Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Thread

log analysis providing greylist stats

log analysis providing greylist stats

2007-04-25 by Manuel Bouyer

hello,
Emmanuel Dreyfus suggested I post my question here so here it is :)

I'm looking for a tool that could tell me how much mails have been blocked
by milter-greylist. I'm thinking about something that would look at sendmail's
log which tuples were blocked by milter-greylist and were not presented
again after the delay, but maybe there's other ways of doing it.
Does anyone already have something like that ?

thanks

-- 
Manuel Bouyer, LIP6, Universite Paris VI.           Manuel.Bouyer@...
     NetBSD: 26 ans d'experience feront toujours la difference
--

Re: [milter-greylist] log analysis providing greylist stats

2007-04-25 by Seth Mos

> hello,
> Emmanuel Dreyfus suggested I post my question here so here it is :)
>
> I'm looking for a tool that could tell me how much mails have been blocked
> by milter-greylist. I'm thinking about something that would look at
> sendmail's
> log which tuples were blocked by milter-greylist and were not presented
> again after the delay, but maybe there's other ways of doing it.
> Does anyone already have something like that ?

Like so?
http://localtoast.coltex.nl/spam/index.php

Cheers,

Seth

Re: [milter-greylist] log analysis providing greylist stats

2007-04-25 by Fabien Tassin

According to Seth Mos:
> 
> > hello,
> > Emmanuel Dreyfus suggested I post my question here so here it is :)
> >
> > I'm looking for a tool that could tell me how much mails have been blocked
> > by milter-greylist. I'm thinking about something that would look at
> > sendmail's
> > log which tuples were blocked by milter-greylist and were not presented
> > again after the delay, but maybe there's other ways of doing it.
> > Does anyone already have something like that ?
> 
> Like so?
> http://localtoast.coltex.nl/spam/index.php

looks nicer than mine (which is just text):
http://www.sofaraway.org/tmp/milter-greylist/gl-stats-0.02.pl

to just get the number of mails blocked by milter-greylist, that would be
easier if milter-greylist was logging the number of grey expired, like
it already does for autowhite expired.

BTW, my script may not be accurate for some as I've only extracted stats
from the rules I'm using. Easy to fix by anyone in no time, I guess.

/Fabien

Re: [milter-greylist] log analysis providing greylist stats

2007-04-26 by Oliver Fromme

Fabien Tassin wrote:
 > to just get the number of mails blocked by milter-greylist, that would be
 > easier if milter-greylist was logging the number of grey expired, like
 > it already does for autowhite expired.

Personally I'm glad it doesn't do that, because it would
bloat my log files considerably ...  they're huge anyway.
:-)

BTW, I wrote a small Python program myself to analyze the
mail logs (formerly it was an awk script, but I rewrote
it in Python so it runs faster).  But it's a quick hack
without docs (I just wrote it for myself), so I haven't
published it so far.

Best regards
   Oliver

-- 
Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M.
Handelsregister: Registergericht Muenchen, HRA 74606,  Gesch\ufffdftsfuehrung:
secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht M\ufffdn-
chen, HRB 125758,  Gesch\ufffdftsf\ufffdhrer: Maik Bachmann, Olaf Erb, Ralf Gebhart

FreeBSD-Dienstleistungen, -Produkte und mehr:  http://www.secnetix.de/bsd

"That's what I love about GUIs: They make simple tasks easier,
and complex tasks impossible."
        -- John William Chambless

Re: [milter-greylist] log analysis providing greylist stats

2007-04-26 by Fabien Tassin

According to Oliver Fromme:
> Fabien Tassin wrote:
>  > to just get the number of mails blocked by milter-greylist, that would be
>  > easier if milter-greylist was logging the number of grey expired, like
>  > it already does for autowhite expired.
> 
> Personally I'm glad it doesn't do that, because it would
> bloat my log files considerably ...  they're huge anyway.
> :-)

Why ? IIRC from 2.*, the expiration for autowhite and grey happens at the same
time. It's just a matter of counting both and logging them in the same syslog.

/Fabien

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.