Boudewijn, Thank you for your reply, and clarification. The man pages for SPAMD and SPAMDB do not directly state this relationship / behavior, and therefore I had made the assumption that spamd would capture and feed all entries into the spamdb, in all operational modes. ..hopefully i have not overlooked vital documentation.
in any event, Standard logging continues to capture as required/expected: Mar 3 00:32:54 myserver spamd[3205]: xx.xx.xx.xx: disconnected after 9 seconds. Mar 3 00:32:59 myserver spamd[3205]: xx.xx.xx.xx: disconnected after 7 seconds. Mar 3 00:33:05 myserver spamd[3205]: xx.xx.xx.xx: disconnected after 7 seconds. Mar 3 00:33:11 myserver spamd[3205]: xx.xx.xx.xx: disconnected after 7 seconds. Mar 3 00:35:22 myserver spamd[3205]: xx.xx.xx.xx: disconnected after 132 seconds. thank you all. -sub > Op Thu, 27 Feb 2020 00:19:59 +0100 schreef <s...@skolma.com>: > >> Questions: > >> Does the spamDB play a role at all in pure Black listing mode ? > > No, that DB is used for bookkeeping and decision-making. In blacklist-only > > mode, there is none of that. > >> Does the spamDB only get created/configured when running in Normal/Grey > >> mode ? > > It should. > >> Does is require Manual creation ? > > No. > >> Issue: > >> When Attempting to review SPAMDB entries i get an error: > >> spamdb: cannot open /var/db/spamd for reading: No such file or directory > > What kind of entries did you expect to find?