David B Funk <dbfunk <at> engineering.uiowa.edu> writes: > Exactly so. > Usually you can find the related message by matching the time-stamp > from your maillog to your spamd log. You can also do some detective work, > eliminate maillog entries that have an incoming msgid (IE one from the > sending MTA) and just concentrate on those that have a locally added > msgid. > > Dave >
thx help, it seem ur correct, as based on the timestamp search, most of unknown msgid at spam.log had a msgid like '[EMAIL PROTECTED]' at maillog.