Re: How much abuse comes from dynamic IPs? Numbers.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 28 Nov 2003 04:03:15 +0000, Jem Berkes wrote:

> I have exchanged notes with a few admins who have decided to block
mail
> from all dynamic IPs.

[snip]

> All duplicate IPs were removed;
> this is a list of unique IP addresses hitting my trap, guaranteed
spam.
>
> Total unique IP addresses: 1138
> dul.dnsbl.sorbs.net said 127.0.0.10 (dynamic) for: 205
> dnsbl.njabl.org said 127.0.0.3 (dynamic) for: 19
> dynablock.easynet.nl said 127.0.0.2 (dynamic) for: 197
>
> Combining positive dynamic IP matches from 3 lists, removing
duplicates
> Union = 207
>
> ---------
> Summary:
> ---------
> Spam/viruses received from 1138 IPs
> IPs that were dynamic: 207
> 18.2% of the abuse hitting my mail server comes from dynamic IPs
> 81.8% of the abuse hitting my mail server comes from static IPs

You are counting the wrong thing, if you are asking for an answer to
"how much abuse...". You are counting ip addresses, not spam samples.
Try again.

You are also counting only spam. Consider the case of a real live email
address that receives a mix of spam and non-spam messages. Compute the
impact (both blocking of spam, and blocking of non-spam) on such a
mailbox of a "no dynamic ip addresses" policy.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE/xuERL6j7milTFsERAsnsAJ4l2ov+3fam5bHWlBAiVabhJ1bVoQCf XH3C
FWovxY2JaFuG7VxwZt9ZSxc=
=VACY
-----END PGP SIGNATURE-----