MailLogSentinel

Lightweight Postfix authentication watchdog - Monitor failed SASL attempts, get daily email reports, export to database.

---

---

Table of Contents

• 🎯 What it does
• 📋 Prerequisites
• ⚡ Quick Start
• 📊 Sample Output
• 💣 Basic Commands
• 📚 Documentation
• 🤝 Contributing
• ⛑ Roadmap
• 📄 License
• 💖 Support

---

🎯 What it does

MailLogSentinel monitors your Postfix server for authentication failures in real-time:

• 📊 Tracks failed login attempts with IP geolocation
• 📧 Sends daily email summaries with top offenders
• 💾 Stores events in CSV (+ optional SQL export)
• 🚀 Runs as lightweight systemd service

Perfect for small to medium mail servers wanting simple, effective monitoring without complex SIEM solutions.

📋 Prerequisites

• Linux with systemd and syslog
• Python 3.10+
• Postfix with SASL authentication
• sudo access for installation

⚡ Quick Start

1. Clone & Install

git clone https://github.com/monozoide/MailLogSentinel.git
cd MailLogSentinel

# Install scripts and libraries
chmod +x bin/*.py && chmod +x lib/maillogsentinel/*.py
sudo cp bin/*.py /usr/local/bin/
sudo cp -r lib/maillogsentinel /usr/local/lib/

2. Run Interactive Setup

sudo python3 /usr/local/bin/maillogsentinel.py --setup --interactive

The setup wizard will:

• ✅ Configure paths and email settings
• ✅ Install systemd services
• ✅ Set up daily reporting schedule
• ✅ Initialize geolocation databases

3. Verify Installation

# Check service status
systemctl status maillogsentinel.service

# View live logs
journalctl -fu maillogsentinel.service

4. First time run

python3 /usr/local/bin/maillogsentinel.py
```bash


### 5. Test email report manually
```bash
python3 /usr/local/bin/maillogsentinel.py --report

📊 Sample Output

Daily email report example

💣 Basic Commands

Command	Description
maillogsentinel --report	Send email report now
maillogsentinel --reset	Archive data & restart monitoring
maillogsentinel --version	Show version
maillogsentinel --help	Show all options

📚 Documentation

• Installation Guide - Detailed setup instructions
• Configuration - All config options explained
• Advanced Features - SQL export, log anonymization, custom reports
• Troubleshooting - Common issues and solutions
• API Documentation - For developers
• FAQ - Answers for installation, configuration, usage, troubleshooting, integrations, security, and development.
• Manual pages:
  • maillogsentinel(8) – overview, usage, options, diagnostics, security notes.
  • ipinfo(1) – command reference and examples.
  • log_anonymizer(1) – usage for redacting sensitive data in logs.

🤝 Contributing

Contributions welcome! Please check our Contributing Guide.

Caution

The use of AI tools is permitted, provided that the contributor uses them in a reasonable manner.

Roadmap

You can follow the MailLogSentinel roadmap on the project page: MailLogSentinel Roadmap

📄 License

GNU GPL v3 - See LICENSE file.

💖 Support

If you find this useful, consider supporting development:

30% of donations are redistributed to other open source projects.

---

Quick Links: Issues · Wiki · Releases

---

We have no right to believe that freedom can be won without a struggle.

Che Guevara