Take a look in the sort order, make shure to set the log for spamd before standart logging.
Quote:
!!prog causes the subsequent block to abort evaluation when a message
matches, ensuring that only a single set of actions is taken.
|
for example:
Code:
# $Id: syslog.conf,v 1.1 2007/11/25 20:21:09 root Exp $
!!spamd
daemon.err;daemon.warn;daemon.info /var/log/spamd
*.notice;auth,authpriv,cron,ftp,kern,lpr,mail,user.none /var/log/messages
kern.debug;syslog,user.info /var/log/messages
auth.info /var/log/authlog