greyfix --dump-triplets format documentation

20 views
Skip to first unread message

Tom Hendrikx

unread,
Sep 1, 2010, 5:55:41 AM9/1/10
to gre...@googlegroups.com
Hi,

I'm currently using greyfix for my personal mail server with great
succes. What i'm missing ios some report about its effectivity, and the
amounts of blocked messages. As I use munin for most reports, I have
written a number of plugins for it already, and am interested
in doing some work on greyfix too (unless someone else already has
written some greyfix plugin for munin).

I took a look at 'greyfix --dump-triplets' output, and think that this
would be appropriate for some kind of monitoring. I am not sure about
its format though. Could you explain the format used to me?

Regards,
Tom

Kim Minh Kaplan

unread,
Sep 1, 2010, 6:28:38 AM9/1/10
to gre...@googlegroups.com
Tom Hendrikx writes:

> I'm currently using greyfix for my personal mail server with great
> succes. What i'm missing ios some report about its effectivity, and the
> amounts of blocked messages. As I use munin for most reports, I have
> written a number of plugins for it already, and am interested
> in doing some work on greyfix too (unless someone else already has
> written some greyfix plugin for munin).

This is interesting, do not hesitate to report your results: I'd like to
have something like that.

> I took a look at 'greyfix --dump-triplets' output, and think that this
> would be appropriate for some kind of monitoring. I am not sure about
> its format though. Could you explain the format used to me?

I'll have to add this to the documentation. In the mean time here it
is. Each line is of the form:

<client-address> <sender> <recipient> <create-time> <access-time> <block-count> <pass-count>

where (<client-address>, <sender>, <recipient>) form the greylisting
triplet:

- <client-address> is the IP address of the SMTP client,
- <sender> is the envelope sender (MAIL FROM line in SMTP),
- <recipient> is the envelope recipient (RCPT TO line in SMTP),
- <create-time> is the time the triplet was first seen,
- <access-time> is the time the triplet was last seen,
- <bloc-count> is the number of times the triplet was greylisted,
- <pass-count> is the number of times the triplet was accepted.
--
Kim Minh

Tom Hendrikx

unread,
Jul 23, 2011, 7:38:53 PM7/23/11
to gre...@googlegroups.com
On 01/09/10 12:28, Kim Minh Kaplan wrote:
> Tom Hendrikx writes:
>
>> I'm currently using greyfix for my personal mail server with great
>> succes. What i'm missing ios some report about its effectivity, and
>> the amounts of blocked messages. As I use munin for most reports, I
>> have written a number of plugins for it already, and am interested in
>> doing some work on greyfix too (unless someone else already has
>> written some greyfix plugin for munin).
>
> This is interesting, do not hesitate to report your results: I'd like to
> have something like that.

I thought I might just follow up on this old message: I tried to write
various plugins but in the end only one of them seemed really
informative: the amount of triplets in the database, and their age.

I ran the plugin for a while, concluding that the other variants I tried
were not very useful. Until this week I was too lazy to cleanup the
code, but now I did cleanup, and fine-tuned the part that was working.

Attached is the plugin code. I'll also submit it to the munin-exchange
website.

--
Kind regards,

Tom

greyfix
Reply all
Reply to author
Forward
0 new messages