reduce loging of postscreen and dnsblog

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

reduce loging of postscreen and dnsblog

Benny Pedersen-2
is it possible to reduce logs from subject and still keeping loging for
new connection that are not cached in postscreen cache ?

checked logs today, i have more logs of bots then real users :/

makes it waste of log lines for content already logged :/
Reply | Threaded
Open this post in threaded view
|

Re: reduce loging of postscreen and dnsblog

Wietse Venema
Benny Pedersen:
> is it possible to reduce logs from subject and still keeping loging for
> new connection that are not cached in postscreen cache ?

No. Use a filter in your favorite syslogd.

> checked logs today, i have more logs of bots then real users :/
> makes it waste of log lines for content already logged :/

Postfix logs allow you to find out what happened if you're
concerned that you are missing something.

Postfix logs also compress very well.

% ls -l /var/log/maillog.20180329.bz2
-rw-r-----  1 root  wheel  374422 Mar 30 00:00 /var/log/maillog.20180329.bz2
% bzcat !$|wc -c
bzcat /var/log/maillog.20180329.bz2 | wc -c
 7293513
% expr 7293513 / 374422
19

That's a 20x reduction. You would not get that with minimal logs.

        Wietse