Quick Update:
I ended up having to account for two changes to the log files:
First: when a message was rejected, the old format had a status code immediately followed by the email address (550 <bob@example.com>). The new format has a second number between them (550 5.5.2 <bob@example.com>). I had to update everywhere that logwatch was looking for
[0-9]+ <... or \d+ <...
to
[0-9]+(?: [\.0-9]+) ...
where the non-capturing group matches this new number. I also had to add this in at least one other place.
Second: The normal, status=sent or deferred line also changed, so I had to add a catchall in the middle.
If anyone is interested, I'd be happy to attach my updated postfix script for logwatch.
__________________
- Phil DeJarnett
|