Парсер логов почт. сервера с записью в БД MySQL
0) Скрипт будем запускать по крону раз в сутки.
1) на серваке есть текстовый фаил-лог почтового сервера. снизу небольшой кусок.
2) ищем строки типа этой:
2010-10-10 04:03:49 1P4qsk-00016c-M3 ** [email protected] R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:: host mail.bcii.info [161.58.46.69]: 554 Sorry, no mailbox here by that name. (#5.1.1)
3) Если ошибка имеет маску: (5xx) вытаскиваем мыло
[email protected] (тут она 554)
4) и кладем его в БД MySQL
5) удаляем(чистим) этот лог фаил
+++++++++++++++++++++++++++++++++++++++++++++++
2010-10-10 04:03:48 1P4qsj-00015q-IB
2010-10-10 04:03:48 1P4qsl-00016m-7M
2010-10-10 04:03:48 1P4qsk-00016g-PC
2010-10-10 04:03:48 no IP address found for host 94.96.56.88.dynamic.saudi.net.sa (during SMTP connection from [94.96.56.88])
2010-10-10 04:03:49 1P4qsk-00016c-M3 ** [email protected] R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:: host mail.bcii.info [161.58.46.69]: 554 Sorry, no mailbox here by that name. (#5.1.1)
2010-10-10 04:03:49 1P4qsj-00016J-Jz => home R=localuser T=local_delivery
2010-10-10 04:03:49 1P4qsj-00015Q-8s => mailsystem <@myserver.com> R=virtual_user T=virtual_userdelivery
2010-10-10 04:03:49 1P4qsj-00015q-IB => mailsystem <@myserver.com> R=virtual_user T=virtual_userdelivery
2010-10-10 04:03:49 1P4qsl-00015c-Sj malware acl condition: clamd: unable to connect to UNIX socket /var/clamd (Connection refused)
2010-10-10 04:03:49 1P4qsj-00015d-HK => mailsystem <@myserver.com> R=virtual_user T=virtual_userdelivery
2010-10-10 04:03:49 1P4qsj-00016R-Qb
2010-10-10 04:03:49 1P4qsl-00016m-7M => home R=localuser T=local_delivery
2010-10-10 04:03:49 1P4qsm-00015r-9q malware acl condition: clamd: unable to connect to UNIX socket /var/clamd (Connection refused)
2010-10-10 04:03:49 1P4qsl-00016m-7M Completed
2010-10-10 04:03:49 1P4qsj-00015q-IB Completed
2010-10-10 04:03:49 1P4qsj-00015d-HK Completed
2010-10-10 04:03:49 1P4qsj-00015Q-8s Completed
2010-10-10 04:03:49 1P4qsj-00016J-Jz Completed
2010-10-10 04:03:49 1P4qsj-00016R-Qb ** [email protected] R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:: host mx1.hotmail.com [65.55.92.152]: 550 Requested action not taken: mailbox unavailable
2010-10-10 04:03:50 1P4qsm-00016x-3f
2010-10-10 04:03:50 1P4qse-00015C-Uo Completed
2010-10-10 04:03:50 1P4qsl-00015c-Sj
2010-10-10 04:03:50 1P4qsm-00017G-Ju
2010-10-10 04:03:50 1P4qsn-00017U-8A
2010-10-10 04:03:50 1P4qso-00016j-8n malware acl condition: clamd: unable to connect to UNIX socket /var/clamd (Connection refused)
2010-10-10 04:03:50 1P4qsk-00016g-PC => [email protected] R=lookuphost T=remote_smtp H=mxs.mail.ru [94.100.176.20]
2010-10-10 04:03:50 1P4qsk-00016g-PC Completed
2010-10-10 04:03:51 1P4qsm-00015r-9q
2010-10-10 04:03:51 1P4qsj-000169-2s Completed
+++++++++++++++++++++++++++++++++++++++++++++++