Log spam = yes

[Peter Bonivart]

hermit921 wrote:
> I am thinking about turning on spam logging (Log Spam = yes) but I am
> curious about two things.
>
> 1.  How much load does this actually adds to the system?

Not much. A normal message running through MS generates at least ten
lines of log, adding one more is not gonna kill your system. SA itself
is very resource intensive (CPU and net especially) so if your system
can handle that it shouldn't have any problems adding a little more IO.

> 2.  How many lines per message does this add, and what do the added lines
> look like?

One per message, looks like this:

Mar  5 21:25:30 kleenex MailScanner[25285]: Message i25KPP7u027731 from
xxx.xxx.xxx.xxx (rate_drop_alert at optionalhelp.com) to xxx.xxx is spam,
SpamAssassin (score=8.705, required 4, BAYES_99 5.40, HTML_60_70 0.11,
HTML_FONT_BIG 0.27, HTML_MESSAGE 0.10, HTML_TITLE_EMPTY 0.12,
HTTP_WITH_EMAIL_IN_URL 0.20, MANY_EXCLAMATIONS 0.83,
MIME_HTML_NO_CHARSET 0.56, RCVD_IN_SBL 1.11)

--
/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14,
SpamAssassin 2.63 + DCC 1.2.30, ClamAV 0.67 + GMP 4.1.2