See which port a user connects to?

2011-12-14 Thread Sebastian Wiesinger
Hi,

is there a way (in the logs) to see which port a client connects to? I
can't find that information at the moment.

I'm interested to know if a client is using the smtp, ssmtp or
submission port to connect.

Thanks

Sebastian

-- 
New GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A  9D82 58A2 D94A 93A0 B9CE)
Old GPG Key-ID: 0x76B79F20 (0x1B6034F476B79F20)
'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE.
-- Terry Pratchett, The Fifth Elephant


Re: See which port a user connects to?

2011-12-14 Thread Wietse Venema
Sebastian Wiesinger:
 Hi,
 
 is there a way (in the logs) to see which port a client connects to? I
 can't find that information at the moment.

Give each SMTP server its own syslog_name option in master.cf:

submission inet n   -   n   -   -   smtpd
  -o syslog_name=submission
  ...
smtps inet  n   -   n   -   -   smtpd
  -o syslog_name=smtps
  ...

Wietse

syslog_name (default: see postconf -d output)
   The mail system name that is prepended to the process  name  in  syslog
   records, so that smtpd becomes, for example, postfix/smtpd.

   Warning:  a  non-default  syslog_name setting takes effect only after a
   Postfix process has completed  initialization.  Errors  during  process
   initialization  will  be  logged  with  the  default name. Examples are
   errors while parsing the  command  line  arguments,  and  errors  while
   accessing the Postfix main.cf configuration file.



Re: See which port a user connects to?

2011-12-14 Thread Sebastian Wiesinger
* Wietse Venema wie...@porcupine.org [2011-12-14 17:34]:
 Sebastian Wiesinger:
  Hi,
  
  is there a way (in the logs) to see which port a client connects to? I
  can't find that information at the moment.
 
 Give each SMTP server its own syslog_name option in master.cf:
 
 submission inet n   -   n   -   -   smtpd
   -o syslog_name=submission

That did the trick, thank you.

Sebastian

-- 
New GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A  9D82 58A2 D94A 93A0 B9CE)
Old GPG Key-ID: 0x76B79F20 (0x1B6034F476B79F20)
'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE.
-- Terry Pratchett, The Fifth Elephant


Re: See which port a user connects to?

2011-12-14 Thread /dev/rob0
On Wednesday 14 December 2011 10:32:54 Wietse Venema wrote:
 Sebastian Wiesinger:
  is there a way (in the logs) to see which port a client connects
  to? I can't find that information at the moment.
 
 Give each SMTP server its own syslog_name option in master.cf:
 
 submission inet n   -   n   -   -   smtpd
   -o syslog_name=submission
   ...
 smtps inet  n   -   n   -   -   smtpd
   -o syslog_name=smtps
   ...

I use postfix-587 (and postfix-465) because it's shorter and 
contains the postfix string which helps to isolate Postfix logging 
from other mail facility logs. grep postfix maillog, et c. More 
correct, and still meeting that need, would be postfix-submission.

I'm not sure how that might affect pflogsumm.pl; perhaps if Jim is 
still reading the list he can comment?

It would be worthwhile to add these to sample submission and smtps 
lines in the default master.cf. Wietse, have you considered that? 
Thanks.
-- 
Offlist mail to this address is discarded unless
/dev/rob0 or not-spam is in Subject: header


Re: See which port a user connects to?

2011-12-14 Thread Sebastian Wiesinger
* /dev/rob0 r...@gmx.co.uk [2011-12-14 17:58]:
 I use postfix-587 (and postfix-465) because it's shorter and 
 contains the postfix string which helps to isolate Postfix logging 
 from other mail facility logs. grep postfix maillog, et c. More 
 correct, and still meeting that need, would be postfix-submission.

I use postfix/submission at the moment which ends up as:

postfix/submission/smtpd[17048]:

Which suits me.

 It would be worthwhile to add these to sample submission and smtps 
 lines in the default master.cf. Wietse, have you considered that? 

I agree :)

Regards

Sebastian

-- 
New GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A  9D82 58A2 D94A 93A0 B9CE)
Old GPG Key-ID: 0x76B79F20 (0x1B6034F476B79F20)
'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE.
-- Terry Pratchett, The Fifth Elephant


Re: See which port a user connects to?

2011-12-14 Thread Wietse Venema
Sebastian Wiesinger:
 * /dev/rob0 r...@gmx.co.uk [2011-12-14 17:58]:
  I use postfix-587 (and postfix-465) because it's shorter and 
  contains the postfix string which helps to isolate Postfix logging 
  from other mail facility logs. grep postfix maillog, et c. More 
  correct, and still meeting that need, would be postfix-submission.
 
 I use postfix/submission at the moment which ends up as:
 
 postfix/submission/smtpd[17048]:
 
 Which suits me.
 
  It would be worthwhile to add these to sample submission and smtps 
  lines in the default master.cf. Wietse, have you considered that? 
 
 I agree :)

postfix/mumble/smtpd it will be.

Wietse


Re: See which port a user connects to?

2011-12-14 Thread Jim Seymour
On Wed, 14 Dec 2011 10:56:40 -0600
/dev/rob0 r...@gmx.co.uk wrote:

[snip]
 
 I'm not sure how that might affect pflogsumm.pl; perhaps if Jim is 
 still reading the list he can comment?
[snip]

I'm still reading, but I'm usually only seeing the stuff that
mentions Pflogsumm or my name.  Tho, right now, I'm reading it all.

Answer: It'll break it.

Regards,
Jim
-- 
Note: My mail server employs *very* aggressive anti-spam
filtering.  If you reply to this email and your email is
rejected, please accept my apologies and let me know via my
web form at http://jimsun.LinxNet.com/contact/scform.php.