ANNOUNCE: MailWatch for MailScanner 0.3 Beta

Chris Campbell Chris.Campbell at FAC.COM
Fri Sep 5 16:41:52 IST 2003 

Thanks for the reply Steve...
However, I have 4 external (dmz) mailscanner boxes, with the maiwatch mysql
db sever internally.  I have all 4 inserting to this one mailwatch mysql
box....
This is why I want the functionality without parsing the maillog....

I have written my own perl to do basically what you said below, and it
seems to work for me.  My goal is to let our help desk be able to get this
information without my help though.

I am sure the below will be helpful and useful for others, but in the
meantime if I have some free time maybe I can come up with some php magic
myself....
.....................................
Christopher S. Campbell
UNIX Admin





                    Steve Freegard
                    <steve.freegard at lbs       To:     "'Chris Campbell'" <Chris.Campbell at FAC.COM>
                    ltd.co.uk>                cc:     "'MailScanner mailing list'" <MAILSCANNER at JISCMAIL.AC.UK>
                                              Subject:     RE: ANNOUNCE:  MailWatch for MailScanner 0.3 Beta
                    09/05/03 10:57 AM






Hi Chris,

>>> What are the odds we can grab and insert into the sql db the
sendmail....

I'm reluctant to put this into MailWatch as it requires some intellegent
parsing of the maillog on the message id which could and usually does
appear
more than once (particualarly when the message is deferred) and maillog
should also only be readable by root which poses another problem.

That said - I've written something for you which should give you the
beginnings of what you're after - it is pretty crude however.  I'm also
presuming that you're using 0.2.

Copy the attached files to /var/www/html/mailscanner.

Run 'mysql mailscanner < create_relay_table.sql' to create the table.

Make sure that sendmail_relay.php is executable and make an entry into
root's crontab to run it every 'n' minutes - this script parses the maillog
and for every entry that has the line 'Sendmail','relay=' and 'stat=' is
makes an entry into the sendmail_relay table - if one already exists for
the
message id being inserted it is overwritten.

You will then be able to see the relay information at the bottom of the
Message Detail page.

Kind regards,
Steve

-----Original Message-----
From: Chris Campbell [mailto:Chris.Campbell at FAC.COM]
Sent: 05 September 2003 13:33
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: ANNOUNCE: MailWatch for MailScanner 0.3 Beta


Very nice... I *finally* got it hacked up enough to work on rh 7.2 and rh
7.3 (I was getting the same mysql server died error these bsd kids were
getting)


But, here is a question for you....

What are the odds we can grab and insert into the sql db the sendmail relay
log......and the status.....
I am looking for the relay part and whether is was Sent, Queued, etc.....




.....................................
Christopher S. Campbell
UNIX Admin
First Albany Corp
518.447.8544
chris.campbell at fac.com





                    Steve Freegard
                    <steve.freegard at LBS       To:
MAILSCANNER at JISCMAIL.AC.UK
                    LTD.CO.UK>                cc:
                    Sent by:                  Subject:     ANNOUNCE:
MailWatch for MailScanner 0.3 Beta
                    MailScanner mailing
                    list
                    <MAILSCANNER at JISCMA
                    IL.AC.UK>


                    09/05/03 08:08 AM
                    Please respond to
                    MailScanner mailing
                    list






Hi all,

I've (finally!) released a beta of 0.3 - you can download it from
http://www.sourceforge.net/projects/mailwatch

If you haven't already noticed - the project has been moved to Sourceforge,
so I encourage everyone who uses MailWatch to sign-up for the Mailing Lists
that are available and to use the other features such as the Feature
Requests, Bug Tracking, Forums and Patches from this point onward.

Changes in this release:

 - New MailWatch.pm file that contains the MailWatch SQL Logging code.

 - Changed the SQL Logging procedure names from SQLLogging to
MailWatchLogging
   to save confusion as to which versions people are using.

 - Updated MailWatchLogging procedures to better handle MySQL death and
   subsequent restart without needing to restart MailScanner.

 - Message headers now displayed on the Message Detail page.

 - OpenRBL lookup address fixed (OpenRBL had updated their site).

 - Spam Action(s) displayed next to Spam/High Scoring Spam on the Message
   Detail page.

 - New 'Quarantine Manager' allows quarantined messages to be released to
   recipient(s), deleted or learnt/unlearnt by SpamAssassin as Spam or Ham.

 - Major speed-ups on page display.

 - Added extra Virus regular expressions and modified the existing to drop
   the requirement of 'Include Scanner Name in Reports' in
MailScanner.conf.

 - New Sendmail inbound/outbound queue display.

 - Fixed the display of the 'Blocked Files' percentage in Today's Totals.

 - Fixed the volume display in the reports to use the average over the
   reporting period e.g. if you receive 500Mb of mail on average per day
but
   you occasionally spike at 1Gb - the reports will display the volume in
Mb.

 - Added new 'MySQL status' page to the 'Other' page.

 - Fixed 'SpamAssassin Rule Hits' report not display any data under some
   installations of MailScanner.

 - New reports 'Top Mail Relays' and 'Top Sender Domains by
Quantity/Volume'.

 - Added 'hostname' the the list of available filters to allow people with
   multiple scanners report only on a specific one.

Kind regards,
Steve

--
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender and delete the message from your mailbox.

This footnote also confirms that this email message has been swept by
MailScanner (www.mailscanner.info) for the presence of computer viruses.


--
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender and delete the message from your mailbox.

This footnote also confirms that this email message has been swept by
MailScanner (www.mailscanner.info) for the presence of computer viruses.

(See attached file: detail.php)(See attached file: create_relay_table.sql)
(See attached file: sendmail_relay.php)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: detail.php
Type: application/octet-stream
Size: 3238 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20030905/1cab939f/detail.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: create_relay_table.sql
Type: application/octet-stream
Size: 215 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20030905/1cab939f/create_relay_table.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sendmail_relay.php
Type: application/octet-stream
Size: 829 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20030905/1cab939f/sendmail_relay.obj

More information about the MailScanner mailing list