Alan,
> I've recently seen an increase of mails that are being defanged.
> I'm currently running at log level 2. At what log level does defang
> detail get added to the logs?
At log level 1 there should be:
do_log(1,"mangling by %s (%s) done, new size: %d, orig %d bytes",
$actual_mail_mangle, $mail_mangle,
$repl_size, $msginfo->msg_size);
and:
do_log(1, "DEFANGING MAIL: %s",
length($s) <= 150 ? $s : substr($s,0,150-3)."[...]");
At log level 2 there should be at least the following log entries:
ll(2) && do_log(2, "mangling %s: %s (orig: %s), ".
"discl_allowed=%d, <%s> -> <%s>", $to_be_mangled ? 'YES' : 'NO',
$to_be_mangled, $orig_to_be_mangled, c('allow_disclaimers'),
$sender, $recip);
and:
do_log(2,"mangling by: %s, <%s>", $mail_mangle,$recip);
and:
do_log(2,"mangling by built-in defanger: %s, <%s>",
$mail_mangle,$recip);
and at log level 3 the:
do_log(3, "mail body mangling in effect, %s", $resend_m);
> Is it possible to turn on more detailed reporting in the headers of what
> the defang action was, e.g. attachment x was removed from the message?
> X-Amavis-Modified: Mail body modified (defanged) by mx1.example.com
> I'd like to be able to get more detail into the
> logs and something a bit more informative into the header entry.
The built-in defanging is only able to wrap the whole message into
a MIME attachment, more selective changes like stripping attachments
are not provided internally. More flexible mail modifications
are possible when an external utility 'altermime' is invoked
by amavisd. In this case the log could only show what command-line
options were passed to altermime. What altermime actually did to a
message is entirely in its domain, depending on its configuration/options.
Mark
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
