Results 1 to 7 of 7

Thread: Tracking Spam scans and Stats for SpamAssassin?

  1. #1
    Join Date
    Jan 2011
    Posts
    27

    Tracking Spam scans and Stats for SpamAssassin?

    I've recently been battling spam issues on our server. One account in particular was getting hammered with incoming spam. SpamAssassin's memory use is one of our concerns.

    What I've done is enable RBLs in Exim. I now see many rejection notices in the Exim log based on the various RBLs, which is good.

    However, when I run Eximstats, the email volume seem to be the same as they were prior to the enabling of the RBLs. I am assuming because the email is still logged in some way prior to the rejection. Is that what's happening, or am I missing something else?

    Does anyone know if these emails are rejected prior to being processed by SpamAssassin? Or does anyone know how I'd be able to find out? Is there a standard way to generate SpamAssassin stats, similar to Eximstats, so that I could compare the numbers?

    Thank you for your time and any advice.

  2. #2
    Join Date
    Apr 2005
    Location
    GMT +7.00
    Posts
    11,023
    Quote Originally Posted by mvtimes View Post
    However, when I run Eximstats, the email volume seem to be the same as they were prior to the enabling of the RBLs. I am assuming because the email is still logged in some way prior to the rejection. Is that what's happening, or am I missing something else?
    Yes, that's right, they still get logged.

    Quote Originally Posted by mvtimes View Post
    Does anyone know if these emails are rejected prior to being processed by SpamAssassin? Or does anyone know how I'd be able to find out? Is there a standard way to generate SpamAssassin stats, similar to Eximstats, so that I could compare the numbers?
    RBL blocks spam before SpamAssassin by default.
    With regards, Alex.

    Professional Server Management for web hosting companies and individuals
    Hourly Support, Disaster Recovery, Server Hardening, Monthly Subscription
    Directadmin installation and optimization

    Click here if you need a Linux Admin

  3. #3
    Join Date
    Jan 2011
    Posts
    27
    Thank you, that's good to know, and what we want.

    Is there a way to find out how many emails have been blocked per user? Eximstats shows rejections by IP and "reasons", but I am looking for a way to check the one very bad account to see how much their email deliveries have lessened with these controls in place.

  4. #4
    Join Date
    Apr 2005
    Location
    GMT +7.00
    Posts
    11,023
    No, you should do it manually or write a script.

    1. List all domains of your user
    2. grep or exigrep from exim mainlog
    With regards, Alex.

    Professional Server Management for web hosting companies and individuals
    Hourly Support, Disaster Recovery, Server Hardening, Monthly Subscription
    Directadmin installation and optimization

    Click here if you need a Linux Admin

  5. #5
    Join Date
    Jun 2007
    Location
    California
    Posts
    498
    Quote Originally Posted by zEitEr View Post
    RBL blocks spam before SpamAssassin by default.
    RBLs are checked as soon as the email origin and destination is logged, even before the email body is downloaded.

    Jeff
    Serving the DirectAdmin community since 2003
    See Additional posts under user nobaloney

    directadmin@nobaloney.net +1 951 643-5345
    Contract DirectAdmin administration and support
    Dedicated Servers, Dedicated Reseller Accounts
    http://www.nobaloney.net
    NoBaloney Internet Services div. Qnito Incorporated
    848 North Rainbow Blvd., Suite #3789
    Las Vegas, NV 89107-1103

  6. #6
    Join Date
    Jun 2007
    Location
    California
    Posts
    498
    Quote Originally Posted by zEitEr View Post
    No, you should do it manually or write a script.

    1. List all domains of your user
    2. grep or exigrep from exim mainlog
    Much quicker and more efficient to grep the rejectlog; it includes only one line per rejected email.

    Jeff
    Serving the DirectAdmin community since 2003
    See Additional posts under user nobaloney

    directadmin@nobaloney.net +1 951 643-5345
    Contract DirectAdmin administration and support
    Dedicated Servers, Dedicated Reseller Accounts
    http://www.nobaloney.net
    NoBaloney Internet Services div. Qnito Incorporated
    848 North Rainbow Blvd., Suite #3789
    Las Vegas, NV 89107-1103

  7. #7
    Join Date
    Jan 2011
    Posts
    27
    Thank you very much, guys.

Similar Threads

  1. Rejecting SPAM With Spamassassin
    By hci in forum E-Mail
    Replies: 14
    Last Post: 02-17-2014, 09:24 AM
  2. Spamassassin not deleting spam
    By cyberneticos in forum System-Level Technical Discussion
    Replies: 9
    Last Post: 05-14-2013, 03:16 PM
  3. Spamassassin don't block spam
    By fmortara in forum E-Mail
    Replies: 14
    Last Post: 11-04-2011, 01:21 PM
  4. Replies: 2
    Last Post: 06-12-2008, 06:05 AM
  5. view spam in ~/.spamassassin/spam
    By Sandertjuhh in forum User-Level Difficulties
    Replies: 6
    Last Post: 02-04-2007, 11:32 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •