On 7/28/24 20:59, Christophe Kalt via Postfix-users wrote:
How do folks monitor the health of their postfix installations?
I am using https://github.com/kumina/postfix_exporter for metrics collection
and to spot anomalies if there are any. But it is definitely not a silver
bullet, I am intere
On 28.07.24 16:59, Christophe Kalt via Postfix-users wrote:
How do folks monitor the health of their postfix installations?
log monitoring seems to be essential, rates of warning/error messages
seem meaningful. Then there are the statistics regularly emitted, but
these seem more indicative of b
On Sun, Jul 28, 2024 at 04:59:48PM -0400, Christophe Kalt via Postfix-users
wrote:
> Finally, what are the various queues?
> https://www.postfix.org/QSHAPE_README.html mentions maildrop, hold,
> incoming, active & deferred,
Which are where you might find a given message.
> but I also see bounce
Viktor Dukhovni:
> On Mon, Oct 10, 2022 at 10:27:37AM +0200, juan smitt wrote:
>
> > How can one directly monitor the effectiveness of the increased number
> > of Postfix SMTP server processes?
> > (https://www.postfix.org/STRESS_README.html)
> >
> > Is it true that this scales up dynamically unt
On Mon, Oct 10, 2022 at 10:27:37AM +0200, juan smitt wrote:
> How can one directly monitor the effectiveness of the increased number
> of Postfix SMTP server processes?
> (https://www.postfix.org/STRESS_README.html)
>
> Is it true that this scales up dynamically until the limit,
Yes, a new smtpd
juan smitt:
> Hi,
>
>
> How can one directly monitor the effectiveness of the increased number
> of Postfix SMTP server processes?
> (https://www.postfix.org/STRESS_README.html)
Each Postfix SMTP server process handles one remote SMTP client at
a time. The number of processes can be zero up to a
servers.
Error codes are helpful but not used in sufficiently standardized ways based on
what I’ve seen in our logs.
From: owner-postfix-us...@postfix.org On
Behalf Of IL Ka
Sent: Wednesday, May 12, 2021 3:05 PM
To: postfix-users@postfix.org
Subject: Re: Monitoring logs for blocks and deferrals
Hi Justin,
I work for a young startup called Lightmeter and we have been developing
an open source (AGPL licensed) tool that aims to fit needs similar to yours.
It's called Lightmeter Control Center and we've developing it for the
past ~1 year, so it's not full featured, but we have been work
>
>
> Postfix have any native capabilities good for detecting these issues and
> acting on them, or would I just need to do some kind of checks on the
> pflogsumm output each day? Obviously the sooner I can catch these messages
> and act on them, the better, so the more realtime I can do this, the
> max_idle was the option I was looking for. Thank you.
>
> I always grepped for something like timeout/daemon/time and I never
> found max_idle. :-)
Lowered here as well...
--
[*] sys4 AG
https://sys4.de, +49 (89) 30 90 46 64
Schleißheimer Straße 26/MG, 80333 München
> It could also be very great to have Postfix like this, showing some
> informations about the connection:
>
> smtpd [unused/virgin]
> or
> smtpd [, , , ]
>
> Could be great for analysis and to get a quick overview about what's
> going on on busy servers.
That's a nice idea on systems where this
> On Oct 21, 2018, at 5:14 PM, Peer Heinlein
> wrote:
>
> If a client connects to smtpd and then breaks the connection because
> there's only STARTTLS or AUTH ONLY we have those remaining smtpd
> processes -- which makes the server looking busy, while he isn't.
>
> If there's really a long p
Am 20.10.2018 um 19:06 schrieb Wietse Venema:
Hi,
>> If a client disconnects very early, the smtpd is still "unused" and
>> remains in server memory, waiting for the next connection.
>
> The Postfix behavior has nothing to do with the duration of an SMTP
> session. It is determined by the max_id
we're monitoring the amount of active smtpd processes to make sure, that
we do not reach the max-proc limit from master.cf.
