POSTFIX-LOGWATCH(1) General Commands Manual POSTFIX-LOGWATCH(1) (NAME) postfix-logwatch - Postfix (SYNOPSIS) postfix-logwatch [options] [logfile ...] (DESCRIPTION) postfix-logwatch(1) MTA Postfix Postfix . Logwatch Postfix Logwatch . Postfix-logwatch . Postfix . . Postfix-logwatch : Summary () Detailed (). . Summary : ****** Summary ******************************************** 81 *Warning: Connection rate limit reached (anvil) 146 Warned 68.310M Bytes accepted 71,628,177 97.645M Bytes delivered 102,388,245 ======== ================================================ 3464 Accepted 41.44% 4895 Rejected 58.56% -------- ------------------------------------------------ 8359 Total 100.00% ======== ================================================ anvil WARN Postfix ( ) Postfix ( ). Accepted Rejected Postfix ( ) ( ) ( ). Detailed . (noisy) . . IP . MX Detailed postfix-logwatch : ****** Detailed ******************************************* 261 MX errors -------------------------------------- 261 Unable to look up MX host 222 Host not found 73 foolishspammer.local 60 completely.bogus.domain.example 11 friend.example.com 39 No address associated with hostname 23 dummymx.sample.net 16 pushn.spam.sample.com postfix-logwatch STDIN logfile Postfix . logfile . postfix-logwatch . postfix-logwatch . . . -f config_file --config_file config_file config_file . . . CONFIGURATION FILE . --debug keywords postfix-logwatch. keywords . --debug xxx xxx . --[no]delays () . Postfix ( . ) delays=a/b/c/d : a ( ) b c ( DNS HELO TLS) d . delay= . : . --delays_percentiles p1 [p2 ...] . p1 p2 ... ( ) . - . --detail level postfix-logwatch level . . postfix-logwatch Summary Detailed . level postfix-logwatch Summary . level Detailed . level Detailed . level . ( max_report_width) . level ( --line_style ). --help . --ignore_service pattern postfix postfix/service . service (regular expression) . : (cloistering / non-capturing) (capturing): (?:pattern) (pattern) . --ipaddr_width width IP / (address/hostname) width . IPv6 . -l limiter=levelspec --limit limiter=levelspec limiter levelspec . --line_style style . : full truncate wrap. style full max_report_width detail . style truncate () max_report_width . style wrap max_report_width . detail . --full --truncate --wrap . --[no]long_queue_ids (long queue IDs) Postfix ( . ) () . --nodetail Detailed . Detailed . --[no]summary --show_summary Summary () . postfix_Show_Summary . --recipient_delimiter delimiter delimiter. recipient_delimiter Postfix main.cf postconf -d recipient_delimiter . . --reject_reply_patterns r1 [r2 ...] (reject reply patterns) . r1 [r2 ...] [45][0-9.][0-9.] "Warn". "." . . . "5.. 4.. Warn" : ( warn_if_reject). 421 45x ( 450 451 452 ) . : "421 4.. 5.. Warn". RFC 2821 . CONFIGURATION FILE reject_reply_patterns . --[no]sect_vars --show_sect_vars boolean Detailed () . ( ) . postfix-logwatch . --syslog_name namepat syslog postfix-logwatch syslog . namepat postfix-logwatch . Postfix (postfix) Postfix . namepat syslog_name Postfix main.cf master.cf postconf -d syslog_name . : (cloistering / non-capturing) (capturing): (?:pattern) (pattern) . --[no]unknown --show_unknown boolean 'unknown' postfix IP/ Detailed () . : . --version postfix- logwatch..SS " (Level Limiters)" Detailed . sect_vars . --limit limiter=levelspec $postfix_limiter=levelspec. levelspec LEVEL CONTROL . . (reject) ( rejectbody rejectsender ). reject_reply_patterns ### . ### x . reject_reply_patterns "5.. 