Hi all
Is there anyway in NS that you can have a script that will email you if anyone tries to download certain extensions eg: mkv, avi, mp4.
If the file is greater than 35mb it should email the admin…
The conditions you are seeking are reported into /var/log/maillog. For instance you can trigger notifications on lines like the following:
May 15 04:41:09 nethservice amavis[23487]: (23487-07) p003 1 Content-Type: multipart/alternative
May 15 04:41:09 nethservice amavis[23487]: (23487-07) p001 1/1 Content-Type: text/plain, size: 642 B, name:
May 15 04:41:09 nethservice amavis[23487]: (23487-07) p002 1/2 Content-Type: text/html, size: 4014 B, name:
I guess tools like fail2ban or similar, that watch logfiles can trigger some notifications on certain conditions.
/cc @stephdl
Thank you… will do some reading on fail2ban, do you think this will report even on torrent downloads?
No, I think Snort is the right tool for torrent files, as they are transferred with other protocols (unless we’re still talking about email .torrent attachments).
@davidep I am looking for something that will give me a report of all traffic that flows through my NS server… Amount used…