The number I found most useful to indicate something was going wrong
is the number of messages in the queue. For the servers I manage,
normally that number would be
On 10/20/2018 7:24 AM, Peer Heinlein wrote:
we're monitoring the amount of active smtpd processes to make sure, that
we do not reach the max-proc limit from master.cf.
If a client disconnects very early, the smtpd is still "unused" and
remains in server memory, waiting for the next connection.
Peer Heinlein:
>
> Hi,
>
> we're monitoring the amount of active smtpd processes to make sure, that
> we do not reach the max-proc limit from master.cf.
>
> If a client disconnects very early, the smtpd is still "unused" and
> remains in server memory, waiting for the next connection.
The Postfix
We simply monitor established tcp sessions to smtpd port. if client flies
away, tcp session does as well:
lsof -i tcp:25 | grep ESTABLISHED | wc -l
Am Samstag, 20. Oktober 2018 schrieb Peer Heinlein :
>
>
>
> Hi,
>
> we're monitoring the amount of active smtpd processes to make sure, that
> we do
Thank you. I have to get all these message and try to build script which
send me an email with specific number of emails send from particular email
account.
2018-04-05 16:00 GMT+02:00 chaouche yacine :
>
> Yes, more specifically you should grep on 'Relay' to avoid other amavis
> lines
>
> root@me
Yes, more specifically you should grep on 'Relay' to avoid other amavis lines
root@messagerie[10.10.10.19] ~ # grep amavis /var/log/mail.log | grep -v Relay
| head
Apr 1 06:59:29 messagerie-prep amavis[25741]: starting. /usr/sbin/amavisd-new
at myhost.mydomain.tld amavisd-new-2.10.1 (20141025
I wasn't able to find text "amavis" in log file. I tried production server
and finally I see it and I know what you suggest me. It looks like:
Apr 5 15:11:56 s1 amavis[26789]: (26789-13) Passed CLEAN
{RelayedOutbound}, LOCAL [127.0.0.1] -> <
s...@domain.com>
Is it the line about which you said?
You didn't say what's wrong the line grepping on amavis ? it should give you
what you want : one line by sender.
On Thursday, April 5, 2018, 1:51:28 PM GMT+1, Poliman - Serwis
wrote:
I used this script and after comparison result generated by collate.pl and
mail.log file I think tha
I was talking about collate.pl
On Thursday, April 5, 2018, 12:04:45 PM GMT+1, Poliman - Serwis
wrote:
Yacine, do you say about collate.pl script or "from=" part from log file? I
suppose that abotu script. If collate.pl could group by some id, it would be
nice, because I would have on
Yacine, do you say about collate.pl script or "from=" part from log file? I
suppose that abotu script. If collate.pl could group by some id, it would
be nice, because I would have only one line from log dependent from
particular email sent.
2018-04-05 12:31 GMT+02:00 chaouche yacine :
> No it won
No it won't, it will simply group qids together so that you can trace
individual e-mails, instead of having intermingled log lines from different
e-mails.
On Thursday, April 5, 2018, 7:10:11 AM GMT+1, Viktor Dukhovni
wrote:
> On Apr 5, 2018, at 2:07 AM, Poliman - Serwis wrote:
> On Apr 5, 2018, at 2:07 AM, Poliman - Serwis wrote:
>
> Using collate.pl script I won't have to count "from=" from mail log, this
> script merge it, am I right?
Try it and see what you get. You may need to make some adjustments to the
regular expressions
depending on how your syslog forma
Using collate.pl script I won't have to count "from=" from mail log, this
script merge it, am I right?
2018-04-05 7:57 GMT+02:00 Viktor Dukhovni :
>
>
> > On Apr 5, 2018, at 1:39 AM, Scott Kitterman
> wrote:
> >
> > On Thursday, April 05, 2018 07:34:44 AM Poliman - Serwis wrote:
> >> Unfortunate
> On Apr 5, 2018, at 1:39 AM, Scott Kitterman wrote:
>
> On Thursday, April 05, 2018 07:34:44 AM Poliman - Serwis wrote:
>> Unfortunately I use Postfix from Ubuntu repos.
