On Wed, 6 Apr 2005, Mike Harrington wrote:
> Why not just use the -Mr switch for the rotation of your logfiles
> instead?  Much better than stopping & starting xmail.

Well - cause I want to?  8-)

I am currently doing a ton of logging from my filters.

Setup is basically this - I could be ALL WRONG of course...

Mail for MYCOMPANY.COM is handled by XMail at MYDOMAIN.COM
All mail (that gets thru the filters) for MYCOMPANY.COM is
handed to an (GACK!) Exchange 2000 server.

I do this thru a Custom Domain.

First anything getting through the Spam Lists, DNS, etc. and received is
Virus checked.  I log all virus email.

Second all non-infected email is matched against employees addresses that
chenged over three years ago - when spam got so bad we changed our
addressing method.  I also throw in employees as they leave (after a
suitable delay - we are very sales oriented).  I log all not-wanted email.

Next I allow the Exchange users to reject mail based on addresses or
domains through our Intranet Website.  To cover most users, this data is
pulled from a MySQL database of XMail for the last week of email that
they received.  I log both kill-by-address and kill-by-domain.

I even setup an account at MYDOMAIN.COM for them to forward spam to, so
they have control over what email they receive.  This currently populates
the kill-by-address datafiles.  I log all addresses forwarded to 'spam'.

Now - thanks to Jason - I have a ipkill log file too!  That is starting to
look very interesting.

So I have - besides smtp-yearmmdd0000 - 5 other log files that need to be
rotated.  And to kick it all over - I dump them all to a MySQL database.

So to make sure - I stop XMail - copy off my log files - and then restart
XMail.  XMail should stop receiving email and then shut down after the
filters have run.  Right???

I then process all the logs into MySQL and then RAR them into archives.

That way I have CMA for sure.

Brett
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to