Re: Logging
On Tuesday, November 27, 2001, at 03:26 PM, Che Stevens wrote: Anyone seen a script for stripping the /var/log/maillog where everythin is logged for qmail and vpopmail and formating it into an html page showing traffic for each domain hosted. Thank You. There's an mrtg version for qmail somewhere on the Inter7 site I think, but I can't find it. I think it may do what you want. Regards, bill Shupp
Re: Logging
Try, http://inter7.com/qmailmrtg7/ Mark Bill Shupp wrote: On Tuesday, November 27, 2001, at 03:26 PM, Che Stevens wrote: Anyone seen a script for stripping the /var/log/maillog where everythin is logged for qmail and vpopmail and formating it into an html page showing traffic for each domain hosted. Thank You. There's an mrtg version for qmail somewhere on the Inter7 site I think, but I can't find it. I think it may do what you want. Regards, bill Shupp
Re: Logging
Thanks This shows to log pop3 and smtp to seperate files, is there any way around that or how do i got setting that up via splooger. Right now everything goes to /var/log/maillog via splogger. Thanks again. - Original Message - From: Mark Persohn [EMAIL PROTECTED] To: Bill Shupp [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, November 27, 2001 4:03 PM Subject: Re: Logging Try, http://inter7.com/qmailmrtg7/ Mark Bill Shupp wrote: On Tuesday, November 27, 2001, at 03:26 PM, Che Stevens wrote: Anyone seen a script for stripping the /var/log/maillog where everythin is logged for qmail and vpopmail and formating it into an html page showing traffic for each domain hosted. Thank You. There's an mrtg version for qmail somewhere on the Inter7 site I think, but I can't find it. I think it may do what you want. Regards, bill Shupp
Re: Logging
On Tuesday, November 27, 2001, at 04:11 PM, Che Stevens wrote: Thanks This shows to log pop3 and smtp to seperate files, is there any way around that or how do i got setting that up via splooger. Right now everything goes to /var/log/maillog via splogger. Thanks again. I haven't looked into qmailmrtg7, but I log pop separately by changing the logging facility in in vchkpw.c to local0. Change: openlog(LOG_NAME,LOG_PID,LOG_MAIL); To: openlog(LOG_NAME,LOG_PID,LOG_LOCAL0); Then, setup syslog to log local0.* to whatever file you want. Mine is /var/log/vpopmail. And don't forget to setup this new file for rotating... Regards, Bill
Re: Logging
syslog via splogger, can kill your machine when the traffic gets heavy. There is also support in vpopmail-5.0 to send the authentication logs for vchkpw to a mysql database. The guy who wrote it also has a web interface so tech support can watch it. Another fellow was working on an RDtool program to create traffic graphs per domain. So folks can count thier email bandwidth, or something. Ken On Tue, 2001-11-27 at 16:11, Che Stevens wrote: Thanks This shows to log pop3 and smtp to seperate files, is there any way around that or how do i got setting that up via splooger. Right now everything goes to /var/log/maillog via splogger. Thanks again. - Original Message - From: Mark Persohn [EMAIL PROTECTED] To: Bill Shupp [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, November 27, 2001 4:03 PM Subject: Re: Logging Try, http://inter7.com/qmailmrtg7/ Mark Bill Shupp wrote: On Tuesday, November 27, 2001, at 03:26 PM, Che Stevens wrote: Anyone seen a script for stripping the /var/log/maillog where everythin is logged for qmail and vpopmail and formating it into an html page showing traffic for each domain hosted. Thank You. There's an mrtg version for qmail somewhere on the Inter7 site I think, but I can't find it. I think it may do what you want. Regards, bill Shupp
Re: Logging
Sorry, can't help you on this one. Haven't actually set this up myself yet. Been planning it for a while now Having a quick read of the FAQ on the page shows shows some sample startup scripts... Try using them as a starting point. Mark Che Stevens wrote: Thanks This shows to log pop3 and smtp to seperate files, is there any way around that or how do i got setting that up via splooger. Right now everything goes to /var/log/maillog via splogger. Thanks again. - Original Message - From: Mark Persohn [EMAIL PROTECTED] To: Bill Shupp [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, November 27, 2001 4:03 PM Subject: Re: Logging Try, http://inter7.com/qmailmrtg7/ Mark Bill Shupp wrote: On Tuesday, November 27, 2001, at 03:26 PM, Che Stevens wrote: Anyone seen a script for stripping the /var/log/maillog where everythin is logged for qmail and vpopmail and formating it into an html page showing traffic for each domain hosted. Thank You. There's an mrtg version for qmail somewhere on the Inter7 site I think, but I can't find it. I think it may do what you want. Regards, bill Shupp
