Closed TopicStart new topicStart Poll

> Xqm Diagnosis Extention, How to customize ...
sergioperr
Posted: Jan 20 2005, 01:33 PM
Quote Post


Newbie
*

Group: Members
Posts: 22
Member No.: 1375
Joined: 26-October 04




Hi, Harald !

I couldnīt live without XQM: itīs my primary tools each day to control my Xmail 1.21īs servers.
I use the filtering feature, and usually a message is freezed by them.
But the 'Diagnosis' column from XQM say "User unknown" as the cause of rejection by Xmail. I know the rejection is due to filters, of course, but it would be very handy to get a message like "Rejected by server filters" or something else.

Can I configure something to do that?

Thanks.


Sergio Perrone

master.gif
PMEmail Poster
Top
hschneider
Posted: Jan 20 2005, 05:46 PM
Quote Post


No - I'm not an answering script ...
Group Icon

Group: Admin
Posts: 6631
Member No.: 195
Joined: 19-June 02



You can and it's simple ;-)

Just open "Xmail Queue Manager\parse.lib" with your favourite ASCII editor and read the instructions there:

QUOTE

# This is the Message Analyzer's brainfile.
# It defines a set of pattern matching filters, which are used to classify
# (or to tag) the analyzed messages.
#
# If you want to use your own definitions, create a file named
# parse_usr.lib in XQM's home directory.
# Your own defs will overload the defs in this file.
# User defs won't be overwritten by XQM updates.
#
# Structure:
# Variable (case sensitive) : Regular Expression : Result Code (NEWLINE)
#
# A variable can be any SLOG file variable like ErrString, SMTP-Error etc.
# SLOG variables are always built from the latest SLOG entry. Additional
# variables are:
#
# Spoolfile.slog      = The complete SLOG file
# Spoolfile.lastslog  = The latest SLOG entry
# Spoolfile.content  = The complete spoolfile
# Spoolfile.envelope  = Its envelope only
# Spoolfile.header    = Its header only
# Spoolfile.body      = Its message content only
#
# The RegEx are compared to the variable's content. If they match,
# the result code is returned. Each filter is applied after each other.
# Filtering stops on the 1st match.
#
# For more infos about RegEx syntax see
# http://python.org/doc/current/lib/re-syntax.html
#
# When you use remote queue management, the parselib files are beamed to the
# Agent during XMail's first contact. Analyzing requires an Agent >= 1.12.
# You can verify the Agent's version in XQM's about dialog.
#
__VERSION:parse.lib:1.22
Spoolfile.header:X-Spam-Flag.*?YES:SPAMASSASSIN
Spoolfile.envelope:mail from.*?<CronDaemon>.*?rcpt to.*?<root>:NODOMAIN_CRON
ErrInfo:RTR.?DU:ANTISPAM_DYNIP
ErrInfo:!(mailbox).*?try.*?later|busy|service not available:SERVER_OVERLOAD
...
...



--------------------
Bye,
Harald


-- Download XMail Queue Manager 1.46 NOW: XMail Server Tools
-- Cross platform remote queue management!
-- Message analyzing on the fly!
-- Builtin diagnostics knowledge base!
-- Manages multiple mail queues!

Sponsored by
CD-Produktion und DVD-Produktion and Homestaging Saarland - Immobilien schneller verkaufen in der Region Saarland, Rheinland-Pfalz und Luxembourg
PMEmail PosterUsers Website
Top
sergioperr
Posted: Jan 21 2005, 12:26 AM
Quote Post


Newbie
*

Group: Members
Posts: 22
Member No.: 1375
Joined: 26-October 04



Excellent !!!

Thanks a lot, Harald.

Sergio

image008.gif
PMEmail Poster
Top
hschneider
Posted: Jan 21 2005, 10:25 AM
Quote Post


No - I'm not an answering script ...
Group Icon

Group: Admin
Posts: 6631
Member No.: 195
Joined: 19-June 02



You can also customize its diagnosis text. If your custom tag is e.g. FILTERED, then place an ASCII file named FILTERED.txt in the "XMail Queue Manager\kbase" folder.

If you have any improvements for existing rules or some new rules which are of public interest, please let me know.


--------------------
Bye,
Harald


-- Download XMail Queue Manager 1.46 NOW: XMail Server Tools
-- Cross platform remote queue management!
-- Message analyzing on the fly!
-- Builtin diagnostics knowledge base!
-- Manages multiple mail queues!

Sponsored by
CD-Produktion und DVD-Produktion and Homestaging Saarland - Immobilien schneller verkaufen in der Region Saarland, Rheinland-Pfalz und Luxembourg
PMEmail PosterUsers Website
Top
sergioperr
Posted: Jan 24 2005, 01:00 AM
Quote Post


Newbie
*

Group: Members
Posts: 22
Member No.: 1375
Joined: 26-October 04



OK:

Iīm doing some definitions to explain Filter Rejects, and AV filter rejects.
Where can I find information about SLOG entries and logic?

Sergio

read.gif
PMEmail Poster
Top
hschneider
Posted: Jan 24 2005, 07:47 AM
Quote Post


No - I'm not an answering script ...
Group Icon

Group: Admin
Posts: 6631
Member No.: 195
Joined: 19-June 02



Examine existing SLOG files of frozen messages.
All which XQM does, is to read these entries into variables, which can be checked against the patterns from its parse.lib.

If a pattern matches, the message is classifed (tagged).

There is a chapter ("Inspector") in XQM's helpfile, which explains like SLOG entries are built up and how to interprete them.


