It'd be a bit of work, but you could make a script that adds the headers to a database.
> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > Sent: Monday, March 29, 2004 8:45 AM > To: [EMAIL PROTECTED]; > [EMAIL PROTECTED] > Subject: RE: SA logging and big sites ? > > > > I'm sorry for not making myself clear enough. > > What I want is to be able to manipulate the ruleset and see > what effect it > has on the Spam detection (how often the modified rule(s) match). > > The problem is that after the mail leaves the SA server, I > have no access to > it anymore. And everything that is left are the syslog entries () > > SA is called from a content_filter in Postfix (spamc calls spamd) > > What a coincidence.. Just as I was writing this I got a email > with 11 Spams > sttached asking me if something could be done about these.. :-P > > >Depending how you call SA, that already happens: > > > >X-Spam-Status: No, hits=-4.8 required=5.0 > tests=AWL,BAYES_00,RCVD_IN_SORBS > >X-Spam-Status: Yes, hits=6.4 required=5.0 > tests=BAYES_50,FORGED_MUA_MOZILLA, > > HTML_60_70,HTML_IMAGE_ONLY_10,HTML_IMAGE_RATIO_04,HTML_MESSAGE, > > > HTML_WEB_BUGS,MANY_EXCLAMATIONS,MIME_HTML_ONLY,RCVD_IN_BL_SPAMCOP_NET, > > RCVD_IN_SBL > > > Can I configure SA to log the lines you quoted to syslog ? > > - R�khar�ur > >