>
> apt-get source postfix
> cd postfix-[version] (depends your Ubuntu release)
> cd auxiliary/collate
> ls
>
> and you'll
On Thursday, April 05, 2018 07:34:44 AM Poliman - Serwis wrote:
> Unfortunately I use Postfix from Ubuntu repos.
apt-get source postfix
cd postfix-[version] (depends your Ubuntu release)
cd auxiliary/collate
ls
and you'll see both collate.pl and the associated README.
Scott K
> 2018-04-04 13:08
Unfortunately I use Postfix from Ubuntu repos.
2018-04-04 13:08 GMT+02:00 Wietse Venema :
> Poliman - Serwis:
> > Could you tell me I could add e-mails together from mail.log which are in
> > line with "from=" part? Hmm I hope I say clear. I need count emails from
> > particular mailbox. Can I ba
I am not sure I understood well. There are three "from=", and you said
which one repond to which behavior, so I think I could base on "from=" from
log file but I should divide by three number of emails send by specific
user. Am I right?
2018-04-04 11:11 GMT+02:00 chaouche yacine :
> The log line
Poliman - Serwis:
> Could you tell me I could add e-mails together from mail.log which are in
> line with "from=" part? Hmm I hope I say clear. I need count emails from
> particular mailbox. Can I base on "from="? For example:
> Apr 3 11:49:48 s1 postfix/qmgr[722]: 3B8C313BE2D: from=,
> size=4000,
The log line from avmavis already has the sender a single time, regardless of
the number of recipients.
Also, if you grep on from, keep in mind that the email first goes from outside
to postfix (1st from), the from postfix to amavis (second from), then from
amavis back to postfix (third from).
Or maybe I could base on this value but divided by 3.
2018-04-04 9:43 GMT+02:00 Poliman - Serwis :
> Hmm, probably I can't base on this, because when I send one email I have
> in log three lines with "from=" and value .
> 1st line --> Apr 4 09:32:41 s1 postfix/submission/smtpd[5622]: NOQUEUE:
>
Hmm, probably I can't base on this, because when I send one email I have in
log three lines with "from=" and value .
1st line --> Apr 4 09:32:41 s1 postfix/submission/smtpd[5622]: NOQUEUE:
filter: RCPT from host-X.Y.Z.W.static.com[X.Y.Z.W]: < t...@example.com >:
Sender address triggers FILTER amav
Could you tell me I could add e-mails together from mail.log which are in
line with "from=" part? Hmm I hope I say clear. I need count emails from
particular mailbox. Can I base on "from="? For example:
Apr 3 11:49:48 s1 postfix/qmgr[722]: 3B8C313BE2D: from=,
size=4000, nrcpt=1 (queue active)
201
Thank you for answer. I am going to use your command - without any typos :P
- and wrap it by some bash script which will check the "Hits" value and
send email with report. I hope I will do it. :)
2018-03-30 17:52 GMT+02:00 chaouche yacine :
> Absolutely. Amavis comes with a default score of 5.0.
Absolutely. Amavis comes with a default score of 5.0. Any e-mail which has a
5.0 score or higher is considered spam. You might have false positives though,
for example if the user's ISP addresses are blacklisted, which might be the
case dependning on the country and ISP.
Yassine.
On Friday
Yassine, appreciate your answer. I will check further in it but do you
think that spam score could help with estimate which mail from which
account is or not spam?
2018-03-30 9:27 GMT+02:00 chaouche yacine :
> Here are some ideas :
>
> 1/ Create a directory somewhere in /var/, for example mailst
Here are some ideas :
1/ Create a directory somewhere in /var/, for example mailstats2/ The directory
will contain one file per sender3/ Your bash script will parse the mail log
file in real time (tail -f) then tee each matching line to the corresponding
mailstats/user file, for example if the
Some emails has "Hits" value even, for example 2,5. What is (if it's
possible to say) good value? I am going to create script in bash which
send me an email when from particular email account will outbound for
example 300 emails per day. Kind of warning. But I am not sure I could use
spam score to
It is, that's the spam score. It helps to visualise if a particular mailbox is
bombarded with spam (can happen with lots and lots of e-mails from qq.com, I
have that domain banned in postfix itself).
