maillog logging level

Mon Apr 18 22:47:58 IST 2005

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Billy Pumphrey wrote:

>Here is my syslog.conf file:
>
># Log all kernel messages to the console.
># Logging much else clutters up the screen.
>#kern.*                                                 /dev/console
>
># Log anything (except mail) of level info or higher.
># Don't log private authentication messages!
>*.info;mail.none;authpriv.none;cron.none                /var/log/messages
>
># The authpriv file has restricted access.
>authpriv.*                                              /var/log/secure
>
># Log all the mail messages in one place.
>mail.*                                                  -/var/log/maillog
>
>
That looks okay.

>
># Log cron stuff
>cron.*                                                  /var/log/cron
>
># Everybody gets emergency messages
>*.emerg                                                 *
>
># Save news errors of level crit and higher in a special file.
>uucp,news.crit                                          /var/log/spooler
>
># Save boot messages also to boot.log
>local7.*                                                /var/log/boot.log
>
>
>As far as clamv, are you speaking of:
># Path to the database directory.
># Default: hardcoded (depends on installation options)
>#DatabaseDirectory /var/lib/clamav
>
>In the clamd.conf file?
>
>
Yep, you should uncomment that. And check there is something in
/var/lib/clamav!

>
>
>>-----Original Message-----
>>From: Julian Field [mailto:MailScanner at ECS.SOTON.AC.UK]
>>Sent: Monday, April 18, 2005 4:22 PM
>>To: MAILSCANNER at JISCMAIL.AC.UK
>>Subject: Re: maillog logging level
>>
>>What priority levels are logged in maillog is governed by your
>>/etc/syslog.conf, so start there.
>>Also you need to edit the ClamAV config files so it knows where to find
>>your Clam signature database files for the autoupdating.
>>
>>Billy Pumphrey wrote:
>>
>>
>>
>>>I am using CentOS 4
>>>MailScanner 4.40.11
>>>Spamassassin    3.0.1
>>>
>>>In the past before I made my new server, maillog contained entries of all
>>>
>>>
>>of
>>
>>
>>>the mail that went through.  Now it just contains a few lines such as:
>>>
>>>Apr 17 05:10:35 WoodenMS update.virus.scanners: Found generic installed
>>>
>>>
>>Apr
>>
>>
>>>17 05:10:35 WoodenMS update.virus.scanners: Running autoupdate for
>>>
>>>
>>generic
>>
>>
>>>Apr 17 06:01:01 WoodenMS update.virus.scanners: Delaying cron job up to
>>>
>>>
>>600
>>
>>
>>>seco nds Apr 17 06:09:50 WoodenMS update.virus.scanners: Found clamav
>>>installed Apr 17 06:09:50 WoodenMS update.virus.scanners: Running
>>>
>>>
>>autoupdate
>>
>>
>>>for clamav Apr 17 06:09:50 WoodenMS ClamAV-autoupdate[1085]: ClamAV
>>>
>>>
>>update
>>
>>
>>>warning:
>>>ERROR:
>>>Please edit the example config file /etc/freshclam.conf.
>>>Apr 17 06:09:50 WoodenMS ClamAV-autoupdate[1085]: ClamAV update warning:
>>>ERROR:
>>>Please edit the example config file /etc/clamd.conf.
>>>Apr 17 06:09:50 WoodenMS ClamAV-autoupdate[1085]: ClamAV update warning:
>>>ERROR:
>>>Can't parse the config file /etc/clamd.conf Apr 17 06:09:50 WoodenMS
>>>ClamAV-autoupdate[1085]: ClamAV updater failed Apr 17 06:09:50 WoodenMS
>>>update.virus.scanners: Found generic installed Apr 17 06:09:50 WoodenMS
>>>update.virus.scanners: Running autoupdate for generic Apr 17 07:01:01
>>>WoodenMS update.virus.scanners: Delaying cron job up to 600 seco nds Apr
>>>
>>>
>>17
>>
>>
>>>07:10:01 WoodenMS update.virus.scanners: Found clamav installed Apr 17
>>>07:10:01 WoodenMS update.virus.scanners: Running autoupdate for clamav
>>>
>>>
>>Apr
>>
>>
>>>17 07:10:01 WoodenMS ClamAV-autoupdate[1248]: ClamAV update warning:
>>>ERROR:
>>>Please edit the example config file /etc/freshclam.conf.
>>>Apr 17 07:10:01 WoodenMS ClamAV-autoupdate[1248]: ClamAV update warning:
>>>ERROR:
>>>Please edit the example config file /etc/clamd.conf.
>>>Apr 17 07:10:01 WoodenMS ClamAV-autoupdate[1248]: ClamAV update warning:
>>>ERROR:
>>>Can't parse the config file /etc/clamd.conf Apr 17 07:10:01 WoodenMS
>>>ClamAV-autoupdate[1248]: ClamAV updater failed Apr 17 07:10:01 WoodenMS
>>>update.virus.scanners: Found generic installed Apr 17 07:10:01 WoodenMS
>>>update.virus.scanners: Running autoupdate for generic Apr 17 08:01:01
>>>WoodenMS update.virus.scanners: Delaying cron job up to 600 seco Nds
>>>
>>>
>>>
>>>Despite the ClamAV autoupdate error, that is a problem that I didn't see
>>>before.
>>>
>>>
>>>
>>>
>>>
>>>>-----Original Message-----
>>>>From: Julian Field [mailto:MailScanner at ECS.SOTON.AC.UK]
