deboeck
Tux's lil' helper
Joined: 13 Jan 2004
Posts: 92
|
 Posted: Tue May 24, 2005 11:11 am Post subject: Spamassassin and metalog problem |
 |
|
Hi,
I just replaced syslog-ng with metalog. It works great, but spamassassin (spamd) is giving me problems. A normal message sent by a program to syslog looks like this:
| Code: | | May 24 11:57:27 [imapd] LOGIN, user=smurf, ip=[10.1.1.201], protocol=IMAP |
So the format is: date [program] message
Messages sent by spamd, however, look like this:
| Code: | | spamd[4049]: [clean message (-4.5/5.0) for smurf] 1005 in 1.0 seconds, 3184 bytes._ |
As a result, metalog doesn't recognise the program as being spamd and doesn't send the message to a separate log. Specifically, the following entry in /etc/metalog/metalog.conf doesn't work:
| Code: | Spamassassin:
program = "spamd"
logdir = "/var/log/spam" |
I can probably replace it with something based on regular expressions instead of the program name, but is there a reason why metalog does this with spamd messages ?
With syslog-ng they did show up correctly in the logs:
| Code: | | May 24 10:20:33 gateway spamd[8230]: clean message (-2.3/5.0) for smurf:1008 in 5.1 seconds, 2517 bytes. |
|
|
Networking & Security
