Please Excuse my ignorance, I am 3 months into the Linux experience and about 72 hours ago I decided to ditch my FC1 installation in favor of SuSE 9.0 and I am very happy about that decision so far. One thing that I miss, however, is a daily message that FC1 used to send me which liad out various system messages, failed logins, FTP connections, SSH connections, diskspace summary etc. Can this functionality be found in SuSE? If so were do I start looking to get it up and running. Thanks, JP
JP wrote:
Please Excuse my ignorance, I am 3 months into the Linux experience and about 72 hours ago I decided to ditch my FC1 installation in favor of SuSE 9.0 and I am very happy about that decision so far.
One thing that I miss, however, is a daily message that FC1 used to send me which liad out various system messages, failed logins, FTP connections, SSH connections, diskspace summary etc.
Can this functionality be found in SuSE? If so were do I start looking to get it up and running.
Thanks, JP
I've so far not found it under KDE, but during install, it asks if you want user to receive system mail. I run mutt to check on things. It used to be under one of the menus, Control Center, System or some such. q:Quit d:Del u:Undel s:Save m:Mail r:Reply g:Group ?:Help 1 N May 12 root ( 26) SuSEconfig: SuSEfirewall2_update 2 N May 12 root ( 9) SuSEconfig: SuSEfirewall2_update_FW_LOG 3 N May 09 root ( 30) SuSEconfig: module-init-tools-3.0_pre10-37.5.i586.patch.rpm__etc_modprobe.conf 4 N May 09 root ( 30) SuSEconfig: qt3-3.3.1-36.5.i586.rpm__etc_X11_qtrc 5 N May 09 root ( 30) SuSEconfig: kdebase3-SuSE-9.1-10.i586.rpm__mnt_etc_opt_kde3_share_config_kickerrc 6 N May 09 root ( 30) SuSEconfig: openvpn-1.5.0-46.i586.rpm__mnt_etc_init.d_openvpn 7 N May 09 root ( 30) SuSEconfig: OpenOffice_org-1.1.1-20.i586.rpm__mnt_opt_OpenOffice.org_share_dict_ooo_dictionary.lst 8 N May 09 root ( 30) SuSEconfig: hotplug-0.44-32.noarch.rpm__mnt_etc_hotplug_blacklist 9 N May 09 root ( 30) SuSEconfig: tightvnc-1.2.9-177.i586.rpm__mnt_etc_xinetd.d_vnc 10 N May 09 root ( 30) SuSEconfig: module-init-tools-3.0_pre10-35.i586.rpm__mnt_etc_modprobe.conf 11 N May 09 root ( 10) SuSEconfig: netcfg-9.1-0.noarch.rpm__mnt_etc_HOSTNAME 12 N May 09 root ( 11) SuSEconfig: xntp.caveats 13 N May 09 root ( 30) SuSEconfig: postfix-2.0.19_20040312-11.i586.rpm__mnt_etc_postfix_main.cf 14 N May 09 root ( 30) SuSEconfig: postfix-2.0.19_20040312-11.i586.rpm__mnt_etc_postfix_master.cf 15 N May 09 root ( 30) SuSEconfig: i4l-isdnlog-2004.4.5-0.i586.rpm__mnt_etc_isdn_isdn.conf 16 N May 09 root ( 30) SuSEconfig: postfix-2.0.19_20040312-11.i586.rpm__mnt_etc_init.d_postfix 17 N May 09 root ( 30) SuSEconfig: XFree86-4.3.99.902-40.i586.rpm__mnt_etc_X11_xdm_Xservers 18 N May 09 root ( 12) SuSEconfig: graphviz_license 19 N May 09 root ( 2) SuSEconfig: file-4.07-48.i586.rpm__mnt_etc_magic 20 N May 09 root ( 133) SuSEconfig: openssh-changes 21 N May 09 root ( 26) SuSEconfig: SuSEfirewall2_update 22 N May 09 root ( 10) SuSEconfig: sysconfig-update-notify 23 N May 09 root ( 26) SuSEconfig: cyrus-notify 24 N May 09 root ( 2) SuSEconfig: aaa_base-9.1-0.i586.rpm__mnt_etc_modules.conf Message about ssh changes ====================== X-Original-To: root Delivered-To: lancelot@barrabas.local Date: Sun, 09 May 2004 21:24:48 +0100 To: root@barrabas.local Subject: SuSEconfig: openssh-changes User-Agent: nail 10.6 11/15/03 From: root <root@barrabas.local> Dear users, This is OpenSSH version 3.8p1. There is an very important changes in sshd with SuSE Linux 9.1: The "gssapi" support has been replaced with the "gssapi-with-mic" to fix possible MITM attacks (to enable support for the deprecated 'gssapi' authentication set GSSAPIEnableMITMAttack to 'yes'). These two versions are not compatible. <rest deleted> Regards Sid. -- Sid Boyce .... Hamradio G3VBV and keen Flyer Linux Only Shop.
