AMAVIS-LOGWATCH(1) General Commands Manual AMAVIS-LOGWATCH(1) (NAME) amavis-logwatch - Amavisd-new (SYNOPSIS) amavis-logwatch [options] [logfile ...] (DESCRIPTION) amavis-logwatch(1) Amavisd-new Amavisd-new ( Amavis ) . Logwatch Amavisd-new Logwatch . Amavis-logwatch . Amavis . . $log_level Amavis . Amavis Log Level . Amavis-logwatch : Summary () Detailed (). . (Summary) : ****** Summary ******************************************** 9 Miscellaneous warnings 20313 Total messages scanned ---------------- 100.00% 1008.534M Total bytes scanned 1,057,524,252 ======== ================================================ 1190 Blocked ------------------------------- 5.86% 18 Malware blocked 0.09% 4 Banned name blocked 0.02% 416 Spam blocked 2.05% 752 Spam discarded (no quarantine) 3.70% 19123 Passed -------------------------------- 94.14% 47 Bad header passed 0.23% 19076 Clean passed 93.91% ======== ================================================ 18 Malware ------------------------------- 0.09% 18 Malware blocked 0.09% 4 Banned -------------------------------- 0.02% 4 Banned file blocked 0.02% 1168 Spam ---------------------------------- 5.75% 416 Spam blocked 2.05% 752 Spam discarded (no quarantine) 3.70% 19123 Ham ----------------------------------- 94.14% 47 Bad header passed 0.23% 19076 Clean passed 93.91% ======== ================================================ 1982 SpamAssassin bypassed 32 Released from quarantine 2 DSN notification (debug supplemental) 2 Bounce unverifiable 2369 Whitelisted 2 Blacklisted 12 MIME error 58 Bad header (debug supplemental) 40 Extra code modules loaded at runtime Amavis . ,,, . Blocked / Passed ( / ) ( ) ( ). () . ( ) () . Ham ( ) . . Detailed . noisy ( ) . . IP . (Spam blocked) Detailed amavis- logwatch : ****** Detailed ******************************************* 19346 Spam blocked ----------------------------------- 756 from@example.com 12 10.0.0.2 12 <> 12 192.168.2.2 12 <> 5 192.168.2.1 ... amavis-logwatch (STDIN) logfile Amavis . logfile . amavis-logwatch . amavis-logwatch . . . --[no]autolearn --show_autolearn boolean (autolearn) () . $log_templ Amavis . Amavis ( ) $log_templ amavisd.conf . README.customize Amavis Amavisd <> . --[no]by_ccat_summary --show_by_ccat_summary boolean Summary () . : . -f config_file --config_file config_file config_file . . . CONFIGURATION FILE . --debug keywords amavis-logwatch. keywords . --debug xxx xxx . --detail level amavis-logwatch level . . amavis-logwatch Summary Detailed . level amavis-logwatch Summary . level Detailed . level Detailed . level . ( max_report_width) . level ( --line_style ). --[no]first_recip_only --show_first_recip_only boolean . --help . --ipaddr_width width IP / width . IPv6 . -l limiter=levelspec --limit limiter=levelspec limiter levelspec . --line_style style . : full truncate wrap. style full max_report_width detail . style truncate () max_report_width . style wrap max_report_width . detail . --full --truncate --wrap . --nodetail Detailed . Detailed . --sarules `S,H' --sarules default SpamAssassin (SpamAssassin Rules Hit) . S H N Spam Ham all . default . --nosarules SpamAssassin . --sa_timings