Greylistning and connection statistics

Questions and answers about how to do stuff
Post Reply
itognet
Posts: 4
Joined: 18 Oct 2018 16:13

Greylistning and connection statistics

Post by itognet »

Hi,

I am using the EFA with the greylistning function which is very useful (Hint: remember to do the update_sqlgrey_config from time to time)
I can make report statistics for blocked spam after the greylisting.

But how can I see the statistics for how much mail the greylistning is rejecting?

How can I see statistics for what happens before the greylistning (at the connector).
This could include number of connections/min, relay denied, number of connections/ip, number of dropped connections and so on.
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: Greylistning and connection statistics

Post by pdwalker »

I suggest you search the maillog and look for the string " sqlgrey: ". This string will be the message lines that tell you what sqlgrey is doing.

In my logs, I see the following:

whitelist: -> emails senders that have been whitelisted already by sqlgrey
spam: -> huh? how does sql grey know if a message is spam? not sure what this is exactly
perf: -> statistics
new: -> a new sender that will be delayed
reconnect ok: a delayed sender who resent and was accepted by sqlgrey auto white list
from awl: -> not sure what this is - is this an entry that has been whitelisted because it is similar to another entry that passed?

So, those are my guesses for where you can find your answers.
itognet
Posts: 4
Joined: 18 Oct 2018 16:13

Re: Greylistning and connection statistics

Post by itognet »

Thank you pdwalker.

Exactly what I was looking for.
itognet
Posts: 4
Joined: 18 Oct 2018 16:13

Re: Greylistning and connection statistics

Post by itognet »

About the Spam: string

I guess the sql grey remove and logs the greylisted mails as spam because it never received the exact same email the second time.
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: Greylistning and connection statistics

Post by pdwalker »

Maybe. If I look at the logs in more detail, I should be able to see if that is the pattern or not.

Or, I could look at the sqlgrey source code and find the definitive answer...
Post Reply