E-mail SPAM Filter Guide - Reports

CanIt-PRO provides various reports which help you determine the major sources of SPAM. To view the reports, click on the "Reports" link. Then select a report from "Senders", "Hosts", "Domains", "Hit-And-Run" or "Statistics".

The Reports

The available reports are:

  • Sender Report - a list of the top 50 senders of confirmed SPAM.
  • Host Report - a list of the top 50 SMTP relays which transmitted confirmed SPAM.
  • Domain Report - a list of the top 50 sender Domains for confirmed SPAM.
  • Hit-And-Run - a list of the top 50 Domains involved in "Hit-And-Run" SPAM attempts. Please note that this report is active only if the global setting Tempfail unknown senders on first transmission is set to Global or Per-Recipient. In the Hit-And-Run report, you can click on a Domain name to see details about the hit-and-run attacks from that Domain.

Normally, the sender, Host and Domain reports only take into account messages explicitly marked as SPAM. You can have them count one-shot and pending messages too by clicking on "Include Pending and One-Shots".

If you wish only to see items that haven't already been BlackListed or WhiteListed, click on "Show Only Items with no BlackList/WhiteList". You can learn more about Lists and Rules on the BlackLists, WhiteLists, and Rules page.

You can obtain reports in CSV format (suitable for importing into a spreadsheet) by clicking on "CSV Format"

Normally, reports are shown only for the current stream. You can get a report for all streams on the system by clicking on "Show Results for All Streams". You can learn more about Streams on the Streams Page.

Statistics

CanIt-PRO keeps statistics about the disposition of E-mail messages. To view the statistics, click on "Reports" and then "Statistics".

Note: The statistics are gathered in real-time, but summarized hourly. Therefore, the information on the "Statistics" page represents information gathered up to one hour ago.

Enter the date range for the report in the From: and To: boxes. Select either All Streams or Current Stream to restrict statistics display to all streams or only the current stream. Then click See Statistics.

The Statistics Report includes one line for each day in the date range, followed by a summary total. Each message is categorized as follows:

  • Accepted: The message was accepted without human intervention.
  • Approved: The message was held in the trap (because of a high SPAM score or some other reason such as an entry in the Domain action table), but was later approved by the SPAM control officer.
  • Host WL: The sending Host was WhiteListed.
  • Sender WL: The sender's E-mail address was WhiteListed.
  • Domain WL: The sender's Domain was WhiteListed.
  • Rejected: The message was held in the trap and later rejected by a person.
  • Auto Reject: The message was automatically rejected because of a high SPAM score.
  • Host BL: The sending Host was BlackListed.
  • Sender BL: The sender's E-mail address was BlackListed.
  • Domain BL: The sender's Domain was BlackListed.
  • Mismatch: The message was rejected because of a mismatch rule.
  • Executable: The message was rejected because it contained a Windows executable.
  • Bad MIME: The message was rejected because it contained a banned MIME type.
  • Bad Extension: The message was rejected because it contained a banned filename or extension.
  • Virus: The message was rejected because it contained a virus.
  • One Shot: The message never made it out of the one-shot category.
  • Hit And Run: The message never made it past hit-and-run detection.
  • Bad: The total of all columns from Rejected through Hit And Run.
  • Good: The total of all columns from Accepted through Domain WL.
  • Total: The sum of Bad and Good - in other words, the total volume of mail flowing through the system.

Note that if a column would include only zero values, it is suppressed from the output.

If you select the "CSV" format rather than "HTML", then the resulting output is a plain-text file in the "comma-separated value" format. This format is suitable for importing into most spreadsheet programs; just save the result to a file and use your spreadsheet's import function to bring in the data.