QMail Log Monitoring: Anyone Interested

I had some concerns recently with the quantity of outbound mail traffic one of my clients was generating -- I wasn't sure but I thought a trojan hourse might have been involved so last night, on "Geeky Friday Evening", I wrote a few php scripts which do this:

• qmail_monitor_outbound.php
  • Runs as a cron job and reads the qmail log files and writes a receipt for each outbound message to a mysql table
• index.php
  • Shows me the quantity of outbound messages today and yesterday.
• alert.php
  • Runs as a cron job and checks the quantity of outbound messages that day and sends an email to my pager if the number is greater than a threshold.
• qmail_watcher.php
  • Runs as a cron job and allows me to send an email to a private address and then responds with the number of outbound messages that day (I carry a 2 way pager so I can check this status by just sending an email.  I have the same ability for Feedster to check uptime)

Now I'll be the 1st one to admit that these tools aren't suited for high volume environments.  I wrote them for my own needs and also just to help me better understand Qmail logging. 

So is anyone out there interested enough for me to clean it up and gpl it ?

2:09:10 PM  | Permalink:   | comment []  |  IM Me About This   

Wanted: Recommendation for Windows Anti-Virus Software

I have two clients, both Windows users, that have managed to hose their systems w/ viruses.  Traditionally I've always recommended Sophos but this software is just stuck in the rut of "Must manually download new virus definitions, unzip them and copy them to the right directory".  Think I'm lying:

Windows NT/2000/XP local installation (single user): updating with virus identity (IDE) files

1. Copy the IDE files to the Sophos Anti-Virus directory on your workstation (by default, C:Program FilesSophos SWEEP for NT).
2. At the taskbar, click Start|Programs|Sophos Anti-Virus|Sophos Anti-Virus. On the 'Options' menu click 'Purge checksums'. Click 'Yes' when asked if you want to purge the checksum files. Close Sophos Anti-Virus.
3. Reboot the computer. Sophos Anti-Virus will automatically recognise the new IDEs.

That's just freaking pathetic.  Step 3 is insane (yeah I understand why but ...).  So anyone out there able to recommend a good Windows anti-virus tool that handles the updating automatically in the background? 

Note: I'm also installing Firebird on both machines and **strongly** recommending they both switch to Firebird.  I know pretty well that poor browsing habits are about 50% likely to be the cause of this.

1:56:59 PM  | Permalink:   | comment []  |  IM Me About This