In case you haven’t heard, the GNOME Foundation Hired a System Administrator, Christer Edwards.
Christer was already a volunteer GNOME sysadmin, so he already knows a lot about the GNOME infrastructure. He fixed various things already, but I’ll leave it up to him to blog about that. The one thing I really like is that he cleaned up the Logwatch output for the various hosts that GNOME has. After which I requested he cleaned up the menubar (mail.gnome.org) Logwatch output (was 3.5MB), which he did :).
So now finally we can easily see some data for mail.gnome.org for Monday September 20:
Postfix
238 *Warning: Connection concurrency limit reached 1 SASL authentication failed 29 Miscellaneous warnings 520.825M Bytes accepted 546,124,884 1.675G Bytes delivered 1,798,214,094 ======== ================================================ 63595 Accepted 19.73% 258725 Rejected 80.27% -------- ------------------------------------------------ 322320 Total 100.00% ======== ================================================ 757 Reject relay denied 0.29% 7655 Reject HELO/EHLO 2.96% 196808 Reject unknown user 76.07% 13564 Reject recipient address 5.24% 1320 Reject sender address 0.51% 318 Reject client host 0.12% 37547 Reject RBL 14.51% 756 Reject header 0.29% -------- ------------------------------------------------ 258725 Total Rejects 100.00% ======== ================================================ 3690 4xx Reject recipient address 21.26% 13667 4xx Reject sender address 78.74% -------- ------------------------------------------------ 17357 Total 4xx Rejects 100.00% ======== ================================================ 185662 Connections made 89877 Connections lost 185650 Disconnections 60230 Removed from queue 1854 Delivered 135819 Sent via SMTP 4809 Forwarded 45 Resent 4317 Deferred 140470 Deferrals 2050 Bounce (local) 2271 Bounce (remote) 356 Expired and returned to sender 1 DSNs delivered 2622 DSNs undeliverable 9055 Connection failure (outbound) 1870 Timeout (inbound) 11557 Illegal address syntax in SMTP command 13 Numeric hostname 45 SMTP commands dialog error 4629 Excessive errors in SMTP commands dialog 40629 Hostname verification errors 27 Hostname validation error 23 Enabled PIX workaround 7 SASL authenticated messages
Amavisd-new
21374 Clean passed 90.02% 121 Spam passed 0.51% 121 Bad header passed 0.51% 16 Malware blocked 0.07% 2111 Spam blocked 8.89% 1 Banned file name blocked 0.00% -------- ------------------------------------------------ 23744 Total Messages Scanned 100.00% ======== ================================================ 21495 Ham 90.53% 2232 Spam 9.40% -------- ------------------------------------------------ 23744 Total Messages Scanned 100.00% ======== ================================================ 2 MIME error 2458 Extra code modules loaded at runtime
Clamav
Viruses detected: HTML.Phishing.Bank-1259: 2 Time(s) HTML.Phishing.Bank-593: 1 Time(s) W32.Sality.Q-1: 2 Time(s) Worm.Mydoom.I: 9 Time(s) Worm.Mydoom.M: 5 Time(s)
Note that mail.gnome.org is the mailhub for GNOME. All outgoing (mailing lists, bugmail, etc) and incoming mail (spammers, spammers, spammers and some minor valid mail) for all machines is handled by mail.gnome.org. From the logs you can easily see that we get regular distributed dictionary attacks (high number of unknown users errors), plus Greylisting that was deployed (also done by Crister)
PS: As you noticed, there is now a GNOME sysadmin blog. It is syndicated at http://news.gnome.org/.