Yassine.
On Thursday, March 29, 2018, 3:21:16 PM GMT+1, Alex JOST
wrote:
Am 29.03.20
Am 29.03.2018 um 15:30 schrieb Poliman - Serwis:
This one works well. One question based on one from generated lines:
Mar 26 11:47:41 ORIGINATING LOCAL [127.0.0.1]:38920
-> ,, Hits: 0.742
Mar 26 11:47:41 --> this is date and hour when mail from
i...@klub-biosfera.pl was sent to i...@klub-biosf
This one works well. One question based on one from generated lines:
Mar 26 11:47:41 ORIGINATING LOCAL [127.0.0.1]:38920
-> ,, Hits: 0.742
Mar 26 11:47:41 --> this is date and hour when mail from
i...@klub-biosfera.pl was sent to i...@klub-biosfera.pl and
p.krzewi...@poliman.pl, am I right?
What
Sorry another typo, try :
grep Relay /var/log/mail.log | sed 's/s1
amavis.*},//;s/\(Queue-ID\|Message-ID\).*,
Hits/Hits/;s/Hits:\([^,]\+\).*/Hits:\1/' | grep --color=always
'<[^@<>]*@[^@<>]*\.[^@<>]*>'
Yassine.
On Thursday, March 29, 2018, 1:39:17 PM GMT+1, Poliman - Serwis
wrote:
I used root@s1:~# grep Relay /var/log/mail.log | sed 's/s1
amavis.*},//;s/\(Queue-ID\|Message-ID\).*,
Hits/Hits/;s/Hits:\([^,]\+\).*/Hits:\1/ | grep --color=always
'<[^@<>]*@[^@<>]*\.[^@<>]*>'$
and nothing happens but under above command I have sign > and next to it is
console cursor.
My hostname
6/ You should probably define REGEX_EMAIL as '<[^@<>]*@[^@<>]*\.[^@<>]*>', I
have that in my .bashrc b/c I need it in so many scripts, but you can always
use the regex as is if you don't want to define it as a variable, so you'd have
:
grep Relay /var/log/mail.log | sed 's/messagerie-prep
ama
I am testing pflogsumm-1.1.3 but I don't understand how is it possible that
in "Senders by message count" are email accounts which don't exist on my
server.
2018-03-29 12:57 GMT+02:00 chaouche yacine :
> Sorry there was a mistake in the line I gave you, maybe I have edited it
> before pasting.
>
Sorry there was a mistake in the line I gave you, maybe I have edited it
before pasting.
Here's a brief explanation along with a "light" version ( you can customize ) :
grep Relay /var/log/mail.log | sed 's/messagerie-prep
amavis.*},//;s/\(Queue-ID\|Message-ID\).*,
Hits/Hits/;s/Hits:\([^,]\+\)
Probably you have right. What should be in part:
@mydomain.tld|r...@mydomain.tld'
is it some mail to send notifications after pipe?
2018-03-29 7:47 GMT+02:00 Olivier :
> Poliman - Serwis writes:
>
> I think it should read:
>
> ...|egrep --line-buffered -v '(...)'|sed...
>
> with a closing parent
Poliman - Serwis writes:
I think it should read:
...|egrep --line-buffered -v '(...)'|sed...
with a closing parenthesis before the closing quote
Olivier
> [1:text/plain Show]
>
>
> [2:text/html Hide Save:noname (20kB)]
>
> Wow, huge piece of linux commands. Currently too hard to modify for me
Wow, huge piece of linux commands. Currently too hard to modify for me. ;)
Now it returns (I also try changed mydomain.tld to something real)
root@serwer1:~# tail -f /var/log/mail.log | egrep --line-buffered 'Relay' |
egrep --line-buffered -v
'(Process_Control|notifications.systemes|PODCAST-|Admin-
I use this line :
tail -f /var/log/mail.log | egrep --line-buffered 'Relay' | egrep
--line-buffered -v
'(Process_Control|notifications.systemes|PODCAST-|Admin-ch|PUB_CONTROL|@mydomain.tld|r...@mydomain.tld'
| sed -u 's/messagerie-prep amavis.*},//;s/Hits:\([^,]\+\).*/HITS:\1/;
s/\(Queue-ID\|M
Thank you, I will check it. I am looking for information which linux user
sends email and how many, for example, per hour, day. That would be perfect
plugin.
