BounceGrokker Weblog

Thu, 18 Jan 2024

DKIM set up correctly now

A lot of German ISPs now demanding valid DKIM to allow emails from us.

I had set it up some time ago. But incorrectly. My bad.

After a bit of work. This URL (and email test) verifies correct set up: https://dkimvalidator.com/

So now I’m waiting for the emails to our German customers go through.

posted at: 08:56 | path: | permanent link to this entry

Wed, 23 Nov 2022

What to choose?

As the prevously preferred linux distro was CentOS. New choices must be made. Rocy or Alma Linux.

Currently I think Alma Linux is best. And: Install version 9. Dont bother with 8.

posted at: 09:58 | path: | permanent link to this entry

Tue, 26 Apr 2022

New mail server

With RHEl/CentOS going down the drain. Now the new server is on RocyLinux. Works well

Setting up a nw email server is quite tedious these days. Not technically. But getting MicroSoft, Gmail et al to accept the new server lot of work. But works well now.

DKIM, DMARC and SPF.



posted at: 11:20 | path: | permanent link to this entry

Fri, 27 May 2016

Spam and totals updated 2016

With the new set up with postfix, spamassassin and procmail filters the situation is much better.

Sizes now much smaller than they used to be. Much more maneagable.

size-20160520 553249
size-20160521 445430
size-20160522 322695
size-20160523 193474
size-20160524 156869
size-20160525 295624
size-20160526 744956

This is the amount of bytes in bounced emails. I run a tight ship suspending bouncing users/emails. Spam is very managable. So if nothing else. This shows I have more work now with this than I had in 2012.



posted at: 14:05 | path: | permanent link to this entry

Fri, 02 Nov 2012

Spam and totals updated

With the new set up with postfix, spamassassin and procmail filters the situation is much better.

Sizes now much smaller than they used to be. Much more maneagable.

size-20121028:250077    total
size-20121029:128818    total
size-20121030:546180    total
size-20121031:179077    total

The size of october 30th is a fluke as we generated twice the number of outgoing mails that we werw supposed to (two runWTP processes).



posted at: 13:44 | path: | permanent link to this entry

Tue, 19 Oct 2010

New infrastructure for WTP

WTP’s IPS: vikenfiber sucks big time. They now refuse to send our email. Claiming the amount is to big for a free service.

So we have had to set up our own email server at http://linode.com/

The main server of WTP also broke. So most of my scripts and stuff for handling bounces are lost.

But now we (I) have control end to end. I can see the queues. And am now handling bounces differently on all machines. Using postfix makes this more manageable.

See http://london.bouncegrokker.org/queuegraph.cgi for queue statistics on the mail server.



posted at: 22:55 | path: | permanent link to this entry

Tue, 21 Apr 2009

Spam and totals

Done some checking. Even though I keep closing down defunct accounts, the amount of incoming emails keep rising.

Some looking into it shows that a lot of these emails are spam. Of course it is. The email addresses for the service of course is very well known by spammers. Easily harvestable too.

size-20090418:307080    total
size-20090419:307312    total
size-20090420:286988    total
size-20090421:276548    total

We use qmail as our MTA. A terrible choice. Done before my time. I can’t seem to find any reasonable and easy implementable across the board anti spam measures for qmail. sad

If we had only used postfix I would have had a slew of tricks up my sleeve to limit incomming spam at the MTA level. Aw shucks!



posted at: 09:45 | path: | permanent link to this entry

Wed, 18 Mar 2009

It’s the economy, stupid!

An increasing amount of bounces this year. Typically “user unknown”.

Many of them are at recruiters offices. Also many others. Seems that lay-offs are hitting many companies. Sad. Impacts everything. sad

Let us all hope that the economy will strengthen and that the crisis will end soon.

size-20090315:248780    total
size-20090316:277280    total
size-20090317:257092    total
size-20090318:251552    total


posted at: 09:40 | path: | permanent link to this entry

Fri, 04 Jan 2008

Who would?

A new year. New bounces.

Users suspended every day. But I can see why. With a user base as big as that of WTP. Who thinks about fixing email lists when changing jobs, getting fired, etc.

posted at: 22:01 | path: | permanent link to this entry

Tue, 25 Dec 2007

No rest for the wicked

Christmas day, and bounes a’plenty.

