Hi All,

While refactoring pflogsumm, and regression-testing the pre- and
post-refactor code against a corpus of Postfix log samples (21 files,
~455k lines), two differences traced back to lines like the following
(edited to use example addresses/IPs):

    Jan  1 12:10:48 hostname postfix/qmgr[10922]: 739A2783CBA:
     to=<[email protected]>, orig_to=<[email protected]>,
     relay=none, delay=76608, status=deferred (delivery temporarily
     suspended: connect to hostname.example.com[192.0.2.1]:
     Connection timed out)

In all other samples, records with this “delivery status” signature
appear under delivery agents (e.g., postfix/smtp, postfix/lmtp,
postfix/local). Only this one (older) log file contains two such
records tagged as postfix/qmgr.

Is it legitimate for qmgr to emit/log a “to=… relay=… delay=…
status=…” record like this (e.g., on behalf of a delivery agent?), or
is this more likely to be a syslog tagging/artifact issue or a user
sending me an incorrectly-munged logfile?

The log file sample *appears* to be from 2012, but that's not certain.

Thanks,
Jim
-- 
Note: My mail server employs *very* aggressive anti-spam
filtering.  If you reply to this email and your email is
rejected, please accept my apologies and let me know via my
web form at <http://jimsun.LinxNet.com/contact/scform.php>.
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to