我们有一些连接到我们的F5负载均衡器的Postfix服务器,每隔几秒就检查一次端口25到服务器的连接,以确保它可用.不幸的是,这会在日志中产生相当多的噪音,如果与负载均衡池断开连接,我宁愿从负载均衡器看这个,而不是从邮件服务器看.
这是消息的样子,每隔几秒钟:
Oct 19 10:34:46 mail postfix/smtpd[14755]: connect from unknown[x.x.x.x]
Oct 19 10:34:46 mail postfix/smtpd[14755]: lost connection after CONNECT from unknown[x.x.x.x]
Oct 19 10:34:46 mail postfix/smtpd[14755]: disconnect from unknown[x.x.x.x]
Oct 19 10:34:49 mail postfix/smtpd[14755]: connect from unknown[x.x.x.x]
Oct 19 10:34:49 mail postfix/smtpd[14755]: lost connection after CONNECT from unknown[x.x.x.x]
Oct 19 10:34:49 mail postfix/smtpd[14755]: disconnect from unknown[x.x.x.x]
Oct 19 10:34:51 mail postfix/smtpd[14755]: connect from unknown[x.x.x.x]
Oct 19 10:34:51 mail postfix/smtpd[14755]: lost connection after CONNECT from unknown[x.x.x.x]
Oct 19 10:34:51 mail postfix/smtpd[14755]: disconnect from unknown[x.x.x.x]
我宁愿只看到与邮件服务器和发送邮件相关的信息 – 但是与这两个IP地址(负载均衡器)的连接和断开相关的任何事情我都不在乎,而宁愿不把垃圾邮件发送给日志.
我有什么选择?我的Postfix配置是非常乏味/基本的,除了默认值之外我没有进行任何类型的日志记录或调试(除了smtpd_helo_restrictions = warn_if_reject check_helo_access静态:拒绝我用来跟踪HELO以阻止我们离开黑名单,但与此无关).
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
inet_interfaces = all
inet_protocols = all
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
mydestination = mail.contoso.com, localhost.localdomain, localhost
myhostname = mail.contoso.com
mynetworks = 10.0.0.0/8 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
myorigin = /etc/mailname
readme_directory = no
recipient_delimiter = +
relayhost = smtp-relay.gmail.com
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_helo_restrictions = warn_if_reject check_helo_access static:reject
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls = yes