2018-03-28 15:59 GMT+02:00 Matus UHLAR - fantomas :
> Poliman - Serwis:
>>
>>> Hi people. Do you know is there any tool/plugin for monitori
Poliman - Serwis:
Hi people. Do you know is there any tool/plugin for monitoring outgoing
emails from server with postfix? Maybe postfix has this feature?
On 28.03.18 09:57, Wietse Venema wrote:
Postfix logs all transactions. I suggest that you look for tools
that analyze Postfix logs.
pflog
Poliman - Serwis:
> Hi people. Do you know is there any tool/plugin for monitoring outgoing
> emails from server with postfix? Maybe postfix has this feature?
Postfix logs all transactions. I suggest that you look for tools
that analyze Postfix logs.
Wietse
On Sat, March 18, 2017 4:06 am, Sean Son wrote:
> Hello all
>
>
> We would like to monitor Postfix mail queues using SMNP so we can receive
> alerts whenever the mail queue reaches a certain threshold. What OID and
> MIB would we have to use to be able to monitor Postfix mail queues?
Sean,
I us
Geert Stappers:
> On Fri, Mar 17, 2017 at 01:25:45PM -0400, Viktor Dukhovni wrote:
> > > On Mar 17, 2017, at 1:06 PM, Sean Son
> > > wrote:
> > >
> > > Hello all
> > >
> > > We would like to monitor Postfix mail queues using SMNP so we
> > > can receive alerts whenever the mail queue reaches a
On Fri, Mar 17, 2017 at 01:25:45PM -0400, Viktor Dukhovni wrote:
> > On Mar 17, 2017, at 1:06 PM, Sean Son
> > wrote:
> >
> > Hello all
> >
> > We would like to monitor Postfix mail queues using SMNP so we
> > can receive alerts whenever the mail queue reaches a certain
> > threshold. What OID
> On Mar 17, 2017, at 1:06 PM, Sean Son
> wrote:
>
> Hello all
>
> We would like to monitor Postfix mail queues using SMNP so we can receive
> alerts whenever the mail queue reaches a certain threshold. What OID and MIB
> would we have to use to be able to monitor Postfix mail queues?
I don
Andrew Beverley:
> On Mon, 2015-06-01 at 15:09 -0400, Wietse Venema wrote:
> > Postfix already logs the script's output (stdout and stderr) streams,
> > and it already logs and reports a non-zero exit status.
>
> The problem is monitoring this though: it seems that when the above are
> logged they
On Mon, 2015-06-01 at 15:09 -0400, Wietse Venema wrote:
> Postfix already logs the script's output (stdout and stderr) streams,
> and it already logs and reports a non-zero exit status.
The problem is monitoring this though: it seems that when the above are
logged they are logged at a level below
Andrew Beverley:
> On Mon, 2015-06-01 at 14:24 -0400, Wietse Venema wrote:
> > Andrew Beverley:
> > > So, is there a way to either change the return-path for all external
> > > commands, or alternatively set a higher log level for any errors?
> >
> > If the error happens in the external command, t
On Mon, 2015-06-01 at 14:24 -0400, Wietse Venema wrote:
> Andrew Beverley:
> > So, is there a way to either change the return-path for all external
> > commands, or alternatively set a higher log level for any errors?
>
> If the error happens in the external command, then you could configure
> the
Andrew Beverley:
> So, is there a way to either change the return-path for all external
> commands, or alternatively set a higher log level for any errors?
