Log EVERY email that passes through the server?

[xscott]

What I'm after doing is logging all email that comes in or goes out of our plesk server (8.6). Its running on a Virtuozzo VPS so I have root access.

Is this possible? What needs to be done?

Thanks in advance!

 

[atomicturtle]

Yup, you can do it with qmail-scanner, including escrow (archiving) of every message going through the system. What distro are you on?

 

[xscott]

distro

I'm running Cent OS 4.2

 

[atomicturtle]

No problem, add the atomic repo with:

wget -q -O - http://www.atomicorp.com/installers/atomic |sh

install qmail-scanner

yum install qmail-scanner

 

[xscott]

Ah, excellent! Thanks alot.

How would i go about configuring it from there?

Edit: Went to install, this is the output

[root@server ScottD]# yum install qmail-scannerSetting up Install Process
Setting up repositories
plesk 100% |=========================| 951 B 00:00
update 100% |=========================| 951 B 00:00
base 100% |=========================| 1.1 kB 00:00
atomic 100% |=========================| 951 B 00:00
addons 100% |=========================| 951 B 00:00
extras 100% |=========================| 1.1 kB 00:00
Reading repository metadata in from local files
primary.xml.gz 100% |=========================| 89 kB 00:00
plesk : ################################################## 240/240
primary.xml.gz 100% |=========================| 207 kB 00:00
Warning: cache file is version 6, we need 10, will regenerate
update : ################################################## 655/655
primary.xml.gz 100% |=========================| 593 kB 00:00
Warning: cache file is version 6, we need 10, will regenerate
base : ################################################## 1552/1552
primary.xml.gz 100% |=========================| 110 kB 00:00
atomic : ################################################## 302/302
Warning: cache file is version 6, we need 10, will regenerate
primary.xml.gz 100% |=========================| 54 kB 00:00
Warning: cache file is version 6, we need 10, will regenerate
extras : ################################################## 255/255
Parsing package install arguments
Resolving Dependencies
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for qmail-scanner to pack into transaction set.
qmail-scanner-2.02-1.el4. 100% |=========================| 71 kB 00:00
---> Package qmail-scanner.noarch 1:2.02-1.el4.art set to be updated
--> Running transaction check
--> Processing Dependency: perl-suidperl for package: qmail-scanner
--> Processing Dependency: maildrop for package: qmail-scanner
--> Processing Dependency: tnef for package: qmail-scanner
--> Processing Dependency: daemontools >= 0.76 for package: qmail-scanner
--> Processing Conflict: qmail-scanner conflicts drweb-qmail
--> Restarting Dependency Resolution with new changes.
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for daemontools to pack into transaction set.
daemontools-0.76-1.el4.ar 100% |=========================| 9.5 kB 00:00
---> Package daemontools.i386 0:0.76-1.el4.art set to be updated
---> Downloading header for tnef to pack into transaction set.
tnef-1.4.3-1.el4.art.i386 100% |=========================| 3.3 kB 00:00
---> Package tnef.i386 0:1.4.3-1.el4.art set to be updated
---> Downloading header for perl-suidperl to pack into transaction set.
perl-suidperl-5.8.5-36.el 100% |=========================| 19 kB 00:00
---> Package perl-suidperl.i386 3:5.8.5-36.el4_6.3 set to be updated
---> Downloading header for maildrop to pack into transaction set.
maildrop-2.0.4-1.el4.art. 100% |=========================| 7.5 kB 00:00
---> Package maildrop.i386 0:2.0.4-1.el4.art set to be updated
--> Running transaction check
--> Processing Conflict: qmail-scanner conflicts drweb-qmail
--> Finished Dependency Resolution
Error: qmail-scanner conflicts with drweb-qmail


Seems it conflicts with drweb-qmail? :-S

Edit 2: I read from another one of your posts that they don't work well together, and i need to uninstall dr.web.

I found this command to do it

rpm -qa drweb | xargs rpm -e

but I'm unsure on how safe it is.

Edit 3: To ad more confusion I also have Spamassain setup and working - not sure if that confuses anything though.