RFC 821 vs. RFC 822. I'd expect you to know this Dustin! ;) On Wed, Aug 22, 2012 at 3:42 PM, Alexander Perlis <alexanderper...@gmail.com> wrote: > Dustin, > >> With sendmail or Postfix, I'd be able to see the sender. Is there a way to >> get this data from a log or spool file somewhere? > > Depends on whether by "sender" you mean "envelope sender" or "message > content header From line". The former is indeed in the log (see > below). > >> [...] I see things like this: >> 2012-08-16 10:52:44 1T22NI-0000sD-SD <= purye...@newvps.puryear-it.com >> U=puryeart P=local S=2394 >> id=059035b20be4a73fb2e817761bc9d...@www.puryear-it.com T="Hey guy!" for >> dpury...@puryear-it.com > > The "envelope sender" is "purye...@newvps.puryear-it.com". The > "envelope destination" is "dpury...@puryear-it.com". The message was > injected into Exim by a local Unix process running under username > "puryeart". (Conceivably that local process was obtaining the message > elsewhere and injecting it locally for delivery, e.g., a POP > grab-and-forward process, or perhaps it was a message like a local > error message that truly originated locally; Exim has no way of > discerning the behavior or purpose of that local process. That local > process could even be another copy of Exim, if Exim is doing envelope > address rewriting and reinjecting the rewritten message to itself for > re-delivery.) The message is 2,394 bytes long, and did have a subject > line in the message contents, which is "Hey guy!". > >> 2012-08-16 10:52:44 1T22NI-0000sD-SD => :blackhole: >> <dpury...@puryear-it.com> R=virtual_aliases > > Your aliases file or Exim config says to "silently discard" all > messages with an envelope destination of "dpury...@puryear-it.com". > >> 2012-08-16 10:52:44 1T22NI-0000sD-SD Completed > > Exim dutifully discarded it. Thus the message content (the thing > inside the envelope, comprising headers and body) is gone, no longer > in the spool. > > Note that the message content headers could have had potentially > *different* From and To addresses (there's no requirement that they > match the envelope sender and destination), and more importantly would > have had various "Received" header lines showing prior hops this > message took, thus giving insight into the true origin of the message. > But all of that is part of the content, not the envelope, and now > seemingly gone. > > Alexander > > _______________________________________________ > General mailing list > General@brlug.net > http://brlug.net/mailman/listinfo/general_brlug.net
-- "The world's my oyster, a hotel room's my prison cell..." _______________________________________________ General mailing list General@brlug.net http://brlug.net/mailman/listinfo/general_brlug.net
