Nitchi DaMon <[EMAIL PROTECTED]> wrote:<br /> <br /> > <br /> >
Is there a way to have CHKUSER log the connections<br /> > that are denied
for invalid users?<br /> > <br /> > The log for SMTP is the
/var/log/qmail/smtpd/<br /> > <br /> > but it contains a great deal of
information. Has<br /> > anyone created a patch or implemented MYsql
logging<br /> > with this?<br /> > <br /> > <br /> > tia<br />
> <br /> > nitch.<br /> > <br /><br />For me, Logcheck (<a
href="http://logcheck.org";>http://logcheck.org/</a>) does a great job at
separating stuff in my logs. Here's an excerpt of what it parses out for
qmail-smtp. I get some more information from IMAPd and qmail-send.
These threshold amounts can be changed, I'm certain even the number it lists
from each section could be as well but I haven't looked too much into
it. Thus far it works as I expect it to.<br /><br />
<pre> --------------------- qmail-smtp Begin ------------------------ <br
/><br /> <br /> Connections from (Threshold of 1):<br /> 211.237.173.234
- 5
Time(s)<br /> 194.150.155.44 - 5 Time(s)<br /> 58.10.65.101 - 5
Time(s)<br
/>.......<br /> Blocked (Threshold of 1):<br /> 203.155.63.101 - 8
Time(s) By
Blocked - see<br /><a target="_blank"
href="http://www.spamcop.net/bl.shtml?203.155.63.101";>http://www.spamcop.net/bl.shtml?203.155.63.101</a><br
/> 124.120.133.201 - 7 Time(s) By Blocked - see<br /><a target="_blank"
href="http://www.spamcop.net/bl.shtml?124.120.133.201";>http://www.spamcop.net/bl.shtml?124.120.133.201</a><br
/> 202.183.133.1 - 5 Time(s) By Blocked - see<br /><a target="_blank"
href="http://www.spamcop.net/bl.shtml?202.183.133.1";>http://www.spamcop.net/bl.shtml?202.183.133.1</a><br
/> 204.212.126.159 - 5 Time(s<br />.......<br /> Chkuser Rejects From
(Threshold of 1):<br /> [EMAIL PROTECTED] - 8 Time(s)<br />
[EMAIL PROTECTED] - 6 Time(s)<br /> [EMAIL PROTECTED] - 4
Time(s)<br />
[EMAIL PROTECTED] - 4 Time(s)<br />.......<br /> Chkuser
Rejects To (Threshold of 1):<br /> [EMAIL PROTECTED] - 6 Time(s)<br />
[EMAIL PROTECTED] - 5 Time(s)<br /> [EMAIL PROTECTED] - 5
Time(s)<br /> [EMAIL PROTECTED] - 4 Time(s)<br />.......<br /> Chkuser
Rejects Remote (Threshold of 1):<br /> 222.121.186.98 - 20 Time(s)<br />
203.121.80.2 - 19 Time(s)<br /> 122.4.34.18 - 17 Time(s)<br />
122.50.186.60 - 17 Time(s)<br />.......<br /> Chkuser Rejects Reason
(Threshold of 1):<br /> not existing recipient - 346 Time(s)<br /> <br
/>
Chkuser Accepts from (Threshold of 1):<br /> [EMAIL PROTECTED] - 2
Time(s)<br /> [EMAIL PROTECTED] - 2 Time(s)<br />
[EMAIL PROTECTED] - 2 Time(s)<br /> [EMAIL PROTECTED] - 1
Time(s)<br /> 125.137.14.83 - 14 Time(s)<br /> [EMAIL PROTECTED] - 5
Time(s)<br /> - 1 Time(s)<br />.......<br /> Chkuser Accepts to (Threshold
of 1):<br /> [EMAIL PROTECTED] - 18 Time(s)<br /><br /> Totals:<br />
Remote connections: 281<br /> Local connections: <br />
RBL
blocked: 304<br /> Grand Total From: 584<br /> Percentage blocked:
52.055
%<br /> <br /> Chkuser Totals:<br /> Rejected: 346<br /> Accepted:
25</pre>
