question ref. mailscanner logging

[Julian Field]

Please read "man syslog.conf".

At 01:40 17/05/2002, you wrote:
>Hi
>
>I thought I read a while back a question ref. logging mailscanner events
>to /var/log/messages. I installed Mailscanner a few weeks back from the rpm
>available
>and configured it for use with f-prot.
>
>Since then all messages have had a "X-MailScanner: Found to be clean" or
>been correctly
>stopped due to a virus being contained in the message. I have received a
>notification
>accordingly, so everything so far is working to spec.
>
>I receive around 600+ messages a day, with perhaps 6-10 messages stopped for
>viruses.
>
>The strange thing is, I have far less entries (15-20 a day) in
>/var/log/messages...
>
>May 17 01:19:28 raq959 mailscanner[30495]: Scanning 1 messages, 3564 bytes
>May 17 01:19:28 raq959 mailscanner[30495]: Scanned 1 messages, 3564 bytes in
>0 seconds
>May 17 01:25:58 raq959 mailscanner[30495]: Scanning 1 messages, 3031 bytes
>
>...than I have emails processed by Mailscanner
>
>Should there be entries for EVERY message scanned by Mailscanner or am I
>missing something?
>
>Cheers
>
>
>Rob

--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