e-mail technical coordinators meeting chris bongaarts july 9, 2008

18
E-mail Technical E-mail Technical Coordinators Meeting Coordinators Meeting Chris Bongaarts Chris Bongaarts July 9, 2008

Upload: carol-barton

Post on 02-Jan-2016

218 views

Category:

Documents


3 download

TRANSCRIPT

Page 1: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

E-mail Technical E-mail Technical Coordinators MeetingCoordinators Meeting

Chris BongaartsChris Bongaarts

July 9, 2008

Page 2: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Outages

Authenticated SMTP– 6/29 10pm – 6/30 5pm:

authentication failures– Extensive writeup on EMAIL-L – see

list archives for details

Page 3: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Outages

WBOB power failure– 7/1 morning: fire in electrical room at

WBOB– 11:58am power surge caused reboots

of most WBOB servers– Affected about 40% of email users,

UMCal, LISTSERV– Interactive email server (garnet)

needs downtime to clean up (TBA)

Page 4: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Outages

Web Hotel– 7/2: 3 min. outage due to memory

error/reboot– Memory swap 7/6 unsuccessful– Will retry in a week or two

Page 5: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

GopherMail Beta

Beta testing in progress– https://gophermail.umn.edu:4443/

Planned go-live date: 7/21

Page 6: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Anti-Virus/Phish Filtering NAI shut off on all servers by 7/3 ClamAV now exclusive virus/phish

scanner

Page 7: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Virus/Phish Detected per day (May 6 thru Jul 1)

0

500

1000

1500

2000

2500

3000

3500

4000

Date

Nu

mb

er D

etec

ted

Per

Day

Both

NAI

ClamAV

Page 8: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Spear Phishing Mitigation Watermark “official” email

– Unforgeable header– Gophermail will display message

with “official” indication– Maybe have GM indication for “local”

Maybe make SpamAssassin opt-out instead of opt-in– Depends on system capacity

Page 9: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Spear Phishing Mitigation Allow OITSEC better tools for

quicker blocking/reporting on replies

Helpline examining user education possibilities

Page 10: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Spam Reports

0

2000

4000

6000

8000

10000

12000

Date

Nu

mb

er o

f m

essa

ges

fla

gg

ed p

er d

ay

SA

User

Good

Confirmed

Page 11: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Total Number of IMAP Users (Past Year )

0

5,000

10,000

15,000

20,000

25,000

30,000

35,000

40,000

45,000

50,000

2007

0620

2007

0704

2007

0718

2007

0801

2007

0815

2007

0829

2007

0912

2007

0926

2007

1010

2007

1024

2007

1107

2007

1121

2007

1205

2007

1219

2008

0102

2008

0116

2008

0130

2008

0213

2008

0227

2008

0311

2008

0325

2008

0408

2008

0422

2008

0506

2008

0520

2008

0603

2008

0617

2008

0701

Date

Nu

mb

er

of

Us

ers

Pe

r D

ay

Webmail Pro+3.0 UsersGopherMail UsersOther Users

Page 12: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Total Number of IMAP Connections (Past Year)

0

100,000

200,000

300,000

400,000

500,000

600,000

700,000

800,000

900,000

1,000,000

2007

0620

2007

0703

2007

0716

2007

0729

2007

0811

2007

0824

2007

0906

2007

0919

2007

1002

2007

1015

2007

1028

2007

1110

2007

1123

2007

1206

2007

1219

2008

0101

2008

0114

2008

0127

2008

0209

2008

0222

2008

0305

2008

0318

2008

0331

2008

0413

2008

0426

2008

0509

2008

0522

2008

0604

2008

0617

2008

0630

Date

Nu

mb

er

of

Co

nn

ec

tio

ns

Pe

r D

ay

Webmail Pro+3.0 ConnectionsGopherMail ConnectionsOther Connections

Page 13: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

E-mail Messages Rcvd Per Week (Past Year)

0123456789

101112131415161718

Week Ending

Mil

lio

ns

of

Mes

sag

es P

er W

eek

BlockedUnknown userGrey ListedAcceptedOther

Page 14: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Incoming Email Statistics (June 9 - July 6)

Relay Denied0.4%

User allowed0.3%

Greylisted orRate-limited

13.4%

User Inactive0.4%

Unknown user

12.7%

Blocked60.1%

Accepted21.0%

Page 15: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Messages Blocked By Reason (Past Year)

0

1

2

3

4

5

6

7

8

9

10

11

12

13

06/1

107

/02

07/2

308

/13

09/0

309

/24

10/1

511

/05

11/2

612

/17

01/0

701

/28

02/1

803

/10

03/3

104

/21

05/1

206

/02

06/2

3

Week Ending

Mil

lio

ns

of

Mes

sag

es B

lock

ed P

er W

eek

Spam source DynamicInsecure Protocol ViolationDNS Unauthorized access

Page 16: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Spam/Virus Blocking by Reason (June 9- July 6)

Dynamic2.7%

Spam source6.6%

Insecure23.1%

Unauthorized Access64.3% Protocol

Violation0.8%

Bad Mail From0.0%

DNS2.5%

Page 17: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

Bits ‘n’ Bytes

UMN is now a member of the InCommon Federation– http://www.incommonfederation.org

Page 18: E-mail Technical Coordinators Meeting Chris Bongaarts July 9, 2008

‘‘Till next month…Till next month…

Internet ServicesInternet Services [email protected]

Chris BongaartsChris Bongaarts [email protected] 612-625-1809612-625-1809