Mail Log

一直以来邮件服务器经常 给 加入黑名单。
写了段脚本 处理 maillog ,把发邮件很多的名单加入到了邮件系统的黑名单中。

#!/usr/bin/python
import os
f = open('/var/log/maillog')
WORKPATH = '/root/mailbin/'
os.system('touch '+WORKPATH+'log')
w = open(WORKPATH+'log','w')
for line in f:
        s = line.find('from=<')
        e = line.find('> to')
        if s > 0 and e > 0:
                s = s + 6
                w.write(line[s:e]+'\n')


f.close()
w.close()
os.system('sort '+WORKPATH+'log | uniq -c | sort -n -r > '+WORKPATH+'log.1')
os.system('rm -rf '+WORKPATH+'log')
os.system('cat '+WORKPATH+'log.1 > /usr/local/pmail/www/htdocs/ulike/mlist.htm')

查询log.1得到数据。

6672 [e-mail]
2336 [e-mail]
2306 [e-mail]
2233 [e-mail]
2200 [e-mail]
1740 [e-mail]
1740
1371 [e-mail]
1284 [e-mail]
1162 [e-mail]
1147 [e-mail]
1130 [e-mail]
957 [e-mail]
901 [e-mail]
871 [e-mail]
727 [e-mail]
617 [e-mail]
385 [e-mail]
368 [e-mail]
251 [e-mail]
212 [e-mail]
205 [e-mail]
164 [e-mail]
147 [e-mail]
145 [e-mail]
144 SystemMailbox{1f05a927-a3f2-4f57-a5d5-8f9ac61f7c5a}@f5host.local
126 [e-mail]
124 [e-mail]
100 [e-mail]
94 [e-mail]
76 [e-mail]
76 [e-mail]
70 [e-mail]
67 [e-mail]
62 [e-mail]
53 [e-mail]
44 [e-mail]1616
41 [e-mail]
40 [e-mail]
39 [e-mail]
38 [e-mail]
38 [e-mail]

处理之后在邮件服务器上面看到的 rrdtools 统计信息。






修改日志归档策略

[root@pmail logrotate.d]# less mail
/var/log/maillog {
rotate 7
daily
postrotate
/bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true
endscript
}

让maillog 每天执行一遍，处理邮件的脚本每天处理一天，从而可以获取昨天的邮件列表。
可以防止很群发的垃圾邮件地址。
但是 如果是单个邮箱 发的邮件就放不了。