Note: I'm running 2.60. Haven't had the opportunity to get to 2.63. If that changes things, then I will probably consider upgrading, but I'd prefer to hold off until 3.0 comes out, because otherwise it's working really well for our company.
Cheryl wrote: |caveat #1: I'm using amavis-new to hook up SA with postfix. |If you're just |firing up a new SA process for each incoming mail, your logs may look |rather different than mine. | |caveat #2: I haven't actually tried any of these yet. I'm still |surveying what's out there and trying to define what my requirements |are. YMMV. | |For starters, I'd look more closely at MikesStatScript -- it reports on |the output of MailScanner and SpamAssassin but my reading suggests that |those two things aren't connected; if you're only using one of the two |utilities you'll only see data for the one you're using. So |in your case |you'd just see the "scanner says virus" column always zero. | |There's also Mailgraph: |http://people.ee.ethz.ch/~dws/software/mailgraph/ I'm looking at Mailgraph - it's nice. | |If you're at all perlhacker it looks like you can pretty easily |customize the scripts here |http://taz.net.au/postfix/mrtg/ |or here |http://taz.net.au/postfix/scripts/ |or here |http://www.monkeynoodle.org/comp/tools/spam I'll look, even though I'm not a perlhacker - I'm learning... |to understand what ends up in your logfiles -- particularly if |you've got |SA logging to the same logfile as postfix. Ah - this looks like the rub to me. I've roamed through 'man spamassassin' and 'man Mail::SpamAssassin::Conf' and don't find anything about logging for SA. Well, sorta. Here's what I found: -l filename, --log-to-mbox=filename Log all mail messages that pass through the filter, to an mbox-for- mat file named by filename. Handy for use with -r and -w. Which is from the man page for SA, with nothing to be found in Mail::SpamAssassin::Conf. The above seems to indicate that the entire message is saved to an mbox, which is cool, but it doesn't look like anything is logged to /var/log/maillog (or anywhere else) indicating that SA found a particular message to be a spam or a ham. Kurt
