> You will need to adjust the search string to match your mail logs.
Here's my maillog snippet: Oct 30 14:12:40 ns1 MailScanner[3201]: New Batch: Scanning 1 messages, 4214 bytes Oct 30 14:12:40 ns1 MailScanner[3201]: Archived message h9UMAPR07828 to mbox file /var/spool/MailScanner/archive Oct 30 14:12:40 ns1 MailScanner[3201]: Saved archive copies of h9UMAPR07828 Oct 30 14:12:40 ns1 MailScanner[3201]: Spam Checks: Starting Oct 30 14:12:40 ns1 MailScanner[3201]: Message h9UMAPR07828 from 61.59.154.73 () to userdomain.com is spam, SpamAssassin (score=28.325, required 5, BAYES_99 6.00, FORGED_AOL_RCVD 4.10, FORGED_MUA_OUTLOOK 2.57, FORGED_OUTLOOK_HTML 1.00, FORGED_RCVD_NET_HELO 4.10, FROM_NO_USER 2.39, HTML_90_100 1.19, HTML_IMAGE_ONLY_02 1.33, HTML_MESSAGE 0.10, HTML_TITLE_UNTITLED 0.43, MIME_HTML_ONLY 0.32, MSGID_FROM_MTA_HEADER 0.70, RCVD_AM_PM 4.10) Oct 30 14:12:40 ns1 MailScanner[3201]: Spam Checks: Found 1 spam messages Oct 30 14:12:40 ns1 MailScanner[3201]: Spam Actions: message h9UMAPR07828 actions are forward,[EMAIL PROTECTED] Oct 30 14:12:40 ns1 MailScanner[3201]: Virus and Content Scanning: Starting Oct 30 14:12:41 ns1 MailScanner[3201]: Uninfected: Delivered 1 messages Oct 30 14:12:41 ns1 sendmail[8006]: h9UMAPR07828: to=<[EMAIL PROTECTED]>, delay=00:02:10, xdelay=00:00:00, mailer=local, pri=123685, dsn=2.0.0, stat=Sent I keep copies of all known spam so I can then remove them from the MailScanner archive to parse out later for sa-learn - no point telling sa-learn to re-learn messages it already knows is spam. But the line that contains "is spam" doesn't seem to increment the counter. /shrug still looking at that myself. -id ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
