I chose postfix as an MTA, as mentioned above. I bound it only to the loopback-interface, so it doesn't listen on any physical network interface. I deactivated logrotation, and a shellscript greps the times and ip-addresses of connections, and sends it to the SA-department. Then I do the logrotation myself, with the few files that I really want to rotate.
My script looks like this:
# report and rotate logs
echo "From: VPN-Master <root@company.net>" > \
/tmp/daily_report
echo "To: admin@company.net" >> \
/tmp/daily_report
echo "Subject: VPN Connections - Daily report"\
>> /tmp/daily_report
grep l2tpd /var/log/messages | grep established \
| grep Call | awk '{print ($1 " " $2 "\
" $3 " " $10)}' | sed 's/,//' >> \
/tmp/daily_report
grep Call | cut -d ' ' -f 1-3,10 | sed 's/,//'\
>> /tmp/daily_report
/usr/sbin/sendmail admin@company.net < /tmp/daily_report
rm /var/log/messages
killall -HUP syslogd