Announce: mailscanner-mrtg extensive monitoring for MailScanner machines

Dale Lovelace dlovelace at HOTELS.COM
Sun Dec 8 15:31:41 GMT 2002


  Ok.. I have just been using the 550 errors like this in my access file:

From:reallybadspammer.com       ERROR:550 Please keep your spam thanks

  I'l put something in the docs to explain the 55x errors, and how you can use my method to keep bad spammers from ever even reaching MailScanner.

 Thanks!
  Dale

-----Original Message-----
From: Kris Stumpner [mailto:kris at JUMPOUT.ORG]
Sent: Sunday, December 08, 2002 1:35 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Announce: mailscanner-mrtg extensive monitoring for
MailScanner machines


Here's a partial list of the sendmail reject levels.   Full is available at
http://www.sendmail.org/rfc/0821.html

         550 Requested action not taken: mailbox unavailable
            [E.g., mailbox not found, no access]
         551 User not local; please try <forward-path>
         552 Requested mail action aborted: exceeded storage allocation
         553 Requested action not taken: mailbox name not allowed
            [E.g., mailbox syntax incorrect]
         554 Transaction failed

It looks to me like then RBL checks in the sendmail config will report back
the error levels as follows.

Level 550 if you do not send a message back to the mailserver.
 (ie.  FEATURE(dnsbl,`proxies.relays.monkeys.com')dnl )
  or you will also return level 550 if it fails the recipient check.  I'm
sure we've all seen this one.

Dec  1 21:33:21 formula sendmail[12664]: gB23XKg12664: ruleset=check_rcpt,
arg1=<china9988 at 21cn.com>, relay=[211.206.49.162], reject=550 5.7.1
<china9988 at 21cn.com>... Relaying denied. IP name lookup failed
[211.206.49.162]


Level 553 if you have a reject message sent back to the mailserver.
 (ie.  FEATURE(dnsbl,`relays.ordb.org',`Rejected - see
http://ordb.org/')dnl )

--
Kris

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
Behalf Of Mike Kercher
Sent: Sunday, December 08, 2002 1:13 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: [MAILSCANNER] Announce: mailscanner-mrtg extensive
monitoring for MailScanner machines


Yeah...I think the highest mine go are 553.  I think this has to do with the
number of RBL's in my sendmail.mc/cf  Don't quote me,
but sendmail MAY give my 2nd RBL a reject of 551, 3rd a 552 and so on.  I'd
have to look at my logs a little more to be sure.

Mike


-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
Behalf Of Dale Lovelace
Sent: Sunday, December 08, 2002 1:07 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Announce: mailscanner-mrtg extensive monitoring for
MailScanner machines


  Great Idea! So all of your rejects would be between 550-559 correct? Then
we'd use /reject=55\d/ (\d means any digit...). Adding
it now!

  Thanks!
  Dale

-----Original Message-----
From: Mike Kercher [mailto:mike at CAMAROSS.NET]
Sent: Sunday, December 08, 2002 12:59 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Announce: mailscanner-mrtg extensive monitoring for
MailScanner machines


Another change that Kris Stumpner and I came up with.  In your perl script,
you are searching for /reject=550/ for rejected emails.
In my logs, rejections get 550 and up...so if our regex is correct,
/reject=55./ should catch ALL of them.

Mike


-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
Behalf Of Dale Lovelace
Sent: Sunday, December 08, 2002 12:27 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Announce: mailscanner-mrtg extensive monitoring for
MailScanner machines


  Hi!

  Glad to hear some people are working with it already!

  I'm not altogether familiar with apache include files and such. Could you
possibly send me one, with instructions for installing
it, and I will put it in the package?

  Thanks!
  Dale

-----Original Message-----
From: Mike Kercher [mailto:mike at CAMAROSS.NET]
Sent: Sunday, December 08, 2002 12:16 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Announce: mailscanner-mrtg extensive monitoring for
MailScanner machines


I just got it up and running too.  http://bladeware.com/mailscanner-mrtg
I'm going to run it tandem with the other graphs I have at
http://bladeware.com  The only changes I had to make were moving the
/mailscanner-mrtg to the correct vhost.

What I might suggest, for those running servers with vhosts is that an
Apache include file (for httpd.conf) be provided that would
create an alias for /mailscanner-mrtg/  This way, if one is running many
vhosts, they can hit the graphs from any one of the
domains.

Mike


-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
Behalf Of Matthew Davis
Sent: Sunday, December 08, 2002 12:05 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Announce: mailscanner-mrtg extensive monitoring for
MailScanner machines


* Dale Lovelace (dlovelace at HOTELS.COM) wrote:
> Hello,
>
>   I have put together a set of scripts and configuration files to use
> MRTG for extensive MailScanner monitoring. mailscanner-mrtg is free
> software under the terms of the GPL.

Works great!  No configuration needed.  Installed the RPM and made sure mrtg
was working and it started right up.

http://dogpound.vnet.net/mailscanner-mrtg/

I'm just a 56k server.  So please be patient.  And its only been running
maybe 10-15 minutes.  Tomorrow i should have a few more
stats.


----------------------------------------------
| Matthew Davis /\ http://dogpound.vnet.net/ |
|--------------------------------------------|
| Sunday, December 08, 2002 / 01:00AM        |
----------------------------------------------
Have you ever imagined a world without hypothetical situations?




More information about the MailScanner mailing list