Hello!

On Tue, 27 Feb 2018 at 21:00:06 (+0000), Brian Spraker via Exim-users wrote:

> Using Spamassassin with Exim.
> When an email is accepted and goes by the spam checking, the $spam_report 
> variable is added to the X-Spam_report header.
> However, if the spam is flat-out denied, information is logged in the 
> rejectlog.  However, I'd like to be able to inspect these better.
> Is there something that can be added to the ACL to also write the 
> $spam_report to the rejectlog so I can see what rules were triggered in 
> spamassassin to get to the score?

I'd expect the ACL to be quoted... Elsewise I presume you're looking for:
        log_message = SpamAssassin reported spam: $spam_report

I personally transform it like this to make it parsable and readable:
        log_message     = SpamAssassin reported spam: score $spam_score [rcpts: 
$recipients] (report: [${sg{${sg{${sg{$spam_report}{\N\n\s*\[\N}{ 
[}}}{\N\n\s*\N}{\] \[}}}{\N(\s{2,}|\t)\N}{ == }}])

Looks weird but produces output like this:
2018-02-27 05:31:55 [96148] 1eqVzS-000P0m-UA 
H=ec2-52-65-190-205.ap-southeast-2.compute.amazonaws.com (DanicaK.aimai24.com) 
[52.65.190.205]:53850 F=<dani...@aimai24.com> rejected after DATA: SpamAssassin 
reported spam: score 10.0 [rcpts: y...@yz.kiev.ua] (report: 
[host=my.spamassassin.host score=10.0] [1.7 URIBL_BLACK == Contains an URL 
listed in the URIBL blacklist [URIs: 9iwj.com]] [0.1 URIBL_SBL_A == Contains 
URL's A record listed in the SBL blocklist [URIs: yz.kiev.ua]] [7.0 BAYES_99 == 
BODY: Bayes spam probability is 99 to 100% [score: 1.0000]] [0.2 BAYES_999 == 
BODY: Bayes spam probability is 99.9 to 100% [score: 1.0000]] [0.0 HTML_MESSAGE 
== BODY: HTML included in message] [1.0 RDNS_DYNAMIC == Delivered to internal 
network by host with] [dynamic-looking rDNS] [0.0 T_DKIM_INVALID == 
DKIM-Signature header exists but is not valid] [0.0 T_REMOTE_IMAGE == Message 
contains an external image])

> Thank you!
> Brian S.

-- 
George L. Yermulnik
[YZ-RIPE]

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to