Re: [AMaViS-user] Display rules hitted in syslog

> Hi, list, is there any way of getting the rules which hitted
> in SA tests logged in syslog? I currently do logging in
> AMAVIS via syslog, and have set log_level to 2, but I can't
> make AMAVIS log the rules hitted.
>
> I would like to know if it is possible to get this done, and
> how, if you please.
>
> Thanks in advance,
>
>
> Luis

Sure...

At log_level 2, you will need to set $syslog_priority = 'debug' in
amavisd.conf. This is unncessary with log_levels > 2.

When set, you will lines such as :

SPAM, <from@example.net> -> <to@example.com>, Yes, score=13.423 tag=-10
tag2=6.31 kill=6.31 tests=[AWL=-1.650, BAYES_99=4, EXCUSE_REMOVE=0.11, ...

when an item is considered Spam. If you have $sa_tag_level_deflt
sufficiently low:

$sa_tag_level_deflt = -10.0; # add spam info headers if at, or above that
level

amavis will add tagging information to email and also show the SPAM-TAG in
the logs:

.... SPAM-TAG, <from@example.net> -> <to@example.com>, No, score=-0.069
tagged_above=-10 required=6.31 tests=[BAYES_
00=-2.599, FROM_ENDS_IN_NUMS=2.53]

If you are interested in a log parser for amavis, which includes the tests
hit frequency, bayes scores, spam hit percentiles, etc. drop me a line.

MrC



-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/