If the error happens in the external command, then you could configure
the pipe(8) daemon to run the command under strace and capture
strace o
+1 for mailgraph and queuegraph!
Joe
On 07/17/2013 05:23 AM, José Luís Faria wrote:
I'm using
http://mailgraph.schweikert.ch/
Em 17-07-2013 13:14, Roman Gelfand escreveu:
Is there open source web based postfix server monitoring software?
I am looking to see if there is something to monitor
On 17/07/2013 15:14, Roman Gelfand wrote:
Is there open source web based postfix server monitoring software?
I am looking to see if there is something to monitor queue size, etc...
Thanks in advance
mailgraph: http://mailgraph.schweikert.ch/
queuegraph: http://www.arschkrebs.de/postfix/queu
On 13-07-17 09:14 AM, Roman Gelfand wrote:
> Is there open source web based postfix server monitoring software?
>
> I am looking to see if there is something to monitor queue size, etc...
>
> Thanks in advance
Nagios has a "check_mailq" plugin that works very well with Postfix.
--
Looking for (
I'm using
http://mailgraph.schweikert.ch/
Em 17-07-2013 13:14, Roman Gelfand escreveu:
Is there open source web based postfix server monitoring software?
I am looking to see if there is something to monitor queue size, etc...
Thanks in advance
smime.p7s
Description: Assinatura criptogra
W dniu 17.07.2013 14:14, Roman Gelfand pisze:
Is there open source web based postfix server monitoring software?
I am looking to see if there is something to monitor queue size, etc...
Thanks in advance
Cacti + some scripts on server for SNMP for examle something like this
http://www.pitt-pl
On Wed, Jul 17, 2013 at 02:14:39PM CEST, Roman Gelfand
said:
> Is there open source web based postfix server monitoring software?
>
> I am looking to see if there is something to monitor queue size, etc...
>
> Thanks in advance
>
munin has some postifx monitoring plugins (among them the queue
On 04 Jun 2013, at 10:27 , Robert L Mathews wrote:
> "In general, the thing I've learned about monitoring is that when possible,
> check the system by using it, rather [than] looking for changes in side
> effects (such as logs, or number of processes running, etc.). That's not to
> say that t
On 6/2/13 9:12 AM, Wietse Venema wrote:
> For example, periodically send email to mailboxname+timest...@example.com,
> and parse the "to=" and
> "status=delivered" out of the logfile record stream.
Or, even better, try to retrieve those messages from the actual mailbox
using POP3. That way you've
On 06/02/2013 06:55 PM, Erwan David wrote:
Le 02/06/2013 18:12, Wietse Venema a écrit :
Lars Nielsen:
s?n, 02 06 2013 kl. 12:14 -0300, skrev Mike:
On 13-06-02 11:52 AM, Lars Nielsen wrote:
Hey List,
What is the most common solution to monitoring your postfix
mailservers?
I use Icinga and M
Le 02/06/2013 18:12, Wietse Venema a écrit :
Lars Nielsen:
s?n, 02 06 2013 kl. 12:14 -0300, skrev Mike:
On 13-06-02 11:52 AM, Lars Nielsen wrote:
Hey List,
What is the most common solution to monitoring your postfix mailservers?
I use Icinga and Munin. Is there a good integration to these?
Lars Nielsen:
> s?n, 02 06 2013 kl. 12:14 -0300, skrev Mike:
> > On 13-06-02 11:52 AM, Lars Nielsen wrote:
> > > Hey List,
> > >
> > > What is the most common solution to monitoring your postfix mailservers?
> > > I use Icinga and Munin. Is there a good integration to these?
> > >
> > That really d
On 13-06-02 12:34 PM, Lars Nielsen wrote:
My primary use is to recieve emails for my domains. Next I want to relay
general emails for a limited amount of authenticated users.
Ok, so with step one, you're going to want to have another system send
email to a mailbox you host once every 'n' min
søn, 02 06 2013 kl. 12:14 -0300, skrev Mike:
> On 13-06-02 11:52 AM, Lars Nielsen wrote:
> > Hey List,
> >
> > What is the most common solution to monitoring your postfix mailservers?
