Spam Filter ISP Forums : Build a database from your logs https://www.logsat.com/spamfilter/forums/ Sun, 08 Mar 2026 12:34:58 +0000 Fri, 20 Oct 2006 13:27:01 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=5836 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[Build a database from your logs : Updated version posted today...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5836&PID=9162&title=build-a-database-from-your-logs#9162 Author: pcmatt
Subject: 5836
Posted: 20 October 2006 at 1:27pm

Updated version posted today 12/19/2007 to work with SpamFilter 3.5.4.730
 
http://www.ServerBoss.com/SF2DB has a program to parse your SpamFilter Log Files to a database so you can add audit features and reporting features to your websites:

SF2DB can create and store the following information on each email message:
LogID - Unique Key.
SRS - SpamFilter Server Name or reference.
RDomain - Recipient Domain.
LDate - Email Processing Start Date
LTime - Email Processing Start Time
LFullDate - Email Processing Start Full Date and Time
LDOW - Email Processing Start Day of Week
LMonth - Email Processing Start Month
ThreadID - SpamFilter Thread ID
SourceIP - Source IP Address of Sending System
SourceHostName - Source Host Name of Sending System
SourceCountry - Source Country of Sending System
Sender - Sender Email Address
Recipient - Recipient Email Address
SFAction - Result of SpamFilter checks 0 = Incomplete Data, 1 = Accepted, 2 =  Rejected/Quarantined
Reason - Reason if Rejected, see SFLRejectCodes Rejection codes table. Note SF2DB uses its own table of rejection codes that does not correspond exactly to SpamFilter's tblRejectCodes.
Message - MAPS or Primary Email Disposition Message
Queued - Was queued?
Delivered - Was Delivered? (NOTE: NOT CURRENTLY SUPPORTED)
Complete - SF2DB processing complete?
CompletedTime - Full Date and Time Email Checking by SpamFilter was completed (to the point where the message was either queued or rejected/quarantined.
Keywords - Keyword or phrase that failed this email message.
SPFCheck - SPF Policy/Record if one was found.
AutoIPBlock - This message caused IP to be added to Auto Block List?
SURBLEntry - SURBL Value that caused message to be  blocked
Virus - Virus that email message contained.

Current version of SF2DB supports latest version of SpamFilter ISP as of 10/20/2006.

-Matt Rainoff



Edited by pcmatt - 19 December 2007 at 12:18am]]> Fri, 20 Oct 2006 13:27:01 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5836&PID=9162&title=build-a-database-from-your-logs#9162