All the same
Once more, no surprises in the monthly maintenance job. The vast majority of mail has been rejected on explicit rules, or by the content:
PMAS statistics for November
Total messages : 4463 = 100.0 o/o
DNS Blacklisted : 0 = .0 o/o (Files: 0)
Relay attempts : 622 = 13.9 o/o (Files: 30)
Accepted by PMAS : 3841 = 86.0 o/o (Files: 30)
Handled by explicit rule
Rejected : 3024 = 78.7 o/o (processed), 67.7 o/o (all)
Accepted : 187 = 4.8 o/o (processed), 4.1 o/o (all)
Handled by content
Discarded : 423 = 11.0 o/o (processed), 9.4 o/o (all)
Quarantained : 183 = 4.7 o/o (processed), 4.1 o/o (all)
Delivered : 24 = .6 o/o (processed), .5 o/o (all)
The number of relay attemps have been larger this month, especially on 5th, 16th and 30th – all files contained almost 180 attempts, and I found the attempts originated from two networks, both leading to Hostwinds1 in Tulsa (US), trying a fake grootersnet.nl user sending to 1029mandaditos@gmail.com:
5-NOV-2017 03:23:11.22 – 03:26:33.68 (175 attempts from 104.168.146.254)
16-NOV-2017 20:04:23.00 – 20:12:07.85 (178 attempts from 23.254.164.233)
30-NOV-2017 00:22:01.61 – 00:58:39.57 (187 attempts from 23.254.165.119)
Hostwinds.com has been notified of this, and the networks have been excluded for access – in the router – for some time. I’ll keep an eye on these addresses.
Next WP update pending 🙂