E-mail Technical E-mail Technical Coordinators MeetingCoordinators Meeting

Chris BongaartsChris Bongaarts

Steve SiirilaSteve Siirila

September 7, 2005

OutagesOutages

E-mail server (peridot) failed on E-mail server (peridot) failed on August 26August 26thth (1508-1831) due to a (1508-1831) due to a memory failurememory failure

Mail spool full on Morris E-mail Mail spool full on Morris E-mail server on August 28server on August 28thth due to a due to a mass mailing involving a 14MB mass mailing involving a 14MB messagemessage

Win2K UMN.EDU Win2K UMN.EDU Forest Forest DecommissionedDecommissioned Remaining domain controllers for Remaining domain controllers for

the UMN.EDU forest shut down the UMN.EDU forest shut down Aug 29Aug 29thth

Talk to Kevin DeJong (ADCS) if Talk to Kevin DeJong (ADCS) if you are interested in having your you are interested in having your forest managed by OIT forest managed by OIT (*.ad.umn.edu)(*.ad.umn.edu)

E-mail Hardware E-mail Hardware UpgradesUpgrades 2 Sun V890 servers with 19K users each2 Sun V890 servers with 19K users each 4 Sun V440 servers with 10K users each4 Sun V440 servers with 10K users each 1 Sun V440 server with 10K non-SSL users1 Sun V440 server with 10K non-SSL users 1 Sun V440 server with 3K interactive users1 Sun V440 server with 3K interactive users 1 Sun V240 server with 50K+ inactive users1 Sun V240 server with 50K+ inactive users 1 Sun E450 server with 5K Morris users1 Sun E450 server with 5K Morris users Total: 10 servers with ~150K usersTotal: 10 servers with ~150K users

Messages Blocked By Reason (Past 12 Months)

0.0

0.5

1.0

1.5

2.0

2.5

3.0

7/26

8/16

9/06

9/27

10/1

811

/0811

/29

12/2

001

/10

01/3

102

/21

03/1

404

/04

04/2

505

/16

06/0

606

/27

07/1

808

/08

08/2

9

Week Ending

Mill

ion

s o

f M

essa

ges

Blo

cked

Spam source Dynamic Insecure DNS Virus* Bad mail from

Spam/Virus Blocking by Reason (Aug. 16 - Sep. 5)

10,9450.13%

157,3851.89%

3,755,71145.03%

582,0506.98%

1,912,06722.93%

1,922,28923.05%

Dynamic

Spam source

Insecure

DNS

Virus*

Bad mail from

Incoming Email Statistics (Past 12 Months)

0.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

Week Ending

Mill

ion

s o

f M

essa

ges

Blocked

Blocked local

Relay denied

Unknown user

User inactive

Pre-init user

Temporary error

Accepted

User allows allemailPermitted

perm local only

Incoming Email Statistics (Aug. 16 - Sep. 5)

Blocked40%

Other1%

Temporary error4%

Accepted42%

User allows all email1%

Unknown user12%

Inbox Auto-FilingInbox Auto-Filing

Users with an Inbox over 20MB Users with an Inbox over 20MB will receive an introductory will receive an introductory message oncemessage once

Users whose mailboxes have any Users whose mailboxes have any messages archived will be messages archived will be notified each time this takes notified each time this takes placeplace

Inbox Auto-FilingInbox Auto-Filing

Preliminary list of ALL eligible users Preliminary list of ALL eligible users will be available if sufficient interestwill be available if sufficient interest

Letters to eligible users to be sent out Letters to eligible users to be sent out weekly beginning week of Sept 18weekly beginning week of Sept 18thth

Number of users will be limited for Number of users will be limited for the first few weeksthe first few weeks

List of users who were sent letters List of users who were sent letters can be sent to technical coordinatorscan be sent to technical coordinators

37019

47876515

874810030 9942 9710

10400

26685

1192410167

8915

3134

124830 2

0

5000

10000

15000

20000

25000

30000

35000

Nu

mb

er o

f M

ailb

oxe

s

< 8K 8K to16K

16K to32K

32K to64K

64K to128K

128Kto

256K

256Kto

512K

512Kto 1M

1M to5M

5M to10M

10M to20M

20M to50M

50M to100M

100Mto

500M

500Mto 1G

> 1G

Size of Mailboxes

Mailbox Counts by Size (Sept 6, 2005)

Phase-out of clear-text Phase-out of clear-text passwordspasswords Moving users at a rate of 20 per Moving users at a rate of 20 per

day to secure E-mail servers as day to secure E-mail servers as they are determined to be set up they are determined to be set up securelysecurely

Users can choose to be moved Users can choose to be moved (happens within 24 hours)(happens within 24 hours)

POP users (June 6 - July 10)

NONSSL6,98851%

SSL6,65249%

POP users (July 12 - August 15)

NONSSL5,82237%

SSL10,098

63%

POP users (August 16 - September 5)

NONSSL4,98033%

SSL10,008

67%

IMAP Users (June 6 - July 10)

SSL9,35880%

Non-SSL2,30020%

IMAP Users (July 12 - August 15)

SSL11,450

87%

NONSSL1,74513%

IMAP Users (August 16 - September 5)

SSL11,808

89%

NONSSL1,44111%

Unauthenticated SMTP Unauthenticated SMTP gateway phase-outgateway phase-out Users should be using the service Users should be using the service smtp.umn.edusmtp.umn.edu for outgoing e-mail for outgoing e-mail

Servers/devices unable to do SMTP Servers/devices unable to do SMTP authentication should be using the authentication should be using the service service relay.tc.umn.edurelay.tc.umn.edu instead instead

No phase-out timeline establishedNo phase-out timeline established To check your server settings, To check your server settings,

send an e-mail to: send an e-mail to: ssl-ssl-test@umn.edutest@umn.edu

SMTP Gateway Usage (Jan 1 - Sept 5)

0

5,000

10,000

15,000

20,000

Week Ending

Nu

mb

er

of

Us

ers

Non-Auth

Auth

Migrating E-mail Servers Migrating E-mail Servers from Department to from Department to CentralCentral Internet ID synchronizationInternet ID synchronization Individual user forwarding to centralIndividual user forwarding to central Domain-specific e-mail address Domain-specific e-mail address

mapping at the SMTP level, e.g.:mapping at the SMTP level, e.g.:– webmaster@dept.umn.eduwebmaster@dept.umn.edu -> deptweb … -> deptweb …– jsmith@dept.umn.edujsmith@dept.umn.edu -> smith999 … -> smith999 …– bob@dept.umn.edubob@dept.umn.edu -> REJECT -> REJECT

Switching MX record to point to Switching MX record to point to centralcentral

AOL Blocking UMN e-AOL Blocking UMN e-mailmail AOL blocking UMN due to excessive AOL blocking UMN due to excessive

number of spam reports by its usersnumber of spam reports by its users Possible solutions:Possible solutions:

– Forbid forwarding to AOL (maybe only forbid Forbid forwarding to AOL (maybe only forbid students?)students?)

– Require strictest spam blocking for Require strictest spam blocking for forwarders, or forbid forwarding for those forwarders, or forbid forwarding for those who allow all mailwho allow all mail

– Disable forward for complainersDisable forward for complainers– Other suggestions?Other suggestions?

‘‘Till next month…Till next month…

Steve SiirilaSteve Siirila sfs@umn.edusfs@umn.edu 612-626-0244612-626-0244

Chris BongaartsChris Bongaarts cab@umn.educab@umn.edu 612-625-1809612-625-1809