To add attachment information to the var/log/message_log, add the following line to the etc/policy.siv file:
pmx_attachment_log;
This change creates entries in the var/log/message_log similar to the following:
2006-02-09T14:12:51 q=gDBAJDaci7 f= t=<somebody@YourCompany.com> at=1,3483,multipart/alternative at=1,3056,text/html at=1,0,text/plain p=0.436 h=FROM_NUM_AT_WEBMAIL h=RCVD_FAKE_HELO_DOTCOM h=X_MSMAIL_PRIORITY_HIGH h=NO_REAL_NAME h=__AOL_FROM h=__CT h=__CTYPE_HAS_BOUNDARY h=__CTYPE_MULTIPART h=__CTYPE_MULTIPART_ALT h=__HAS_MSGID h=__HAS_MSMAIL_PRI h=__HAS_X_MAILER h=__HAS_X_PRIORITY h=__LINES_OF_YELLING h=__MIME_HTML h=__MIME_VERSION h=__SANE_MSGID h=__TAG_EXISTS_HTML h=__X_MSPRI_HI Size=5880 r=unknownhost tm=0.26 a=a/eom
There are four fields that make up each at key. For example, in the following log entry:
at=1,3056,text/html