Hello fellow anti-spam advocates. After getting a rather large logwatch report, I went hunting in my logs to get to the root of the problem. I noticed a very big spike in the number of occurences of the following line in the /var/log/maillog file:
"Milter add: header: Content-Type: multipart/mixed; boundary=..." I collated data off of the log files (I keep 3 years worth) and below is what I uncovered in the last few days: Day Occurences ====== ========== 27-May - 12 28-May - 6 29-May - 9 30-May - 6 31-May - 5 1-Jun - 724 2-Jun - 609 3-Jun - 31 4-Jun - 576 5-Jun - 706 6-Jun - 515 7-Jun - 17 Number of similar occurences in the last quarter: Week ending Occurences ================ ========== Week ending 3/18 - 1 Week ending 3/25 - 27 Week ending 4/1 - 70 Week ending 4/8 - 67 Week ending 4/15 - 59 Week ending 4/22 - 47 Week ending 4/29 - 33 Week ending 5/6 - 31 Week ending 5/13 - 40 Week ending 5/20 - 61 Week ending 5/27 - 1402 Week ending 6/3 - 1931 Prior to June 1, the highest occurrence was 70 back in May. What the heck is going on? Cheers, Anthony.
