Fwd: amavis & maia
"Kirk Bauer" <[email protected]>
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
---------- Forwarded message ---------- From: Alexandre Ghisoli <[email protected]> Date: Sat, 12 Jan 2008 19:20:53 +0100 Subject: amavis & maia To: [email protected], [email protected] Hi, Here is a patch to avoid a lot of unparsed entries when a email gateway is using maia ( http://www.maiamailguard.com ). Maia is adding this line in logs : Jan 7 11:02:04 mx1 amavis[944]: (00944-09) SPAM, <[email protected]> -> <[email protected]>, Yes, hits=11.327 tag=3 tag2=5 kill=5 tests=BAYES_99=3.5, DOS_OE_TO_MX=2.75, FORGED_MUA_OUTLOOK=3.116, HTML_MESSAGE=0.001, RCVD_IN_BL_SPAMCOP_NET=1.96, quarant ine spam-5958880 (maia-spam-quarantine) That line is not needed, as logwatch reports amavis logs. I'm not sure it's required to report both amavis and maia spam event (quarantine or not). regards --Alexandre -- Kirk Bauer <[email protected]> http://linux.kaybee.org | www.logwatch.org Author, Automating UNIX & Linux Administration _______________________________________________ Logwatch-Devel mailing list [email protected] http://www2.list.logwatch.org:81/mailman/listinfo/logwatch-devel
logwatch-amavis-maia.patch
(text/x-patch, 449 B)
diff -ur a/scripts/services/amavis b/scripts/services/amavis
--- a/scripts/services/amavis 2007-05-16 06:27:17.000000000 +0200
+++ b/scripts/services/amavis 2008-01-12 18:01:03.000000000 +0100
@@ -523,6 +523,7 @@
or ($p1 =~ /^parse_message_id/)
or ($p1 =~ /email.txt no longer exists, can't re-use it/)
or ($p1 =~ /SPAM\.TAG2/)
+ or ($p1 =~ /^SPAM, .*\(maia\S+\)$/)
or ($p1 =~ /BAD-HEADER\.TAG2/)
);