Print Page | Close Window

Too many spams!!

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6798
Printed Date: 12 December 2017 at 5:02pm


Topic: Too many spams!!
Posted By: susheel
Subject: Too many spams!!
Date Posted: 07 February 2010 at 2:52pm
Hi Roberto,
 
I am receiving tons of spams lately. I've emailed some of them on your id. Please help me out to get rid of these spams
 
Awaiting,
 
Susheel



Replies:
Posted By: LogSat
Date Posted: 08 February 2010 at 8:17pm
Susheel,

We've debugged your logs, and found no major issue in them. The email samples your forwarded us the other day look like spam that SpamFilter was simply unable to stop. We've however checked your logs a bit more in detail to get a "big picture" and see overall how your SpamFilter is performing. This is what we see.

On Feb 5, SpamFilter received 258,474 connection attempts. Of these, a huge amount, 236,414 were rejected. That means 91.5% of your incoming connection attempts in 24 hours were rejected.
Out of the 258,474 email attempts, SpamFilter accepted and forwarded 18,005 of them. However 6,066 of these forwarded emails where whitelisted for some reason, leaving only 11,939 emails that were delivered as they were not detected to be spam. That's 11,939 emails out of 258,474, which is only 4.6% of your total incoming traffic. This means that SpamFilter is detecting as "clean" only 4.6% of your incoming emails, and is blocking the rest (unless whitelisted).

To put things into another perspective, assume that, possibly inflating this number and making it pessimistic, one out of every five emails you receive in your mailbox is spam (as are the samples you sent us). If 1 out of 5 emails that are received is spam, that means that SpamFilter is missing, not blocking, 2,388 (11,939 / 5) emails each day. However 2,388 emails out of 258,474 connection attempts equates to 0.9%. This means that SpamFilter is stopping 99.1% of your spam, which is a very good accuracy rate.

We know everyone would like for this number to be 100% accuracy, but unfortunately I do not think any software will be able to be that accurate.



-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: yapadu
Date Posted: 09 February 2010 at 7:22am
Roberto,

I like your numbers, and I assume that most people calculate things like this.  I have been working with sawmill for a few weeks, trying to get stats for our users as well.

Looking at a sampling of domains, I also have been trying to come up with some big number like 99.8% of all spam stopped etc.

Just one problem, using the above as an example.  Out of 258,474 connection attempts - how many of them are to invalid email accounts?  Ones that even if you had no spam protection at all would not end up in any mailbox?

We have a couple of domains that get pounded with connection attempts and they do end up with a ratio of 99.8% of connection attempts are spam.  However, take away attempts of delivery to invalid email address and the ratio is much lower.


Posted By: LogSat
Date Posted: 10 February 2010 at 6:28pm
In Susheel's logs we saw that she wasn't using the AuthorizedTO whitelist, which would have increased SpamFilter's catch ratio quite a bit.

Without using the AuthorizedTO list, SpamFilter does not know which mailboxes are valid and which are not, so it will make statistically no difference to the catch ratio which email addresses are valid and which are not, since they are all treated the same.

The "AuthorizedTO" whitelist contains a list of valid email addresses on your system. If these users are known and can be exported to a file, feeding that to SpamFilter will greatly improve the spam catch ratio, as SpamFilter will be able to block immediately any IP that attempts to guess destination email addresses.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP



Print Page | Close Window