Adding Attachment Information

To add attachment information to the var/log/message_log, add the following line to the etc/policy.siv file:

pmx_attachment_log;

This change creates entries in the var/log/message_log similar to the following:

2006-02-09T14:12:51 q=gDBAJDaci7 f=
t=<somebody@YourCompany.com>
at=1,3483,multipart/alternative at=1,3056,text/html at=1,0,text/plain
p=0.436 h=FROM_NUM_AT_WEBMAIL h=RCVD_FAKE_HELO_DOTCOM
h=X_MSMAIL_PRIORITY_HIGH h=NO_REAL_NAME h=__AOL_FROM h=__CT
h=__CTYPE_HAS_BOUNDARY h=__CTYPE_MULTIPART h=__CTYPE_MULTIPART_ALT
h=__HAS_MSGID h=__HAS_MSMAIL_PRI h=__HAS_X_MAILER h=__HAS_X_PRIORITY
h=__LINES_OF_YELLING h=__MIME_HTML h=__MIME_VERSION h=__SANE_MSGID
h=__TAG_EXISTS_HTML h=__X_MSPRI_HI Size=5880 r=unknownhost tm=0.26
a=a/eom

There are four fields that make up each at key. For example, in the following log entry:

at=1,3056,text/html
  • at: indicates an attachment
  • 1: indicates the number of attachments of this type
  • 3056: indicates the total size of all attachments of this type
  • text/html: indicates the attachment type.