qmail

Chapter 16. Logging, Analysis, and Tuning

Although qmail performs well in its standard configuration, it’s often possible to tune it to work better, particularly for very large or very small installations.

What Qmail Logs

Qmail logs quite a lot of information about what it’s doing, although it can be daunting to collect it all together. If you’re using daemontools, each daemon has its own set of logs, kept in a rotating set of log files maintained by multilog, usually with a TAI64N timestamp (see TAI64 Time Stamps). The qmail-send process logs each message queued and each delivery attempt. The qmail-smtpd process logs each incoming SMTP connection, although it won’t describe what happened during the connection. tcpserver logs every connection denied due to entries in the connection rules file, and rblsmtpd logs every connection it blocked due to a DNSBL entry. If you use QMAILQUEUE to run other programs at SMTP time, anything they send to stderr is logged, and if you’ve added other patches to qmail-smtpd, anything they write to stderr is logged, too.

A system can be set up to do logs analysis on the fly, every time multilog switches to a new log file or once a day in a batch. It often makes sense to combine the two, doing some work at switching time and the rest daily. Although it’s usually more convenient to keep the logs for each application separate, it’s not hard to create combined logs for analysis or just to keep around in case someone needs to look at them ...