Randy Ramsdell wrote:
Our spam levels are 1/2 to 1/3 of what they were two weeks ago. Also, virus e-mails are also very very low. Low enough for me to start reviewing the e-mail logs for anomalies.
The volume hitting my traps is significantly down, although a few days ago, I quit trapping for a couple of specific user IDs. In both cases, former users whose addresses aren't otherwise valid -- I found that the traffic hitting those mailboxes was unique to those IDs, and for now, it's not worth the effort to be watching those traffic flows.
However since turning off the trapping for those two, I'm seeing *very* little traffic on the other addresses I trap for, enough that I am also checking logs for anomalies.
Or maybe it's just that between dnsbls and local rules that force rejection, I have things tuned well enough that very little spam is actually getting through... :-)
Smith
