haraka-plugin-log-reader

extracts matching log entries from the haraka log file

Install

cd /my/haraka/config/dir
npm install haraka-plugin-log-reader

Enable

Add log-reader to haraka/config/plugins file.

Usage

When enabled, this plugin registers these URL routes in Haraka's http server:

• /logs/:uuid
• /karma/rules (disabled by default)

/logs/:uuid returns the log lines for a connection, rendered as HTML (including the Policy Rules and Steps to Resolve sections, built server-side from karma.ini).

/karma/rules returns the raw list of Haraka rules in use as JSON, for an external http client. Because it discloses your spam-filter configuration to anyone who can reach the HTTP server, it is disabled by default. Set allow_rules_endpoint=true in log.reader.ini to enable it.

Example

Sorry we blocked your message:

Our filters mistook your server for a malicious computer attempting to send spam. To improve your mail servers reputation, please contact your IT helpdesk or Systems Administrator and ask them for help.

Policy Rules

• -7, DNS Blacklist (b.barracudacentral.org)
• -5, DNS Blacklist (zen.spamhaus.org)
• -3, DNS Blacklist (dnsbl-1.uceprotect.net)
• -3, DNS Blacklist (bl.spamcop.net)
• -3, ASN reputation is spam-only (asn_all_bad)
• -1, Geographic distance is unusual for ham (4000)
• -1, Geographic distance is unusual for ham (8000)
• -1, ASN reputation is bad (karma)

Steps to Resolve

• Disinfect your host/network

Raw Logs

4D0B74C5-6D41-4074-9E43-5EE9CC1B4973