Re: [Declude.JunkMail] Version 1.80 Logfile Changes
Tuesday, September 28, 2004, 3:48:59 PM, R. Scott Perry [EMAIL PROTECTED] wrote: Details? Are you seeing the Message OK lines? Typical log entries: 09/28/2004 15:59:07 Qc28b026d0172aa34 L1 Message OK RSP Is this with LOG_OK NONE? That line should prevent this log file entry RSP from appearing. RSP The others, such as Subject/From/etc. should appear if you are using RSP LOGLEVEL HIGH, though (with or without LOG_OK NONE). RSP -Scott We're using LOG_OK NONE and LOGLEVEL MID. The Subject/From/etc. lines are still written to the log (That's good - NOT asking for that to change.) The only time we see the 'L1 Message OK' is when the e-mail did fail a test, but it either had a weight of 0 or it was whitelisted, and the Subject/From/etc. lines are also written (no prob there, either). I initially thought the Subject/From/etc. were taken out of Log MID and added to Log HIGH. Hope that wasn't the intent . . . Thanks, Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Version 1.80 Logfile Changes
Typical log entries: 09/28/2004 15:59:07 Qc28b026d0172aa34 L1 Message OK This one should not be appearing if you are using LOG_OK NONE. I have found the cause of this; it will be fixed in the next release. 09/28/2004 15:59:07 Qc28b026d0172aa34 Subject: MTA 09/28/2004 15:59:07 Qc28b026d0172aa34 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 10.60.213.59 ID: These are occurring because you are using LOGLEVEL MID. If people think that LOG_OK NONE should suppress this information that appears in LOGLEVEL MID, please speak up. 09/28/2004 15:59:07 Qc28b026d0172aa34 Tests failed [weight=0]: The next release will have this line honor LOG_OK NONE. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Version 1.80 Logfile Changes
At 9/29/2004 02:34 PM, R. Scott Perry wrote: 09/28/2004 15:59:07 Qc28b026d0172aa34 Subject: MTA 09/28/2004 15:59:07 Qc28b026d0172aa34 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 10.60.213.59 ID: These are occurring because you are using LOGLEVEL MID. If people think that LOG_OK NONE should suppress this information that appears in LOGLEVEL MID, please speak up. I think that LOG_OK NONE should suppress all information about messages which don't fail any tests, regardless of LOGLEVEL. Thanks for the info on the other stuff. Elise --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Version 1.80 Logfile Changes
I would have to agree. I think that makes sense except for the debug level. All others should honor the config line. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Elise Lewis Sent: Wednesday, September 29, 2004 11:49 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Version 1.80 Logfile Changes At 9/29/2004 02:34 PM, R. Scott Perry wrote: 09/28/2004 15:59:07 Qc28b026d0172aa34 Subject: MTA 09/28/2004 15:59:07 Qc28b026d0172aa34 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 10.60.213.59 ID: These are occurring because you are using LOGLEVEL MID. If people think that LOG_OK NONE should suppress this information that appears in LOGLEVEL MID, please speak up. I think that LOG_OK NONE should suppress all information about messages which don't fail any tests, regardless of LOGLEVEL. Thanks for the info on the other stuff. Elise --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Version 1.80 Logfile Changes
There does seem to be a variety of needs and wants regarding logging. Scott, could you consider providing configurable logging instead of just logging levels or some degree of configurable logging within the levels? As in maybe: SHOWINLOG MAILFROM SHOWINLOG RECPT SHOWINLOG TESTFAILED etc., etc., wherein display order was predetermined or shown in order in config file. Keep current ok message suppression with LOG_OK NONE. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Elise Lewis Sent: Wednesday, September 29, 2004 1:49 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Version 1.80 Logfile Changes At 9/29/2004 02:34 PM, R. Scott Perry wrote: 09/28/2004 15:59:07 Qc28b026d0172aa34 Subject: MTA 09/28/2004 15:59:07 Qc28b026d0172aa34 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 10.60.213.59 ID: These are occurring because you are using LOGLEVEL MID. If people think that LOG_OK NONE should suppress this information that appears in LOGLEVEL MID, please speak up. I think that LOG_OK NONE should suppress all information about messages which don't fail any tests, regardless of LOGLEVEL. Thanks for the info on the other stuff. Elise --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Version 1.80 Logfile Changes
