Tim Ritberg <t...@server.invalid> wrote:
>>> Frag Amavis.
>>> log_level auf 1 oder 2
>>
>> Wo stellt man das ein?
>>
>> root@tandem:/etc/amavis/conf.d# fpg log *
>>
>> 15-av_scanners:
>> "--log=/var/log/vascan.log {}",
>> # GeCAD AV technology is acquired by Microsoft; RAV has been discontinued.
>> "{} -ss -i '*' -log=$MYHOME/vbuster.log", [0], [1],
>> # '-f -log scandir {}', [0], [3],
>>
>> 20-debian_defaults:
>> $log_recip_templ = undef; # disable by-recipient level-0 log entries
>> $DO_SYSLOG = 1; # log via syslogd (preferred)
>> $syslog_ident = 'amavis'; # syslog ident tag, prepended to all messages
>> $syslog_facility = 'mail';
>> $syslog_priority = 'debug'; # switch to info to drop debug output, etc
>>
>>
>
> Du hast Debian?
Ubuntu, aber das hat wohl dieselbe config.
> Dann sollte es eine 50-user geben.
> $log_level = 1;
Ok, ist drin, nach "service amavis status" steht nun VIEL in
/var/log/mail.log:
2024-01-10 18:27:25 logging initialized, log level 1, syslog: amavis.mail
2024-01-10 18:27:25 starting. /usr/sbin/amavisd-new at
tandem-fahren.de amavisd-new-2.12.2 (20211013), Unicode aware, LANG="en_US.I$
2024-01-10 18:27:25 perl=5.034000, user=112, EUID: 112 (112); group=, EGID: 121 119 121 (121 119 121)
2024-01-10 18:27:26 SpamControl: init_pre_chroot on SpamAssassin done
2024-01-10 18:27:26 Net::Server: 2024/01/10-18:27:26 Amavis (type Net::Server::PreForkSimple) starting! pid(49001)
2024-01-10 18:27:26 Net::Server: Binding to UNIX socket file "/var/lib/amavis/amavisd.sock"
2024-01-10 18:27:26 Net::Server: Binding to TCP port 10024 on host 127.0.0.1 with IPv4
2024-01-10 18:27:26 Net::Server: Binding to TCP port 10024 on host ::1 with IPv6
2024-01-10 18:27:26 Net::Server: Group Not Defined. Defaulting to EGID '121 119 121'
2024-01-10 18:27:26 Net::Server: User Not Defined. Defaulting to EUID '112'
2024-01-10 18:27:26 Module Amavis::Conf 2.412
(...)
2024-01-10 18:27:26 Using primary internal av scanner code for ClamAV-clamd
2024-01-10 18:27:26 Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan
2024-01-10 18:27:26 Deleting db files __db.001,snmp.db,__db.003,__db.002,nanny.db in /var/lib/amavis/db
2024-01-10 18:27:26 Creating db in /var/lib/amavis/db/; BerkeleyDB 0.64, libdb 5.3
2024-01-10 18:27:26 initializing Mail::SpamAssassin (0)
2024-01-10 18:27:27 SA info: zoom: able to use 388/388 'body_0' compiled rules (100%)
2024-01-10 18:27:29 SA info: util: setuid: ruid=112 euid=112 rgid=121 119 121 egid=121 119 121
2024-01-10 18:27:29 SpamControl: init_pre_fork on SpamAssassin done
2024-01-10 18:27:29 extra modules loaded after daemonizing/chrooting: /etc/perl/Net/libnet.cfg, Mail/SpamAssassin/CompiledRegexps/
body_0.pm, Mail/SpamAssassin/CompiledRegexps/
body_neg2000.pm, Mail/SpamAssassin/Plugin/FreeMail.pm, Mail/SpamAssassin/Plugin/SpamCop.pm, Net/Cmd.pm, Net/Config.pm, Net/SMTP.pm
Leider ohne amavis prefix ($syslog_ident). Ich sehe also nicht, ob die
Meldung vom postfix oder von amavis kam.
Noch besser waers, wenn es ein seperates amavis.log gaebe
Aber das ist wohl nicht vorgesehen.
Ich koennte es zwar mit rsyslog abspeichern, aber dafuer braeuchte ich ein
entsprechedes prefix tag in den Meldungen.