There's also debugging mode. It's give you a heavier load and suck up disk space but it will provide you with a world of information.
Gary -----Original Message----- From: Duncan Hill [mailto:[EMAIL PROTECTED] Sent: Monday, March 29, 2004 5:47 AM To: [EMAIL PROTECTED] Subject: Re: SA logging and big sites ? On Monday 29 March 2004 14:39, [EMAIL PROTECTED] wrote: > What bothers me is that SA provides very little logging capability and with > over 2000 users and 20000 emails/day, trying to tune the ruleset is like > controling the Mars rovers without video feedback. SA can provide plenty of logging, depending on what you tell it to do and how you call it. > Has anyone tried to add more logging to SA ? I.e what I am looking for is > what rules match for each mail. Depending how you call SA, that already happens: X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00,RCVD_IN_SORBS X-Spam-Status: Yes, hits=6.4 required=5.0 tests=BAYES_50,FORGED_MUA_MOZILLA, HTML_60_70,HTML_IMAGE_ONLY_10,HTML_IMAGE_RATIO_04,HTML_MESSAGE, HTML_WEB_BUGS,MANY_EXCLAMATIONS,MIME_HTML_ONLY,RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_SBL
