anti_spam_smtpproxy = { # An "S3" log format recognises logs that require "parsing filters" # # # If parse_only_with_filters is true, Sawmill uses the log_parsing_filters to parse the log; # and other parsing options are ignored. # ======================================================================== # http://assp.sourceforge.net # ####################### # # # LOG FORMAT OPTIONS # # # ####################### # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+lff # The name of this format # Format log_file_format value log.format.format_label = "Anti-Spam SMTP Proxy (ASSP) Log Format" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+ldt # This log is the following type #Format: log_data_type value log.miscellaneous.log_data_type = "mail_server" log.miscellaneous.log_format_type = "mail_server" # Determine what types of data this log file will support. # Un-comment the type below to disable this in the database # # Format: $notsupported value # $notsupported daybyday # $notsupported individualhosts # $notsupported sessionpages # $notsupported hits # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+tbaq # if there are square brackets around some fields (date/time) # you can specify to have this treated as one field # Format: treat_brackets_as_quotes true|false log.format.treat_brackets_as_quotes = "false" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+ldf # The format of dates in this log # Format: log_date_format value log.format.date_format = "auto" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+ltf # The format of times in this log # Format: log_time_format value log.format.time_format = "auto" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+en # The name of an entry in this log # Format: entry_name value statistics.miscellaneous.entry_name = "messages" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+lfare # We use this to recognise the format and "auto-detect". # Format: log_format_autodetect_regular_expression value # log.format.autodetect_regular_expression = "ASSP version" log.format.autodetect_regular_expression = "[A-Z][a-z][a-z]-[0-9][0-9]-[0-9][0-9] [0-9]+:[0-9][0-9]:[0-9][0-9] [0-9]+\.[0-9]+\.[0-9]+\.[0-9]+ <[^>]*> to:" # http://www.sawmill.net/cgi-bin/sawmilldocs?ho+powf # This template is for those formats that require parsing filters # so is set to "true" as default # Format: parse_only_with_filters ( true | false ) log.format.parse_only_with_filters = "true" ########################### # # # # ########################### # Log fields log.fields = { date = { label = "$lang_stats.field_labels.date" type = "date" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # date time = { label = "$lang_stats.field_labels.time" type = "time" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # time source_ip = { label = "$lang_stats.field_labels.source_ip" type = "flat" index = 0 subindex = 0 } # source_ip sender = { label = "$lang_stats.field_labels.sender" type = "hierarchical" index = 0 subindex = 0 hierarchy_dividers = "@" left_to_right = false leading_divider = "false" } # sender recipient = { label = "$lang_stats.field_labels.recipient" type = "hierarchical" index = 0 subindex = 0 hierarchy_dividers = "@" left_to_right = false leading_divider = "false" } # recipient result = { label = "$lang_stats.field_labels.result" type = "flat" index = 0 subindex = 0 } # result } # log.fields ####################### # # # # ####################### # # Log Parsing Filters log.parsing_filters = { # Parse out the to: lines 1 = { label = "1" comment = "" value = "collect_fields_using_regexp('^()([A-Z][a-z][a-z]-[0-9][0-9]-[0-9][0-9]) ([0-9:]*) ([0-9.]*) <([^>]*)> to: ([^ ]*) ([^$]*)$', '*KEY*,date,time,source_ip,sender,recipient,result')" } # 1 # Parse out the for: lines 2 = { label = "2" comment = "" value = "collect_fields_using_regexp('^()([A-Z][a-z][a-z]-[0-9][0-9]-[0-9][0-9]) ([0-9:]*) ([0-9.]*) <([^>]*)> (relay attempt blocked) for: ([^$]*)$', '*KEY*,date,time,source_ip,sender,result,recipient')" } # 2 # Accept a collected field on every line 3 = { label = "3" comment = "" value = "accept_collected_entry_using_regexp('()', false)" } # 3 } # log.parsing_filters ############################### # # # # ############################### # See http://www.sawmill.net/cgi-bin/sawmilldocs?ho+docs-hierarchies # for information about hierarchies. # Database fields database.fields = { date_time = { label = "$lang_stats.field_labels.date_time" log_field = "date_time" type = "string" suppress_top = 0 suppress_bottom = 3 display_format_type = "date_time" } # date_time day_of_week = { label = "$lang_stats.field_labels.day_of_week" log_field = "day_of_week" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "day_of_week" } # day_of_week hour_of_day = { label = "$lang_stats.field_labels.hour_of_day" log_field = "hour_of_day" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hour_of_day" } # hour_of_day source_ip = { label = "$lang_stats.field_labels.source_ip" log_field = "source_ip" type = "string" suppress_top = 0 suppress_bottom = 2 } # source_ip sender = { label = "$lang_stats.field_labels.sender" log_field = "sender" type = "string" suppress_top = 0 suppress_bottom = 2 } # sender recipient = { label = "$lang_stats.field_labels.recipient" log_field = "recipient" type = "string" suppress_top = 0 suppress_bottom = 2 } # recipient result = { label = "$lang_stats.field_labels.result" log_field = "result" type = "string" suppress_top = 0 suppress_bottom = 2 } # result } # database.fields ############### # # # # ############### # Log Filters log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'messages = 1;' } # mark_entry } # log.filters database.numerical_fields = { messages = { label = "$lang_stats.field_labels.messages" default = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # messages } # database.numerical_fields create_profile_wizard_options = { date_time_tracking = true # How the reports should be grouped in the report menu report_groups = { date_time_group = "" day_of_week = true hour_of_day = true source_ip = true sender = true recipient = true result = true } # report_groups } # create_profile_wizard_options not_supported = { sessions = true bandwidth = true pageviews = true visitors = true } # not_supported } # anti_spam_smtpproxy