> > I use Icinga and Munin. Is there a good integration to these?
> >
> That really depends on what you want to mon
On Thu, 24 Jun 2010 21:51:55 Patrick Ben Koetter wrote:
> > > Maybe he will. The OP could install the policyd policy server (v1) and
> > > impose sender restrictions von sasl authenticated senders.
> >
> > I will look into this thanks.
> >
> > Is there a reason that v1 is better then v2 for this a
* Michael :
> On Thu, 24 Jun 2010 20:48:04 Patrick Ben Koetter wrote:
> > * Stan Hoeppner :
> > > Michael put forth on 6/24/2010 3:07 AM:
> > > > I want to be able to monitor SASL users to get quick notification if
> > > > something is out of the ordinary - like a spammer using a compromised
> > >
On Thu, 24 Jun 2010 20:48:04 Patrick Ben Koetter wrote:
> * Stan Hoeppner :
> > Michael put forth on 6/24/2010 3:07 AM:
> > > I want to be able to monitor SASL users to get quick notification if
> > > something is out of the ordinary - like a spammer using a compromised
> > > account to send emails
On Thu, 24 Jun 2010 20:41:59 Stan Hoeppner wrote:
> Michael put forth on 6/24/2010 3:07 AM:
> > I want to be able to monitor SASL users to get quick notification if
> > something is out of the ordinary - like a spammer using a compromised
> > account to send emails.
> >
> > What tool(s) can be used
* Stan Hoeppner :
> Michael put forth on 6/24/2010 3:07 AM:
> > I want to be able to monitor SASL users to get quick notification if
> > something
> > is out of the ordinary - like a spammer using a compromised account to send
> > emails.
> >
> > What tool(s) can be used to achieve this?
>
> G
Michael put forth on 6/24/2010 3:07 AM:
> I want to be able to monitor SASL users to get quick notification if
> something
> is out of the ordinary - like a spammer using a compromised account to send
> emails.
>
> What tool(s) can be used to achieve this?
Given the nature of your requirement,
On Tue, Apr 27, 2010 at 2:52 PM, Patrick Chemla
wrote:
> You can put whatever you want in the script. I am monitoring different parts
> of the servers.
>
> Extract:
>
> # Identify the server by the last digit of his IP
> ip3d=`/sbin/ifconfig| grep Bcast|grep 10.0.0|cut -d":" -f2 | cut -d" "
> -f1|
Le 27/04/2010 15:27, Israel Garcia a écrit :
could you share the script with us?
You can put whatever you want in the script. I am monitoring different
parts of the servers.
Extract:
# Identify the server by the last digit of his IP
ip3d=`/sbin/ifconfig| grep Bcast|grep 10.0.0|cut -d":
>>
>> Send log from all nodes to a central log server. Use rsyslogd with RELP to
>> get
>> reliability. Use rsyslog log templates to cut down on bandwidth usage if
>> Postfix log is to verbose.
>>
>
> I am also running a big number of servers. To avoid heavy load on the
> network and on the central
Le 27/04/2010 10:54, Patrick Ben Koetter a écrit :
* Israel Garcia:
> I have about 20 debian servers send all mail through a loadbalancer
> (haproxy) with 2backend smarthosts which send emails to internet. I
> have pflogsumm running only on every smarhost. As every smarthost see
> on IP
* Israel Garcia :
> I have about 20 debian servers send all mail through a loadbalancer
> (haproxy) with 2backend smarthosts which send emails to internet. I
> have pflogsumm running only on every smarhost. As every smarthost see
> on IP source (haproxy) I can not get email stats from every debian
On Tue, Oct 14, 2008 at 02:19:02PM +1100, Martin Barry wrote:
> We run Postfix on most servers and would like to have accurate monitoring of
> the various processes that are running.
I take a different approach, I send probe messages every ~30s and monitor
their arrival time. If everything is run
89 matches
Mail list logo
