 03 12:16 PM


All times are GMT +1. The time now is 01:16 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.Content Relevant URLs by vBSEO 2.4.0
Copyright 2004-2019 BroadbanterBanter.
The comments are property of their posters.