I've noticed that since going to exim 4.60 and SA 3.1 that I'm getting alot of logging to my screen rather than into log files on the server from either spamd or exim (I'm thinking spamd) and I'm wondering how I can configure either of them or syslog.conf to not have this happen but go to files as before. Nothing has changed here in syslog.conf so I'm a little stumped.
Example: [12441] error: __alarm__ [11265] info: prefork: child states: IBII [11265] info: spamd: handled cleanup of child pid 12441 due to SIGCHLD [11265] warn: Use of uninitialized value in numeric eq (==) at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamdForkScaling.pm line 598. [11265] warn: Use of uninitialized value in numeric eq (==) at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamdForkScaling.pm line 598. [11265] warn: Use of uninitialized value in numeric eq (==) at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamdForkScaling.pm line 598. [11265] warn: Use of uninitialized value in numeric eq (==) at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamdForkScaling.pm line 598. [11265] warn: Use of uninitialized value in numeric eq (==) at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamdForkScaling.pm line 598. [11265] info: prefork: child states: IBIS [11430] error: __alarm__ [11430] error: __alarm__ [11365] info: spamd: connection from localhost [127.0.0.1] at port 39080 [11365] info: spamd: processing message <[EMAIL PROTECTED]> for mail:561 [11265] info: prefork: child states: BII [11430] info: spamd: connection from localhost [127.0.0.1] at port 39082 [11430] info: spamd: processing message <[EMAIL PROTECTED]> for mail:561 [12231] info: spamd: connection from localhost [127.0.0.1] at port 39083 [12231] info: spamd: processing message <[EMAIL PROTECTED]> for mail:561 [11365] info: spamd: clean message (0.0/5.0) for mail:561 in 74.5 seconds, 7080 bytes. [11365] info: spamd: result: . 0 - scantime=74.5,size=7080,user=mail,uid=561,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=39080,mid=<[EMAIL PROTECTED]>,autolearn=disabled [11365] error: __alarm__ [11365] error: __alarm__ Syslog.conf is below: # Log all kernel messages to the console. # Logging much else clutters up the screen. #kern.* /dev/console # Log everything (except mail and news) of level info or higher. # Hmm--also don't log private authentication messages here! *.info -/var/log/messages *.warn -/var/log/messages # Log debugging too #*.debug;news,mail,authpriv,auth.none -/var/log/debug # The authpriv file has restricted access. authpriv.*;auth.* /var/log/secure # true, 'auth' in the two previous rules is deprecated, # but nonetheless still in use... # Log all the mail messages in one place. spamd.* /var/log/exim/mail mail.* /var/log/exim/mail info.* /var/log/exim/mail # Save uucp and news errors of level err and higher # in a special file. uucp,news.err /var/log/spooler # Everybody gets emergency messages, plus log them on # another machine. *.emerg * #*.emerg @loghost