--------------------
Bye,
Harald


-- Download XMail Queue Manager 1.46 NOW: XMail Server Tools
-- Cross platform remote queue management!
-- Message analyzing on the fly!
-- Builtin diagnostics knowledge base!
-- Manages multiple mail queues!

Sponsored by
CD-Produktion und DVD-Produktion and Homestaging Saarland - Immobilien schneller verkaufen in der Region Saarland, Rheinland-Pfalz und Luxembourg
PMEmail PosterUsers Website
Top
sergioperr
Posted: Feb 2 2005, 02:24 PM
Quote Post


Newbie
*

Group: Members
Posts: 22
Member No.: 1375
Joined: 26-October 04



Harald:

After many days working with 'parse.lib' and 'parse.usr.lib', I have my XQM diagnosing correctly the messages frozen due to content filters and AV filters.
BUT (always thereīs a 'but'), I had to modify the 'parse.lib' file.

nono.gif I know, I know: the user shouldnīt modify that file.

The problem is the definition of the 'ANTISPAM' rule. It includes strings like 'reject' and 'message' BEFORE 'parse.usr.lib' reach them. Then, XQM applies the 'ANTISPAM' rule instead of the new ones.

blink.gif Solution?

I think thereīs two possible:
1. The 'parse.usr.lib' should be the first aplied (before 'parse.libī)
2. Modify 'parse.lib' (You should): but this will be a temporal solution, since with another change in Xmail, the file will need another update.

Sergio
PMEmail Poster
Top
hschneider
Posted: Feb 2 2005, 03:51 PM
Quote Post


No - I'm not an answering script ...
Group Icon

Group: Admin
Posts: 6631
Member No.: 195
Joined: 19-June 02



The file has to be named parse_usr.lib, not parse.usr.lib. The mechanism still gives priority to the userlib. Can you test again, please ?


--------------------
Bye,
Harald


-- Download XMail Queue Manager 1.46 NOW: XMail Server Tools
-- Cross platform remote queue management!
-- Message analyzing on the fly!
-- Builtin diagnostics knowledge base!
-- Manages multiple mail queues!

Sponsored by
CD-Produktion und DVD-Produktion and Homestaging Saarland - Immobilien schneller verkaufen in der Region Saarland, Rheinland-Pfalz und Luxembourg
PMEmail PosterUsers Website
Top
hschneider
Posted: Feb 2 2005, 04:02 PM
Quote Post


No - I'm not an answering script ...
Group Icon

Group: Admin
Posts: 6631
Member No.: 195
Joined: 19-June 02



I'll add a hint if parse_user.lib is loaded or not in XQM's info dialog. Will be useful in such situation.


--------------------
Bye,
Harald


-- Download XMail Queue Manager 1.46 NOW: XMail Server Tools
-- Cross platform remote queue management!
-- Message analyzing on the fly!
-- Builtin diagnostics knowledge base!
-- Manages multiple mail queues!

Sponsored by
CD-Produktion und DVD-Produktion and Homestaging Saarland - Immobilien schneller verkaufen in der Region Saarland, Rheinland-Pfalz und Luxembourg
PMEmail PosterUsers Website
Top
sergioperr
Posted: Feb 2 2005, 04:10 PM
Quote Post


Newbie
*

Group: Members
Posts: 22
Member No.: 1375
Joined: 26-October 04



Ok:
Iīll try.
Sorry for my mistake. Iīll let you know when finish (soon) and Iīll send you the new definitions.

Sergio
blush.gif
PMEmail Poster
Top
sergioperr
Posted: Feb 4 2005, 07:34 PM
Quote Post


Newbie
*

Group: Members
Posts: 22
Member No.: 1375
Joined: 26-October 04



Harald:

Now I have another problem.
As a filter (eg: xscanner) or avfilter stops a message, Xmail frozes it (if you setup this) but does not write any cue in SLOG file.
I canīt find a way to scan something to evaluate a expression and make XQM diagnose this kind of events.
I know Xmail does a filter.log writing but I canīt scan it from XQM.

Another question:
Actually, XQM shows the diagnosis for my frozen messages as "DNS": this is the default behaviour? Why XQM chooses DNS without any information in SLOG files?

Thank you

unsure.gif
Sergio

PMEmail Poster
Top
hschneider
Posted: Feb 5 2005, 08:03 AM
Quote Post


No - I'm not an answering script ...
Group Icon

Group: Admin
Posts: 6631
Member No.: 195
Joined: 19-June 02



To examine the messagefile itself, you have:
# Spoolfile.slog = The complete SLOG file
# Spoolfile.lastslog = The latest SLOG entry
# Spoolfile.content = The complete spoolfile
# Spoolfile.envelope = Its envelope only
# Spoolfile.header = Its header only
# Spoolfile.body = Its message content only

If your filter writes an X-Header, then it should be no problem to identify.

Messages without slog should be tagged as unknown.
Could you send me your zipped spool folder, please ?



--------------------
Bye,
Harald


-- Download XMail Queue Manager 1.46 NOW: XMail Server Tools
-- Cross platform remote queue management!
-- Message analyzing on the fly!
-- Builtin diagnostics knowledge base!
-- Manages multiple mail queues!

Sponsored by
CD-Produktion und DVD-Produktion and Homestaging Saarland - Immobilien schneller verkaufen in der Region Saarland, Rheinland-Pfalz und Luxembourg
PMEmail PosterUsers Website
Top
0 User(s) are reading this topic (0 Guests and 0 Anonymous Users)
0 Members:
« Next Oldest | XMail Queue Manager | Next Newest »

Closed TopicStart new topicStart Poll