[148132] in North American Network Operators' Group
Re: incoming smtp from v6 addresses
daemon@ATHENA.MIT.EDU (Sebastian Spies)
Wed Jan 4 06:38:07 2012
Date: Wed, 04 Jan 2012 12:37:09 +0100
From: Sebastian Spies <s+Mailinglisten.nanog@sloc.de>
To: nanog@nanog.org
In-Reply-To: <m2k457ye0x.wl%randy@psg.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Am 04.01.2012 11:10, schrieb Randy Bush:
> for incoming mail that is *accepted*, i.e. not stuff like
> 2012-01-04 00:37:28 REJECT because 118.39.80.118 listed in rbl-plus.mail-abuse.org
> 2012-01-04 00:37:28 H=(nexo.es) [118.39.80.118] F=<pedrom@nexo.es> rejected RCPT <owner-radiusext@ops.ietf.org>: blocked because 118.39.80.118 is in blacklist at rbl-plus.mail-abuse.org: Mail from 118.39.80.118 blocked using Trend Micro Email Reputation database. Please see <http://www.mail-abuse.com/cgi-bin/lookup?118.39.80.118>
> 2012-01-04 00:37:28 no host name found for IP address 118.39.80.118
> 2012-01-04 00:37:29 REJECT 118.39.80.118 too many bad recip
> 2012-01-04 00:37:29 REJECT because 118.39.80.118 listed in rbl-plus.mail-abuse.org
>
> 7.8% is over ipv6 transport
>
> but only 2% of outgoing deliveries are over ipv6.
>
> what do other folk see?
>
> randy
Received
$ grep 'amavis' mail.log | grep Passed | wc -l
448
$ grep 'amavis' mail.log | grep Passed | grep IPv6 | wc -l
91
$ grep 'amavis' mail.log | grep Passed | grep IPv6 | grep -v
'2001:1838::cc5d:d48a' | wc -l
18
Sent
$ grep 'postfix/smtp' mail.log | grep 'status=sent' | grep -v
'127.0.0.1' |wc -l
253
enceladus:/var/log# grep 'postfix/smtp' mail.log | grep 'status=sent' |
egrep '\[([a-f0-9]{0,4}:)+[a-f0-9]{0,4}\]' | wc -l
19
with most of them going to mailin.v6.t-online.de[2003:2:2:10:fee::32]:25
~40 silent users
Sebastian
