Logging recipient?

Jørn-Morten Innselset jorn-morten.innselset at BANETELE.COM
Wed Mar 31 23:41:21 IST 2004


That's already in there, and all it gives is the recipient _domain_, not the 
user part:

Message 9366 from 194.19.1.186 (ramarshall at voyager.net) to kjentfolk.no is 
spam, SpamAssassin (score=28.018, required 6, autolearn=spam, BANG_EXERCISE 
2.94, BANG_GUARANTEE 1.00, BAYES_99 5.40, CLICK_BELOW_CAPS 0.50, 
GUARANTEED_STUFF 2.30


And the virus scanners (f-prot and clamav) doesn't log the recipient at all.

jmi


----- Original Message ----- 
From: "Ugo Bellavance" <ugob at CAMO-ROUTE.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Thursday, April 01, 2004 12:13 AM
Subject: Re: Logging recipient?



>-----Message d'origine-----
>De : Jørn-Morten Innselset [mailto:jorn-morten.innselset at BANETELE.COM]
>Envoyé : 31 mars, 2004 16:54
>À : MAILSCANNER at JISCMAIL.AC.UK
>Objet : Re: Logging recipient?
>
>
>The recipient - I would like to extract a report on how many
>messages I have
>blocked per user. Does this info appear in your maillog by default?
>

Check this setting in MailScanner.conf

# Do you want all spam to be logged? Useful if you want to gather
# spam statistics from your logs, but can increase the system load quite
# a bit if you get a lot of spam.
Log Spam = yes

I think virus activity is logged by default.

Ugo

>jmi
>
>
>----- Original Message ----- 
>From: "Mike Kercher" <mike at CAMAROSS.NET>
>To: <MAILSCANNER at JISCMAIL.AC.UK>
>Sent: Wednesday, March 31, 2004 10:10 PM
>Subject: Re: Logging recipient?
>
>
>
>Sender or recipient?  I wouldn't trust the sender these days!
>
>My systems log all that info...may take a little digging to get to it
>though.
>
>Mike
>
>
>> -----Original Message-----
>> From: MailScanner mailing list
>> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Jørn-Morten
>Innselset
>> Sent: Wednesday, March 31, 2004 1:50 PM
>> To: MAILSCANNER at JISCMAIL.AC.UK
>> Subject: Logging recipient?
>>
>> Is there an easy way to enable logging of the full email
>> address of infected/spam messages to syslog?
>>
>> jmi
>>
>




More information about the MailScanner mailing list