On Mon, 29 Sep 2008, CLEMENT Francis wrote: > > Hello Davide > > Actually I have "CustMapsList" settings with :0, meaning "wait for auth > before reject" > > In this configuration, each time a sender is in the 'rbl', and it does not > 'auth' I have two entries in smtp logs, sample entries : > > "mx.groupeab.com" "mx.groupeab.com" "201.78.167.81" "2008-09-27 > 00:02:01" "20178167081.user.veloxzone.com.br" "" > "[EMAIL PROTECTED]" "" "" "SNDRIP=EIPMAP > (zen.spamhaus.org)" "" "0" "" > "mx.groupeab.com" "mx.groupeab.com" "201.78.167.81" "2008-09-27 > 00:02:01" "20178167081.user.veloxzone.com.br" "" "" "" > "" "SMTP=EERRS" "" "0" "" > > Can we avoid to have the two entries in this case (rbl and no auth coming) > but only the first > (and of course, none generated at all if auth was coming as wanted) > > I ask this because with this :0 setting, log files grow very fast, and the > second line is not really helpfull when generating reports, ... (need to > verify if the SMTP=EERRS have a corresponding previous EIPMAP entry before > skiping it, complicating the reporting script, slowing it, ...) > > Same think then the ip is in spammers.tab with "code=0" option > > Your opinion ?
Not worth for me, even because this is not the only place where log-lines correlation is necessary (see RCPT+RECV for example). I'm not going to change the logs format. - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
