There was an excellent article in TPJ on Mail::Audit a little while back. I think that would give you a solution to your problem and more. :)

cheers,
deprecated

--
i am not cool enough to have a signature.