On 1/29/2013 at 2:06 PM lcon...@go2france.com wrote:
|On Tuesday 29/01/2013 at 1:37 pm, Mike. wrote:
|>
|I suggest you simplify and use only postscreen log lines.
|
|"sent" and "deferred" are not postscreen actions.
|
|and "sent" double counts when postfix sends to content filter AND
|sends to next hop, in a relay-only gateway.
|
|"incoming" should be "SMTP connections"
|
|you should automatically detect RBL servers rather than looking for
|defined, eg sorbs, RBL server, which I don't use
|
|awk '/dnsblog/{print $11}' /var/log/maillog | sort -f | uniq -ic
|290700 b.barracudacentral.org
|209424 zen.spamhaus.org
|
|
|good work
|
|
|I think I'll write my own in python :)
|
|
|Len
=============
Yes, after pondering the helpful pointers that Brian gave me, I have
started to think about using only the Postscreen log lines, that way I
can avoid the multiplication of messages due to multi-recipient
messages and other messes, such as the double count you note. I backed
myself into a corner when I tried to track the flow of messages without
tracking the details thereof.
I'll leave the auto-detect to those who are more adventurous in that
area than I. :)
"incoming" currently also includes "pickup". But that may be removed
when I go to postscreen-only log messages.
If I sparked an idea for someone else, all the better.
Thanks for the comment.