* JP <xx@xx.xx> [06-05-04 22:15]:
One thing that I miss, however, is a daily message that FC1 used to send me which liad out various system messages, failed logins, FTP connections, SSH connections, diskspace summary etc.
Can this functionality be found in SuSE? If so were do I start looking to get it up and running.
You are looking for 'logdigest', /etc/logdigest/xxx, which is started in /etc/cron.daily/logdigest. -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/photos
You are looking for 'logdigest', /etc/logdigest/xxx, which is started in /etc/cron.daily/logdigest.
-- Patrick Shanahan Registered Linux User #207535
Thanks Patrick, And by the way I installed logdigest and it does the trick, however I also found LogWatch which I find to be formatted much cleaner and provides a summary of messages by service ie FTP, SSH, etc etc. Whereas Logdigest seemed to be just a dump of the logfiles. (both instances were directly out of the box, I made no adjustments at all, So I am sure that you can make LogDigest provide a better looking message but...) Thanks for your help, JP
Were you able to get logwatch to check your mail logs? I tried everything I can think of and it is not reporting on anything related to mail.
Scott
Scott, I tried to reply directly to you but the message came back: <HHhelphand_AAATTT_pacbell.net>: host pbimail1.prodigy.net[151.XXX.30.65] said: 550 5.0.0 Access denied (in reply to MAIL FROM command) would this be caused by a setting on my mail server? I host my own mail using Postfix. Anyway, Take a look at /etc/log.d/conf/maillog.conf It sould point ot (for me at least) /var/log/mail default is /var/log/maillog Is this what you needed? JP
On Sunday 06 June 2004 12:11 pm, JP wrote:
Were you able to get logwatch to check your mail logs? I tried everything I can think of and it is not reporting on anything related to mail.
Scott
Scott, I tried to reply directly to you but the message came back: <HHhelphand_AAATTT_pacbell.net>: host pbimail1.prodigy.net[151.XXX.30.65] said: 550 5.0.0 Access denied (in reply to MAIL FROM command)
Humm, interesting. I wonder what that's about? I assume you are the one that munged the actual address in the above, cause my return address is accurate and works. BTW, I actually didn't intend to send the message to you directly, I'm not used to KMail yet, I configured the folder to be associated with a mailing list and frankly assumed that it would reply to the list. Never even noticed that the original reply went to the poster instead of the list. Sorry.
would this be caused by a setting on my mail server? I host my own mail using Postfix.
What it may be is that your IP address is blacklisted _or_ your mailserver doesn't provided reverse DNS. I don't know for sure what type of spam checking my ISP does, but they are probably at least doing some of the basic stuff and refusing mail from servers without RDNS. The 5.0.0 access denied message sounds like a spam check to me.
Anyway, Take a look at /etc/log.d/conf/maillog.conf It sould point ot (for me at least) /var/log/mail default is /var/log/maillog
Is this what you needed?
That's exactly it. I'm so dumb, I had changed the entries for the archive but never changed the main entry. The minute I did, logwatch started reporting the mail stuff. Thanks! Appreciate it! Scott -- POPFile, the OpenSource EMail Classifier http://popfile.sourceforge.net/ Linux 2.6.4-54.5-default
On Sunday 06 June 2004 12:24 pm, Scott Leighton wrote:
Anyway, Take a look at /etc/log.d/conf/maillog.conf It sould point ot (for me at least) /var/log/mail default is /var/log/maillog
Is this what you needed?
That's exactly it. I'm so dumb, I had changed the entries for the archive but never changed the main entry. The minute I did, logwatch started reporting the mail stuff.
Thanks! Appreciate it!
Logwatch is working great, but.... Just so you know, I had to change a regex in the amavis script at /etc/log.d/scripts/services/amavis line 28 as shown below. # $ThisLine =~ s/^\([\d-]+\) //; $ThisLine =~ s/^\([^\)]+\) //; Without that change, a ton of mail was being dumped into "unmatched entries" and not counted in the totals. Scott -- POPFile, the OpenSource EMail Classifier http://popfile.sourceforge.net/ Linux 2.6.4-54.5-default
participants (4)
-
JP -
Patrick Shanahan -
Scott Leighton -
Sid Boyce