New year – new chances
At least, last maintenance job showed something remarkable:
PMAS statistics for December
Total messages : 12733 = 100.0 o/o
DNS Blacklisted : 0 = .0 o/o (Files: 0)
Relay attempts : 11118 = 87.3 o/o (Files: 31)
Accepted by PMAS : 1615 = 12.6 o/o (Files: 31)
Handled by explicit rule
Rejected : 784 = 48.5 o/o (processed), 6.1 o/o (all)
Accepted : 215 = 13.3 o/o (processed), 1.6 o/o (all)
Handled by content
Discarded : 255 = 15.7 o/o (processed), 2.0 o/o (all)
Quarantained : 221 = 13.6 o/o (processed), 1.7 o/o (all)
Delivered : 140 = 8.6 o/o (processed), 1.0 o/o (all)
Almost the same amount of messages as two years ago, but the reason is different: it’s not spam but trying to abuse the server.
Over half of the relay attempts were on two days, from one network. On Dec 1st, a sender at address 124.200.250.20 tried 3960 times to pass a message from a faked grootersne.nl sender to one recipient on vip.163.com; on December 6th, a sender at address 124.200.250.30 tried it again 3400 times. On December 24th, 26th, 289th and 30th, the sender was on address 112.90.183.133 and tried to pass a message to someone (faked, probably) at 163.com again, each day about 720 times. Just two days earlier, on December 22nd, the same has been attempted from address 183.51.255.217, but this stopped after 227 messages.
The rest was on different days, different addresses but far less.
All logs of 2015 have now been moved to the year archive to be stored in a safe place, to be investigated.
I’ll continue checking the system this year. I even may have time to (finally) create the log-analyzer.
Of course, there is content to be finished (Trips, Tracks and Travels), and some updates (WordPress and related) are pending.