Topic: Mail Log

[maykelsoft]

Hi all,

I have upgraded my SME 6 to SME 7.1.3.
On my SME 6, I am using E-Mail Blocking from Dungog and it works pretty well.

How can I customize my mail log to look something like this again:
2007-04-30 07:51:30.676160500 smtpfront-qmail[23190]: MAIL FROM: <clientdepmnt.refIP073546761JJ.cm@bbt.com>
2007-04-30 07:51:31.174398500 smtpfront-qmail[23190]: RCPT TO: <user1@domain.com>
2007-04-30 07:51:31.174404500 smtpfront-qmail[23190]: Rejected
2007-04-30 07:51:31.681230500 smtpfront-qmail[23190]: bytes in: 129 bytes out: 123
2007-04-30 12:31:40.647862500 smtpfront-qmail[18852]: MAIL FROM:<Kieu_luiz@atlantis-technology.co.uk>
2007-04-30 12:31:43.331655500 smtpfront-qmail[18852]: RCPT TO:<user2@domain.com>
2007-04-30 12:32:14.891174500 smtpfront-qmail[18852]: Accepted message qp 18866 bytes 1873
2007-04-30 12:32:14.891180500 smtpfront-qmail[18852]: bytes in: 1882 bytes out: 175
2007-04-30 13:52:46.564036500 smtpfront-qmail[3203]: bytes in: 0 bytes out: 44
2007-04-30 14:54:14.498688500 smtpfront-qmail[13156]: MAIL FROM:<Nadlertoypc@INTERSPOND.COM>
2007-04-30 14:54:14.882682500 smtpfront-qmail[13156]: RCPT TO:<user3@domain.com>
2007-04-30 14:54:40.049246500 smtpfront-qmail[13156]: Accepted message qp 17896 bytes 16451
2007-04-30 14:54:40.049252500 smtpfront-qmail[13156]: bytes in: 16669 bytes out: 175
2007-04-30 15:04:42.692823500 smtpfront-qmail[23947]: MAIL FROM: <ojohnny@hot-shot.com>
2007-04-30 15:04:43.007401500 smtpfront-qmail[23947]: RCPT TO: <user4@esi.com.ph>
2007-04-30 15:04:50.631188500 smtpfront-qmail[23947]: Accepted message qp 25186 bytes 2289
2007-04-30 15:04:50.908403500 smtpfront-qmail[23947]: bytes in: 2303 bytes out: 160
2007-04-30 17:18:09.798488500 smtpfront-qmail[29815]: bytes in: 0 bytes out: 44
2007-04-30 20:16:18.922584500 smtpfront-qmail[7426]: MAIL FROM:<Muntean-MANTOOTH@allstardata.com>
2007-04-30 20:16:19.362379500 smtpfront-qmail[7426]: RCPT TO:<user5@domain.com>
2007-04-30 20:16:25.026690500 smtpfront-qmail[7426]: Accepted message qp 11450 bytes 2042
2007-04-30 20:16:25.809069500 smtpfront-qmail[7426]: bytes in: 2069 bytes out: 190
2007-05-01 16:45:25.166582500 smtpfront-qmail[4092]: bytes in: 0 bytes out: 44
2007-05-03 21:24:46.473578500 smtpfront-qmail[31594]: bytes in: 0 bytes out: 44
2007-05-04 14:45:39.269450500 smtpfront-qmail[2722]: bytes in: 0 bytes out: 44

Instead of this

2007-05-07 15:25:11.181014500 21784 Plugin spamassassin, hook data_post returned DECLINED,
2007-05-07 15:25:11.181017500 21784 running plugin (data_post): virus::clamav
2007-05-07 15:25:11.181020500 21784 virus::clamav plugin: Changing permissions on file to permit scanner access
2007-05-07 15:25:11.181075500 21784 virus::clamav plugin: Running: /usr/bin/clamdscan --stdout  --disable-summary /var/spool/qpsmtpd/1178522694:21784:0 2>&1
2007-05-07 15:25:12.115784500 21784 virus::clamav plugin: clamscan results: /var/spool/qpsmtpd/1178522694:21784:0: OK
2007-05-07 15:25:12.115792500 21784 Plugin virus::clamav, hook data_post returned DECLINED,
2007-05-07 15:25:12.125773500 21784 running plugin (queue): queue::qmail_2dqueue
2007-05-07 15:25:12.125780500 21812 queue::qmail_2dqueue plugin: (for 21784 ) Queuing qp 21812 to /var/qmail/bin/qmail-queue
2007-05-07 15:25:12.286005500 21784 Plugin queue::qmail_2dqueue, hook queue returned OK, Queued! 1178522712 qp 21812 <BAY111-W79BE89C45743F568CC413D9450@phx.gbl>
2007-05-07 15:25:12.286712500 21784 250 Queued! 1178522712 qp 21812 <BAY111-W79BE89C45743F568CC413D9450@phx.gbl>
2007-05-07 15:25:14.181594500 21784 dispatching QUIT
2007-05-07 15:25:14.181600500 21784 trying to get config for me
2007-05-07 15:25:14.181603500 21784 221 esi.com.ph closing connection. Have a wonderful day.
2007-05-07 15:25:14.181606500 21784 click, disconnecting
2007-05-07 15:25:14.191597500 21784 running plugin (disconnect): rhsbl
2007-05-07 15:25:14.191603500 21784 Plugin rhsbl, hook disconnect returned DECLINED,
2007-05-07 15:25:14.191606500 21784 running plugin (disconnect): dnsbl
2007-05-07 15:25:14.191609500 21784 Plugin dnsbl, hook disconnect returned DECLINED,
2007-05-07 15:25:14.765447500 3455 cleaning up after 21784

Thanks,

Mike

[mmccarn]

You can reduce the amount of detail in your qpsmtpd logs by changing the "loglevel" using config setprop qpsmtpd LogLevel #. The default loglevel in SME is '8', which logs all information for each connection (including debug information); this is the only level that causes the various plug-ins to log their results.  Setting the LogLevel to 8 is the only way to figure out why an email was rejected by a plug-in...

If you leave LogLevel set at 8, you can use collapse_qpsmtpd_conn to read the qpsmtpd logs and collapses each conversation to one output line.

Alternatively, you could install the 'logterse' plugin which is designed to reduce the size of qpsmtpd logfiles without losing critical tracking information.  Here are a couple posts that refer to 'logterse': http://forums.contribs.org/index.php?topic=36567.0, http://forums.contribs.org/index.php?topic=36528.0



I don't think either of these solutions will do exactly what you want but they're the only options I've seen so far...

[maykelsoft]

Hi mmccarn,

The information you gave is more useful.

I will give it a try.

Thanks and regards,

Mike