James Robertson wrote:
We use postfix as a relay and Antispam filter in front of an Exchange
Server.
Please do not hijack unrelated threads. compose a _new_ mail instead of
replying to an unrelated one.
Management want to log the sender and recipient of emails both inbound
and outbound and the totals for a given period e.g. 24 hours and have it
easily viewable in a web browser etc.
They don't require what the email contents just the levels so they can
see whether any employees are spending to much time emailing friends
with non-work related email etc.
<disgress>
This is really a social problem. The first thing is to create a clear
and simple policy that is accepted/acknowledged by users. if in addition
you tell users that their mail is watched, this should discourage them
and you won't need to watch (as Nimzowitsch said: the threat is often
stronger than the execution. This was about chess, but it's true in
other areas).
otherwise, users can create accounts at yahoo/gmail/... and your postfix
logs won't help you. or they can just surf the web!
</disgress>
anyway, if you use amavisd-new, then just grep its logs. otherwise, you
need to aggregate multiple lines (lines that contain from= and lines
that contain to=. use the QueueID to correlate these). but if you are
using a content_filter, make sure not to count each transaction more
than once.
I have looked at pflogsum and awstats but it doesn't really provide the
details I'm looking for (unless I missed some of the config).
I would need something like.
Date Sender Recipent email count
23/09/2008 [EMAIL PROTECTED] [EMAIL PROTECTED] 20
