[toaster] CHKUSER Logging

2007-01-22 Thread Nitchi DaMon

Is there a way to have CHKUSER log the connections
that are denied for invalid users?

The log for SMTP is the /var/log/qmail/smtpd/

but it contains a great deal of information.  Has
anyone created a patch or implemented MYsql logging
with this?


tia

nitch.


 

The fish are biting. 
Get more visitors on your site using Yahoo! Search Marketing.
http://searchmarketing.yahoo.com/arp/sponsoredsearch_v2.php


Re: [toaster] CHKUSER Logging

2007-01-22 Thread David Earp
Nitchi DaMon lt;[EMAIL PROTECTED]gt; wrote:br / br / gt; br / gt;
Is there a way to have CHKUSER log the connectionsbr / gt; that are denied
for invalid users?br / gt; br / gt; The log for SMTP is the
/var/log/qmail/smtpd/br / gt; br / gt; but it contains a great deal of
information.  Hasbr / gt; anyone created a patch or implemented MYsql
loggingbr / gt; with this?br / gt; br / gt; br / gt; tiabr /
gt; br / gt; nitch.br / gt; br /br /For me, Logcheck (a
href=http://logcheck.org;http://logcheck.org//a) does a great job at
separating stuff in my logs.nbsp; Here's an excerpt of what it parses out for
qmail-smtp.nbsp; I get some more information from IMAPd and qmail-send.nbsp;
These threshold amounts can be changed, I'm certain even the number it lists
from each section could be as well but I haven't looked too much into
it.nbsp; Thus far it works as I expect it to.br /br /
pre - qmail-smtp Begin  br
/br / br / Connections from (Threshold of 1):br /211.237.173.234 
- 5
Time(s)br /   194.150.155.44 - 5 Time(s)br /58.10.65.101 - 5 
Time(s)br
/...br / Blocked (Threshold of 1):br / 203.155.63.101 - 8 
Time(s) By
Blocked - seebr /a target=_blank
href=http://www.spamcop.net/bl.shtml?203.155.63.101;http://www.spamcop.net/bl.shtml?203.155.63.101/abr
/  124.120.133.201 - 7 Time(s) By Blocked - seebr /a target=_blank
href=http://www.spamcop.net/bl.shtml?124.120.133.201;http://www.spamcop.net/bl.shtml?124.120.133.201/abr
/  202.183.133.1 - 5 Time(s) By Blocked - seebr /a target=_blank
href=http://www.spamcop.net/bl.shtml?202.183.133.1;http://www.spamcop.net/bl.shtml?202.183.133.1/abr
/  204.212.126.159 - 5 Time(sbr /...br / Chkuser Rejects From
(Threshold of 1):br / [EMAIL PROTECTED] - 8 Time(s)br /
[EMAIL PROTECTED] - 6 Time(s)br / [EMAIL PROTECTED] - 4 
Time(s)br /
[EMAIL PROTECTED] - 4 Time(s)br /...br / Chkuser
Rejects To (Threshold of 1):br /  [EMAIL PROTECTED] - 6 Time(s)br /
[EMAIL PROTECTED] - 5 Time(s)br / [EMAIL PROTECTED] - 5
Time(s)br /   [EMAIL PROTECTED] - 4 Time(s)br /...br / Chkuser
Rejects Remote (Threshold of 1):br /  222.121.186.98 - 20 Time(s)br /
203.121.80.2 - 19 Time(s)br / 122.4.34.18 - 17 Time(s)br /
122.50.186.60 - 17 Time(s)br /...br / Chkuser Rejects Reason
(Threshold of 1):br / not existing recipient - 346 Time(s)br / br 
/
Chkuser Accepts from (Threshold of 1):br /[EMAIL PROTECTED] - 2
Time(s)br /   [EMAIL PROTECTED] - 2 Time(s)br /
[EMAIL PROTECTED] - 2 Time(s)br / [EMAIL PROTECTED] - 1
Time(s)br /   125.137.14.83 - 14 Time(s)br /[EMAIL PROTECTED] - 5
Time(s)br /- 1 Time(s)br /...br / Chkuser Accepts to (Threshold
of 1):br /[EMAIL PROTECTED] - 18 Time(s)br /br / Totals:br /
Remote connections: 281br /Local connections: br / 
RBL
blocked: 304br /Grand Total From: 584br /   Percentage blocked: 
52.055
%br / br / Chkuser Totals:br /Rejected: 346br / Accepted: 
25/pre