I think you'll need to take those info out of you smtp/MTA logs We do similar here using an AWK script which goes on to tally ham/spam and various other stats.
On Tue, 11 Jul 2006 05:38:22 -0700 (PDT), Pezhman Lali <[EMAIL PROTECTED]> wrote: >hi >in my /var/log/maillog, foreach spam checking, there is these 4 lines > Jul 11 08:22:50 DSG spamd[1286]: spamd: connection from localhost [127.0.0.1] > at port 45158 > > 12101 Jul 11 08:22:50 DSG spamd[1286]: spamd: processing message <[EMAIL > PROTECTED]> for mail:200 > > 12102 Jul 11 08:23:00 DSG spamd[1286]: spamd: identified spam (11.0/5.0) for > mail:200 in 10.0 seconds, 4100 bytes. > > 12103 Jul 11 08:23:00 DSG spamd[1286]: spamd: result: Y 11 - > HTML_MESSAGE,MDAEMON_DNSBL,RCVD_IN_XBL,URIBL_BLACK scantime=10. > >12104 Jul 11 08:23:00 DSG spamd[1285]: prefork: child states: II > > How can I add message's "from" and "to" to this log?
