On 11/10/09 8:58 PM, "/dev/rob0" <r...@gmx.co.uk> wrote: > On Tuesday 10 November 2009 19:21:04 Chris Arnold wrote: >> OK, nothing stands out from pflogsumm.pl: > > Nothing? > >> Per-Day Traffic Summary >> date received delivered deferred bounced rejected >> -------------------------------------------------------------------- >> Nov 9 2009 1 3 1 >> Nov 10 2009 15328 15475 390 127 1115 > > Wouldn't you say that's a bit of an increase from the previous day? > Perhaps significant? That is not a "true" reading. Must be where the log got logrotated.
>> What are some things I should be looking for in the pflogsumm.pl >> report? > > 0. Not the summary, look at the actual logs. > 1. Find a suspected spam. This will be easy if you start with one > that was rejected by Verizon or other operator. > 2. Trace that back to where it entered the queue. > 3. Apply LART as necessary. > 4. Review DEBUG_README.html#mail if questions still exist at this > point. You can mung a specific email address if desired, but > domain names and IP addresses might be very important. Trying to get one of those rejected emails now.
