Nicely darn, Karl.  Please do post your perl script to the list.  If you'd
rather send it directly to interested parties, please include me in that
list.

I'm just starting in on perl and VB Script, because (sigh) I have indeed
been using find.exe as a crutch.  For example, I call this script all too
often to split out my "from" lines in the log to check out issues or track a
message without looking at every line.  I have a very similar one for
subject lines:

@echo off
if exist from.txt del from.txt >nul
echo Filtering by from...
for %%a in (dec*.log) do find /i "From: " < %%a >> From.txt
echo FROM count=
find /i /c "From: " < From.txt

Counting the result is a nicety.  I usually do this on a subset of my logs
after copying them to my workstation.

Andrew 8) 

-----Original Message-----
From: IS - Systems Eng. (Karl Drugge) [mailto:[EMAIL PROTECTED] 
Sent: Thursday, July 17, 2003 7:55 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Best Practices question


Not to bash Scott, who is the freaking GOD of SMTP traffic.. but EEWWW..
yuck. FIND will work, but I'd have to wash my hands afterwards. My
computer is supposed to do my work FOR me, on a daily basis, and mail me
my checks at home ! ( I wish ! )...

Just write up a quick PERL/WSH/Shell script to parse the info, then
schedule it with AT to run whenever you want. I wrote mine up a few
weeks ago. If people want I'll post it. It's in PERL, so you'll need
active PERL installed, and you might need to tweak it for your local
settings. It's not as clean as Scott or another professional programmer
might make it, but it's quick, dirty, and gets the job done.

 Here's a sample of what mine does ( on a pretty slow day for SPAM ):

************************************************************************
  Total number of messages 665
  Total Passed, including whitelisted,   523,    percentage : 78.6
  Total HELD                             21,     percentage : 3.2
  Total BOUNCED                          121,    percentage : 18.2
************************************************************************
Total of Whitelisted     218
Total of SPAMCOP         25
Total of NOABUSE         66
Total of NOPOSTMASTER    58
Total of BADHEADERS      38
Total of BASE64          1
Total of HELOBOGUS       99
Total of MAILFROM        1
Total of PERCENT         0
Total of REVDNS2         34
Total of ROUTING         13
Total of SPAMHEADERS     40
Total of FILTERWORDS     248
Total of BLACKLIST       34
Total of REVDNSPROBLEM   77
Total of IPBlacklist     31
************************************************************************

Karl Drugge, Systems Network Engineer
 
 
 

-----Original Message-----
From: R. Scott Perry [mailto:[EMAIL PROTECTED] 
Sent: Thursday, July 17, 2003 10:21 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Best Practices question


>How can I determine the amount of caught/received emails with JunkMail?
>It would take me an eternity to go through each log file.

There are several ways that you can do this.  For example, you can do a 
directory of the \IMail\spool\spam directory, where the held E-mails 
are.  To find out how many are to you, you can use "find" with the /C
switch.

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to