Suspended some users today (as well). Through a year with continuous work it seems the amount of bounces is low and under controll.

size-20071220:154916    total
size-20071221:175956    total
size-20071222:194584    total
size-20071223:206920    total
size-20071224:203796    total
size-20071225:190368    total

Not quite record level, but not far from it. The lowest this year was:
size-20071008:110360    total
And record high was:
size-20070726:1542880   total



posted at: 14:12 | path: | permanent link to this entry

Sat, 13 Oct 2007

New script

Sometimes the brain works slowly.

The script gimmefresh (see earlier post) I use maybe 50-100 times a day. Followe by a manual run of other scripts. The first one (xendgrep) I use to find out for how many days the email address has been bouncing.

Today I combined them in the new script gn (name is short and sweet). So now when I run gn I get “how many fresh bounces today” “email” “consecutive days of bouncing”.

Saving the internet. One script at a time. winking

posted at: 11:12 | path: | permanent link to this entry

Thu, 12 Apr 2007

Slight work on the FAQ

I am probably the only person in the world to red the FAQ, but… sad

Small update today on the RFC part. See http://bouncegrokker.org/FAQ.txt

posted at: 14:02 | path: | permanent link to this entry

Sat, 03 Mar 2007

Been away for 3 weeks in Thailand wit my family

Amount of bounces not too heavy. Suspended about 8 accounts today. The size of the bounces is a mere 385k. So all is swell.

posted at: 15:15 | path: | permanent link to this entry

Fri, 15 Dec 2006

First suspension!
Strange. Just days after users having confirmed their emails, emails start to bounce again. So today I have suspended the first user since our ISP nextente.no (sucks) shut us down temporarily. The suspended user was someone @planet.nl.

Amount of bounce emails (data) still declining:
size-20061215:765872    total


posted at: 10:55 | path: | permanent link to this entry

Thu, 14 Dec 2006

Sub 1GB ok!
After sending out emails to all customers of WatcThatPage.com, even historic ones, bounces went through the roof!

size-20061202:1920840   total
size-20061203:1876864   total
size-20061204:1709428   total
size-20061205:1689740   total
size-20061206:1690868   total
size-20061207:1650308   total
size-20061208:1624936   total
size-20061209:1507172   total
size-20061210:1391948   total
size-20061211:1264248   total
size-20061212:1118376   total
size-20061213:985308    total
size-20061214:868548    total

But now it is coming down to more reasonable levels. As now all users have confirmed that they want to continue as customers, bounces on the update emails are low. But it’l pick up again. I’m sure. happy

Hopefully the number of active customers will pick up again as well. We’ve lost quite a lot of customers. sad

Comcast addresses still gives problems. And now they won’t accept emails to get our ISP’s SMTP server anymore. It’s now an URL thingy. It can be found at http://www.comcastsupport.com/rbl

posted at: 12:12 | path: | permanent link to this entry

Wed, 29 Nov 2006

A starnge twist of fate
Due to complaints our ISP (nextgentel.no sucks!) blocked all of our outgoing emails! Pretty bad for a company like WatcThatPage.com who ha sending out emails to subscribing customers as sole means of income!

To my knowledge nextgentel.no did not warn us in advance. Or any sensible thing.

The deal we had to make with nextgentel.no (sucks!) is to lock out all our customers and then every individual customer has to log in and reactivate their profile.

I really think nextgentel.no (sucks) could have been more flexible about this.

Well. At least bounces are down to almost zero. The number of active customers is also way down. Hopefully most customers will reactivate their accounts quickly.

posted at: 13:34 | path: | permanent link to this entry

Fri, 17 Nov 2006

No counters @ comcast.net
Seem like comcast.net doesn’t have any kind of counters on their unblock procedures. I just bounced (resent) an old “please unblock” letter. And it went through. We are again able to send emails to comcast. For as long as it lasts. winking

With the backlog of aol and comcast bounces, the amount of bounces received is high and still on the rise.
size-20061115:630564    total
size-20061116:692712    total
size-20061117:702040    total


posted at: 08:41 | path: | permanent link to this entry

Tue, 14 Nov 2006

Yes, no, yes, no, yes, no!
We got whitelisted by comcast.net after repeated emails. But now we are blacklisted again. Our ISP’s (nextgentel.no sucks) email server even got blacklisted by aol.com. Ssizes are up.

