On Tuesday 23 January 2007 03:56, David Earp wrote: > Nitchi DaMon <[EMAIL PROTECTED]> wrote:<br /> <br /> > <br /> > > Is there a way to have CHKUSER log the connections<br /> > that are > denied for invalid users?<br /> > <br /> > The log for SMTP is the > /var/log/qmail/smtpd/<br /> > <br /> > but it contains a great deal > of information. Has<br /> > anyone created a patch or implemented MYsql > logging<br /> > with this?<br /> > <br /> > <br /> > tia<br /> > > <br /> > nitch.<br /> > <br /><br />For me, Logcheck (<a > href="http://logcheck.org";>http://logcheck.org/</a>)
This is logwatch, not logcheck http://www2.logwatch.org:81/tabs/download/ I have improvements for users of simscan 1.2 or greater coming soon... and can you please switch off HTML? aargh I can't read this > does a great job at > separating stuff in my logs. Here's an excerpt of what it parses out > for qmail-smtp. I get some more information from IMAPd and > qmail-send. These threshold amounts can be changed, I'm certain even > the number it lists from each section could be as well but I haven't looked > too much into it. Thus far it works as I expect it to.<br /><br /> > <pre> --------------------- qmail-smtp Begin ------------------------ <br > /><br /> <br /> Connections from (Threshold of 1):<br /> 211.237.173.234 > - > 5 Time(s)<br /> 194.150.155.44 - 5 Time(s)<br /> 58.10.65.101 - 5 > Time(s)<br />.......<br /> Blocked (Threshold of 1):<br /> 203.155.63.101 > - 8 Time(s) By Blocked - see<br /><a target="_blank" > href="http://www.spamcop.net/bl.shtml?203.155.63.101";>http://www.spamcop.ne >t/bl.shtml?203.155.63.101</a><br /> 124.120.133.201 - 7 Time(s) By Blocked > - see<br /><a target="_blank" > href="http://www.spamcop.net/bl.shtml?124.120.133.201";>http://www.spamcop.n >et/bl.shtml?124.120.133.201</a><br /> 202.183.133.1 - 5 Time(s) By Blocked > - see<br /><a target="_blank" > href="http://www.spamcop.net/bl.shtml?202.183.133.1";>http://www.spamcop.net >/bl.shtml?202.183.133.1</a><br /> 204.212.126.159 - 5 Time(s<br > />.......<br /> Chkuser Rejects From (Threshold of 1):<br /> > [EMAIL PROTECTED] - 8 Time(s)<br /> [EMAIL PROTECTED] - 6 Time(s)<br > /> [EMAIL PROTECTED] - 4 Time(s)<br /> > [EMAIL PROTECTED] - 4 Time(s)<br />.......<br /> Chkuser > Rejects To (Threshold of 1):<br /> [EMAIL PROTECTED] - 6 Time(s)<br /> > [EMAIL PROTECTED] - 5 Time(s)<br /> [EMAIL PROTECTED] - 5 > Time(s)<br /> [EMAIL PROTECTED] - 4 Time(s)<br />.......<br /> Chkuser > Rejects Remote (Threshold of 1):<br /> 222.121.186.98 - 20 Time(s)<br > /> > 203.121.80.2 - 19 Time(s)<br /> 122.4.34.18 - 17 Time(s)<br /> > 122.50.186.60 - 17 Time(s)<br />.......<br /> Chkuser Rejects Reason > (Threshold of 1):<br /> not existing recipient - 346 Time(s)<br /> <br > /> > Chkuser Accepts from (Threshold of 1):<br /> [EMAIL PROTECTED] - 2 > Time(s)<br /> [EMAIL PROTECTED] - 2 Time(s)<br /> > [EMAIL PROTECTED] - 2 Time(s)<br /> [EMAIL PROTECTED] > - 1 Time(s)<br /> 125.137.14.83 - 14 Time(s)<br /> [EMAIL > PROTECTED] - > 5 Time(s)<br /> - 1 Time(s)<br />.......<br /> Chkuser Accepts to > (Threshold of 1):<br /> [EMAIL PROTECTED] - 18 Time(s)<br /><br /> > Totals:<br /> Remote connections: 281<br /> Local connections: <br /> > > RBL blocked: 304<br /> Grand Total From: 584<br /> Percentage > blocked: 52.055 %<br /> <br /> Chkuser Totals:<br /> Rejected: 346<br /> > Accepted: 25</pre> -- ----------------- Bob Hutchinson Midwales dot com -----------------