4.. Warn" rejectbody : --limit 5xxrejectbody --limit 4xxrejectbody --limit warnrejectbody. ### rejectXXX reject_reply_patterns . : ... --reject_reply_patterns "421 5.." \ --limit rejectrbl="1:10:" : ... --reject_reply_patterns "421 5.." \ --limit 421rejectrbl="1:10:" --limit 5xxrejectrbl="1:10:" reject_reply_patterns postfix-logwatch.conf . [ ] AttrError (attribute) . BCCed BCC access header_checks body_checks . ( postfix 2.6) BounceLocal BounceRemote (bounces) . none local virtual avcheck maildrop 127.0.0.1 . ByIpRejects (5xx) IP . CommunicationError Postfix . Anvil Anvil. ConnectionInbound smtpd. ConnectionLostInbound smtpd. ConnectionLostOutbound smtp MTA . ConnectToFailure smtp MTA . DatabaseGeneration postmap . Deferrals Deferred . deferred deferrals . Deliverable . Delivered local virtual. Discarded DISCARD access header_checks body_checks . DNSError DNS . EnvelopeSenderDomains . ( : localpart) EnvelopeSenders . ( : ) Error (error) Postfix. FatalConfigError main.cf master.cf. FatalError (fatal) Postfix. Filtered FILTER access header_checks body_checks . Forwarded MDA ( local -> virtual). HeloError XXXXXXXXXXX Hold postsuper HOLD access header_checks body_checks . HostnameValidationError . HostnameVerification IP ( smtpd ) . DNS (FCRDNS) . DNS <> ( IP Postfix ). IllegalAddrSyntax MAIL FROM RCPT TO. LdapError LDAP LDAP. MailerLoop MX . MapProblem access . MessageWriteError Postfix spool. NumericHostname . PanicError (panic) Postfix. PixWorkaround <> SMTP Cisco PIX . PolicydWeight policyweight/policydweight. PolicySpf PolicySPF. Postgrey Postgrey. Postscreen postscreen verify 2.7. DNSBLog dnsblog 2.7. Prepended PREPEND header_checks body_checks . ProcessExit Postfix . ProcessLimit Postfix . QueueWriteError Postfix. RblError RBL. Redirected REDIRECT access header_checks body_checks . ###RejectBody REJECT body_checks . ###RejectClient (smtpd_client_restrictions). ###RejectConfigError . ###RejectContent message_reject_characters. ###RejectData DATA SMTP (smtpd_data_restrictions). ###RejectEtrn ETRN SMTP (smtpd_etrn_restrictions). ###RejectHeader REJECT header_checks . ###RejectHelo HELO/EHLO SMTP (smtpd_helo_restrictions). ###RejectInsufficientSpace . ###RejectLookupFailure DNS. ###RejectMilter Milter. DSN 5.7.1 . 5xx . reject_reply_patterns 5.. milter . ###RejectRbl RBL. ###RejectRecip (smtpd_recipient_restrictions). ###RejectRelay . ###RejectSender (smtpd_sender_restrictions). ###RejectSize . ###RejectUnknownClient ..IP "###RejectUnknownReverseClient" . ###RejectUnknownUser . ###RejectUnverifiedClient . ###RejectVerify . Replaced REPLACE header_checks body_checks . ReturnedToSender (maximal_queue_lifetime). SaslAuth SASL SASL . SaslAuthFail SASL. Sent SMTP. SentLmtp LMTP. SmtpConversationError SMTP/ESMTP. SmtpProtocolViolation SMTP/ESMTP. StartupError Postfix. TimeoutInbound smtpd (timeout) . TlsClientConnect TLS. TlsOffered TLS . TlsServerConnect TLS. TlsUnverified TLS. Undeliverable . Warn WARN access header_checks body_checks . WarnConfigError Postfix. WarningsOther warning Postfix. (LEVEL CONTROL) Detailed . Detailed : ( --detail ) ( ) Detailed ( ) . N . levelspec . : level 0 level 1 level 2 level 3 level 4 level 4 level 2 level 3 level 4 level 4 level 4 level 3 level 4 level 3 level 1 level 2 level 3 level 4 . levelspec "2" 0 2 . (collapse) 2 (3 4 ...) : level 0 level 1 level 2 level 2 level 1 level 2 . (dictionary spam attack) IP . levelspec . levelspec "2::5" 2 5 . N . levelspec "3:10:" 3 . levelspec : l 0 10. l 0 ( 0 Summary 