Re: [AMaViS-user] amavis OK, but amavislogsumm not giving any results

2007-10-15 Thread Jordi Espasa Clofent
I didn't know amavislogsumm, but I can see in the changelog that the 
last version is dated on feb-2004. It seems an old and out-of-date project.
¿Do you know amavis-logwatch [1]? It's devepelod by Mike Capella, an 
active member of the present list; the project is active and Mike is 
very receptive to any feedback. I use it daily and I'm very happy with it.

[1] http://www.mikecappella.com/logwatch/

-- 
Thanks,
Jordi Espasa Clofent

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now  http://get.splunk.com/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] amavis OK, but amavislogsumm not giving any results

2007-10-15 Thread Voytek Eymont

On Mon, October 15, 2007 5:55 pm, Jordi Espasa Clofent wrote:
 I didn't know amavislogsumm, but I can see in the changelog that the
 last version is dated on feb-2004. It seems an old and out-of-date
 project. ¿Do you know amavis-logwatch [1]? It's devepelod by Mike Capella,
 an active member of the present list; the project is active and Mike is
 very receptive to any feedback. I use it daily and I'm very happy with
 it.

Jordi, thanks

yes, as I was searching for answers I came across Mike's announcement
post, and, installed both of his utilities already,

dumb Q:

 amavis-logwatch /var/log/maillog

snip

 536   Spam passed
-
 138  [EMAIL PROTECTED]

snip


does above mean...

138 identified SPAMs passed to mb@ as mb is in spam_lover  ?
and, 536 identified SPAMS in total were passed as in recipient is spam_lover?




-- 
Voytek


-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now  http://get.splunk.com/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] amavis OK, but amavislogsumm not giving any results

2007-10-15 Thread MrC
Voytek Eymont wrote:
 On Mon, October 15, 2007 5:55 pm, Jordi Espasa Clofent wrote:
 I didn't know amavislogsumm, but I can see in the changelog that the
 last version is dated on feb-2004. It seems an old and out-of-date
 project. ¿Do you know amavis-logwatch [1]? It's devepelod by Mike Capella,
 an active member of the present list; the project is active and Mike is
 very receptive to any feedback. I use it daily and I'm very happy with
 it.
 

Thanks Jordi.

 Jordi, thanks
 
 yes, as I was searching for answers I came across Mike's announcement
 post, and, installed both of his utilities already,
 

Great, let me know how they work for you.  I just posted the 
pre-releases for evaluation to those interested (see Changes for a 
change list).  I also created a mailing list for announcements and 
feedback, etc.  See the site.


 dumb Q:
 
  amavis-logwatch /var/log/maillog
 
 snip
 
  536   Spam passed --
  138  [EMAIL PROTECTED]
 
 snip
 
All numbers on the left column are counts of that row's hits.  So, 138 
is the number of times that email address was passed and considered 
spam.  And there were a total of 536 spam's passed to recipients.


 
 does above mean...
 
 138 identified SPAMs passed to mb@ as mb is in spam_lover  ?
 and, 536 identified SPAMS in total were passed as in recipient is spam_lover?
 

You'll have to examine your configuration to know the exact reason for 
why they were passed.  It could be spam lovers, it could be a policy 
bank (such as MYNETS), or other reasons.

MrC

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now  http://get.splunk.com/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] Log file analyser recomendations

2007-10-15 Thread MrC
Robert Brooks wrote:
 Mark Martinec wrote:
 I mean something like this...
 Spam Score -5  0   3  5 10 15
 Percentile5.89%  12.59%  19.43% 24.81% 35.02% 50.37%
 Seems like you want a frequency distribution: divide a score range
 into arbitrary buckets, fill them by counts of messages falling into
 each bucket, then at the end convert absolute counts to percents.
 
 that would work too :)

This feature is now available in the pre-release of amavis-logwatch, 
along with some other changes and additions.  See the Changes file, and 
sign up on the mailing list if you want to receive update announcements.

   http://www.mikecappella.com/logwatch

Mike

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now  http://get.splunk.com/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] amavis OK, but amavislogsumm not giving any results

2007-10-15 Thread mouss
MrC wrote:
 Voytek Eymont wrote:
 On Mon, October 15, 2007 5:55 pm, Jordi Espasa Clofent wrote:
 I didn't know amavislogsumm, but I can see in the changelog that the
 last version is dated on feb-2004. It seems an old and out-of-date
 project. ¿Do you know amavis-logwatch [1]? It's devepelod by Mike Capella,
 an active member of the present list; the project is active and Mike is
 very receptive to any feedback. I use it daily and I'm very happy with
 it.
 
 Thanks Jordi.
 
 Jordi, thanks

 yes, as I was searching for answers I came across Mike's announcement
 post, and, installed both of his utilities already,

 
 Great, let me know how they work for you.  I just posted the 
 pre-releases for evaluation to those interested (see Changes for a 
 change list).  I also created a mailing list for announcements and 
 feedback, etc.  See the site.
 
 
 dumb Q:

  amavis-logwatch /var/log/maillog

 snip
 
  536   Spam passed --
  138  [EMAIL PROTECTED]
 
 snip

 All numbers on the left column are counts of that row's hits.  So, 138 
 is the number of times that email address was passed and considered 
 spam.  And there were a total of 536 spam's passed to recipients.
 
 
 does above mean...

 138 identified SPAMs passed to mb@ as mb is in spam_lover  ?
 and, 536 identified SPAMS in total were passed as in recipient is spam_lover?

 
 You'll have to examine your configuration to know the exact reason for 
 why they were passed.  It could be spam lovers, it could be a policy 
 bank (such as MYNETS), or other reasons.
 


or just because this is the configured action. I pass all spam (to Junk
folder or +spam address).


-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now  http://get.splunk.com/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/


Re: [AMaViS-user] amavis OK, but amavislogsumm not giving any results

2007-10-15 Thread Stefan Jakobs
On Monday 15 October 2007 09:55, Jordi Espasa Clofent wrote:
 I didn't know amavislogsumm, but I can see in the changelog that the
 last version is dated on feb-2004. It seems an old and out-of-date project.
 ¿Do you know amavis-logwatch [1]? It's devepelod by Mike Capella, an
 active member of the present list; the project is active and Mike is
 very receptive to any feedback. I use it daily and I'm very happy with it.

 [1] http://www.mikecappella.com/logwatch/

Hello,

you can get a new version of amavislogsumm from:
https://po2.uni-stuttgart.de/~rusjako/amavislogsumm/amavislogsumm.v74 

I mention this only for completeness and I also recommend to use 
amavis-logwatch, because it is active maintained (as you see).

Greetings Stefan

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now  http://get.splunk.com/
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/