On 2023-01-28 at 11:32:11 UTC-0500 (Sat, 28 Jan 2023 17:32:11 +0100)
Gerben Wierda <gerben.wie...@rna.nl>
is rumored to have said:

On 28 Jan 2023, at 17:26, post...@ptld.com wrote:

Currently, every time haproxy checks if postfix is still alive, e.g. on port 587, I see this in my logging: Jan 28 13:13:20 albus submission/smtpd[97331]: warning: haproxy read: EOF Jan 28 13:13:20 albus submission/smtpd[97331]: connect from unknown[unknown] Jan 28 13:13:20 albus submission/smtpd[97331]: disconnect from unknown[unknown] commands=0/0


I just tell rsyslog to ignore those lines so they don't get logged.

if $programname == "postfix" and $msg startswith "warning: haproxy read: " then stop if $programname == "postfix" and $msg contains " from unknown[unknown]" then stop if $programname == "postfix" and $msg contains " from proxy.example.com[" then stop

Assuming my OS has 'rsyslog'...

Well, you CAN install it... MacPorts has a port, and it works at least through El Capitan. That is not a recommendation. I use it to catch network logging, but only because it was simpler than an alternative OS.

I am using postfix logging (because macOS logging is a complete disaster)

Yes, it is.

Postfix will not filter your logs for you. It logs what it logs, including all connections. If you don't want to see those in your logs, you can choose not to look at them. I suppose you could *probably* point Postfix logging at a named pipe and stand up something to drain that pipe and filter it into a real file, but that would be ugly.





--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire

Reply via email to