nrows SpamAssassin . nrows N . Amavis 2.6+ SpamAssassin 3.3+ . --sa_timings_percentiles `P1 [P2 ...]' SpamAssassin . P1 ... . . --nosa_timings SpamAssassin . --version amavis-logwatch. --score_frequencies `B1 [B2 ...]' --score_frequencies default (Spam Score Frequency) . B1 ... . . default . --noscore_frequencies Spam Score Frequency . --score_percentiles `P1 [P2 ...]' --score_percentiles default (Spam Score Percentiles) . P1 ... . default . --noscore_percentiles Spam Score Percentiles . --[no]sect_vars --show_sect_vars boolean Detailed () . ( ) . amavis-logwatch . --[no]startinfo --show_startinfo boolean Amavis () Amavis . --[no]summary --show_summary Summary () . Amavis_Show_Summary . --syslog_name namepat syslog amavis-logwatch syslog . namepat amavis-logwatch . Amavis (amavis) . : (non-capturing) : (pattern) (?:pattern) . --timings percent Amavis . percent N . --timings_percentiles `P1 [P2 ...]' . P1 ... . . --notimings Amavis ..IP "--version" amavis-logwatch. (Level Limiters) Detailed . sect_vars . --limit limiter=levelspec $amavis_limiter=levelspec . levelspec LEVEL CONTROL . . Amavis (ccatmajor) : VIRUS, BANNED, UNCHECKED, SPAM, SPAMMY, BADH, OVERSIZED, MTA, CLEAN. MalwareBlocked MalwarePassed (ccatmajor: VIRUS). BannedNameBlocked BannedNamePassed MIME (ccatmajor: BANNED). UncheckedBlocked UncheckedPassed SpamAssassin (Amavis ccatmajor: UNCHECKED). SpamBlocked SpamPassed (Amavis ccatmajor: SPAM). SpammyBlocked SpammyPassed (Amavis ccatmajor: SPAMMY). BadHeaderBlocked BadHeaderPassed (ccatmajor: BAD-HEADER). OversizedBlocked OversizedPassed (Amavis ccatmajor: OVERSIZED). MtaBlocked MtaPassed MTA (Amavis ccatmajor: MTA-BLOCKED). . [: mtapassed .] OtherBlocked OtherPassed (Amavis ccatmajor: OTHER). TempFailBlocked TempfailPassed (Amavis ccatmajor: TEMPFAIL). CleanBlocked CleanPassed (Amavis ccatmajor: CLEAN ). : AvConnectFailure () . AvTimeout () . ArchiveExtract . BadHeaderSupp . Bayes (Bayesian). BadAddress . Blacklisted () . Whitelisted . BounceKilled BounceRescued BounceUnverifiable (DSN) . ContentType MIME /. DccError DCC . DefangError (defang). Defanged ( ). DsnNotification . DsnSuppressed (DSN) . ExtraModules Amavis . FakeSender Amavis. Fatal . . LocalDeliverySkipped . MalwareByScanner () . MimeError MIME. Panic (Panic). . p0f (p0f) ( ) IP. : Windows . Released Amavis . SADiags SpamAssassin. SmtpResponse SMTP MTA. . TmpPreserved Amavis . . VirusScanSkipped . Warning . . WarningAddressModified Amavis . WarningNoQuarantineId X-Quarantine-ID . WarningSecurity levelspec Amavis. WarningSmtpShutdown SMTP MTA. WarningSql SQL..IP "Whitelisted" ( ) . Blacklisted . (LEVEL CONTROL) Detailed . Detailed : ( --detail) ( ) Detailed ( ) . N . levelspec . : level 0 level 1 level 2 level 3 level 4 level 4 level 2 level 3 level 4 level 4 level 4 level 3 level 4 level 3 level 1 level 2 level 3 level 4 () . levelspec "2" 0 2 . 