Even with doing lots of work on bounces sizes now look like:
size-20061101:449472    total
size-20061102:446236    total
size-20061103:462056    total
size-20061104:471620    total
size-20061105:496088    total
size-20061106:531492    total
size-20061107:582716    total
size-20061108:623364    total
size-20061109:640584    total
size-20061110:644208    total
size-20061111:619048    total
size-20061112:617080    total
size-20061113:611528    total
size-20061114:591336    total

If only we had the time and resources to set up our own email infrastructure and not be dependent on our ISP’s SMTP server.

The akvavit will keep me alive.

posted at: 16:58 | path: | permanent link to this entry

Thu, 02 Nov 2006

A good day for bouncegrokking
A bit hung over from yesterdays excesses today got of to a slow start. But I finished the SORBS letter and the infrastructure to send it out. Sent out a lot of letters and with the work also found a lot of defective/obsolete/non working email addresses that I suspended. Todays level of bounces: 446MB needs to be trimmed down.

posted at: 19:43 | path: | permanent link to this entry

The FAQ
Beta version of SORBS explanation letter finished. Sent it to the rest of the WTP team for proofreading.

Bagatelle was great!

posted at: 12:30 | path: | permanent link to this entry

Wed, 01 Nov 2006

The FAQ
I have not worked on the FAQ for some time now. sad Fixed a typo today. That’s something. It’s at http://bouncegrokker.org/FAQ.txt

Working on the sorbs explanatory letter to the WatchThatPage.com customers. Hope to have it in beta version this evening.

To pat ourselves on the back the WatchThatPage crew is going to Oslo’s best restaurant (Bagatelle) today! Hooray for food & wine! winking

posted at: 16:36 | path: | permanent link to this entry

Mon, 30 Oct 2006

comcast.net
We are (again) blacklisted by comcast.net. Or rather our ISP is. nextgentel.no sucks!

Have asked the other guys running watchthatpage.com to email comcast to get us unblocked. Can’t be me mailing them all the time.

posted at: 14:56 | path: | permanent link to this entry

Fri, 27 Oct 2006

New sorbs trouble
Seems like a new wave of sites are blocking us as our ISP (nextgentel.no sucks) is listet in the SORBS list.

The sheere number of sites blocking emails based on IP is astounding. This practice must end!

I am planning to write a long and carefull email to the hundred+ users that don’t get their updates. As the letter is going out to a lot of customers and has to be of a generic nature, it will have to be carefully written.

Not looking forward to writing it. But it must be done.

posted at: 14:53 | path: | permanent link to this entry

Fri, 20 Oct 2006

secureserver.net
In the abundance of blocklists, our ISP (nextgentel.no sucks) is now blacklisted by a new service: secureserver.net. And when they are blacklisted: So are we!

Luckily for us, the servce gives sensible error messages. To get off the blacklist I just have to click http://unblock.secureserver.net/?ip=80.202.4.58

Gotten email from them that the unblocking is being handled.

I’m surprised of how many of our users are using the secureserver.ne service.

Even though the service at secureserver.net is fairly ok implementet, I must again avise against blocking based on IP. Se the FAQ for details.

posted at: 11:50 | path: | permanent link to this entry

Mon, 16 Oct 2006

Comcast plays nice
We are off the comcast.net blacklisted. If only all ISP’s were as quick to respond!

Well: Back to fighting the megabytes of bounces. frustrated

posted at: 14:46 | path: | permanent link to this entry

Sat, 14 Oct 2006

Yes: Shit happens
We are (again) blacklisted by comcast.net. Or rather our ISP is. I have sent them an email beggin g them to unblock us.

As I have stated in the http://bouncegrokker.org/FAQ.txt: Blocking based on IP address is a far to crude way of dealing with UCE. But as I am not world dictator yet winking this practice continues.

I hope our ISP won’t get blocked by more blocklists.

posted at: 10:02 | path: | permanent link to this entry

Fri, 13 Oct 2006

Record low
Through hard work I have now managed to set a new record:

size-20061011:244284    total
size-20061012:235916    total
size-20061013:230808    total
230MB is the lowest amount of bounce data ever!

Hooray for me!

When things are as good as this, something bad usually happens. Cross my fingers.

posted at: 10:26 | path: | permanent link to this entry

Thu, 12 Oct 2006

A happy suspended customer
Suspended on of our customers yesterday. And he was happy! (Or rather wented his dismay with BellSouth tech support).

Here is the body of the letter:
At 06:57 10/11/2006, Jon Ross wrote:
>I have now suspended your watchthatpage.com account.                           

