incoming smtp from v6 addresses

Wed Jan 4 11:37:09 UTC 2012

Am 04.01.2012 11:10, schrieb Randy Bush:
> for incoming mail that is *accepted*, i.e. not stuff like
>     2012-01-04 00:37:28 REJECT because 118.39.80.118 listed in rbl-plus.mail-abuse.org
>     2012-01-04 00:37:28 H=(nexo.es) [118.39.80.118] F=<pedrom at nexo.es> rejected RCPT <owner-radiusext at ops.ietf.org>: blocked because 118.39.80.118 is in  blacklist at rbl-plus.mail-abuse.org: Mail from 118.39.80.118 blocked using Trend Micro Email Reputation database. Please see <http://www.mail-abuse.com/cgi-bin/lookup?118.39.80.118>
>     2012-01-04 00:37:28 no host name found for IP address 118.39.80.118
>     2012-01-04 00:37:29 REJECT 118.39.80.118 too many bad recip
>     2012-01-04 00:37:29 REJECT because 118.39.80.118 listed in rbl-plus.mail-abuse.org
>
> 7.8% is over ipv6 transport
>
> but only 2% of outgoing deliveries are over ipv6.
>
> what do other folk see?
>
> randy

Received

$ grep 'amavis' mail.log | grep Passed | wc -l
448

$ grep 'amavis' mail.log | grep Passed | grep IPv6 | wc -l
91

$ grep 'amavis' mail.log | grep Passed  | grep IPv6 | grep -v
'2001:1838::cc5d:d48a' | wc -l
18


Sent

$ grep 'postfix/smtp' mail.log | grep 'status=sent' | grep -v
'127.0.0.1' |wc -l
253

enceladus:/var/log# grep 'postfix/smtp' mail.log | grep 'status=sent' |
egrep '\[([a-f0-9]{0,4}:)+[a-f0-9]{0,4}\]' | wc -l
19

with most of them going to mailin.v6.t-online.de[2003:2:2:10:fee::32]:25
~40 silent users


Sebastian