Better Mail log

[bokken]

Hi to all!!

I have a maillog of qmail in my plesk, but its a very poor.

I need a best log to diagnose smtp problems like this:

20130306:12:38:32|231744233|9476|Starting to process msgid -|231744233|
20130306:12:38:32|231744233|9481|Processing Domain -|xxxxxxxxx.es|
20130306:12:38:32|231744233|9515|DNS Lookup Returned -|[(10, 'mail.xxxxxxxxx.es', ('xxx.xxx.xxx.xxx',))] fromCache=False|
20130306:12:38:32|231744233|9516|Connecting to Domain -|xxxxxxxxxxx.es|
20130306:12:38:32|231744233|9487|Block timeout in seconds -|300|
20130306:12:38:32|231744233|9488|Connecting to MX -|mail.xxxxxxxxxxx.es|
20130306:12:38:32|231744233|9489|Connecting to A -|xxx.xxx.xxx.xxx|
20130306:12:38:32|231744233|9491|Channels Vip vipid:bindhost -|0:10.3.9.36|
20130306:12:38:32|231744233|4099|Connecting to <BindHost:ConnectHost:ConnectPort> -|<10.3.9.36:144.76.13.245:25>|
20130306:12:38:33|231744233|4139|-|Reply: '220 xxxxxx.xxxxxxxxxx.es ESMTP'|
20130306:12:38:33|231744233|9492|Connection Status <status> -|1|
20130306:12:38:33|231744233|4139|-|Sending: EHLO xxx.xxxxxxxx.com|
20130306:12:38:33|231744233|4139|-|Reply: '250-xxxxxx.xxxxxxxxxx.es
250-AUTH=LOGIN CRAM-MD5 PLAIN
250-AUTH LOGIN CRAM-MD5 PLAIN
250-STARTTLS
250-PIPELINING
250 8BITMIME'|
20130306:12:38:33|231744233|4139|-|Sending: STARTTLS |
20130306:12:38:33|231744233|4139|-|Reply: '220 ready for tls'|
20130306:12:48:43|231744233|4099|Connecting to <BindHost:ConnectHost:ConnectPort> -|<10.3.9.36:144.76.13.245:25>|
20130306:12:48:44|231744233|4139|-|Reply: '220 xxxxxx.xxxxxxxxxx.es ESMTP'|
20130306:12:48:44|231744233|4139|-|Sending: EHLO xxx.xxxxxxxx.com|
20130306:12:48:44|231744233|4139|-|Reply: '250-xxxxxx.xxxxxxxxxx.es
250-AUTH=LOGIN CRAM-MD5 PLAIN
250-AUTH LOGIN CRAM-MD5 PLAIN
250-STARTTLS
250-PIPELINING
250 8BITMIME'|
20130306:12:48:44|231744233|9523|Starting SendSmtpMsg in domain -|xxxxxxxxxxx.es|
20130306:12:48:44|231744233|9570|BATV values are DSN_BVP_enable: <IsEnabled> mail_from: <Mail From> mdoutbound <IsOutbound> selfdeliveryMode <Delivery Mode> -|0:youcef.bouzerzour-ext@xxxxx.com:1:0|
20130306:12:48:44|231744233|4139|-|Sending: MAIL FROM:<youcef.bouzerzour-ext@xxxxx.com>|
20130306:12:48:44|231744233|4139|-|Reply: '250 ok'|
20130306:12:48:44|231744233|4139|-|Sending: RCPT TO:<xxxxx@xxxxxxxxxxx.es>|
20130306:12:48:44|231744233|4139|-|Reply: '250 ok'|
20130306:12:48:44|231744233|4139|-|Sending: DATA |
20130306:12:48:44|231744233|4139|-|Reply: '354 go ahead'|
20130306:12:48:45|231744233|4139|-|Reply: '250 ok 1362570556 qp 2884'|
20130306:12:48:45|231744233|9524|LOG_STAT <mail from>, <rcpt fix>, <size>, <date>, <secure Conn>. -|youcef.bouzerzour-ext@xxxxxxxxx.com:[xxxx@xxxxxxxx.es']:4406:2013/03/06 12:48:45:0|
20130306:12:48:45|231744233|9506|Closing SMTP Connection||
20130306:12:48:45|231744233|4139|-|Sending: QUIT |
20130306:12:48:45|231744233|4139|-|Reply: '221 xxxxx.xxxxxxxxxxx.es'|
20130306:12:48:45|231744233|9480|Finished processing msgid -|231744233|

Its better change to postfix? the log its the same in postfix?

As best I can get a log or similar to this, with all the SMTP conversation.

Thanks for your help.

 

[Eric Pretorious]

Hi to all!!

