Re: sendmail and rbl blocking - generating statistics

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On Wed, March 14, 2007 01:38, Erick Perez wrote:
> I have enabled the feature in sendmail.mc to check with spamhaus for
> spammers. However since this block is being made at MTA level, I would
> like to know is something can be done to obtain statistics of blocked
> attemps.

I do this by parsing the logs:

Mar 14 09:31:36 io sendmail[19416]: ruleset=check_relay, arg1=[84.4.97.105],
arg2=127.0.0.2, relay=[84.4.97.105], reject=554 5.7.1 Rejected 84.4.97.105 found in
bl.spamcop.net

Try doing a simple 'cat /var/log/maillog | grep -c check_relay'

For my server:

cat /var/log/maillog | grep checK_relay | grep -c spamhaus
836

cat /var/log/maillog | grep checK_relay | grep -c spamcop
120

cat /var/log/maillog | grep checK_relay | grep -c njabl
8

You could write a simple script to give you more details, like highest hit days. I'm
*sure* there are log analyzers out there that do this. I've also seen a few people
who have written script and stuffed the numbers in to RRDTool to visualize the RBLs.

-Ryan
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux