On Thu, 17 May 2012, Brent Gardner wrote:
I'm hoping to track scores by sender IP. Do any gurus know how I can get the original sender's IP address into this log line?
Can you get what you need from Postfix logs?
I use sendmail, and spamassassin/amavis as milter, and I run all sort of statistics from /var/log/mail, which is where sendmail logs everything. E.g. I identify messages flagged as spam via the string "Blocked SPAM" in the log) and extract the score/hits from there.
For other statistics on rules I use the quarantine folder (we store all quarantined spam in a single daily mail folder for all users).
Of course this has to be highly customized for local usage.
