JP Vossen via plug on 10 Sep 2019 19:43:18 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[PLUG] Postfix: pflogsumm


Related to the recent MTA and I've probably said this before, but if you run a Postfix server for anything you should also run `pflogsumm`.

Install it from your package system then have a cron job like this:
```
/usr/sbin/pflogsumm -d yesterday -q -h 10 -u 10 --no_no_msg_size --ignore_case /var/log/mail.log
```

And get a daily report of...all the Postfix things.

Here is one of mine:

```
Postfix log summaries for Sep  9

Grand Totals
------------
messages

    164   received
    164   delivered
      0   forwarded
      0   deferred
      0   bounced
    297   rejected (64%)
      0   reject warnings
      0   held
      0   discarded (0%)

   7007k  bytes received
   7007k  bytes delivered
    102   senders
     82   sending hosts/domains
     11   recipients
      4   recipient hosts/domains


Per-Hour Traffic Summary
------------------------
    time          received  delivered   deferred    bounced     rejected
    --------------------------------------------------------------------
    0000-0100           0          0          0          0          0
    0100-0200           0          0          0          0          0
    0200-0300           0          0          0          0          0
    0300-0400           0          0          0          0          0
    0400-0500           0          0          0          0          0
    0500-0600           0          0          0          0          0
    0600-0700           2          2          0          0          3
    0700-0800          17         17          0          0          4
    0800-0900          10         10          0          0         22
    0900-1000          12         12          0          0          1
    1000-1100          15         15          0          0          3
    1100-1200          10         10          0          0         24
    1200-1300          10         10          0          0         25
    1300-1400           9          9          0          0         20
    1400-1500           8          8          0          0         46
    1500-1600          12         12          0          0         22
    1600-1700          13         13          0          0          1
    1700-1800           7          7          0          0         22
    1800-1900          12         12          0          0         39
    1900-2000           6          6          0          0          1
    2000-2100           9          9          0          0         21
    2100-2200           4          4          0          0          1
    2200-2300           5          5          0          0         20
    2300-2400           3          3          0          0         22

Host/Domain Summary: Message Delivery (top 10)
----------------------------------------------
 sent cnt  bytes   defers   avg dly max dly host/domain
 -------- -------  -------  ------- ------- -----------
    159     6992k       0     0.7 s    3.6 s  jpsdomain.org
      3    10071        0     1.0 s    1.1 s  <REDACTED>
      1     3777        0     1.8 s    1.8 s  <REDACTED>
      1      810        0     2.5 s    2.5 s  <REDACTED>

Host/Domain Summary: Messages Received (top 10)
-----------------------------------------------
 msg cnt   bytes   host/domain
 -------- -------  -----------
     37   290337   localhost
     12    20055   jpsdomain.org
      6   265242   <REDACTED>
      5   266719   <REDACTED>
      5    16981   <REDACTED>
      4    63325   <REDACTED>
      3   310404   <REDACTED>
      3   125472   <REDACTED>
      2   423459   <REDACTED>
      2   364261   <REDACTED>

top 10 Senders by message count
-------------------------------
     37   root@localhost
      7   logcheck@jpsdomain.org
      5   <REDACTED>
      4   <REDACTED>
<REDACTED>

top 10 Recipients by message count
----------------------------------
     93   <REDACTED>@jpsdomain.org
     55   <REDACTED>@jpsdomain.org
      7   logcheck@jpsdomain.org
<REDACTED>

top 10 Senders by message size
------------------------------
 423459   <REDACTED>
 310404   <REDACTED>
 296336   <REDACTED>
...

top 10 Recipients by message size
---------------------------------
   6012k  <REDACTED>
    730k  <REDACTED>
...

message reject detail
---------------------
  RCPT
    blocked using zen.spamhaus.org (total: 263)
          57   193.32.160.138
          38   193.32.160.136
          38   193.32.160.139
          38   193.32.160.142
          38   193.32.160.145
          19   193.32.160.135
...
    Recipient address rejected: Access denied (total: 12)
          12   <REDACTED>@jpsdomain.org
    Recipient address rejected: Greylisted (total: 20)
          12   <REDACTED>
           4   <REDACTED>
...
    Sender address rejected: Domain not found (total: 2)
           1   noreply@solucionesparagobierno.com
           1   hembzen@acdivoca-snap.org

Warnings
--------
  smtpd (total: 52)
6 TLS library problem: error:14094412:SSL routines:ssl3_read_byte... 2 hostname swim.diverseenvironment.com does not resolve to addres... 2 hostname hosting-by.directwebhost.org does not resolve to addre...
...
```

Later,
JP
--  -------------------------------------------------------------------
JP Vossen, CISSP | http://www.jpsdomain.org/ | http://bashcookbook.com/
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug