Newsgroup: it.news.net-abuse
Titolo: [STATISTICHE] spam rifiutato da attila.bofh.it (giugno 2007)

Queste sono le statistiche aggregate dello spam rifiutato da
attila.bofh.it
 tra queste date:
Jun 3 06:48:53
Jul 1 06:49:23
Al momento della generazione di queste statistiche, il server era
protetto (nell'ordine) da queste DNSBL:
ip.private-dnsbl.bofh.it
zen.spamhaus.org
list.dsbl.org
combined.njabl.org
dul.dnsbl.sorbs.net
 442354 72.26% Bad HELO
  73936 12.08% Client host rejected
  64223 10.49% DNSBL 
xbl.spamhaus.org
  12085  1.97% DNSBL 
ip.private-dnsbl.bofh.it
   4980  0.81% DNSBL 
dul.dnsbl.sorbs.net
   3272  0.53% Relay access denied
   2881  0.47% Sender address rejected
   2023  0.33% Bad pipelining (Client host)
   1778  0.29% header checks
   1683  0.27% DNSBL 
list.dsbl.org
   1135  0.19% Need FQDN address
    968  0.16% Recipient address rejected
    301  0.05% DNSBL 
rhs.private-dnsbl.bofh.it
    235  0.04% DNSBL 
sbl.spamhaus.org
    188  0.03% Bad pipelining (Helo command)
    123  0.02% DNSBL 
combined.njabl.org
     21  0.00% body checks
      4  0.00% Bad pipelining (Data command)
      2  0.00% Other
 612192        TOTAL
Rejected headers:
    738 41.51% keep your viruses for yourself (ZIP)
    734 41.28% Your mailer is not RFC 2047 compliant
    288 16.20% no executable attachments allowed
     17  0.96% do not send stupid bounces
      1  0.06% message content rejected
Rejected bodies:
     21 100.00% keep your viruses for yourself (hidden iframe)
Rejected HELO commands:
 172159 38.92% generic HELO hostname
 152796 34.54% unqualified HELO hostname
  94250 21.31% IP literal in HELO hostname
   9852  2.23% fake IP literal in HELO hostname
   6340  1.43% using my own HELO hostname
   3960  0.90% Invalid name
   2997  0.68% forged HELO hostname
Popular DNSBL listings:
    235 100.00% others (43 different)
Popular local source-based rejections:
  52704 71.28% we do not accept mail from dynamically-assigned addresses
  12069 16.32% Too much spam from CHINANET
   7797 10.55% too much spam from this network
   1278  1.73% non accettiamo posta da IP dinamici
     51  0.07% Too much spam from 
chinamobile.com
     37  0.05% Too much spam from China Railways
Most rejected networks:
  15701  2.57% 
83.0.0.0/11
  10273  1.68% 
84.56.0.0/13
   6914  1.13% 
88.224.0.0/12
 577503 94.61% others (14430 different)
Most rejected AS:
  23865  3.91% 19262
  20645  3.38% 9121
  19992  3.28% 4134
  19702  3.23% 5617
  14416  2.36% 3209
  13159  2.16% 8151
  11164  1.83% 3320
   9009  1.48% 4837
   8821  1.45% 3269
   8676  1.42% 5089
 460942 75.52% others (3542 different)
-- 
ciao,
Marco

Queste le mie dell'ultima settimana:
DNSBL usate:
pbl.spamhaus.org
xbl.spamhaus.org
sbl.spamhaus.org
list.dsbl.org
dul.dnsbl.sorbs.net
dnsbl.njabl.org
(nota: passo a "zen" appena scopro come distinguere le 3 di spamhaus dai log 
del postfix...)
from    ['Jun', '25', '06:30:06']
to      ['Jul', '1', '06:31:27']
  39401 DNSBL 
pbl.spamhaus.org
;
  15244 DNSBL 
xbl.spamhaus.org
;
  10030 Need FQDN address (recipient)
   4998 Recipient address rejected
   2748 Sender address rejected
   2699 DNSBL 
dul.dnsbl.sorbs.net
;
   1547 Relay access denied
    961 Bad HELO
    949 DNSBL 
sbl.spamhaus.org
;
    712 DNSBL 
list.dsbl.org
;
     24 DNSBL 
dnsbl.njabl.org
;
      6 Message size exceeds fixed limit
      3 attachment type not allowed
      1 Server configuration problem
  79323 TOTAL FILTERED MAIL
  59029 TOTAL DNSBL FILTERED MAIL (74.42 %)
  18465 TOTAL GREYLISTED DELAYS
  10516 TOTAL POSTED MAIL ON 89839 ATTEMPTS (11.71 %)
  10516 TOTAL POSTED MAIL ON 108304 ATTEMPTS (INCLUDE GREYLISTING)(9.71 %)
-- 
Gerolamo 

 
Con cosa generi queste stats?

"Alessandro" ha scritto

Con uno script in python che ho fatto quando quello di MdI non mi
bastava più (e col Perl non vado d'accordo...)
Tra l'altro gli ho appena fatto alcune modifiche.
Lo trovi qui: 
www.pyder.com/plogp.htm
nota bene: il fatto che la versione inizi con '0.' _è significativo_! :)
nota2: se lo provi e ci trovi qualche errore, avvisami! :) :)
ciao
--
Gerolamo 

 nota2: se lo provi e ci trovi qualche errore, avvisami! :) :)
Trovo qualche errore....io non so nemmeno come si scrive phyton...
Al max ti dico: Non va.