Thanks for all your error reports, I didn't forget it. I'll cleanup my guide soon. Thanks again!
Email notification about all sucessful logins using rsyslog
#send all login attemps to email#set up postfix to send encrypted emailvim/etc/postfix/main.cf
#setup tls encryption
smtp_tls_security_level = encrypt
smtp_use_tls = yes
smtp_tls_policy_maps = hash:/etc/postfix/tls_policy
vim/etc/postfix/tls_policy
google.com encrypt
.google.com encrypt
gmail.com encrypt
.gmail.com encrypt
postmap tls_policy
service postfix restart
vim/etc/rsyslog.conf
$ModLoad ommail
$template loginMailSubject,"%hostname% %msg%"$template loginMailBody,"%msg%"$ActionMailSubject loginMailSubject
$ActionMailTotest@gmail.com
$ActionMailFrom root
#if $programname == 'bonding' and ($msg contains 'root' or $msg contains 'CRITICAL') then :ommail:;bondingMailBodyif$syslogfacility-text=='authpriv'and $msg contains 'session opened'then :ommail:;loginMailBody
$ActionExecOnlyOnceEveryInterval0#testvim testmail.txt
EHLO vbox.site
MAIL FROM:<root@vbox.site>
RCPT TO:<test@gmail.com>
DATA
From: [root]<root@vbox.site>
To: <test@gmail.com>
Subject: Test Message
Hi there! This is supposed to be a real email...
Have a good day!
.
QUIT
nc localhost 25< testmail.txt