Re: Logging
And of course i need to recompile vpopmail correct? I see that i can make smtp go though multilog Thanks Bill - Original Message - From: Bill Shupp [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, November 27, 2001 4:14 PM Subject: Re: Logging On Tuesday, November 27, 2001, at 04:11 PM, Che Stevens wrote: Thanks This shows to log pop3 and smtp to seperate files, is there any way around that or how do i got setting that up via splooger. Right now everything goes to /var/log/maillog via splogger. Thanks again. I haven't looked into qmailmrtg7, but I log pop separately by changing the logging facility in in vchkpw.c to local0. Change: openlog(LOG_NAME,LOG_PID,LOG_MAIL); To: openlog(LOG_NAME,LOG_PID,LOG_LOCAL0); Then, setup syslog to log local0.* to whatever file you want. Mine is /var/log/vpopmail. And don't forget to setup this new file for rotating... Regards, Bill
Re: Logging
On Tuesday, November 27, 2001, at 04:20 PM, Che Stevens wrote: And of course i need to recompile vpopmail correct? yes. I see that i can make smtp go though multilog Right. Not sure how the syslog format that vchkpw uses works with qmailmrtg7... But qmailanalog, one of DJB's tools, might be helpful. I think it converts qmail-send's logs (splogger) to multilog's format. Again, I don't use this, so I might be wrong... Thanks Bill surely. -Bill
Re: Logging Vpopmail pop3
On Tuesday, November 13, 2001, at 01:06 PM, Kevin - System Administrator wrote: This is the line for me to log pop3 connections to /var/log/maillog #!/bin/sh /usr/bin/logger -p mail.info -t pop3d [$USER] logged in from $TCPREMOTEIP [$TCPREMOTEHOST] exec /var/qmail/bin/qmail-pop3d $1 it works fine and shows the ip and host if its resolvable but it doesnt show the username am i using the wrong variable? do i need a patch? does vpopmail use different scheme for loggin this? This isn't necessary. vpopmail logs information already, based on your --enable-logging option. See FAQ #11 for details. Just run vchkpw from tcpserver as illustrated in the INSTALL file and ditch the above script. -Bill
RE: Logging Vpopmail pop3
vpopmail has its own logging mechanism, its a compile time option. -Original Message- From: Kevin - System Administrator [mailto:[EMAIL PROTECTED]] Sent: Tuesday, November 13, 2001 2:06 PM To: [EMAIL PROTECTED] Subject: Logging Vpopmail pop3 This is the line for me to log pop3 connections to /var/log/maillog #!/bin/sh /usr/bin/logger -p mail.info -t pop3d [$USER] logged in from $TCPREMOTEIP [$TCPREMOTEHOST] exec /var/qmail/bin/qmail-pop3d $1 it works fine and shows the ip and host if its resolvable but it doesnt show the username am i using the wrong variable? do i need a patch? does vpopmail use different scheme for loggin this?
Re: Logging Vpopmail pop3
How can you expect the $USER to be set when /var/qmail/bin/qmail-pop3d is the program the aquires the USER name and password? Sean - Original Message - From: Kevin - System Administrator To: [EMAIL PROTECTED] Sent: Tuesday, November 13, 2001 1:06 PM Subject: Logging Vpopmail pop3 This is the line for me to log pop3 connections to /var/log/maillog #!/bin/sh /usr/bin/logger -p mail.info -t pop3d [$USER] logged in from $TCPREMOTEIP [$TCPREMOTEHOST] exec /var/qmail/bin/qmail-pop3d $1 it works fine and shows the ip and host if its resolvable but it doesnt show the username am i using the wrong variable? do i need a patch? does vpopmail use different scheme for loggin this?
RE: logging pop3d access into a separate log file
I reconfigured vpopmail 4.9.10, with the following options: --enable-logging=y --enable-log-name=vpopmail but it's still logging for /var/log/maillog any other ideas? Loryan -Original Message- From: Rick Updegrove [mailto:[EMAIL PROTECTED]] Sent: Monday, 30 April 2001 1:19 PM To: Loryan Strant Cc: [EMAIL PROTECTED] Subject: Re: logging pop3d access into a separate log file From: Loryan Strant [EMAIL PROTECTED] I want to keep the logs the way they currently are, but have them log into a file like /var/log/vpopmail. I'm also running courier-imap 1.3.5, so unfortunately your script doesn't help me. Any other ideas? ./configure --help --enable-logging=e|y|n|p|v Turn on (y) or off (n) logging to syslog, (e) only log errors, include passwords in errors (p) --enable-log-name=vpopmail set syslog name. I know the changelog for 4.99 indicates that --enable-log-name was not being used in vchkpw.c - fixed I also know that was an ongoing source of confusion which has been hopefully cleared up once and for all. Rick Up
