Monitoring Outbound SMTP Traffic Per-User

ee99ee

Well-Known Member
Aug 15, 2003
70
0
156
Does there exist a script to monitor and create reports on per-user (well, per cPanel account) usage of outbound SMTP? If not, how hard would it be to write one? Is information on the account outbound email orginates from logged? Can it be?

If something like this doesn't exist, any information on where to start putting something like this together would be greatly appreciated...

-Chris
 

sawbuck

Well-Known Member
Jan 18, 2004
1,365
10
168
cPanel Access Level
Root Administrator
Something along that line exists with MailWatch which can provide these reports:

* Message Listing
* Message Operations
* Total Messages by Date
* Top Mail Relays
* Top Viruses
* Virus Report
* Top Senders by Quantity
* Top Senders by Volume
* Top Recipients by Quantity
* Top Recipients by Volume
* Top Sender Domains by Quantity
* Top Sender Domains by Volume
* Top Recipient Domains by Quantity
* Top Recipient Domains by Volume
* SpamAssassin Score Distribution
* SpamAssassin Rule Hits
* MCP Score Distribution
* MCP Rule Hits
* Audit Log

Chirpy on this forum has integrated MW into his cPanel/MailScanner package.
http://www.configserver.com/cp/msfe.html

Alternately you can use MW separately and install from source.
http://mailwatch.sourceforge.net/doku.php
 

ee99ee

Well-Known Member
Aug 15, 2003
70
0
156
sawbuck said:
Something along that line exists with MailWatch which can provide these reports:

* Message Listing
* Message Operations
* Total Messages by Date
* Top Mail Relays
* Top Viruses
* Virus Report
* Top Senders by Quantity
* Top Senders by Volume
* Top Recipients by Quantity
* Top Recipients by Volume
* Top Sender Domains by Quantity
* Top Sender Domains by Volume
* Top Recipient Domains by Quantity
* Top Recipient Domains by Volume
* SpamAssassin Score Distribution
* SpamAssassin Rule Hits
* MCP Score Distribution
* MCP Rule Hits
* Audit Log

Chirpy on this forum has integrated MW into his cPanel/MailScanner package.
http://www.configserver.com/cp/msfe.html

Alternately you can use MW separately and install from source.
http://mailwatch.sourceforge.net/doku.php
I don't use MailScanner, we have a third-party system that scans all incoming mail before it hits the server for AV and spam. Do I need to run MailScanner to use this?

-Chris
 

brianoz

Well-Known Member
Mar 13, 2004
1,146
7
168
Melbourne, Australia
cPanel Access Level
Root Administrator
Did you want to monitor or limit? Cpanel has a limit built in, so it must be counting outgoing emails (well, cpanel would be using exim to do the counting). There's probably a way to see these counts, not sure what it is.

In case it's useful, the cpanel limits can be modified by editing /var/cpanel/maxemails and adding lines like domain.com=nnnn
where nnnn is the new limit for that domain.
 

ramprage

Well-Known Member
Jul 21, 2002
655
0
166
Canada
exim.pl counts the limits in your domlogs/domain-smtplog traffic
Take a look at exim.pl I can probably cook up something that you just enter the domain and it tells you the amount sent per hour, day, week and month.
 

jamesbond

Well-Known Member
Oct 9, 2002
738
1
168
ramprage said:
exim.pl counts the limits in your domlogs/domain-smtplog traffic
Take a look at exim.pl I can probably cook up something that you just enter the domain and it tells you the amount sent per hour, day, week and month.
Does this include mail sent from cpanel webmail and/or webforms (user nobody) on that domain as well?

I'm asking because looking at the log file dates I noticed some of them were updated fairly recent on accounts that are not configured to use the server's smtp, but to use the ISP smtp server instead.