[Gross] ips.backscatterer.org

[Jesse Thompson]

Eino Tuominen wrote:
> Jesse Thompson wrote:
>> meh.  looks like the senders that are listed just retry, so there 
>> isn't much point in greylisting backscatter unless you see this as a 
>> form of 
> 
> That's what I expected. After all, to be a backscatterer you have to run 
> an MTA.
> 
>> 0: Grossd OK. Update queue: 1488 (In: 1488 + Out: 0) Trust: 303364 
>> Match: 51545 Greylist: 844001 Queries/sec: 83.623492 Dnsbl matches: 
>> grossd dnsbl matches (bl.spamcop.net, dnsbl.njabl.org, cbl.abuseat.org,
>> dnsbl.sorbs.net, list.dsbl.org, multihop.dsbl.org, 
>> ips.backscatterer.org): 463784, 9178, 188087, 150695, 678, 71, 28933
>>
>> (note, to make sense of these stats, only one mta (of 4) was sending 
>> DSNs to gross, and we have 2 gross servers.  the stats reflect 4 hours 
>> of traffic)
> 
> Your amount of traffic always amazes me... So, you get over 160 
> recipients per second during peak hours? How many PMX hosts do you run? 
> And how many would you run if you didn't run Gross?

We have 8 dedicated pmx servers at the moment (4 Dell 2650, 4 Dell 1950) 
but that's scaled to pre-gross levels (10 million messages a day).  With 
gross, we only have to deal with around 2 million messages a day.  We 
could probably scale back to 3-4 1950s if we wanted to push it (or get 
better value from our hardware).  The rest of our email servers are Sun 
Sparc Solaris 10, so we're considering switching pmx to run on zones on 
Sparc T5220 sparse zones.  This would allow us to dual purpose machines 
that are otherwise underutilized.

Jesse
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3340 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.utu.fi/pipermail/gross/attachments/20080401/214012cb/attachment.bin>