On Thu, 15 Apr 2004, Nigel Metheringham wrote:
> What are other people doing for summarising reject/non-delivery data?
in response to:
> On Thu, 2004-04-15 at 15:25, Steve Campbell wrote:
> > Newer versions of eximstats will count the occurrences of specified
> > patterns by use of the '-pattern' option. Eg:
> > eximstats -pattern "DNS Block" /dnsbl/ mainlog
I do exactly this. For all my (mostly RCPT-time) ACLs that deny, I use a
very specific log_message, for example:
log_message = MSGTAG_HELONONE: HELO/EHLO name not provided for \
$sender_host_address
I then have a wrapper which runs nightly around eximstats, which runs
eximstats with:
eximstats -nr \
...
-pattern " : none provided" \
"/MSGTAG_HELONONE/" \
-pattern " : contains underscore (rejected)" \
"/MSGTAG_HELOUNDERSCOREREJECT/" \
-pattern " : contains underscore (accepted)" \
"/MSGTAG_HELOUNDERSCOREACCEPT/" \
-pattern " Rejects/multiple recipients for bounce" \
"/MSGTAG_MULTIPLENULLRCPTS/" \
and eximstats produces the handy report:
User Specified Patterns
-----------------------
Total
...
Rejects/HELO checks: total 25327
: seems to be forged 1674
: is my own domain 12434
: is my own IP 3936
: not fully qualified 6368
: none provided 2
: contains underscore (rejected) 913
: contains underscore (accepted) 0
Rejects/multiple recipients for bounce 0
...
Simple but effective.
What would be nicer is to pull these numbers into rrd/MRTG and draw pretty
graphs for some trend analysis, but I never seem to get time to do that
bit. Anyone doing that?
Jethro.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Jethro R Binks
Computing Officer, IT Services
University Of Strathclyde, Glasgow, UK
