pf+spamd's 'verbosity' has gone missing

Fri May 4 18:22:24 UTC 2007

hi,
> OK, the line in syslog.conf looks fine.
> Verbose logging is done with facility debug and the line catch this.
>
> Do you have some entries in the /var/log/debug.log ?

hmmm. interesting.  in /var/log/debug.log i've a few instances of
'verbose' spamd output, e.g.,

...
May  3 03:47:39 router spamd[6565]: 72.3.240.53: Body: <!DOCTYPE HTML
PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
May  3 03:47:39 router spamd[6565]: 72.3.240.53: Body: <HTML><HEAD>
May  3 03:47:39 router spamd[6565]: 72.3.240.53: Body: <META
http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
May  3 03:47:39 router spamd[6565]: 72.3.240.53: Body: <STYLE></STYLE>
May  3 03:47:39 router spamd[6565]: 72.3.240.53: Body: </HEAD>
May  3 03:47:39 router spamd[6565]: 72.3.240.53: Body: <xbody bgColor=#ffffff>
May  3 03:47:39 router spamd[6565]: 72.3.240.53: Body: <DIV id=xptHeader>
May  3 03:47:39 router spamd[6565]: 72.3.240.53: Body: <TABLE
cellSpacing=0 cellPadding=0 align=center border=0>
May  3 03:47:39 router spamd[6565]: 72.3.240.53: Body:
...

but NO trace of that "BLACK" label, and not nearly enough correlation
beween the # of these listings and the # of connections ...

i'm not sure why i don't ALSO see this in the spamd.log ... the "*.*"
_should_ take care of that, no?

i also see in debug.log bunches of these,

May  3 05:19:15 router spamd[6564]: whitelisting 64.39.1.214 in /var/db/spamd
May  3 07:27:12 router spamd[6564]: whitelisting 66.211.168.230 in /var/db/spamd

for whitelisting.

cheers.