[Gross] ips.backscatterer.org

[Jesse Thompson]

meh.  looks like the senders that are listed just retry, so there isn't 
much point in greylisting backscatter unless you see this as a form of 
punishment, or contribution to a weighted threshold for blocking.

 > grep "<>" /var/log/grosslog | grep -c trust
3348

 > grep "<>" /var/log/grosslog | grep -c match
982

 > grep "<>" /var/log/grosslog | grep -c grey
856

0: Grossd OK. Update queue: 1488 (In: 1488 + Out: 0) Trust: 303364 
Match: 51545 Greylist: 844001 Queries/sec: 83.623492 Dnsbl matches: 
grossd dnsbl matches (bl.spamcop.net, dnsbl.njabl.org, cbl.abuseat.org, 
dnsbl.sorbs.net, list.dsbl.org, multihop.dsbl.org, 
ips.backscatterer.org): 463784, 9178, 188087, 150695, 678, 71, 28933

(note, to make sense of these stats, only one mta (of 4) was sending 
DSNs to gross, and we have 2 gross servers.  the stats reflect 4 hours 
of traffic)

Jesse

Jesse Thompson wrote:
> There are some backscatter/outscatter storms going on, and while our 
> mail servers aren't having any problems handling the load, some of our 
> users are being swamped.
> 
> There is a DNSBL called backscatterer.org that attempts to list all mail 
> servers that have sent backscatter or have done sender callouts in the 
> past week.
> http://www.backscatterer.org/
> 
> Has anyone tried querying this DNSBL with gross?  Does it have any 
> effect (for better or worse?)  Does it make a difference that the 
> envelope from address is null?
> 
> Jesse
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Gross mailing list
> Gross at lists.utu.fi
> https://lists.utu.fi/mailman/listinfo/gross

-- 
   Jesse Thompson
   Email/IM: jesse.thompson at doit.wisc.edu
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3340 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.utu.fi/pipermail/gross/attachments/20080401/2b8278a9/attachment.bin>