1

Topic: Logwatch postfix unmatched entries very long

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.9 MARIADB edition
- Deployed with iRedMail Easy or the downloadable installer? installer
- Linux/BSD distribution name and version: Debian 9.9.0
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySql (mariadb)
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Did a brand new installation, and from day 1 the unmatched entries part of Postfix section in the logwatch mail is very, very large.
And large is around 37000 lines yesterday. About half the number of total lines in the logfile.

Did another fresh install to test, and it looks like it has the same problem.

this is the top part of the unmatched section (e-mail addresses deleted for anonimity and ip-addresses changed to 0.0.0.0)

  **Unmatched Entries**
        1   Jun  5 22:59:38 mailserver02 postfix/cleanup[16628]: 45K1Pk0jR0z412v: message-id=<45K1Pk0jR0z412v@[deleted for anonimity]>
        1   Jun  5 17:57:27 mailserver02 postfix/qmgr[9454]: 45Jthx63scz40BG: removed
        1   Jun  5 20:06:13 mailserver02 postfix/pipe[6636]: 45JxYd1pRYz40bY: to=<[deleted for anonimity]>, relay=dovecot, delay=0.19, delays=0.05/0/0/0.14, dsn=2.0.0, status=sent (delivered via dovecot service)
        1   Jun  5 21:46:49 mailserver02 postfix/qmgr[9454]: 45Jznh033Dz40rW: removed
        1   Jun  5 17:07:52 mailserver02 postfix/cleanup[27216]: 45Jsbr6yQ9z4064: message-id=<45Jsbr6yQ9z4064@[deleted for anonimity]>
        1   Jun  5 15:25:16 mailserver02 postfix/qmgr[9454]: 45JqKP4HcLz3yl8: removed
        1   Jun  5 16:40:51 mailserver02 postfix/cleanup[20016]: 45Js0g6jXPz401H: message-id=<>
        1   Jun  5 15:06:33 mailserver02 postfix/cleanup[27679]: 45Jpvs5dMWz3ydV: message-id=<45Jpvs5dMWz3ydV@[deleted for anonimity]>
        1   Jun  5 12:30:10 mailserver02 postfix/qmgr[1929]: 45JlRQ3NY6z3yHk: from=<[deleted for anonimity]>, size=5496, nrcpt=1 (queue active)
        1   Jun  5 21:53:28 mailserver02 postfix/pipe[11911]: 45JzxN1Gghz40vj: to=<[deleted for anonimity]>, relay=dovecot, delay=0.27, delays=0.04/0.01/0/0.22, dsn=2.0.0, status=sent (delivered via dovecot service)
        1   Jun  5 22:14:39 mailserver02 postfix/cleanup[14366]: 45K0Pq6gdrz40yM: message-id=<45K0Pq6gdrz40yM@[deleted for anonimity]>
        1   Jun  5 13:31:04 mailserver02 postfix/smtpd[6116]: 45Jmnh4Wftz3y38: client=[deleted for anonimity][0.0.0.0]
        1   Jun  5 14:29:35 mailserver02 postfix/smtpd[19309]: 45Jp5C3bt8z3ybN: client=unknown[0.0.0.0]
        1   Jun  5 16:52:05 mailserver02 postfix/qmgr[9454]: 45JsFc6sq8z3yKb: removed
        1   Jun  5 21:47:22 mailserver02 postfix/qmgr[9454]: 45JzpL4Qlkz40rw: from=<[deleted for anonimity]>, size=8769, nrcpt=1 (queue active)
        1   Jun  5 15:50:52 mailserver02 postfix/qmgr[9454]: 45Jqtz5k4Tz3yqG: removed
        1   Jun  5 18:19:09 mailserver02 postfix/qmgr[9454]: 45JvB52B84z40G1: removed
        1   Jun  5 16:33:23 mailserver02 postfix/pipe[16637]: 45Jrr32hcTz3ywW: to=<[deleted for anonimity]>, relay=dovecot, delay=0.21, delays=0.06/0/0/0.14, dsn=2.0.0, status=sent (delivered via dovecot service)
        1   Jun  5 17:02:43 mailserver02 postfix/qmgr[9454]: 45JsTv0bVWz405S: removed
        1   Jun  5 16:12:20 mailserver02 postfix/smtpd[13281]: 45JrMm3rs8z3ysj: client=unknown[0.0.0.0]
        1   Jun  5 13:44:50 mailserver02 postfix/qmgr[4217]: 45Jn5Z5Cr1z3y4B: removed
        1   Jun  5 13:48:41 mailserver02 postfix/pipe[8561]: 45JnB06gdlz3y60: to=<[deleted for anonimity]>, relay=dovecot, delay=0.26, delays=0.04/0.01/0/0.21, dsn=2.0.0, status=sent (delivered via dovecot service)
        1   Jun  5 15:57:43 mailserver02 postfix/qmgr[9454]: 45Jr2t6NWBz3ygS: removed
        1   Jun  5 22:59:57 mailserver02 postfix/smtpd[16618]: 45K1Q56yghz412p: client=unknown[0.0.0.0]
