Monitoring Outbound SMTP Traffic Per-User

[ee99ee]

Does there exist a script to monitor and create reports on per-user (well, per cPanel account) usage of outbound SMTP? If not, how hard would it be to write one? Is information on the account outbound email orginates from logged? Can it be?

If something like this doesn't exist, any information on where to start putting something like this together would be greatly appreciated...

-Chris

 

[sawbuck]

Something along that line exists with MailWatch which can provide these reports:

* Message Listing
* Message Operations
* Total Messages by Date
* Top Mail Relays
* Top Viruses
* Virus Report
* Top Senders by Quantity
* Top Senders by Volume
* Top Recipients by Quantity
* Top Recipients by Volume
* Top Sender Domains by Quantity
* Top Sender Domains by Volume
* Top Recipient Domains by Quantity
* Top Recipient Domains by Volume
* SpamAssassin Score Distribution
* SpamAssassin Rule Hits
* MCP Score Distribution
* MCP Rule Hits
* Audit Log

Chirpy on this forum has integrated MW into his cPanel/MailScanner package.
http://www.configserver.com/cp/msfe.html

Alternately you can use MW separately and install from source.
http://mailwatch.sourceforge.net/doku.php

 

[ee99ee]

Something along that line exists with MailWatch which can provide these reports:

* Message Listing
* Message Operations
* Total Messages by Date
* Top Mail Relays
* Top Viruses
* Virus Report
* Top Senders by Quantity
* Top Senders by Volume
* Top Recipients by Quantity
* Top Recipients by Volume
* Top Sender Domains by Quantity
* Top Sender Domains by Volume
* Top Recipient Domains by Quantity
* Top Recipient Domains by Volume
* SpamAssassin Score Distribution
* SpamAssassin Rule Hits
* MCP Score Distribution
* MCP Rule Hits
* Audit Log

Chirpy on this forum has integrated MW into his cPanel/MailScanner package.
http://www.configserver.com/cp/msfe.html

Alternately you can use MW separately and install from source.
http://mailwatch.sourceforge.net/doku.php

I don't use MailScanner, we have a third-party system that scans all incoming mail before it hits the server for AV and spam. Do I need to run MailScanner to use this?

-Chris

 

[sawbuck]

No. MailWatch can be installed separately.

 

[brianoz]

Did you want to monitor or limit? Cpanel has a limit built in, so it must be counting outgoing emails (well, cpanel would be using exim to do the counting). There's probably a way to see these counts, not sure what it is.

In case it's useful, the cpanel limits can be modified by editing /var/cpanel/maxemails and adding lines like domain.com=nnnn
where nnnn is the new limit for that domain.

 

[ramprage]

exim.pl counts the limits in your domlogs/domain-smtplog traffic
Take a look at exim.pl I can probably cook up something that you just enter the domain and it tells you the amount sent per hour, day, week and month.

 

[jamesbond]

exim.pl counts the limits in your domlogs/domain-smtplog traffic
Take a look at exim.pl I can probably cook up something that you just enter the domain and it tells you the amount sent per hour, day, week and month.

Does this include mail sent from cpanel webmail and/or webforms (user nobody) on that domain as well?

I'm asking because looking at the log file dates I noticed some of them were updated fairly recent on accounts that are not configured to use the server's smtp, but to use the ISP smtp server instead.

 

[ramprage]

My guess is yes it should count nobody message since Apache runs as nobody by default for cpanel.