Logging of destination domain

[ISP List]

MailScanner currently produces log entries like:

Dec  8 09:30:22 mx20 mailscanner[33546]: Message 18L3Nr-00096Q-00 from
66.227.40.58.3294 (dbzmail.com) is Yes (score=13.6, required 8, BIG_FONT,
CALL_FREE, FROM_ENDS_IN_NUMS, GAPPY_TEXT, HIDDEN_ASSETS, HTML_50_70,
HTML_FONT_COLOR_BLUE, HTML_FONT_COLOR_GRAY, HTML_FONT_COLOR_RED,
HTML_FONT_COLOR_YELLOW, HTML_FONT_INVISIBLE, MISSING_HEADERS,
NORMAL_HTTP_TO_IP, NO_REAL_NAME, OPT_IN, SOCIAL_SEC_NUMBER,
SPAM_PHRASE_13_21, TABLE_THICK_BORDER, USER_AGENT_OE)

What would be nifty is if you could add in the recipient domain, e.g.

Dec  8 09:30:22 mx20 mailscanner[33546]: Message 18L3Nr-00096Q-00 from
66.227.40.58.3294 (dbzmail.com) to (thisdomain.com) is Yes (score=13.6,
required 8, BIG_FONT, CALL_FREE, FROM_ENDS_IN_NUMS, GAPPY_TEXT,
HIDDEN_ASSETS, HTML_50_70, HTML_FONT_COLOR_BLUE, HTML_FONT_COLOR_GRAY,
HTML_FONT_COLOR_RED, HTML_FONT_COLOR_YELLOW, HTML_FONT_INVISIBLE,
MISSING_HEADERS, NORMAL_HTTP_TO_IP, NO_REAL_NAME, OPT_IN,
SOCIAL_SEC_NUMBER, SPAM_PHRASE_13_21, TABLE_THICK_BORDER, USER_AGENT_OE)

That way, log file parsers could grep out the sender and the recipient
domain and graph the values accordingly, giving you the ability to graph
spam sources per destination domain name.

--Mike