Hello Mate,
On Sat, 25 Jun 2011 16:42:38 +0200, mailinglist{at}modernbiztonsag{dot}org
wrote:
> Dear Community!
> I've attached a patch to include clapf
> (http://clapf.acts.hu/wiki/doku.php/start) and postscreen results in
> the
> graphs.
>
> Please review if You're interested.
I tested the postscreen code from your patch. Your regexp matches also
simple connects and immediately disconnects
like stupid monitor tools would do to test the port 25 for
availability.
example:
Jul 26 16:30:28 winnetou postfix/postscreen[9642]: CONNECT from
[213.133.113.83]:36123
Jul 26 16:30:28 winnetou postfix/postscreen[9642]: DISCONNECT
[213.133.113.83]:36123
So I changed your code to this:
elsif($prog eq 'postscreen')
{
if($text =~ /NOQUEUE: reject:/)
{
event($time, 'rejected');
}
}
This matches only real rejects, both 4xx and 5xx status codes.
example:
Jul 26 15:07:09 winnetou postfix/postscreen[7864]: NOQUEUE: reject:
RCPT from [27.41.155.112]:4018: 550 5.7.1 Service unavailable; client
[27.41.155.112] blocked using zen.spamhaus.org;
from=<vtenv{at}ms02{dot}hinet{dot}net>, to=<jfwhxta63740{at}yahoo{dot}com{dot}tw>,
proto=ESMTP, helo=<ikawho.com>
---
Best regards,
Tobias Koopmann
------------------------------------------------------------------
...and I will promise to go on as long as you want me to,
and I will dream along and help to make it real for you, too...
(the mirror & the lie - Motorpsycho)
------------------------------------------------------------------
--
Unsubscribe mailto:mailgraph-request@list.ee.ethz.ch?subject=unsubscribe
Help mailto:mailgraph-request@list.ee.ethz.ch?subject=help
Archive http://lists.ee.ethz.ch/mailgraph
WebAdmin http://lists.ee.ethz.ch/lsg2.cgi
|