My stat on a single server on 2006-01-27:
Run this command, you will get the count of the email filterred out:
grep -E 'is blocked|spam attack|dictionary attack|Hacked HELO|Forged HELO|Bad HELO|dsbl\.org|spamhaus\.org|ordb\.org|unknown user|If you meant to send this file|virus or other harmful|Spam score too high' /var/log/exim_mainlog | grep '2006-01-27' | wc -l
Change the date 2006-01-27 to the current date.
=======================
Total email filterred out: 23,872 emails
=======================
Spam mail blocked by manual blacklist sender at the SMTP time: 272
grep 'is blocked' /var/log/exim_mainlog | grep 'Sender' | grep '2006-01-27' | wc -l
Spam mail blocked by manual blacklist host address at the SMTP time: 0
grep 'is blocked' /var/log/exim_mainlog | grep 'Host' | grep '2006-01-27' | wc -l
Spam mail blocked by Auto black list SA high score at the SMTP time: 6,494
grep 'spam attack' /var/log/exim_mainlog | grep '2006-01-27' | wc -l
Spam mail blocked by Auto black list after dictionary attack the SMTP time: 343
grep 'dictionary attack' /var/log/exim_mainlog | grep '2006-01-27' | wc -l
Spam mail blocked by invalid HELO at the SMTP time: 4,137
grep -E 'Hacked HELO|Forged HELO|Bad HELO' /var/log/exim_mainlog | grep '2006-01-27' | wc -l
Spam mail blocked by RBL at the SMTP time: 3,036
grep -E 'dsbl\.org|spamhaus\.org|ordb\.org' /var/log/exim_mainlog | grep '2006-01-27' | wc -l
Spam mail blocked by setting default address to :fail: at the SMTP time: 2,395
grep 'unknown user' /var/log/exim_mainlog | grep '2006-01-27' | wc -l
Spam mail blocked by illegal File extension at the SMTP time: 532
grep 'If you meant to send this file' /var/log/exim_mainlog | grep '2006-01-27' | wc -l
Spam mail blocked by Virus scanner at the SMTP time: 909
grep 'virus or other harmful' /var/log/exim_mainlog | grep '2006-01-27' | wc -l
grep -E 'SPAM\.' /var/log/exim_mainlog | grep '2006-01-27' | wc -l
Spam mail blocked by SA at the SMTP time: 5,754 -121 = 5,633
grep -E 'Spam score too high' /var/log/exim_mainlog | grep '2006-01-27' | wc -l
minus with
grep 'discarded: Spam score' /var/log/exim_mainlog | grep '2006-01-27' | wc -l
Spam mail discared by SA high score (12-15) after recieve emai: 121
grep 'discarded: Spam score' /var/log/exim_mainlog | grep '2006-01-27' | wc -l
NOTE: My SA is running RAZOR, DCC, Pyzor, SARE, Custom SA rules, My own SURBL.
Feel free to post your stat here.