>>>>Sent: Monday, April 18, 2005 3:54 PM
>>>>To: MAILSCANNER at JISCMAIL.AC.UK
>>>>Subject: Re: maillog logging level
>>>>
>>>>MailScanner has logged using syslog as far back as I can remember...
>>>>
>>>>What is the problem, and what OS are you using?
>>>>
>>>>Billy Pumphrey wrote:
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>>I do not quite understand the new way of MailScanner loggin using the
>>>>>
>>>>>
>>>>>
>>>>>
>>>>syslog
>>>>
>>>>
>>>>
>>>>
>>>>>thing.  I searched the archives and found that I need to put a -r in
>>>>>
>>>>>
>>>>>
>>>>>
>>>>there
>>>>
>>>>
>>>>
>>>>
>>>>>somewhere but that is not enough information for me.  Can someone
>>>>>help me out with getting the mailscanner logging back to "old school"?
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>--
>>>>Julian Field
>>>>www.MailScanner.info
>>>>Buy the MailScanner book at www.MailScanner.info/store Professional
>>>>Support Services at www.MailScanner.biz MailScanner thanks transtec
>>>>Computers for their support
>>>>
>>>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>>>
>>>>------------------------ MailScanner list ------------------------ To
>>>>unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>>'leave mailscanner' in the body of the email.
>>>>Before posting, read the Wiki (http://wiki.mailscanner.info/) and the
>>>>archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>
>>>>Support MailScanner development - buy the book off the website!
>>>>
>>>>
>>>>
>>>>
>>>------------------------ MailScanner list ------------------------ To
>>>unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>'leave mailscanner' in the body of the email.
>>>Before posting, read the Wiki (http://wiki.mailscanner.info/) and the
>>>archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>>Support MailScanner development - buy the book off the website!
>>>
>>>
>>>
>>>
>>>
>>>>-----Original Message-----
>>>>From: Julian Field [mailto:MailScanner at ECS.SOTON.AC.UK]
>>>>Sent: Monday, April 18, 2005 3:54 PM
>>>>To: MAILSCANNER at JISCMAIL.AC.UK
>>>>Subject: Re: maillog logging level
>>>>
>>>>MailScanner has logged using syslog as far back as I can remember...
>>>>
>>>>What is the problem, and what OS are you using?
>>>>
>>>>Billy Pumphrey wrote:
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>>I do not quite understand the new way of MailScanner loggin using the
>>>>>
>>>>>
>>>>>
>>>>>
>>>>syslog
>>>>
>>>>
>>>>
>>>>
>>>>>thing.  I searched the archives and found that I need to put a -r in
>>>>>
>>>>>
>>>>>
>>>>>
>>>>there
>>>>
>>>>
>>>>
>>>>
>>>>>somewhere but that is not enough information for me.  Can someone
>>>>>help me out with getting the mailscanner logging back to "old school"?
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>--
>>>>Julian Field
>>>>www.MailScanner.info
>>>>Buy the MailScanner book at www.MailScanner.info/store Professional
>>>>Support Services at www.MailScanner.biz MailScanner thanks transtec
>>>>Computers for their support
>>>>
>>>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>>>
>>>>------------------------ MailScanner list ------------------------ To
>>>>unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>>'leave mailscanner' in the body of the email.
>>>>Before posting, read the Wiki (http://wiki.mailscanner.info/) and the
>>>>archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>
>>>>Support MailScanner development - buy the book off the website!
>>>>
>>>>
>>>>
>>>>
>>>------------------------ MailScanner list ------------------------ To
>>>unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>'leave mailscanner' in the body of the email.
>>>Before posting, read the Wiki (http://wiki.mailscanner.info/) and the
>>>archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>>Support MailScanner development - buy the book off the website!
>>>
>>>------------------------ MailScanner list ------------------------
>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>'leave mailscanner' in the body of the email.
>>>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>>Support MailScanner development - buy the book off the website!
>>>
>>>
>>>
>>>
>>>
>>--
>>Julian Field
>>www.MailScanner.info
>>Buy the MailScanner book at www.MailScanner.info/store
>>Professional Support Services at www.MailScanner.biz
>>MailScanner thanks transtec Computers for their support
>>
>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>
>>------------------------ MailScanner list ------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>>
>>
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!