Zitat von "WeiHua.Deng" <den...@bestcheer.com>:



Hi Everybody,

 i find a abnormal log in maillog file for postfix.
a user can send email , non ip address and non from username present in
the log. how can i reslove that ?

[root@mail ~]# less /var/log/maillog
|grep 608D536DA9C |more

May 3 18:10:57 mail postfix/pickup[23046]:
608D536DA9C: uid=1000 from=

The mail is submitted locally, so you can't get a IP address.
The empty sender may be because of a bounce which require the sender to be empty.

You should check who is using the user ID 1000 on your system and why the mails are created.

Regards

Andreas



Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to