Results 1 to 3 of 3

Thread: Help Understanding Daily Report Logs!

  1. #1
    Join Date
    Oct 2012
    Posts
    24
    Rep Power
    3

    Question Help Understanding Daily Report Logs!

    Hello Everyone!

    Love Zimbra! Quite easy to setup and it just works! -- Not to mention free is awesome compared to Exchange and I can run it on Linux which is always a huge plus!

    Now...

    I run a Zimbra 7.2.0 server ontop of CentOS 6.1 64 bit server. This is the only production email server my company has so we can't afford to turn it off, etc. I have necessary ports punched through our firewall to allow SMTP, IMAP over SSL, and web access to email.

    Our domain gets a huge (by my standard) amount of spam email every day. The average Daily Report says we reject anywhere between 80-99% of incoming emails as spam which sometimes can be about 134,000 emails (rejected) per day. Crazy!

    My question is about the top 50 receivers and top 50 senders by message count sections of this report. I'm confused as to what this report is really showing me.

    For example: My understanding is the Top 50 Senders by Message Count section is listing the number of emails sent by someone else to my email server. Is this correct? I can see many of our email addresses in this list, however there are a lot that I don't recognize... which would be normal with this assumption since anyone can send to my email server so long as the destination is a valid address...

    But, my understanding of the Top 50 Recipients by Message Count worries me. My understanding is that the Recipients would be addresses my email servers has sent mail to. Is this correct? If so, I have a lot of email addresses in this list that I don't recognize, and this is really concerning. I have made sure I don't have an open relay by using multiple tools online to test for this as well as scanned the ports to make sure we aren't advertising anything compromising, etc.

    Can someone help me understand this log better so i can sleep easier at night!?!?!? Thanks!

  2. #2
    Join Date
    Mar 2006
    Location
    Greenwood, IN
    Posts
    90
    Rep Power
    9

    Default

    "top 50 Recipients by message count" is showing any address that your MTA has delivered mail to. At first it seems the list would only count recipients homed in your Zimbra environment, but it also includes recipients your users have sent mail to. The report just doesn't separate out local recipients from remotes.

  3. #3
    Join Date
    Oct 2012
    Posts
    24
    Rep Power
    3

    Question

    Quote Originally Posted by iggy View Post
    "top 50 Recipients by message count" is showing any address that your MTA has delivered mail to. At first it seems the list would only count recipients homed in your Zimbra environment, but it also includes recipients your users have sent mail to. The report just doesn't separate out local recipients from remotes.
    Thanks Iggy for the update.

    I'm a little confused on the difference between the Top 50 Sender and the Top 50 Recepients now... as based on your explanation it seems both show the same information? Perhaps just from a different perspective? Is this correct? Thanks again... I'm just trying to understand this report well.

    Thanks!

Similar Threads

  1. Daily report not running..
    By GiZiM in forum Administrators
    Replies: 4
    Last Post: 01-03-2012, 04:29 PM
  2. Daily Report
    By micasrafael in forum Administrators
    Replies: 2
    Last Post: 11-12-2010, 05:27 PM
  3. [SOLVED] truly understanding the daily reports
    By aurfalien in forum Administrators
    Replies: 0
    Last Post: 05-07-2009, 05:54 PM
  4. Daily Report
    By wills in forum Administrators
    Replies: 1
    Last Post: 10-15-2008, 04:31 PM
  5. Understanding the Daily Mail Report - Open Relay?
    By gihrig in forum Administrators
    Replies: 4
    Last Post: 10-16-2006, 09:53 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •