tail -f -100 /var/log/maillog | awk 'tolower ($0) ~ /exceeded/ {print $3, $11, $13 }'
07:18:18 391 unknown[unknown] 07:18:18 392 unknown[unknown] 07:18:19 394 unknown[unknown] 07:18:20 395 unknown[unknown] 07:18:21 396 unknown[unknown] 07:18:26 397 unknown[unknown] 07:18:27 398 unknown[unknown] 07:18:28 399 unknown[unknown] 07:18:28 400 unknown[unknown] How can postfix anvil an IP that postfix says is [unknown] ? Len