2 (3 4 ...) : level 0 level 1 level 2 level 2 level 1 level 2 . (dictionary spam attack) IP . levelspec . levelspec "2::5" 2 5 . N 10 . "3:10:" levelspec 3 10 . levelspec : l 0 10 . l 0 ( 0 Summary 1 Detailed ). . l.n n 1 n . n 1 . ( . ). l:n:t l n t . l n n l t l . n t n n ( ) . l n / t . (wildcarding) ( ). . levelspec . amavis-logwatch 5 ( Detailed 5 ). (EXAMPLES) ..SH " (CONFIGURATION FILE)" Amavis-logwatch . . amavis-logwatch Logwatch amavis-logwatch Logwatch . : o . o # . o : option = value o = . o value () . o ( ). o amavis- logwatch <<$amavis_>> amavis-logwatch . o Logwatch <<$amavis_>> Logwatch ( ) amavis-logwatch . o True Yes False No . o ( Logwatch ). <<$amavis_>> . : $amavis_Line_Style = Truncate --line_style Truncate (Level limiters) $amavis_ --limit : $amavis_SpamBlocked = 2 --limit SpamBlocked=2 : 1) --config_file . 2) . 3) . . (EXIT STATUS) amavis-logwatch . (EXAMPLES) : amavis-logwatch Amavis STDIN . file /path/to/amavis.log . file . amavis-logwatch : amavis-logwatch file : amavis-logwatch --help Amavis : amavis-logwatch --detail 1 file : grep 'May 25' file | amavis-logwatch --detail 5 Sent . Sent : amavis-logwatch --nosummary --nodetail \ --limit spamblocked '1 1:10:' file . ( ) IP ( ) envelope from ( ) . N : amavis-logwatch --nosummary --nodetail \ --limit spamblocked '1:4: 2:2: 3::6' file 19346 Spam blocked ----------------------------------- 756 joe@example.com 12 10.0.0.1 12 <> 12 10.99.99.99 12 <> ... 640 fred@example.com 8 10.0.0.1 8 <> 8 192.168.3.19 8 <> ... 595 peter@sample.net 8 10.0.0.1 8 <> 7 192.168.3.3 7 <> ... 547 paul@example.us 8 192.168.3.19 8 <> 7 10.0.0.1 7 <> ... ... : Logwatch 7.3.6 --print STDOUT . 7.3.6 STDOUT --print --output stdout . . Amavis: logwatch --service amavis --range today --detail 1 Amavis Detailed: logwatch --service amavis --range today --detail 5 Detailed: logwatch --service amavis --range yesterday --detail 6 Detailed: logwatch --service amavis --range \ 'between 12/12 and 12/14' --detail 8 : logwatch --service amavis --range today --detail 10 : logwatch --service amavis --range today --detail 11 Amavis $log_level 0 Amavis . amavis- logwatch $log_level=0 . 2 $log_level . (noise) Amavis syslog Amavis () Amavis amavis-logwatch . Amavis amavisd.conf : amavisd.conf: $log_level = 2; $syslog_facility = 'local5'; $syslog_priority = 'debug'; $log_level 2 Amavis facility syslog ( local5 user) : syslog.conf: #mail.info -/var/log/maillog mail.info;local5.notice -/var/log/maillog local5.info -/var/log/amavisd-info.log Amavis $log_level 0 maillog amavisd-info.log $log_level amavisd-info.log . Amavis RELEASE_NOTES Amavis : "syslog priorities are now dynamically derived" amavis-logwatch Logwatch ( ) : LOGWATCH_DETAIL_LEVEL --detail Logwatch Detail ...conf/services/amavis.conf . LOGWATCH_DEBUG --debug Logwatch . amavis_xxx Logwatch amavis_xxx ...conf/services/amavis.conf amavis ( .../scripts/services/amavis ) . (FILES) (Standalone mode) /usr/local/bin/amavis-logwatch amavis-logwatch /usr/local/etc/amavis-logwatch.conf amavis-logwatch Logwatch (Logwatch mode) /etc/logwatch/scripts/services/amavis amavis Logwatch /etc/logwatch/conf/services/amavis.conf amavis Logwatch (SEE ALSO) logwatch(8) README (README FILES) README amavis-logwatch Changes Bugs Makefile LICENSE (LICENSE) MIT/X-Consortium: http://www.opensource.org/licenses/mit-license.php (AUTHORS) Mike Cappella Logwatch amavis Jim O'Halloran . . AMAVIS-LOGWATCH(1)