From 2a2f42965e71fdffe34ea8ebb59a26befc44175d Mon Sep 17 00:00:00 2001 From: Busindre Date: Thu, 22 Nov 2018 14:33:44 +0100 Subject: [PATCH 1/2] update postfix.grok (POSTFIX_TLSVERIFICATION ) POSTFIX_TLSVERIFICATION allows to parse "certificate verification failed" postfix errors. Postfix logs. Nov 21 18:40:03 node1 postfix/smtp[16969]: certificate verification failed for webmail.schleunungdruck.de[117.243.191.210]:25: untrusted issuer /C=de/L=XXX/O=XXX GmbH/CN=XX XX XXX CA/emailAddress=XX@XX Nov 22 08:45:10 node2 postfix/smtp[63116]: certificate verification failed for mail.XXXX.XX[113.169.17.115]:25: self-signed certificate. --- postfix.grok | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/postfix.grok b/postfix.grok index 3a39511..823a5b7 100644 --- a/postfix.grok +++ b/postfix.grok @@ -15,6 +15,8 @@ POSTFIX_KEYVALUE %{POSTFIX_QUEUEID:postfix_queueid}: %{POSTFIX_KEYVALUE_DATA:pos POSTFIX_WARNING_LEVEL (warning|fatal|info) POSTFIX_TLSCONN (Anonymous|Trusted|Untrusted|Verified) TLS connection established (to %{POSTFIX_RELAY_INFO}|from %{POSTFIX_CLIENT_INFO}): %{DATA:postfix_tls_version} with cipher %{DATA:postfix_tls_cipher} \(%{DATA:postfix_tls_cipher_size} bits\) +POSTFIX_TLSVERIFICATION certificate verification failed for %{POSTFIX_RELAY_INFO}: %{GREEDYDATA:postfix_smtp_response} + POSTFIX_DELAYS %{NUMBER:postfix_delay_before_qmgr}/%{NUMBER:postfix_delay_in_qmgr}/%{NUMBER:postfix_delay_conn_setup}/%{NUMBER:postfix_delay_transmission} POSTFIX_LOSTCONN (lost connection|timeout|SSL_accept error) POSTFIX_LOSTCONN_REASONS (receiving the initial server greeting|sending message body|sending end of data -- message may be sent more than once) @@ -110,7 +112,7 @@ POSTFIX_PIPE %{POSTFIX_PIPE_ANY} POSTFIX_POSTSCREEN %{POSTFIX_PS_CONNECT}|%{POSTFIX_PS_ACCESS}|%{POSTFIX_PS_NOQUEUE}|%{POSTFIX_PS_TOOBUSY}|%{POSTFIX_PS_CACHE}|%{POSTFIX_PS_DNSBL}|%{POSTFIX_PS_VIOLATIONS}|%{POSTFIX_WARNING} POSTFIX_DNSBLOG %{POSTFIX_DNSBLOG_LISTING}|%{POSTFIX_WARNING} POSTFIX_ANVIL %{POSTFIX_ANVIL_CONN_RATE}|%{POSTFIX_ANVIL_CONN_CACHE}|%{POSTFIX_ANVIL_CONN_COUNT} -POSTFIX_SMTP %{POSTFIX_SMTP_DELIVERY}|%{POSTFIX_SMTP_CONNERR}|%{POSTFIX_SMTP_LOSTCONN}|%{POSTFIX_SMTP_TIMEOUT}|%{POSTFIX_SMTP_RELAYERR}|%{POSTFIX_TLSCONN}|%{POSTFIX_WARNING}|%{POSTFIX_SMTP_UTF8} +POSTFIX_SMTP %{POSTFIX_SMTP_UTF8}|%{POSTFIX_SMTP_DELIVERY}|%{POSTFIX_SMTP_CONNERR}|%{POSTFIX_SMTP_LOSTCONN}|%{POSTFIX_SMTP_TIMEOUT}|%{POSTFIX_SMTP_RELAYERR}|%{POSTFIX_TLSCONN}|%{POSTFIX_WARNING}|%{POSTFIX_SMTP_PIX}|%{POSTFIX_SMTP_REFUSED}|%{POSTFIX_SMTP_REPLACE}|%{POSTFIX_TLSVERIFICATION} POSTFIX_DISCARD %{POSTFIX_DISCARD_ANY}|%{POSTFIX_WARNING} POSTFIX_LMTP %{POSTFIX_SMTP} POSTFIX_PICKUP %{POSTFIX_KEYVALUE} From b9e766f0b58c5d94b3fb0aa11137750e45f73907 Mon Sep 17 00:00:00 2001 From: Busindre Date: Thu, 22 Nov 2018 14:36:36 +0100 Subject: [PATCH 2/2] Update postfix.grok --- postfix.grok | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/postfix.grok b/postfix.grok index 823a5b7..e9b4cd2 100644 --- a/postfix.grok +++ b/postfix.grok @@ -112,7 +112,7 @@ POSTFIX_PIPE %{POSTFIX_PIPE_ANY} POSTFIX_POSTSCREEN %{POSTFIX_PS_CONNECT}|%{POSTFIX_PS_ACCESS}|%{POSTFIX_PS_NOQUEUE}|%{POSTFIX_PS_TOOBUSY}|%{POSTFIX_PS_CACHE}|%{POSTFIX_PS_DNSBL}|%{POSTFIX_PS_VIOLATIONS}|%{POSTFIX_WARNING} POSTFIX_DNSBLOG %{POSTFIX_DNSBLOG_LISTING}|%{POSTFIX_WARNING} POSTFIX_ANVIL %{POSTFIX_ANVIL_CONN_RATE}|%{POSTFIX_ANVIL_CONN_CACHE}|%{POSTFIX_ANVIL_CONN_COUNT} -POSTFIX_SMTP %{POSTFIX_SMTP_UTF8}|%{POSTFIX_SMTP_DELIVERY}|%{POSTFIX_SMTP_CONNERR}|%{POSTFIX_SMTP_LOSTCONN}|%{POSTFIX_SMTP_TIMEOUT}|%{POSTFIX_SMTP_RELAYERR}|%{POSTFIX_TLSCONN}|%{POSTFIX_WARNING}|%{POSTFIX_SMTP_PIX}|%{POSTFIX_SMTP_REFUSED}|%{POSTFIX_SMTP_REPLACE}|%{POSTFIX_TLSVERIFICATION} +POSTFIX_SMTP %{POSTFIX_SMTP_DELIVERY}|%{POSTFIX_SMTP_CONNERR}|%{POSTFIX_SMTP_LOSTCONN}|%{POSTFIX_SMTP_TIMEOUT}|%{POSTFIX_SMTP_RELAYERR}|%{POSTFIX_TLSCONN}|%{POSTFIX_WARNING}|%{POSTFIX_SMTP_UTF8}|%{POSTFIX_TLSVERIFICATION} POSTFIX_DISCARD %{POSTFIX_DISCARD_ANY}|%{POSTFIX_WARNING} POSTFIX_LMTP %{POSTFIX_SMTP} POSTFIX_PICKUP %{POSTFIX_KEYVALUE}