Topic: Log Detail Spam Rejected

[yehnu]

Dear Sir,

Everyday i get summary report like this.

How can i get detail about email spam rejeced & ham email ?

Thankyou
yehnu


*****
Period Beginning : Fri May 12 00:00:02 2006
Period Ending    : Sat May 13 00:00:02 2006
SpamAssassin Version : SpamAssassin version 3.1.1
  running on Perl version 5.6.1

Reporting Period : 24.00 hrs
--------------------------------------------------

Total spam rejected   :      470 ( 59.57%)
       RBL rejected   :        0 (  0.00%)
     Score above 15   :      386 ( 82.13%)
Total ham accepted    :      319 ( 40.43%)
                        -------------------
Total emails processed:      789 (   33/hr)

Average spam threshold :       10.00
Average spam score     :       25.13
Average ham score      :       -9.40

[raem]

yehnu

Look in the log files
/var/log/...........
You can use the server manager panel to view log files

[Curly]

I run sa-stats.pl to generate daily, weekly and monthly statistics. I'ts not very fancy, but better than searching the log-files yourself.

This is what I run for the yesterday stats, sa-stats generates a html-page.

Code: [Select]

#!/bin/bash
OUTDIR=/home/e-smith/files/ibays/Primary/html/MailStats
YEAR=date -d 'yesterday' +'%Y'
MONTH=date -d 'yesterday' +'%m'
DAY=date -d 'yesterday' +'%d'
WEEK=date -d 'yesterday' +'%U'
OUTFILE=$YEAR"-"$MONTH"-"$DAY".html"
cat /var/log/maillog.2*|/usr/share/doc/spamassassin-tools-3.1.0/tools/sa-stats.pl -s date -d 'yesterday 0:00' +'%Y-%m-%d' -e 'yesterday 23:59:59' -H -l - > $OUTDIR/$OUTFILE


More detail can be found in the maillog (/var/log/maillog).

[yehnu]

yehnu

Look in the log files
/var/log/...........
You can use the server manager panel to view log files

Thankyou Sir,

But i still confused . if the message said,
   Total spam rejected   :      536 ( 61.40%)
is it mean , we still received email with header [SPAM] or thats all totall bounced email ?

Because usually i received everyday mailing list from yahoogroups but now i never received email.  maybe this email rejected / bouncing by server ?

How can i know ? I already check in tha var/log at server manager panel but i didn't find email from yahoogroups.

thankyou

[raem]

yehnu

> How can i know ?

Look in /var/log/qpsmtpd/current

[yehnu]

Dear Sir,

I already installed sme 6.01 with clamav, spamassassin 3.1.1 15 days ago.
And I set spam config with spam sensitivity : low(10).
For 10 days i get email from 5 mailinglist at yahoogroups.com. But for last 5 days i never got email from them.
I try to send email to them & i get responsed like this :


We are unable to process the message from <edp@novbalii.com>
to <Job-Vacancy-subscribe@yahoogroups.com>.

Your request to join the Job-Vacancy group is not processed
because your email account has been bouncing mails. This means that emails
sent to your account over several days have been returned to us.
This is sometimes because mail boxes are filled up, or because of
configuration problems. To reset your Yahoo! Groups account, please go
to http://groups.yahoo.com/myprefs?edit=2

For further assistance, please visit http://help.yahoo.com/help/us/groups/


I already set this address to WBL & i never set RBL.
Please help me , how can i get my email again(activate again)?
How can i know log file for Bounce emai ?

Thankyou for your help.
Yehnu

[raem]

yehnu

This is for sme 7
/var/log/qpsmtpd/current

For sme 6.x see
/var/log/smtpfront-qmail/current

Try sending an email to your address that you registered with yahoo groups and see if you receive it, and if not then see what your log files say as to why it was not accepted.

[yehnu]

Thankyou sir , I already received mail from yahoogroups.com.

By the way i have questions about /var/log/smtpfront-qmail/current :

2006-05-18 11:00:42.664679500 tcpserver: status: 2/40
2006-05-18 11:00:42.664864500 tcpserver: pid 6724 from 72.22.71.19
2006-05-18 11:00:42.719506500 tcpserver: ok 6724 0:202.169.241.69:25 st66.startlogic.com:72.22.71.19::3478
2006-05-18 11:00:44.376904500 smtpfront-qmail[6724]: MAIL FROM:<newsletter@cliche.tv>
2006-05-18 11:00:45.101689500 smtpfront-qmail[6724]: RCPT TO:<gm@novbalii.com>
2006-05-18 11:00:52.364055500 smtpfront-qmail[6724]: Accepted message qp 6725 bytes 9565
2006-05-18 11:00:53.385091500 smtpfront-qmail[6724]: bytes in: 9734 bytes out: 173
2006-05-18 11:00:53.385213500 tcpserver: end 6724 status 0
**
2006-05-18 08:56:44.435606500 tcpserver: status: 1/40
2006-05-18 08:56:47.156448500 smtpfront-qmail[3293]: MAIL FROM:<cadiou@indosat.net.id>
2006-05-18 08:56:47.156589500 smtpfront-qmail[3293]: RCPT TO:<gm@novbalii.com>
**
I never received  email above in the mailbox, can i know is it automatic bounce? How can Spamassassin category this email?
**
2006-05-18 11:00:42.664679500 tcpserver: status: 2/40
2006-05-18 11:00:42.664864500 tcpserver: pid 6724 from 72.22.71.19
2006-05-18 11:00:42.719506500 tcpserver: ok 6724 0:202.169.241.69:25 st66.startlogic.com:72.22.71.19::3478
2006-05-18 11:00:44.376904500 smtpfront-qmail[6724]: MAIL FROM:<newsletter@cliche.tv>
2006-05-18 11:00:45.101689500 smtpfront-qmail[6724]: RCPT TO:<gm@novbalii.com>
2006-05-18 11:00:52.364055500 smtpfront-qmail[6724]: Accepted message qp 6725 bytes 9565
2006-05-18 11:00:53.385091500 smtpfront-qmail[6724]: bytes in: 9734 bytes out: 173
2006-05-18 11:00:53.385213500 tcpserver: end 6724 status 0
**
I know this email is spam , until 15 may i still received mail from ...@cliche.tv.
In this log the status is Accepted Message, but i didn't received, make me confused?????

thankyou for your help
yehnu

[raem]

yehnu

Look at the other log files relating to mail and spamassassin.

Install the qmHandle contrib to check your mail queue.