I have a maillog of qmail in my plesk, but its a very poor.

I need a best log to diagnose smtp problems like this:

AFAICT, the SMTP transaction was successful (i.e., the message was received for relay/delivery by the MTA):

Starting SendSmtpMsg in domain -|xxxxxxxxxxx.es
BATV values are DSN_BVP_enable: <IsEnabled> mail_from: <Mail From> mdoutbound <IsOutbound> selfdeliveryMode <Delivery Mode> -|0:youcef.bouzerzour-ext@xxxxx.com:1:0
Sending: MAIL FROM:<youcef.bouzerzour-ext@xxxxx.com>
Reply: '250 ok'
Sending: RCPT TO:<xxxxx@xxxxxxxxxxx.es>
Reply: '250 ok'
Sending: DATA
Reply: '354 go ahead'
Reply: '250 ok 1362570556 qp 2884'
LOG_STAT <mail from>, <rcpt fix>, <size>, <date>, <secure Conn>. -|youcef.bouzerzour-ext@xxxxxxxxx.com:[xxxx@xxxxxxxx.es']:4406:2013/03/06 12:48:45:0
Closing SMTP Connection|
Sending: QUIT
Reply: '221 xxxxx.xxxxxxxxxxx.es'

What problem, exactly, are you experiencing?

 

[bokken]

Hello Eric,

The problem not is this log, the log displayed not is my qmail.

This its the qmail log:

Mar 6 13:59:03 rootserver smtp_auth: SMTP user xxxx@xxxxxxxx.es : logged in from xx.xx-xx-xx-xx.xx.xx-xx.xx[xx.xx.xx.xx]
Mar 6 13:59:04 rootserver qmail-queue-handlers[22340]: Handlers Filter before-queue for qmail started ...
Mar 6 13:59:05 rootserver qmail-queue-handlers[22340]: from=xxx@xxxxxxxxx.es
Mar 6 13:59:05 rootserver qmail-queue-handlers[22340]: to=xx.xx@xxxx.xxxx.com
Mar 6 13:59:05 rootserver qmail-queue-handlers[22340]: handlers_stderr: SKIP
Mar 6 13:59:05 rootserver qmail-queue-handlers[22340]: SKIP during call 'check-quota' handler
Mar 6 13:59:05 rootserver qmail-queue-handlers[22340]: starter: submitter[22343] exited normally
Mar 6 13:59:05 rootserver qmail: 1362574745.138557 new msg 60429988
Mar 6 13:59:05 rootserver qmail: 1362574745.138574 info msg 60429988: bytes 14513 from <xxxx@xxxxxxx.es> qp 22343 uid 2020
Mar 6 13:59:05 rootserver qmail: 1362574745.197427 starting delivery 27611: msg 60429988 to remote xxxx.xxxx@xxxx.xxxxx.com
Mar 6 13:59:05 rootserver qmail: 1362574745.197453 status: local 0/10 remote 1/20
Mar 6 13:59:05 rootserver qmail-remote-handlers[22344]: Handlers Filter before-remote for qmail started ...
Mar 6 13:59:05 rootserver qmail-remote-handlers[22344]: from=xxxxx@xxxxxxx.es
Mar 6 13:59:05 rootserver qmail-remote-handlers[22344]: to=xxxx.xxxxx@xxxxx.xxxxx.com


The log does not report much, the other one its much better... (other mail server). This email its sended? And I get all mixed lines connections, pop and smtp, its so dificult see this log...

This email not arrive, but i dont know the reason...

I need the full SMTP dialog betwen servers.

I can change te log level in qmail to get a better log?

 

[MarioP]

Hi there, logs are like that because different people need to look for different things. To make a log your own, use pipes and grep / egrep to filter out the string that you want to monitor and keep an eye on it with "tail -f". Postfix's logs are similar, more detailed, but they also mix in POP/IMAP login and logout logs with actual email receiving, sending, queuing, etc... The log is only as good as the tools you use to look at it are.

 

[bokken]

Although use "grep" to see the mail, I need more information of the log...

I need the smtp dialog betwen servers (mail from, smtp to, sending, ok, quit. etc....), the plesk log not report this information....

There is much difference between the first and the second log.

 

[Eric Pretorious]

Although use "grep" to see the mail, I need more information of the log...

These seem relevant:

1. "LIfe With Qmail",
   • Sections G.7, qmail doesn't log SMTP activity - and
   • Section 1.5.5, Queue management - Detailed delivery statistics (via qmailanalog).
2. D.J. Bernstein's own page "Qmail: the Internet's MTA". Specifically, see the section abtout qmailanalog, a collection of tools to help you analyze qmail's activity record.

HTH,