[gentoo-user] tracking the life of an email.

[gentoo-user] tracking the life of an email.

[Nick Smith]

i have setup a mailserver running qmail with clamav and spamassassin,
and it uses queue-scanner.  im still learning alot about administering
mail servers, and i was wondering, how can i track a message going
through the system? i know i can stumble through the log files, but
how do i know the exact route a message takes through my mailserver?
like from coming into the machine, being scanned by spamassassin,
being scanned by clamav, then passed to qmail to be delivered. where
can i see proof that it is actually doing all those steps?

TIA

nick

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] tracking the life of an email.

[Dave Nebinger]

Nick Smith wrote:
> i have setup a mailserver running qmail with clamav and spamassassin,
> and it uses queue-scanner.  im still learning alot about administering
> mail servers, and i was wondering, how can i track a message going
> through the system? i know i can stumble through the log files, but
> how do i know the exact route a message takes through my mailserver?
> like from coming into the machine, being scanned by spamassassin,
> being scanned by clamav, then passed to qmail to be delivered. where
> can i see proof that it is actually doing all those steps?

Most of these components will issue messages to syslog using the 'mail' 
facility.  If you configure your syslog daemon to route messages from 
this facility to, say, /var/log/mail.log, you'll have all of the info 
you need.

If you're using syslog-ng, the following addition will do this for you:

destination mail { file("/var/log/mail.log" perm(0644) ); };
filter f_mail { facility(mail); };
log { source(src); filter(f_mail); destination(mail); };

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] tracking the life of an email.

[Nick Smith]

>
> Most of these components will issue messages to syslog using the 'mail'
> facility.  If you configure your syslog daemon to route messages from
> this facility to, say, /var/log/mail.log, you'll have all of the info
> you need.
>
> If you're using syslog-ng, the following addition will do this for you:
>
> destination mail { file("/var/log/mail.log" perm(0644) ); };
> filter f_mail { facility(mail); };
> log { source(src); filter(f_mail); destination(mail); };
>
> --
> gentoo-user@gentoo.org mailing list
>
>

for some reason qmail spreads things out into 3 or 4 or 5 different
log files, one for sent, smtp, pop, imap etc, its a real pain to go
through those files, i dont know if its qmail or syslog-ng thats doing
it, but ive been wanting to find a way to combine all those logs into
one mail.log file for easy grepping.....
thanks for the input.

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] tracking the life of an email.

[kashani]

Nick Smith wrote:
  > for some reason qmail spreads things out into 3 or 4 or 5 different
> log files, one for sent, smtp, pop, imap etc, its a real pain to go
> through those files, i dont know if its qmail or syslog-ng thats doing
> it, but ive been wanting to find a way to combine all those logs into
> one mail.log file for easy grepping.....
> thanks for the input.
> 

It's qmail that does that. Unless you mess with it, it does it's own 
logging in binary no less. Look for the qmail-analog package which makes 
parsing it easier.

kashani
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] tracking the life of an email.

[Mariusz Pękala]

[-- Attachment #1: Type: text/plain, Size: 594 bytes --]

On 2006-02-24 17:03:24 -0500 (Fri, Feb), Nick Smith wrote:
> for some reason qmail spreads things out into 3 or 4 or 5 different
> log files, one for sent, smtp, pop, imap etc, its a real pain to go
> through those files, i dont know if its qmail or syslog-ng thats doing
> it, but ive been wanting to find a way to combine all those logs into
> one mail.log file for easy grepping.....

Something like: 

  tail -F /var/log/qmail/qmail-*/current >> /var/log/qmail-all

would be Okay?

-- 
No virus found in this outgoing message.
Checked by "grep -i virus $MESSAGE"
Trust me.

[-- Attachment #2: Type: application/pgp-signature, Size: 191 bytes --]