Michael Grimm:
> Apr 23 12:07:45 <mail.info> mail.lan postfix/postscreen[61983]: PREGREET 159
> after 0.03 from [1.2.3.4]:58878:
> \026\003\001\000\232\001\000\000\226\003\0030An';\265\235\335\250\344N,%\233Y\305\226\030tMb\024\b\3
> Apr 23 12:09:49 <mail.info> mail.lan postfix/postscreen[4271]: PREGREET 159
> after 0 from [10.20.30.40]:48872:
> \026\003\001\000\232\001\000\000\226\003\003\201\202\v\215\240BC\265R\256\200E\275c%\224Dzu\265\375x
Note that these payloads are very diffferent than the crash example that
you shared earlier.
Now: PREGREET after 159 bytes.
was: PREGREET after 429 bytes.
So we are not out of the troubke yet.`
Other differences (one byte is part of a length field):
Now: \026\003\001\000\232\001\000...
Was: \026\003\003\001\250\001\000...
Now: logs NON-SMTP COMMAND.
Was: not?
Can your share complete postscreen logging fromm other crash logs?
Wietse
