Javid Freeman wrote:
Ok, thanks... Could be a nice feature to add the option to install
*qmail-scanner ***with clamav, spamassassin and QmailToaster. I'm sure
you can install qmail-scanner and integrate with QmailToaster -- has
anyone tried?
http://qmail-scanner.sourceforge.net/
Looks like it's configured to run with Qmail 1.03 or Netqmail 1.05...
Javid
On 07/01/2009 08:15 PM, Eric Shubert wrote:
I'm afraid the toaster's logs are nowhere near that pretty. :(
qmlog command by itself shows all of the options. The smtp, spamd,
and clamd logs are each separate. I usually just tail the smtp log
for monitoring purposes. Most of what you're looking for is in there,
if not as pretty. ;)
I agree with Eric that the logging is not as pretty. It is readable
though; here is a sample from one of my machines:
2009-07-01 23:22:10.310372500 tcpserver: status: 3/255
2009-07-01 23:22:10.310607500 tcpserver: pid 12231 from 195.25.170.2
2009-07-01 23:22:10.310758500 tcpserver: ok 12231
mailserver.blah.com:164.127.118.179:25 :195.25.170.2::51864
2009-07-01 23:22:11.076299500 tcpserver: end 12230 status 0
2009-07-01 23:22:11.076326500 tcpserver: status: 2/255
2009-07-01 23:22:11.529857500 CHKUSER accepted sender: from
<adhiamboal...@jotto.com::> remote <pcjerome:unknown:195.25.170.2> rcpt
<> : sender accepted
2009-07-01 23:22:11.866180500 CHKUSER accepted rcpt: from
<adhiamboal...@jotto.com::> remote <pcjerome:unknown:195.25.170.2> rcpt
<o...@jotto.com> : found existing recipient
2009-07-01 23:22:12.976282500 simscan:[12231]:CLEAN
(6.40/12.00):0.8616s:***SPAM*** Staying tool easy as 1,2,3 cuneiform
denominational:195.25.170.2:adhiamboal...@jotto.com:o...@jotto.com:
2009-07-01 23:22:13.545616500 tcpserver: end 12231 status 0
You can see the message was accepted from 195.25.170.2, and simscan
scanned it and gave it a score of 6.40 with a threshold of 12.0 (when a
message gets deleted). Since it scored above 5.0 (defined in the
/etc/mail/spamassassin/local.cf config file), it was rewritten with the
subject of ***SPAM***.
And we use simscan instead of qmail-scanner. While qmail-scanner can be
more flexible, it does not run nearly as fast as simscan.
