https://github.com/parseword/util-mailstats
Miscellaneous scripts to gather statistics from postfix
https://github.com/parseword/util-mailstats
dnsbl dnsbl-rejections mail php postfix postfix-maillog
Last synced: 3 months ago
JSON representation
Miscellaneous scripts to gather statistics from postfix
- Host: GitHub
- URL: https://github.com/parseword/util-mailstats
- Owner: parseword
- License: apache-2.0
- Created: 2017-01-24T22:57:21.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2020-01-15T22:50:40.000Z (over 5 years ago)
- Last Synced: 2025-01-13T07:26:21.139Z (5 months ago)
- Topics: dnsbl, dnsbl-rejections, mail, php, postfix, postfix-maillog
- Language: PHP
- Size: 16.6 KB
- Stars: 2
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# util-mailstats
Miscellaneous scripts to gather statistics from postfix logs. The necessary
MySQL/Maria DDL is provided in the `schema-` files. You'll need to
define `MAILSTATS_DBHOST`, `MAILSTATS_DBUSER`, `MAILSTATS_DBPASS`, `MAILSTATS_DBNAME`, and `MAILSTATS_RECIPIENT`
somewhere, I keep them in a separate config file.
## mailstats-dnsbl-rejections.php
A daily cron job that parses the Postfix maillog for lines indicating DNSBL rejections, e.g.
`Jan 24 17:46:08 mail postfix/smtpd[9762]: NOQUEUE: reject: RCPT from unknown[47.90.x.xx]: 554 5.7.1 Service unavailable; Client host [47.90.x.xx] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/47.90.x.xx; from= to= proto=SMTP helo=<47.90.x.xx>`
The number of rejections per DNSBL is tallied, emailed to the administrator, and
recorded in a database for later review. Useful for evaluating how well various
RBLs are performing in your environment, and whether or not you want to continue
using them.
## mailstats-no-such-user.php
A daily cron job that parses the Postfix maillog for rejections due to `5.1.1
No such user` (or any arbitrary message) and records them to a database. Sender,
recipient, and origin MTA are recorded to the database and an email summary is
sent. Useful for identifying persistent spammers and RFC-ignorant senders who
need to be blocked at the firewall, as 5.1.1 is a permanent failure.
## mailstats-tls-errors.php
A daily cron job that parses the Postfix maillog for errors related to TLS, e.g.
`Apr 8 15:01:17 mail postfix/smtpd[31634]: SSL_accept error from mta2.e.mozilla.org[68.232.195.239]: -1`
The number of errors per origin MTA is tallied, emailed to the administrator, and
recorded in a database for later review.