Please resist the urge to top-post.
On Wed, 2007-04-04 at 06:17 -0700, dougp23 wrote:
> You are right. I don't want to block the mail, but I do want to assign a
> high enough value to it that it would be marked as spam. In this way, I can
> then go to management and show them how much spam this worker is sending.
So the mail gets tagged. Then what? Regardless of the mail being blocked
or not, whatever calls SA still needs to take action. In this case, it
sounds like "logging"...
> Yes, I do scan outgoing email for viruses using clamd
Unrelated. I asked, if you are scanning outgoing mail for Spam. Not
viruses. Cause if you don't process outgoing mail by SA, a SA based
solution to log these mails is not an option.
Also, since you are specifically aiming at *large* mail, keep in mind
that there usually is a max size for mail to be scanned at all. IMHO SA
is not the best candidate for this kind of "gathering logs".
guenther
--
char *t="[EMAIL PROTECTED]";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
