MailScanner snd SpamAssassin

Webmaster webmaster at nwdhosting.com
Sun Oct 19 06:26:10 CEST 2003


This may have been asked, but I have been unable to find an answer.  Sorry to bother you...

I currently use MailScanner which scans all incoming email for viruses and for spam via an external virus program and SpamAssassin.  I know lire can parse Spamassassin logs, but I have been unable to find a way to parse MailScanner logs.  Is this possible?  I use lire for all my other logs, it is great, and I am sure other people could use this.  Currently, the only one I could find is SawMill, and I hate closed source.....  Below is a MailScanner excerpt:

Oct 19 00:09:40 scotty MailScanner[22221]: New Batch: Scanning 1 messages, 1908 bytes
Oct 19 00:09:40 scotty MailScanner[22221]: Spam Checks: Starting
Oct 19 00:09:41 scotty MailScanner[22221]: Message 7B3D764C247 from 64.94.106.108 (usaplatinum at d-alertmail.com) to perlone.com,nwdhosting.com is spam, SpamAssassin (score=17.807, required 6, BAYES_99 5.40, DCC_CHECK 2.91, HTML_IMAGE_ONLY_02 1.23, HTML_MESSAGE 0.10, HTML_WEB_BUGS 0.34, MIME_HTML_MOSTLY 1.24, RCVD_IN_BL_SPAMCOP_NET 1.50, RCVD_IN_NJABL 0.10, RCVD_IN_NJABL_SPAM 1.21, RCVD_IN_SBL 1.11, SUBJ_HAS_UNIQ_ID 2.68)
Oct 19 00:09:41 scotty MailScanner[22221]: Spam Checks: Found 1 spam messages
Oct 19 00:09:41 scotty MailScanner[22221]: Spam Actions: message 7B3D764C247 actions are deliver
Oct 19 00:09:41 scotty MailScanner[22221]: Virus and Content Scanning: Starting
Oct 19 00:09:41 scotty MailScanner[22221]: Uninfected: Delivered 1 messages

I would love to see stats by user delivered to, top spam ip's, and grouped spam scores, infected mail, etc..  I hope this is possible.  I am a developer, if this has not already been done, can you can point me in the right direction?

Brian
Webmaster
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.logreport.org/pipermail/questions/attachments/20031019/caa68074/attachment.html 


More information about the Questions mailing list