[AMaViS-user] If some one can help me understand somesthing from my logs
Hi, ive run postifx-logwatch and amavis-logwatch and have the results below, something i dont understand is shouldnt the amount of Accepted message in postfix (79975 Accepted ) match the amount of Total scanned messages in amavisd-new (47106 Total messages scanned) ? Any feedback would be great.. Thanks == 79975 Accepted17.69% 372109 Rejected82.31% -- 452084 Total 100.00% == 128 5xx Reject relay denied 0.03% 163 5xx Reject HELO/EHLO 0.04% 62021 5xx Reject unknown user 16.67% 21549 5xx Reject recipient address 5.79% 3 5xx Reject sender address0.00% 288149 5xx Reject RBL 77.44% 4 5xx Reject header0.00% 92 5xx Reject message size 0.02% -- 372109 Total 5xx Rejects 100.00% == 42 4xx Reject recipient address 4.27% 941 4xx Reject sender address 95.73% -- 983 Total 4xx Rejects 100.00% == ** Summary * 47106 Total messages scanned -- 100.00% == 10480 Blocked - 22.25% 184 Banned name blocked0.39% 16737 Spam discarded (no quarantine)35.53% 5 Spammy blocked 0.01% 1610 Bad header blocked 3.42% 2 Tempfail blocked 0.00% 36626 Passed -- 77.75% 337 Spammy passed 0.72% 36289 Clean passed 77.04% == -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] If some one can help me understand somesthing from my logs
Ilo,
On 6/14/09 11:27 AM, Ilo Lorusso wrote:
Hi,
ive run postifx-logwatch and amavis-logwatch and have the results below,
something i dont understand is shouldnt the amount of Accepted message
in postfix
(79975 Accepted ) match the amount of Total scanned messages in
amavisd-new (47106 Total messages scanned) ?
The general ratio is about 2 accepted per 1 scanned. Postfix accepts
(i.e. assigns a queue ID) a message, passes it to amavis, which then
passes the message back via SMTP/LMTP to postfix which then again
accepts the message (creating a new queue ID). Thus, 2 to 1.
The 2 to 1 ratio is approximate; there may be other paths in your setup
that bypass calling a content filter for certain messages, and there are
minor discrepancies due to log rotation or date cut off.
Mike
==
79975 Accepted17.69%
372109 Rejected82.31%
--
452084 Total 100.00%
==
128 5xx Reject relay denied 0.03%
163 5xx Reject HELO/EHLO 0.04%
62021 5xx Reject unknown user 16.67%
21549 5xx Reject recipient address 5.79%
3 5xx Reject sender address0.00%
288149 5xx Reject RBL 77.44%
4 5xx Reject header0.00%
92 5xx Reject message size 0.02%
--
372109 Total 5xx Rejects 100.00%
==
42 4xx Reject recipient address 4.27%
941 4xx Reject sender address 95.73%
--
983 Total 4xx Rejects 100.00%
==
** Summary ***
47106 Total messages scanned -- 100.00%
==
10480 Blocked - 22.25%
184 Banned name blocked0.39%
16737 Spam discarded (no quarantine)35.53%
5 Spammy blocked 0.01%
1610 Bad header blocked 3.42%
2 Tempfail blocked 0.00%
36626 Passed -- 77.75%
337 Spammy passed 0.72%
36289 Clean passed 77.04%
==
-
--
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] If some one can help me understand somesthing from my logs
Ilo Lorusso a écrit :
Hi,
ive run postifx-logwatch and amavis-logwatch and have the results below,
something i dont understand is shouldnt the amount of Accepted message
in postfix
(79975 Accepted ) match the amount of Total scanned messages in
amavisd-new (47106 Total messages scanned) ?
linear calculus doesn't work in non linear algebra :)
mail that is scanned by amavisd-new and not blocked will be processed by
postfix twice (once before amavis and then after amavis).
also, multi-recipient mail may be counted in many ways (a message may be
passed as multiple ones, depending on how you configure postfix...).
This can get even more complicated depending when you expand aliases.
I've abandoned attempts to do such calculations years ago, because I
could find no reasonable way to explain why I was trying to count how
many potatoes became tomatoes, and among these which were also apples
and which became oranges in a later step ;-p
now, I only count in each step:
- at smtp time: how much transactions were blocked by which rule.
- after that, the blocked transactions are no more counted.
- at the filter level: how much is blocked/passed because of viruses or
spam (with additional numbers for SA rules that I am watching)
- for the latter, I differentiate between mail that was received
directly and mail that I fetched/received from a forwarder. This is
because FN/FP numbers have different consequences (I have no control of
the filtering setup at ISPs/forwarders, and even when I do, I prefer not
to rely on).
Any feedback would be great..
Thanks
==
79975 Accepted17.69%
372109 Rejected82.31%
--
452084 Total 100.00%
==
128 5xx Reject relay denied 0.03%
163 5xx Reject HELO/EHLO 0.04%
62021 5xx Reject unknown user 16.67%
21549 5xx Reject recipient address 5.79%
3 5xx Reject sender address0.00%
288149 5xx Reject RBL 77.44%
4 5xx Reject header0.00%
92 5xx Reject message size 0.02%
--
372109 Total 5xx Rejects 100.00%
==
42 4xx Reject recipient address 4.27%
941 4xx Reject sender address 95.73%
--
983 Total 4xx Rejects 100.00%
==
** Summary
*
47106 Total messages scanned -- 100.00%
==
10480 Blocked - 22.25%
184 Banned name blocked0.39%
16737 Spam discarded (no quarantine)35.53%
5 Spammy blocked 0.01%
1610 Bad header blocked 3.42%
2 Tempfail blocked 0.00%
36626 Passed -- 77.75%
337 Spammy passed 0.72%
36289 Clean passed 77.04%
==
--
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
--
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