1 Detailed ). . l.n n 1 n . n 1 . ( . ). l:n:t l n t . l n N l t l . n t n N ( ) . l n / t . (wildcarding) ( ). . levelspec . postfix-logwatch 5 ( Detailed 5 ). (EXAMPLES) ..SH " (CONFIGURATION FILE)" postfix-logwatch . . postfix-logwatch Logwatch postfix-logwatch Logwatch . : o . o # . o : option = value o = . o value . o ( ). o postfix-logwatch "$postfix_" postfix-logwatch . o Logwatch "$postfix_" Logwatch Logwatch ( ) postfix-logwatch . o True Yes 1 False No 0 . o ( Logwatch ). "$postfix_" . : $postfix_Line_Style = Truncate --line_style Truncate $postfix_ --limit : $postfix_Sent = 2 --limit Sent=2 : 1) --config_file . 2) . 3) . . . --reject_reply_patterns reject . --reject_reply_patterns . (EXIT STATUS) postfix-logwatch 0 . (EXAMPLES) : postfix-logwatch Postfix STDIN . file /path/to/postfix.log . file . postfix-logwatch : postfix-logwatch file : postfix-logwatch --help Postfix : postfix-logwatch --detail 1 file (May 25th): grep 'May 25' file | postfix-logwatch --detail 5 (Sent) . Sent : postfix-logwatch --nosummary --nodetail --limit sent='1 1:10:' file . () ( Sent Original To ). N : postfix-logwatch --nosummary --nodetail \ --limit sent '1:5: 2:3: 3::2' file 1762 Sent via SMTP ----------------------------------- 352 example.com 310 joe 255 joe.bob@virtdomain.example.com 7 info@virtdomain.example.com 21 pooryoda3 11 hot93uh ... 244 sample.net 97 buzz 26 leroyjones 14 sally ... 152 example.net 40 jim_jameson 23 sam_sampson 19 paul_paulson ... 83 sample.us 44 root 39 jenny1 69 dom3.example.us 10 kay 7 ron 6 mrsmith ... ... reject_reply_patterns RBL ( Reject RBL IP / ). RBL ( reject_reply_pat ): postfix-logwatch --reject_reply_pat '421 4.. 5.. Warn' \ --nosummary --nodetail --limit 421rejectrbl='2 2::5' file 300 421 Reject RBL --------------------------------------- 243 zen.spamhaus.org=127.0.0.2 106 10.0.0.129 129.0.0.example.com 41 192.168.10.70 hostx10.sample.net 40 192.168.42.39 hostz42.sample.net 15 10.1.1.152 dsl-10-1-1-152.example.us 14 10.10.10.122 mail122.sample.com 7 192.168.3.44 smalltime-spammer.example.com ... 48 zen.spamhaus.org=127.0.0.4 17 10.29.124.92 10-29-124-92.adsl-static.sample.us ... 8 zen.spamhaus.org=127.0.0.11 ... 1 zen.spamhaus.org=127.0.0.10 ... : Logwatch 7.3.6 STDOUT --print . 7.3.6 STDOUT --print --output stdout . . Postfix: logwatch --service postfix --range today --detail 1 Postfix Detailed: logwatch --service postfix --range today --detail 5 Detailed: logwatch --service postfix --range yesterday --detail 6 Detailed: logwatch --service postfix --range \ 'between 12/12 and 12/14' --detail 8 : logwatch --service postfix --range today --detail 10 : logwatch --service postfix --range today --detail 11 (ENVIRONMENT) postfix-logwatch Logwatch ( ) : LOGWATCH_DETAIL_LEVEL --detail Logwatch Detail ...conf/services/postfix.conf . LOGWATCH_DEBUG --debug Logwatch . postfix_xxx Logwatch postfix_xxx ...conf/services/postfix.conf postfix ( .../scripts/services/postfix ) . (FILES) (Standalone mode) /usr/local/bin/postfix-logwatch postfix-logwatch /usr/local/etc/postfix-logwatch.conf postfix-logwatch Logwatch (Logwatch mode) /etc/logwatch/scripts/services/postfix postfix Logwatch /etc/logwatch/conf/services/postfix.conf postfix Logwatch.SH " (SEE ALSO)" logwatch(8) (README FILES) README postfix-logwatch Changes Bugs Makefile LICENSE (LICENSE) MIT/X-Consortium: http://www.opensource.org/licenses/mit-license.php (AUTHORS) Mike Cappella Logwatch postfix Kenneth Porter . . POSTFIX-LOGWATCH(1)