I'm currently logging (because of
<URL:http://www.gbar.dtu.dk/~c948374/qmail/qmail-antispam4.diff>):
- Out-of-memory conditions (along with the remote host's IP).
- SMTP timeouts (along with the remote host's IP).
- Bad MAIL FROM: (along with the sender and remote host's IP, name and helo).
- Bad RCPT TO: (along with sender, recipient and remote host's IP, name and
helo).
- Temporary or permanent failure of MAIL FROM: DNS check (along with the
sender and remote host's IP, name and helo).
- Invalid syntax of MAIL FROM: (along with the sender and remote host's IP,
name and helo).
- Rejected relaying attempts (along with the sender, recipient and remote
host's IP, name and helo).
- HELO greetings that don't match the remote host's name (along with the
remote host's IP, name and helo).
Additionally, I would really like to log:
- Queue disk full conditions (along with the sender, recipient(s) and remote
host's IP, name and helo).
- Temporary or permanent failure of RCPT TO: DNS check (along with the
sender, recipient and remote host's IP, name and helo).
All time stamped, of course. Logging these events serves two purposes:
1) Allowing me to spot configuration errors (local or remote).
2) Allowing me to notice serious conditions that prevent the mail system
from working.
3) Give me a chance of tracking attempts of abuse.
Regards,
/������������������������������T�����������������������������������������\
| Rask Ingemann Lambertsen | [EMAIL PROTECTED] |
| Registered Phase5 developer | WWW: http://www.gbar.dtu.dk/~c948374/ |
| A4000, 775 kkeys/s (RC5-64) | "ThrustMe" on XPilot and EFnet IRC |
| Jimi Hendrix's modem was a Purple Hayes. |
