[plug] maillog entry

Craig Ringer craig at postnewspapers.com.au
Mon Oct 13 16:13:23 WST 2003


>>Just a quick one I hope. In the postfix maillog I see the following:
>>Oct 13 10:55:20 gateway postfix/qmgr[16089]: C1B13E: from=<Brian at swaintours.com>, size=3685, nrcpt=1 (queue active)
>>Oct 13 02:55:20 gateway postfix/smtpd[16278]: connect from unknown[127.0.0.1]
>>
>>What I would like to know is the 2nd line that has connect from
>>unknown [127.0.0.1] is there a way to tell it where it is connecting
>>from instead of unknown?
> 
> Although I don't use postfix, I would assume that the second cited
> event, the connection from 'unknown', is completely separate from the
> first event. (Hours apart, and for an separate mail function.) With
> regards to unknown [127.0.0.1], is there a reason you don't believe the
> log file on face value? I mean...it says the connection was from
> 127.0.0.1 (not sure why it says "unknown" -- don't you have 127.0.0.1
> resolving to 'localhost'?).

Maybe the 'unknown' is the HELO, not the result of a reverse DNS lookup? 
I can't think why anything would be connecting and sending 'HELO 
unknown' but it makes more sense than a failed reverse lookup on 127.0.0.1.

Craig Ringer

_______________________________________________
plug mailing list
plug at plug.linux.org.au
http://mail.plug.linux.org.au/cgi-bin/mailman/listinfo/plug


More information about the plug mailing list