change to SA syslog output?

Julian Field jkf at ecs.soton.ac.uk
Wed May 29 14:06:43 IST 2002


At 13:30 29/05/2002, you wrote:
>    Can the syslogging lines for SpamAssassin in sendmail.pl be modified to
>show the relay and supposed domain of the spammer?  Can the lines in
>sendmail.pl:
>    Log::InfoLog("Message $id is spam according to " . $ReportText);
>be changed to something like:
>    Log::InfoLog("Message $id from $relay ($fromdomain) is spam according
> to " . $ReportText);
>
>I tried this modification myself.  No problems modifying DeliverIds(),
>but the same mod to MoveToOutgoingQueue() gave compile errors at startup,
>even though I added lines similar to those in DeliverIds() to recover $relay
>and $fromdomain.  Complete (nonworking) "diff -c" file attached.
>
>This change would make it really easy to grep one's syslog file and figure
>out what relays and/or domains are spamming you.

You needed another parameter on MoveToOutgoingQueue() so it gets all the
SMTP client info about the messages. All done and will be in the next release.


>** Jeff A. Earickson, Ph.D                         PHONE: 207-872-3659
>** Senior UNIX Sysadmin, Information Technology    EMAIL: jaearick at colby.edu
>** Colby College, 4214 Mayflower Hill,               FAX: 207-872-3076
>** Waterville ME, 04901-8842
>----------------------------------------------------------------------------

--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ



More information about the MailScanner mailing list