On Tue, 2009-09-08 at 09:34 -0700, John Hardin wrote: > On Tue, 8 Sep 2009, Clunk Werclick wrote: > > > I have it now - the only disappointment for me is it does not log the > > 'to' or 'from' or client ip. > > You may be able to determine that if you correlate more than one log. SA > logs the message-ID, and the MTA log should give you enough information to > determine the client IP address given the message-ID. Sadly, no. As Fetchmail is polling a remote POP3 server, the only part of the system to see *all* of the information, is Spamassassin. The MTA only sees 'localhost' from Fetchmail. Postfix parses out some information, but the client IP is missing. If I could change the way Spamassassin logs and what it logs, I would be - how do you put it - 'cooking on gas'.
-- ----------------------------------------------------------- C Werclick .Lot Technical incompetent Loyal Order Of The Teapot. This e-mail and its attachments is intended only to be used as an e-mail and an attachment. Any use of it for other purposes other than as an e-mail and an attachment will not be covered by any warranty that may or may not form part of this e-mail and attachment.