Hello!
On Tue, 27 Feb 2018 at 21:00:06 (+0000), Brian Spraker via Exim-users wrote:
> Using Spamassassin with Exim.
> When an email is accepted and goes by the spam checking, the $spam_report
> variable is added to the X-Spam_report header.
> However, if the spam is flat-out denied, information is logged in the
> rejectlog. However, I'd like to be able to inspect these better.
> Is there something that can be added to the ACL to also write the
> $spam_report to the rejectlog so I can see what rules were triggered in
> spamassassin to get to the score?
I'd expect the ACL to be quoted... Elsewise I presume you're looking for:
log_message = SpamAssassin reported spam: $spam_report
I personally transform it like this to make it parsable and readable:
log_message = SpamAssassin reported spam: score $spam_score [rcpts:
$recipients] (report: [${sg{${sg{${sg{$spam_report}{\N\n\s*\[\N}{
[}}}{\N\n\s*\N}{\] \[}}}{\N(\s{2,}|\t)\N}{ == }}])
Looks weird but produces output like this:
2018-02-27 05:31:55 [96148] 1eqVzS-000P0m-UA
H=ec2-52-65-190-205.ap-southeast-2.compute.amazonaws.com (DanicaK.aimai24.com)
[52.65.190.205]:53850 F=<[email protected]> rejected after DATA: SpamAssassin
reported spam: score 10.0 [rcpts: [email protected]] (report:
[host=my.spamassassin.host score=10.0] [1.7 URIBL_BLACK == Contains an URL
listed in the URIBL blacklist [URIs: 9iwj.com]] [0.1 URIBL_SBL_A == Contains
URL's A record listed in the SBL blocklist [URIs: yz.kiev.ua]] [7.0 BAYES_99 ==
BODY: Bayes spam probability is 99 to 100% [score: 1.0000]] [0.2 BAYES_999 ==
BODY: Bayes spam probability is 99.9 to 100% [score: 1.0000]] [0.0 HTML_MESSAGE
== BODY: HTML included in message] [1.0 RDNS_DYNAMIC == Delivered to internal
network by host with] [dynamic-looking rDNS] [0.0 T_DKIM_INVALID ==
DKIM-Signature header exists but is not valid] [0.0 T_REMOTE_IMAGE == Message
contains an external image])
> Thank you!
> Brian S.
--
George L. Yermulnik
[YZ-RIPE]
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
