Benny Pedersen: > Bogdan Enache skrev den 2013-06-08 12:09: > > > mx1 postfix/smtpd[1069]: warning: unknown[89.xx.xx.xx]: SASL LOGIN > > authentication failed: UGFzc3dvcmQ6 > > Which is perfectly normal. > > normal in what way ? > > i have seen this here aswell with that user > > > But how can I also show the username that was tried in the logs? I > > want > > to see: > > 1. Which user keeps entering the wrong password. > > UGFzc3dvcmQ6 is a user that uses somekind of tor networking where port > 25 is not gething direct, so we all see him using more then one ip in > postfix
In this universe, the string 'UGFzc3dvcmQ6' is the base64-encoded value of the string 'Password:'. Wietse