We installed Declude JunkMail Version 1.80 and immediately observed that the logfile format and behavior have changed. Correct. By design, all the Msg failed... lines were taken out of LOGLEVEL LOW, and moved to LOGLEVEL HIGH. To prevent a loss of important information, a new log file entry appears showing which test(s) the E-mail failed, and which actions were taken. LOG_OK NONE does not seem to be working. Even messages which fail no tests are included in the log files. Details? Are you seeing the Message OK lines? LOGLEVEL HIGH gets all the information that used to be in LOGLEVEL MID and more, but the format of the log lines is slightly different. There's no longer a line with Total Weight =; now it says Test failed [weight=10]: etc. Correct; that was by request. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Version 1.80 Logfile Changes
At 9/28/2004 03:58 PM, you wrote: LOG_OK NONE does not seem to be working. Even messages which fail no tests are included in the log files. Details? Are you seeing the Message OK lines? Typical log entries: 09/28/2004 15:59:07 Qc28b026d0172aa34 L1 Message OK 09/28/2004 15:59:07 Qc28b026d0172aa34 Subject: MTA 09/28/2004 15:59:07 Qc28b026d0172aa34 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 10.60.213.59 ID: 09/28/2004 15:59:07 Qc28b026d0172aa34 Tests failed [weight=0]: 09/28/2004 15:59:07 Qc28b026d0172aa34 L2 Message OK 09/28/2004 15:59:07 Qc28b026d0172aa34 Subject: MTA 09/28/2004 15:59:07 Qc28b026d0172aa34 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] IP: 10.60.213.59 ID: 09/28/2004 15:59:07 Qc28b026d0172aa34 Tests failed [weight=0]: 09/28/2004 15:59:07 Qc28b026d0172aa34 L3 Message OK 09/28/2004 15:59:07 Qc28b026d0172aa34 Subject: MTA 09/28/2004 15:59:07 Qc28b026d0172aa34 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] IP: 10.60.213.59 ID: 09/28/2004 15:59:07 Qc28b026d0172aa34 Tests failed [weight=0]: 09/28/2004 15:59:07 Qc28b026d0172aa34 Last action = IGNORE. 13 log lines for a single message with three recipients which failed no tests. and 09/28/2004 15:59:32 Qc2a3027201720804 R1 Message OK 09/28/2004 15:59:32 Qc2a3027201720804 Subject: Re: To serve...or not to serve 09/28/2004 15:59:32 Qc2a3027201720804 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 10.30.102.59 ID: 09/28/2004 15:59:32 Qc2a3027201720804 Tests failed [weight=0]: 09/28/2004 15:59:32 Qc2a3027201720804 Last action = IGNORE. 5 lines for an outgoing message which failed no test -- LOGLEVEL HIGH gets all the information that used to be in LOGLEVEL MID and more, but the format of the log lines is slightly different. There's no longer a line with Total Weight =; now it says Test failed [weight=10]: etc. Correct; that was by request. now I have to rewrite my log parsing routines :-( --Elise --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Version 1.80 Logfile Changes
Yes. My global.cfg (which I sent to you in a separate email) contains the lines LOG_OK NONE LOGLEVEL MID --Elise At 9/28/04 04:48 PM, you wrote: Details? Are you seeing the Message OK lines? Typical log entries: 09/28/2004 15:59:07 Qc28b026d0172aa34 L1 Message OK Is this with LOG_OK NONE? That line should prevent this log file entry from appearing. The others, such as Subject/From/etc. should appear if you are using LOGLEVEL HIGH, though (with or without LOG_OK NONE). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.770 / Virus Database: 517 - Release Date: 9/27/04 Elise Lewis mailto:[EMAIL PROTECTED] --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.770 / Virus Database: 517 - Release Date: 9/27/04
