Re: [AMaViS-user] [Fwd: Re: postfix-2.5.1 - smtpd logging

This is a multi-part message in MIME format.
--------------010405020203000203000206
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Robert Brooks wrote:
> MrC wrote:
>> Rob,
>>
>> I have not seen the ":unknown" port in my logs nor had others report
>> this, so I suppose it is the less common pre-queue setup that is the
>> difference.
>
> I always was the wierdo :)
>
>> I'm about to update postfix-logwatch with some other fixes/features.
>> If this is still an issue for you, I can provide a fix for this.
>
> it is, it appears with postfix-2.5 and amavis earlier than 2.6 that this
> information doesn't make it across in the xforward data (after 2.6 you
> get a port number)
>
> my unmatched entries look like this:
>
> 1 Mar 19 05:14:25 ops postfix/smtpd[9421]: B1C4B18292:
> client=mailer3.dailycandy.com[206.252.143.118]:unknown
>
> 1 Mar 19 04:35:39 ops postfix/smtpd[9232]: Anonymous TLS
> connection established from mxpool12.ebay.com[66.135.197.18]: TLSv1 with
> cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)

Thanks. Patch to 1.36.13pre7 attached. It will also be included in the
next (pre8) release.

MrC
>
>> btw. I just updated amavis-logwatch as well.
>
> excellent, thanks, I will pick that up.
>
> Regards,
>
> Rob

--------------010405020203000203000206
Content-Type: text/plain;
name="postfix-logwatch_1.36.13pre7_patch.unknown-port"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="postfix-logwatch_1.36.13pre7_patch.unknown-port"

--- postfix-logwatch.orig 2008-03-20 09:40:28.000000000 -0700
+++ postfix-logwatch 2008-03-20 09:41:51.000000000 -0700
@@ -1896,6 +1896,7 @@
}

elsif ($p2 =~ /^client=(([^ ]*)\[([^ ]*)\](?::\d+)?)(?:, (.*))?$/o) {
+ elsif ($p2 =~ /^client=(([^ ]*)\[([^ ]*)\](?::(?:\d+|unknown))?)(?:, (.*))?$/o) {
my ($hip,$host,$hostip,$p3) = ($1,$2,$3,$4);

# Increment accepted when the client connection is made and smtpd has a QID.

--------------010405020203000203000206
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
--------------010405020203000203000206
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
--------------010405020203000203000206--