This article describes the difference between connection counters and spam counters for the Antispam feature.
What is the difference between connection counters and spam counters for the Antispam feature?
When a connection is blocked by the local black list, both ‘Denied connections’ and "Black list hit" are increased. When a connection is blocked by the Spam Block List (SBL) server, only ‘Denied connections’ is increased. Hence, to count how many connections are blocked by the SBL server, the ‘Black list hit’ should be subtracted from ‘Denied connections’.
Number of connections blocked by SBL server = ‘Denied connections’ – ‘Black list hit’
Total connections: 1000 Denied connections: 210 <--- Connections are denied when connecting (TCP connection), due to either Black-list or SBL : Black list hit: 10 <--- Connections are denied by when connecting (TCP connection), due to Black-list
Total connections: 1000 Denied connections: 210 <--- Connections are denied when connecting (TCP connection), due to either Black-list or SBL : Black list hit: 10
<--- Connections are denied by when connecting (TCP connection), due to Black-list
In this Example, the number of connections blocked by the SBL server is 200, (210-10). In one connection, there could be multiple emails. To see the total number of emails tagged as Spam by the SBL server, refer to the counter ‘Spam tagged’. To get the total number of emails dropped as Spam by the SBL server, refer to the counter ‘Spam dropped’. The ‘Spam total’ is the summation of ‘Spam tagged’ and ‘Spam dropped’:
‘Spam total’ = ‘Spam tagged’ + ‘Spam dropped’
Spam total: 20 Spam tagged: 15 Spam dropped: 5