Re: Monitoring E-mail traffic through firewall

[Marcus J Ranum <mjr @ tis . com>]

	If you're using the firewall toolkit, there's a mail
summarizer for smap traffic that summarizes the top 'N' senders
and recips. It should be portable to use sendmail system log
entries with a little hammering, though sendmail doesn't log
things as nicely, IMHO. The smap summarizer is in a file named
fwtk/tools/admin/reporting/smap-summ.sh

	One thing it does is disassociates (deliberately) the
senders and recips, to somewhat protect the user's privacy.

mjr.