# $Id: mailscanner-mrtg.conf,v 1.33 2005/07/07 17:24:31 kevinspicer Exp $ # ---------------- # GENERAL SETTINGS # ---------------- # Where to calculate bytes of Mail Transferred from # Either "MTA" or "MailScanner" # "MTA" is probably more acurate, and is the only value you can use if # you don't use MailScanner for virus scanning # "MailScanner" is probably less acurate and can only be used if you are # using MailScanner for virus scanning Calculate MailBytes = MTA # File which holds state information between runs State File = /usr/local/www/mailscanner-mrtg/state.info # WWW Root - the directory for html files # usually /usr/local/www WWW Root = /usr/local/www # Data Run Timeout - the data run is expected to complete within this number # of seconds. This is to prevent system problems from causing multiple # data runs to step on each others toes. The default is 4 minutes (240s) # It is not advisable to set this any higher than 270s Data Run Timeout = 240 # Quarantine Quick Count - Quarantines these days can be much bigger than they # used to be, due mainly to the much larger number of email viruses around. # This can cause problems for MSMRTG if we can't count all the files in # quarantine in the time available between runs. This option works on the # assumption that it knows how many files were quarantined in previous days, so # long as the directory exists we assume the files do. This means we only count # todays files (this should solve the problem for almost everyone). # Unless you regularly remove files from quarantine when they are released , and # you need a figure that is 100% accurate you probably want to leave this # enabled. Quarantine Quick Count = yes # Whether to log to syslog, or to stderr (resulting in email) # This can be a list of logging methods (e.g syslog,stderr) Logging Method = syslog # Syslog facility to use for logging # This can be either mail, user or local0 - local7 SysLog Facility = mail # ------------ # MTA SETTINGS # ------------ # Which MTA you are using, acceptable values are... # sendmail postfix exim MTA = sendmail # MTA Incoming Log: where incoming mail is logged by MTA #MTA Incoming Log = /var/log/mail/info # Mandrake with sendmail (& postfix?) #MTA Incoming Log = /var/log/exim.in/mainlog # exim MTA Incoming Log = /var/log/maillog # sendmail (& postfix?) # MTA Outgoing Log: where outgoing mail is logged by MTA #MTA Outgoing Log = /var/log/mail/info # Mandrake with sendmail (& postfix?) #MTA Outgoing Log = /var/log/exim.out/mainlog # exim MTA Outgoing Log = /var/log/maillog # sendmail (& postfix?) # MTA Reject Log: where rejected mail is logged by MTA (spam) # NB. This is mainly for exim users. If you don't have a seperate # reject log you should set this to be the same as MTA Incoming Log #MTA Reject Log = /var/log/mail/info # Mandrake with sendmail (& postfix?) #MTA Reject Log = /var/log/exim.in/rejectlog # exim MTA Reject Log = /var/log/maillog # sendmail (& postfix?) # Where the MTA puts mail before MailScanner gets it # MSMRTG will recurse this tree (so postfix queue structures are okay) # You can also specify multiple directories by seperating paths with colons # e.g. /var/spool/inqueue:/var/spool/inqueue2:/var/spool/inqueue3 #Incoming Queue Dir = /var/spool/postfix.in/deferred/ # Postfix #Incoming Queue Dir = /var/spool/exim.in/input/ # Exim Incoming Queue Dir = /var/spool/mqueue.in/ # Sendmail # If your MTA uses a different name from that we might usually expect # either in the process list (ps) or in the log files then you should # specify that here. This is a perl regular expression, but don't include # the surrounding //. # Example: say your incoming and outgoing mta processes log as 'mta-in' and # mta-out you could do # MTA Alternative Name = mta-in|mta-out # or even # MTA ALternative Name = mta-(in|out) MTA Alternative Name = # -------------------- # MAILSCANNER SETTINGS # -------------------- # We can restart MailScanner if the number of MailScanner processes # goes below this number. Change to 0 if you don't want us to restart. Restart Threshhold = 1 # The script to run to restart MailScanner Restart MailScanner = /usr/local/etc/rc.d/mailscanner.sh restart # MailScanner lock file # This file is created by the MailScanner init script when MailScanner is # stopped. MSMRTG will look for this file and if it exists will not # attempt to restart MailScanner MailScanner Off File = /var/lock/subsys/MailScanner.off # This is where your logged spam and viruses go. You MUST have # "Log Spam = yes" in your MailScanner.conf file for us to graph spam. #MailScanner Log = /var/log/mail/info # Mandrake MailScanner Log = /var/log/maillog # Where MailScanner puts your mail after it is scanned # MSMRTG will recurse this tree (so postfix queue structures are okay) # You can also specify multiple directories by seperating paths with colons # e.g. /var/spool/outqueue:/var/spool/outqueue2:/var/spool/outqueue3 #Outgoing Queue Dir = /var/spool/postfix/outgoing/ # Postfix #Outgoing Queue Dir = /var/spool/exim/output # Exim (?) Outgoing Queue Dir = /var/spool/mqueue/ # Sendmail # The MailScanner work directory, often in tmpfs for those who are worried # about performance. Usually /var/spool/MailScanner/incoming. # If this is not set to a mount point the graph will be blank MailScanner Work Directory = /var/spool/MailScanner/incoming # The spool directory # If this is not set to a mount point the graph will be blank Spool Directory = /var/spool # The MailScanner quarantine directory # MSMRTG will recurse this tree # You can also specify multiple directories by seperating paths with colons # e.g. /var/spool/MailScanner/quarantine:/var/spool/MailScanner/quarantine2 # NB If you are using Quarantine Quick Counts each directory specified must be # a directory that contains subdirectories named by date (i.e. subdirectories # such as 20040505 etc.) Quarantine Directory = /var/spool/MailScanner/quarantine # ----------------- # EXTERNAL COMMANDS # ----------------- # If your uptime is not reported correctly on your MRTG graphs then # put the output of "which uptime" here. Uptime Command = /usr/bin/uptime # ------------- # SNMP SETTINGS # ------------- # Set this to no if you do not want to use snmp - note that this will result # in several graphs being blank. # You must use either net-snmp or ucd-snmp, this is auto-detected Use SNMP = yes # The UDP port that snmp listens on. This is usually port 161. SNMP port = 161 # The Community string to use (this should be a read-only community) SNMP Community = public # where is your snmpwalk command? Snmpwalk Binary = /usr/local/bin/snmpwalk # Which interfaces to monitor (comma separated list) Interfaces to Monitor = fxp0 # -------------- # RATIO SETTINGS # -------------- # If you split messages on arrival to create a seperate message for each # recipient (usually to apply per recipient preferences) you need to set # I Split Messages = yes # Because... ratios are normally calculated against the message count, by # splitting the messages you increase the number of Spams MailScanner finds # and therefore could end up with a figure of more than 100% ! # Most people should leave this as it is I Split Messages = no # If you want the virus ratio and spam ratio graphs to show the ratios # so-far-today set the following to yes. Otherwise the ratios will be # calculated over the previous five minutes only Ratios are Daily = no # Some people don't like getting 100% spam or virus on their graphs becuase # only a few mails have been processed - this is especially true when Ratios # Are Daily = yes, as there will probably be an initial bump in the middle of # night when the graphs roll over. # The following setting allows you to specify a minimum number of mails that # be received before ratios are recorded. # NB I don't like this (which is why the default is 0), I'd rather have an # accurate but ugly graph and understand how to interpret it properly - but if # folks want it here it is... Skip Ratios Below = 0