On 03/05/2008 12:34 PM, Richard Starkie wrote:

I am trying to find a mail that I suspect may have been declared spam by my SpamAssasin, I have looked in the logs, however they appear to be a little light on content, can someone please confirm where I should be looking, and if the messages are stored somewhere prior to being deleted.

I have a “standard” QMT install that has not been tweaked at all.


Rich


Good luck. Your best bet is to go off of timestamps in the spam logs compared with those from the smtp or send logs. Hopefully your server isn't too busy and you can track them that way. Aside from that, it's pretty hard to track things through the SA logs because as you said, they don't have much to go off of.

What I have done to help with this, is to change the spec for simscan and build it with the option "--enable-spamc-user=y". This causes simscan to pass the recipient address through to SpamAssassin, rather than calling SA as the clamav user which it does by default in QMT. The recipient then shows up in the SA logs instead of showing that every message was for the "clamav" user.

Adam

---------------------------------------------------------------------
    QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to