Re: logging pop3d access into a separate log file
From: Loryan Strant [EMAIL PROTECTED] I am running vpopmail 4.9.10 on OpenBSD. I would like to be able to have the POP3 logs in a different file. How do I go about doing this? I supervise pop3d and here are my run scripts ... bash-2.04# cat /var/qmail/supervise/qmail-pop3d/run #!/bin/sh exec /usr/local/bin/softlimit -m 200 \ tcpserver -l0 -v -H -R 0 pop-3 /var/qmail/bin/qmail-popup \ updegrove.net /var/vpopmail/bin/vchkpw /var/qmail/bin/qmail-pop3d Maildir 21 bash-2.04# cat /var/qmail/supervise/qmail-pop3d/log/run #!/bin/sh exec /usr/local/bin/setuidgid qmaill multilog t /var/log/qmail/pop3d tail -f /var/log/qmail/pop3d/current | /usr/local/bin/tai64nlocal yields logs like ... 2001-04-28 19:25:53.016385500 tcpserver: status: 1/40 2001-04-28 19:26:04.328102500 tcpserver: status: 2/40 2001-04-28 19:26:04.329268500 tcpserver: pid 14920 from 192.168.0.2 2001-04-28 19:26:04.329444500 tcpserver: ok 14920 0:10.10.0.33:110 :192.168.0.2::1387 2001-04-28 19:26:04.587193500 tcpserver: end 14920 status 256 2001-04-28 19:26:04.587284500 tcpserver: status: 1/40
RE: logging pop3d access into a separate log file
I want to keep the logs the way they currently are, but have them log into a file like /var/log/vpopmail. I'm also running courier-imap 1.3.5, so unfortunately your script doesn't help me. Any other ideas? Thanks, Loryan -Original Message- From: Rick Updegrove [mailto:[EMAIL PROTECTED]] Sent: Monday, 30 April 2001 12:29 AM To: [EMAIL PROTECTED] Cc: Loryan Strant Subject: Re: logging pop3d access into a separate log file From: Loryan Strant [EMAIL PROTECTED] I am running vpopmail 4.9.10 on OpenBSD. I would like to be able to have the POP3 logs in a different file. How do I go about doing this? I supervise pop3d and here are my run scripts ... bash-2.04# cat /var/qmail/supervise/qmail-pop3d/run #!/bin/sh exec /usr/local/bin/softlimit -m 200 \ tcpserver -l0 -v -H -R 0 pop-3 /var/qmail/bin/qmail-popup \ updegrove.net /var/vpopmail/bin/vchkpw /var/qmail/bin/qmail-pop3d Maildir 21 bash-2.04# cat /var/qmail/supervise/qmail-pop3d/log/run #!/bin/sh exec /usr/local/bin/setuidgid qmaill multilog t /var/log/qmail/pop3d tail -f /var/log/qmail/pop3d/current | /usr/local/bin/tai64nlocal yields logs like ... 2001-04-28 19:25:53.016385500 tcpserver: status: 1/40 2001-04-28 19:26:04.328102500 tcpserver: status: 2/40 2001-04-28 19:26:04.329268500 tcpserver: pid 14920 from 192.168.0.2 2001-04-28 19:26:04.329444500 tcpserver: ok 14920 0:10.10.0.33:110 :192.168.0.2::1387 2001-04-28 19:26:04.587193500 tcpserver: end 14920 status 256 2001-04-28 19:26:04.587284500 tcpserver: status: 1/40
Re: logging pop3d access into a separate log file
From: Loryan Strant [EMAIL PROTECTED] I want to keep the logs the way they currently are, but have them log into a file like /var/log/vpopmail. I'm also running courier-imap 1.3.5, so unfortunately your script doesn't help me. Any other ideas? ./configure --help --enable-logging=e|y|n|p|v Turn on (y) or off (n) logging to syslog, (e) only log errors, include passwords in errors (p) --enable-log-name=vpopmail set syslog name. I know the changelog for 4.99 indicates that --enable-log-name was not being used in vchkpw.c - fixed I also know that was an ongoing source of confusion which has been hopefully cleared up once and for all. Rick Up
Re: logging=yp
Bill Shupp wrote: Can I get vpopmail to do use --enable-logging=y AND --enable-logging=p? logging=p works fine, but when I do logging=y, invalid login attempts look like this: Oct 10 19:44:25 thebridge vpopmail[20182]: ?p^T@?p^T@g I'm running vpopmail-4.9.2. Thanks, -Bill Shupp I'll test the logging=y to see why it prints out garbage. Do you want it to log every attempt and to include the password in each log in, or only in failed logins? Ken
Re: logging=yp
on 10/10/00 10:13 PM, Ken Jones at [EMAIL PROTECTED] wrote: Bill Shupp wrote: Can I get vpopmail to do use --enable-logging=y AND --enable-logging=p? logging=p works fine, but when I do logging=y, invalid login attempts look like this: Oct 10 19:44:25 thebridge vpopmail[20182]: ?p^T@?p^T@g I'm running vpopmail-4.9.2. Thanks, -Bill Shupp I'll test the logging=y to see why it prints out garbage. Do you want it to log every attempt and to include the password in each log in, or only in failed logins? I'd like to be able to look up who logged in from an address at a specific time (for spam policy enforcement). Also, logging the password used *only* when authentication fails has proven really helpful for our support team. I don't see a need to log the password wen authentication is successful. Thanks, Bill Shupp