Thanks for letting me know.  I'm working on setting up my own
SMTP/POP3 server, and once that's operational, I'll be able to bypass
BellSouth's incompetence.

Thanks, Craig


posted at: 08:30 | path: | permanent link to this entry

Wed, 27 Sep 2006

Flatline
The amount of bounced data has leveled out at about 300MB. Not bad. Allways new reasons for bounces. Never ending struggle.

The fact that Olav, the programmer of WTP, has too much on his hands and does not have time to implement a small measure that would stop the sending of emails to a lot of known bouncers is todays gripe.

posted at: 21:11 | path: | permanent link to this entry

Thu, 21 Sep 2006

Metrics of all sorts
The size of bounced emails has gone further down and is still decreasing:

size-20060920:411864    total
size-20060921:401028    total
I have thrown in a substantial amount of hours so it is deserved. winking

The gimmefresh and xtail tricks gives good attack vectors to reduce the bounces.

Through old school unix text and data massaging I get all sorts of metrics. What email addresses do I see most. Which addresses are (pretty sure) errors that gives reason to suspend (do not nsuspend for transient errors). Which domain generates most bounces etc. The jotr tool can give me what are trend changes in all of the above data.

Through all these metrics I can monitor trends and change. And it gives me several different attack vectors to reduce bounces. Which email genrates mos bounces. Who are fresh bounces. Which part of the “battle” is going weel and vice versa.

Clearly being on a roll with success is motivating!

posted at: 10:25 | path: | permanent link to this entry

Fri, 15 Sep 2006

On a good roll!
The size of bounced emails keeps going down:

size-20060912:720868    total
size-20060913:655756    total
size-20060914:579360    total
size-20060915:522024    total
True, I keep tidying up and suspending customers with emails that bounce, but I have to admit I am getting the reduction without too much hard work.

The reason why the pool of bounced emails is not beeing reduced at a faster rate is much due to the setup of the mail server (SMTP) software qmail on our outboun mail server. It does some truly stupid things. I did not set up the server. If it had been me, it would have run postfix. Postfix rules!

Made a new snippet three days ago to just show me who were the fresh bounces. Called it gimmefresh. Old school shell script:
!/bin/sh
# gimmefresh -> Who are the fresh bounces of today (and today only)

cd /home/mailer || exit

egrep -h “^X-WTP-TID: `date +%Y%m%d`” mbox-watchthatpage-user-“`date +%Y%m%d`”* | awk ‘{print $NF}’ | sort | uniq -c | sort -nr


posted at: 09:00 | path: | permanent link to this entry

Mon, 11 Sep 2006

Someone has come to their senses
The size of bounced emails has gone down a lot during the week end:

size-20060908:1040264   total
size-20060909:951396    total
size-20060910:846816    total
size-20060911:766492    total
And It is not me! I havent done any work on the bounces since friday.

Seems like comcast.net has come to their senses and now allow emails to the through! I’m not sure yet if this is really the reason. More debugging needed. But it looks like comcast.net now is A OK.

May be that sbcglobal.net has come around as well. This bodes well! Maybe even pacbell.net, prodigy.net, swbell.net and snet.net as well.

If this is the case then I am really happy. I have been working on getting them to adjust their filters for more than a year!

On a sidenote. Todays tool is xtail.pl. Really nifty to monitor rotating logfiles without having to restart the tail all the time.

Like this nifty command line:
xtail.pl . | grep “^X-WTP-TID: `date +%Y%m%d`”


posted at: 14:58 | path: | permanent link to this entry

Fri, 08 Sep 2006

Steady work helps
Used time just suspending the real bounces. About email addresses 20-30 each day. It helps. But manually watching and removing is slow. Gotten the amount of bouncemails for last period down to 1GB. So it helps.

Our ISP nextgentel.no still in sorbs. nextgentel.no sucks.

posted at: 09:30 | path: | permanent link to this entry

Wed, 06 Sep 2006

Putting in the time
Doing the manual work of removing bouncing email messages. Due to the many SORBS bounces (due to our incompetent ISP (nextgentel.no)) I can’t run the automated processes to suspend en masse. Too many false positives. And false positives are time consuming.

Just my 2 cents worth: Email providers with sensible spam handling and sensible error/bounce messages inlcudes: gmail.com, yahoo.com, hotmail.com.

