another syslog tweak, please

[Jeff A. Earickson]

Julian,
   Doh!  I remember the reason you don't do this, multiple recipients.
Never mind...

--- Jeff

On Tue, 3 Jun 2003, Jeff A. Earickson wrote:

> Date: Tue, 3 Jun 2003 14:06:35 -0400
> From: Jeff A. Earickson <jaearick at colby.edu>
> Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: another syslog tweak, please
>
> Julian,
>
>   Can the syslog output of mailscanner be modified to tell us
> who the message is (or would be, if deleted) delivered to?
> For instance, with MS 4-20.3 my syslog shows for a spam message:
>
> Jun  3 13:38:00 emerald MailScanner[18296]: Message h53HbmP0028363 from
> 63.251.6.73 (mailbot at buzzcast.com) to colby.edu is spam, SpamAssassin
> (score=7.7, required 4, ASCII_FORM_ENTRY, FOR_FREE, HTML_60_70,
> HTML_COMMENT_8BITS, HTML_FONT_BIG, HTML_FONT_COLOR_RED, HTML_FONT_FACE_BAD,
> HTML_FONT_FACE_ODD, MIME_HTML_ONLY, PLING_PLING, TO_ADDRESS_EQ_REAL)
>
> Could this line also show the recipient, ie:
>
> Jun  3 13:38:00 emerald MailScanner[18296]: Message h53HbmP0028363 from
> 63.251.6.73 (mailbot at buzzcast.com) to colby.edu (joeblow at colby.edu) is spam,
>                                                 ^^^^^^^^^^^^^^^^^^^
> SpamAssassin (score=7.7, required 4, ASCII_FORM_ENTRY, FOR_FREE, HTML_60_70,
> HTML_COMMENT_8BITS, HTML_FONT_BIG, HTML_FONT_COLOR_RED, HTML_FONT_FACE_BAD,
> HTML_FONT_FACE_ODD, MIME_HTML_ONLY, PLING_PLING, TO_ADDRESS_EQ_REAL)
>
> This would help in syslog analysis...  Thanks.
>
> -----------------------------------
> Jeff A. Earickson, Ph.D
> Senior UNIX Sysadmin and Email Guru
> Information Technology Services
> Colby College, 4214 Mayflower Hill,
> Waterville ME, 04901-8842
> phone: 207-872-3659 (fax = 3076)
> -----------------------------------
>