        1   Jun  5 19:03:47 mailserver02 postfix/smtpd[2509]: 45Jw9b2F2gz40RQ: client=[deleted for anonimity][0.0.0.0]
        1   Jun  5 15:23:49 mailserver02 postfix/qmgr[9454]: 45JqHn5zTXz3yhN: from=<[deleted for anonimity]>, size=8731, nrcpt=1 (queue active)
        1   Jun  5 17:06:22 mailserver02 postfix/qmgr[9454]: 45JsZ60M80z403J: from=<[deleted for anonimity]>, size=6498, nrcpt=1 (queue active)
        1   Jun  5 21:48:52 mailserver02 postfix/qmgr[9454]: 45Jzr02n2Cz40sq: removed
        1   Jun  5 20:44:37 mailserver02 postfix/qmgr[9454]: 45JyPx6gkhz40kB: from=<[deleted for anonimity]>, size=3185, nrcpt=1 (queue active)
        1   Jun  5 16:07:37 mailserver02 postfix/qmgr[9454]: 45JrGJ6pZ2z3ysJ: removed
        1   Jun  5 22:59:06 mailserver02 postfix/qmgr[9454]: 45K1P619cWz4129: from=<[deleted for anonimity]>, size=8741, nrcpt=1 (queue active)
        1   Jun  5 15:47:24 mailserver02 postfix/smtpd[5624]: 45Jqq02gLPz3yns: client=unknown[0.0.0.0]
        1   Jun  5 22:14:56 mailserver02 postfix/cleanup[14367]: 45K0Q84LVlz40yc: message-id=<45K0Q84LVlz40yc@[deleted for anonimity]>
        1   Jun  5 21:43:32 mailserver02 postfix/qmgr[9454]: 45Jzjw4l77z40nx: from=<[deleted for anonimity]>, size=2721, nrcpt=1 (queue active)
        1   Jun  5 23:57:25 mailserver02 postfix/qmgr[9454]: 45K2hN6sp3z4160: from=<[deleted for anonimity]>, size=2721, nrcpt=1 (queue active)
        1   Jun  5 14:05:38 mailserver02 postfix/qmgr[9454]: 45JnYZ2W04z3yXb: from=<[deleted for anonimity]>, size=6471, nrcpt=1 (queue active)
        1   Jun  5 17:57:22 mailserver02 postfix/pipe[30110]: 45Jthx5RdXz40Bl: to=<[deleted for anonimity]>, relay=dovecot, delay=0.38, delays=0.04/0.06/0/0.28, dsn=2.0.0, status=sent (delivered via dovecot service)
        1   Jun  5 17:40:50 mailserver02 postfix/cleanup[28800]: 45JtKt1N5tz409Q: message-id=<45JtKt1N5tz409Q@[deleted for anonimity]>
        1   Jun  5 15:25:09 mailserver02 postfix/qmgr[9454]: 45JqKK00wqz3yky: removed
        1   Jun  5 21:48:58 mailserver02 postfix/qmgr[9454]: 45JzrB1K2lz40t3: removed
        1   Jun  5 18:40:39 mailserver02 postfix/cleanup[306]: 45Jvfv2GRzz40NR: message-id=<45Jvfv2GRzz40NR@[deleted for anonimity]>
        1   Jun  5 13:49:15 mailserver02 postfix/cleanup[8554]: 45JnBg2PhDz3y6x: message-id=<45JnBg2PhDz3y6x@[deleted for anonimity]>
        1   Jun  5 14:06:31 mailserver02 postfix/cleanup[13315]: 45JnZb4dRKz3yXs: message-id=<>
        1   Jun  5 18:18:40 mailserver02 postfix/cleanup[31523]: 45Jv9X4Xzgz40FT: message-id=<45Jv9X4Xzgz40FT@[deleted for anonimity]>
        1   Jun  5 16:32:32 mailserver02 postfix/qmgr[9454]: 45Jrq4058mz3ywc: from=<[deleted for anonimity]>, size=2721, nrcpt=1 (queue active)
        1   Jun  5 15:24:50 mailserver02 postfix/qmgr[9454]: 45JqJy29pvz3ykQ: from=<[deleted for anonimity]>, size=8855, nrcpt=1 (queue active)
        1   Jun  5 16:34:00 mailserver02 postfix/qmgr[9454]: 45Jrrd5fMbz3yyV: removed


Older installations never had this problem and i can't seem to figure out what this problem is.
Please assist me with this issue smile

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Logwatch postfix unmatched entries very long

I can second this "bug". It's not critical but littlebit annoying since it explodes the Logwatch and makes it harder to see if there are critical events.

3

Re: Logwatch postfix unmatched entries very long

It's caused by logwatch config, or missing config file to handle Postfix log.

4

Re: Logwatch postfix unmatched entries very long

I've solved it by adding this to my logwatch config:

/etc/logwatch/conf/ignore.conf (centos)

###### REGULAR EXPRESSIONS IN THIS FILE WILL BE TRIMMED FROM REPORT OUTPUT #####
postfix\/\w.+\[[0-9].+]:\s(\w{14}:).*