Removing useless info from daily mail
midian at ihme.org
Wed Feb 4 20:11:33 UTC 2015
The only thing I’ve done is put this in my periodic.conf:
# Include security jobs with daily email. No need to send second email.
# Don't need to know about denied packets every day
### Now, enable services which you DO want to be aware of
# Check host for old ports
# Perform ZFS filesystem checks
You can also put in security_status_loginfail_enable=“NO” if you don’t want to see failed sshd logins.
To remove some message that you always get to your dmesg and don’t want to see in your mail you can edit /etc/periodic/security/700.kernelmsg line 49 to look something like:
dmesg 2>/dev/null | egrep -v 'arp: unknown hardware address format’ |
This thing will remove "arp: unknown hardware address format” messages from the daily mail, as an example.
This has resolved most of my too much mail problems.
> On 02.02.2015, at 08:27:20, Gregory Orange <gregory.orange at calorieking.com> wrote:
> Hi Markus,
> On 07/01/15 15:31, "Markus Hästbacka" wrote:
>> I've been trying to reduce the incoming mail from my servers daily run.
>> I've managed to configure periodic.conf in a way that when there's nothing
>> wrong in the logs I get no mail.
> Would you be willing to share your method? I'd like to substantially reduce my incoming mail, and while I figure there are configurable options to do so, I haven't yet put in the time to work them out. I'd be grateful to harness your work and put it to good use on my systems.
More information about the freebsd-questions