Is there anyway in NS that you can have a script that will email you if anyone tries to download certain extensions eg: mkv, avi, mp4.
If the file is greater than 35mb it should email the admin…
The conditions you are seeking are reported into
/var/log/maillog. For instance you can trigger notifications on lines like the following:
May 15 04:41:09 nethservice amavis: (23487-07) p003 1 Content-Type: multipart/alternative May 15 04:41:09 nethservice amavis: (23487-07) p001 1/1 Content-Type: text/plain, size: 642 B, name: May 15 04:41:09 nethservice amavis: (23487-07) p002 1/2 Content-Type: text/html, size: 4014 B, name:
I guess tools like fail2ban or similar, that watch logfiles can trigger some notifications on certain conditions.
Thank you… will do some reading on fail2ban, do you think this will report even on torrent downloads?
No, I think Snort is the right tool for torrent files, as they are transferred with other protocols (unless we’re still talking about email .torrent attachments).
@davidep I am looking for something that will give me a report of all traffic that flows through my NS server… Amount used…