On Thu, 2012-02-23 at 17:44 -0500, Alex wrote: > How have you extended the logwatch scripts beyond the ones available here: > > http://logreporters.sourceforge.net/ > I don't use amavis, so the only one of those that's useful to me would be the Postfix one. Up until the appearance of Fedora 15 the standard logwatch Postfix report was fine, but F15 and F16 have cut it back to a near minimum, so I'll bear that in mind. Thanks.
> I'm always looking for additional logging stats. Can you share what you've > done? > Sure: Look here: http://www.libelle-systems.com/free/ - you want the spamkiller and spamscan tarballs which, I hope, are adequately documented. They have install scripts which should work with minimal tweaks to suit your set-up if its not using a RedHat Fedora distro. The scripts in both packages are tailored round log records written by spamkiller with spamscan producing more general statistics: the scripts in the spamkiller package are specific to log entries written by that program. My mail handling is tailored to suit a small home set-up that picks up incoming mail with getmail. I dumped fetchmail due its habit of failing to delete read mail from my ISP's mailserver if the connection glitched. As spamkiller and friends were developed under fetchmail and then 'just worked' under getmail (I even use the same MDA script!), I'm confident it will work with both. The environment it works in is this: ISP--pop3--> getmail | spamc | spamkiller | postfix.sendmail | | | V spam postfix | V ~/quarantine--> qis.php Apache | v web browser The pipeline containing spamc|spamkiller|sendmail is the in getmail MDA script. If this doesn't suit you and/or you don't need what spamkiller does, consider converting it into a simple filter that sits downstream of spamc and just generates log entries from the messages it passes on. That should fit easily into a typical Postfix SA service pipeline. Spamkiller has the option of throwing spam into /dev/null or writing it to the ~/quarantine directory under a dorky but guaranteed unique filename, from where you can display it via qis.php, which shows a list of quarantined spam and lets you pick items for display on your favourite web browser via Apache. I find its spam menu page design mildly annoying and will improve it one of these days when it gets far enough my nose. There's a daily cron job that deletes quarantined spam after a configurable number of days. Obviously this quarantine stuff is useless unless you run a local web server. I hope at least some of this is useful to you. Martin
