I had a user send out a newsletter last night and was expecting to receive a localhostrelay/localrelay/authrelay alert from lfd, but for some reason it was never generated. The user was sending out emails at a rate which should have triggered the alert (the limit is set at 100 and the customer was sending at ~200/hour). Any thoughts/suggestions?
Code: Select all
# grep LOCALHOSTRELAY /etc/csf/csf.conf
RT_LOCALHOSTRELAY_ALERT = "1"
RT_LOCALHOSTRELAY_LIMIT = "100"
# grep LOCALRELAY /etc/csf/csf.conf
RT_LOCALRELAY_ALERT = "1"
RT_LOCALRELAY_LIMIT = "100"
# grep AUTHRELAY /etc/csf/csf.conf
RT_AUTHRELAY_ALERT = "1"
RT_AUTHRELAY_LIMIT = "100"
Code: Select all
2011-09-14 00:32:55 H=localhost (domain.tld) [127.0.0.1] Warning: Sender rate 173.6 / 1h
2011-09-14 00:32:55 1R3bXD-003W2t-7m <= email@domain.tld H=localhost (domain.tld) [127.0.0.1] P=esmtpa A=courier_login:email@domain.tld S=7874 id=5514d2273526f0216ceb347180adb1a5@localhost.localdomain T="Lahjakortti -20% faneille"
2011-09-14 00:32:55 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1R3bXD-003W2t-7m
2011-09-14 00:32:57 1R3bXD-003W2t-7m DK: message signed using a=rsa-sha1; q=dns; c=nofws; s=default; d=domain.tld; h=Received:Date:To:From:Subject:Message-ID:X-Priority:X-MessageID:X-ListMember:Errors-To:MIME-Version:Content-Type;
2011-09-14 00:32:57 1R3bXD-003W2t-7m => recipient@external.tld R=dk_lookuphost T=dk_remote_smtp H=mx.external.tld [x.x.x.x]
2011-09-14 00:32:57 1R3bXD-003W2t-7m Completed