Martina Tomisova:
[ Charset ISO-8859-1 unsupported, converting... ]
> >> not every time. Actually this line is missing just in cases the spam
> >> is sent. :) How's that possible? Any ideas how can I get the IP
> >> address of the sender in such case?
> >
> > From the SMTP server's PROCESS ID field in the logfile.
> I've investigated this and I haven't found any connection between smtp
> process and smtpd process which usually logs the 'client=' line. I'm
> pasting sample lines. See lines 197 and 199. That's all I have about
> the C74FC6A60A0 queue id :/
You need to find the FIRST logfile record with C74FC6A60A0.
That record was logged 160062 seconds ago (almost 2 days).
Wietse
Jul 23 07:01:23 server_name postfix/smtp[30845]: C74FC6A60A0:
==========================================vvvvvvvvvvvv
to=<us...@another_server.cz>, relay=none, delay=160062
==========================================^^^^^^^^^^^^
