Aleksei Shpakovskii: > Hi, > > To answer the original Hadmut question: I believe that in order to log both > postfix and saslauthd to the same file, you should configure both of them > to use same logging backend (syslog), and configure that backend to save > their logs to the same place.
This is not needed. Postfix 3.0 and later log the AUTH failure AND the client IP address together: postfix/smtpd[xxx]: disconnect from unknown[x.x.x.x] auth=0/1 commands=0/1 This is logged even when AUTH is disabled (as it should be on port 25). Wietse