Post on 02-Jan-2016
E-mail Technical E-mail Technical Coordinators MeetingCoordinators Meeting
Chris BongaartsChris Bongaarts
July 9, 2008
Outages
Authenticated SMTP– 6/29 10pm – 6/30 5pm:
authentication failures– Extensive writeup on EMAIL-L – see
list archives for details
Outages
WBOB power failure– 7/1 morning: fire in electrical room at
WBOB– 11:58am power surge caused reboots
of most WBOB servers– Affected about 40% of email users,
UMCal, LISTSERV– Interactive email server (garnet)
needs downtime to clean up (TBA)
Outages
Web Hotel– 7/2: 3 min. outage due to memory
error/reboot– Memory swap 7/6 unsuccessful– Will retry in a week or two
GopherMail Beta
Beta testing in progress– https://gophermail.umn.edu:4443/
Planned go-live date: 7/21
Anti-Virus/Phish Filtering NAI shut off on all servers by 7/3 ClamAV now exclusive virus/phish
scanner
Virus/Phish Detected per day (May 6 thru Jul 1)
0
500
1000
1500
2000
2500
3000
3500
4000
Date
Nu
mb
er D
etec
ted
Per
Day
Both
NAI
ClamAV
Spear Phishing Mitigation Watermark “official” email
– Unforgeable header– Gophermail will display message
with “official” indication– Maybe have GM indication for “local”
Maybe make SpamAssassin opt-out instead of opt-in– Depends on system capacity
Spear Phishing Mitigation Allow OITSEC better tools for
quicker blocking/reporting on replies
Helpline examining user education possibilities
Spam Reports
0
2000
4000
6000
8000
10000
12000
Date
Nu
mb
er o
f m
essa
ges
fla
gg
ed p
er d
ay
SA
User
Good
Confirmed
Total Number of IMAP Users (Past Year )
0
5,000
10,000
15,000
20,000
25,000
30,000
35,000
40,000
45,000
50,000
2007
0620
2007
0704
2007
0718
2007
0801
2007
0815
2007
0829
2007
0912
2007
0926
2007
1010
2007
1024
2007
1107
2007
1121
2007
1205
2007
1219
2008
0102
2008
0116
2008
0130
2008
0213
2008
0227
2008
0311
2008
0325
2008
0408
2008
0422
2008
0506
2008
0520
2008
0603
2008
0617
2008
0701
Date
Nu
mb
er
of
Us
ers
Pe
r D
ay
Webmail Pro+3.0 UsersGopherMail UsersOther Users
Total Number of IMAP Connections (Past Year)
0
100,000
200,000
300,000
400,000
500,000
600,000
700,000
800,000
900,000
1,000,000
2007
0620
2007
0703
2007
0716
2007
0729
2007
0811
2007
0824
2007
0906
2007
0919
2007
1002
2007
1015
2007
1028
2007
1110
2007
1123
2007
1206
2007
1219
2008
0101
2008
0114
2008
0127
2008
0209
2008
0222
2008
0305
2008
0318
2008
0331
2008
0413
2008
0426
2008
0509
2008
0522
2008
0604
2008
0617
2008
0630
Date
Nu
mb
er
of
Co
nn
ec
tio
ns
Pe
r D
ay
Webmail Pro+3.0 ConnectionsGopherMail ConnectionsOther Connections
E-mail Messages Rcvd Per Week (Past Year)
0123456789
101112131415161718
Week Ending
Mil
lio
ns
of
Mes
sag
es P
er W
eek
BlockedUnknown userGrey ListedAcceptedOther
Incoming Email Statistics (June 9 - July 6)
Relay Denied0.4%
User allowed0.3%
Greylisted orRate-limited
13.4%
User Inactive0.4%
Unknown user
12.7%
Blocked60.1%
Accepted21.0%
Messages Blocked By Reason (Past Year)
0
1
2
3
4
5
6
7
8
9
10
11
12
13
06/1
107
/02
07/2
308
/13
09/0
309
/24
10/1
511
/05
11/2
612
/17
01/0
701
/28
02/1
803
/10
03/3
104
/21
05/1
206
/02
06/2
3
Week Ending
Mil
lio
ns
of
Mes
sag
es B
lock
ed P
er W
eek
Spam source DynamicInsecure Protocol ViolationDNS Unauthorized access
Spam/Virus Blocking by Reason (June 9- July 6)
Dynamic2.7%
Spam source6.6%
Insecure23.1%
Unauthorized Access64.3% Protocol
Violation0.8%
Bad Mail From0.0%
DNS2.5%
Bits ‘n’ Bytes
UMN is now a member of the InCommon Federation– http://www.incommonfederation.org
‘‘Till next month…Till next month…
Internet ServicesInternet Services isgroup@umn.edu
Chris BongaartsChris Bongaarts cab@umn.edu 612-625-1809612-625-1809