"[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote on 10/11/2004 08:22:04 AM:
> Thanks to all who helped get my logging going!
>
> Here is what actually logs in the maillog:
> Oct 11 09:18:13 mail spamd[22851]: info: setuid to myuser succeeded
> Oct 11 09:18:13 mail spamd[22851]: processing message
> <[EMAIL PROTECTED]> for myuser:1661.
> Oct 11 09:18:17 mail spamd[22851]: identified spam (19.7/8.0) for
> myuser:1661 in 4.5 seconds, 1548 bytes.
>
> Ive taken a quick look at the stats page of the wiki, and all those
scripts
> seem to use Mailscanner, which I am not. Also it seems that SA may not
be
> logging to its full potential. Should it be telling me which rules it
hit
> on? Anyone know of a good log analyzer for a sendmail/SA setup?
>
>
You need SA 3.0 to get the rule stats, I don't believe 2.6x logged rules.
If you do upgrade, grab a copy of Dallas' script at
http://www.rulesemporium.com/programs/sa-stats.txt
Andy
