Fred wrote:
> Matt Kettler wrote:
>> Looking at my MRTG graphs, spam-rate is pretty much a constant here.
>
> Same here, it's about 1,200-1,400 per hour for us. This stays constant 24
> hours a day for us. In the past 48 hours, the lowest point was 11pm on Oct.
> 13th with only 800 spam, and the high point of 10pm on Oct. 12th with
> 1,600 spam. This is odd because the low point and the high point are nearly
> the
> same times just different days.
>
>> Ham rate on the other hand does seem to increase during "extended
>> business hours" of my local timezone. But not dramaticaly. It seems
>> to go up about 50% between 8am and 7pm EST. However, I'd venture to
>> guess the ham rate increase is almost entirely due to geography.
>
> Our ham rate looks more like your spam graphs. From 4am to 12pm it
> rises to it's peak and then from 1pm to 3am it slowly goes back down
> to the low point.
Would it be worthwhile to combine geography and time? Suppose you get a
connection from a particular IP. Look up where it is in the world with a GeoIP
database. Look up what time it is there with a global timezone map. If it's 2
AM there, give it a spam point. If it's 2 PM, knock a spam point off.
That is, rather than keying on what time it happens to be where you are, key on
what time it is at the sending mail server.
Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902
Hispanic Business Inc./HireDiversity.com Software Engineer
perl -e"map{y/a-z/l-za-k/;print}shift" "Jjhi pcdiwtg Ptga wprztg,"
