On Tue, 8 Sep 2009, Clunk Werclick wrote:
I have it now - the only disappointment for me is it does not log the 'to' or 'from' or client ip.
You may be able to determine that if you correlate more than one log. SA logs the message-ID, and the MTA log should give you enough information to determine the client IP address given the message-ID.
-- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- Homeland Security: Specializing in Tactical Band-aids for Strategic Problems. -- Eric K. in Bruce Schneier's blog ----------------------------------------------------------------------- 9 days until the 222nd anniversary of the signing of the U.S. Constitution
