log spam

[Marc Lucke]

for anyone interested who uses fail2ban:

# cat filter.d/spam.conf
failregex = Message .* from <HOST> .* is spam
ignoreregex =
# tail -n 8 jail.conf
[spam]
enabled = true
filter = spam
maxretry = 1
bantime  = 3600
action = iptables-multiport[name=spam port="smtp", protocol=tcp]
           sendmail-whois[name=spam, dest=root, sender=root]
logpath = /var/log/maillog

works a treat :)  Thanks John!  I was getting too complicated.


Marc Lucke wrote:
> is that all - lol - I'll have  look.  Whoops :)
>
> John Wilcock wrote:
>> Le 11/06/2010 08:50, Marc Lucke a écrit :
>>> I want to log the ip address of the person sending me spam, store the
>>> message and then forward it to my spam box.  Can I have my cake and eat
>>> it to?  If so, how?
>>
>> If all you need to log is the IP address, what's wrong with 
>> MailScanner's built-in logging functions?
>>
>> Log Spam = yes
>>
>> John.
>>