Nothing besides counting it for yourself, manually (using grep | wc or something like that). If you look into the contentfilter.log, you see the blocked pages. The field LAST SCANNER indicates the reason for the block; a regular expression block is done by the scanner "libweedpcre.so".
Nothing besides counting it for yourself, manually (using grep | wc or something like that). If you look into the contentfilter.log, you see the blocked pages. The field LAST SCANNER indicates the reason for the block; a regular expression block is done by the scanner "libweedpcre.so".
Basically I'm blocking spam to bogus or old addresses using the expression filter. Someone likes abc@domain.com....
I went in and had a look at the contentfilter.log but even though I'm getting lots of EXP marked e-mail in the proxy content manager, there isn't a last scanner marked for libweedpcre.so. They are all either libkav.so or libspamassasin.so.
Are they tripping the EXP filter and still being scanned or spam filtered? Is there any document that explains the flow of a message through the various filter processes?