My 2USD worth: These ISP sucks at handling the same issues: sbcglobal.net, pacbell.net, snet.net, ameritech.net, swbell.net. Avoid these if you can.

posted at: 17:22 | path: | permanent link to this entry

Wed, 30 Aug 2006

Take full controll
I can see no other way. As our ISP (nextgentel.no sucks) is unable, unwilling and incompetent in getting of the SORBS list. WatchThatPage.com needs to establis it’s own production net. Not in an ADSL pool.

This probably means having to pay more (much more) for the net access, but we need full control over the WTP production chain. Allways when I thought we were on top of things and the amount of bouncemail was low: Something bad happened.

Could be anything stupid. But the dependency of an ISP that does not have the professionality to serve WTP well and the dependency of myriads of ISPs out there that do stupid things and then tell us to contact our ISP (the cause of their and our problems) to get things fixed.

Todays size of the bouncemails is 1.2GB. ISP’s mailserver listed in SORBS combined with the fact that comcast.net blocks emails form our ISP (based on it’s own metrics, not SORBS) sure gives a bouncegrokker a hard time.

posted at: 15:30 | path: | permanent link to this entry

Tue, 29 Aug 2006

Our ISP still listed in SORBS.
Our ISP (nextgentel.no) is still listed in the sorbs blacklist.

More and more of our customers (some rellay big like comcast.net) are picking up on this. Many maiservers out there use the SORBS lists as primitive block lists.

If they could just grasp that this is too primitive an approach and rather use spam scoring software combined with spam tar traps and low(er) performance secondary (tertiary?) email washers.

Our ISP is clueless. Sigh!

posted at: 16:10 | path: | permanent link to this entry

Thu, 17 Aug 2006

Too depressed
With the bounces due to our ISP’s sorbs listing I havent done much to weed out “bouncers” today.

Todays measure of bouncemail data is 316.9MB. Up from yesterdays 298.9MB.

Still. The numbers are historically low. I’ve put a lot of effort into reducing the bounces at http://watchthatpage.com/ and it’s nice too see that even with the SORBS listing we still have reaonable amounts of bounces.

Too busy today to wotk on the FAQ.

And, just if you wondered: Comcast sucks!

posted at: 19:30 | path: | permanent link to this entry

Wed, 16 Aug 2006

We’ve been in contact with nextgentel.no tech support
The support person was utterly clueless of course. Uttering things like it’s sorbs.net’s fault. Clueless.

posted at: 20:36 | path: | permanent link to this entry

Tue, 15 Aug 2006

Blocked by sorbs!
The ISP of watchthatpage.com managed to get listed in the sorbs blocklist. As many ISPs an IS/IT departments block IP addresses based on the sorbs.net listings, the number of bounces for watchthatpage.com will skyrocket. WTP’s ISP is NextGentel.no and I really don’t think they do a good enough job with their mail systems.

posted at: 16:19 | path: | permanent link to this entry

Thu, 10 Aug 2006

randgen
As you will soon(?) notice the utility randgen, currently in version 0.2.8 is used in a lot of the tools & uilities. All that randgen does is to generate a random string. Originally I made i to generate good and semi random passwords, but in these snippets i use it to generate unguessable filenames for temporary storage. With an 8 characters long string (and wothout special chars) it gives 248155780267521 (or 2.5x10^14) variations. Extremly har to guess for a tmp-file snatcher. So if you want to use my snippets and scripts you willø need to0 install randgen. The source code is there. And it is GPL and free for all. If you have a problem with Free Software and the Gnu Public License, bouncegrokker.org is not for you.

posted at: 20:03 | path: | permanent link to this entry

New snippet, jnbt, added.
Added a small snippet to the collection of analysis tools today. The letters nbt -> New Bigger Than. It’s meant to be a way to detect newcommers to the bounce list files. Newcommers with a high frequency, prefereably. Detecting bouncers early ios a boon. With all the email queues on different relays and servers, it is not unusal that one single bouncemail keeps generating bounces every day for almost a month!

posted at: 20:03 | path: | permanent link to this entry

Mon, 07 Aug 2006

Made a new piece of software today. Combining earlier pieces an a small program written in c. The snippet is called jotr (Jon On The Rise). The ‘J’ is just to make it easily recogniseable for me. I hope to prefix all the hacks, snippets and programs I use with ‘bg’ before releasing them to the public.

Thje ‘jotr’ program makes it easy for me to see which email address the has the biggest increase in bounces. Makes it easier for me to stop sending mail to an email address that bounces early. Early detection is good!

posted at: 19:57 | path: | permanent link to this entry