On Tue, Nov 05, 2024 at 12:19:20PM +0100, Matus UHLAR - fantomas via
Postfix-users wrote:
> > > Sep 2 16:51:11 mail postfix/smtps/smtpd[3697]: connect from
> > > a.b.t-com.sk[178.41.x.y]
> > > Sep 2 16:51:11 mail postfix/smtps/smtpd[3697]: 4WyBXH6Dp7z6C7g:
> > > client=a.b.t-com.sk[178.41.x.y], sasl_method=LOGIN,
> > > sasl_username=redacted1
> > > Sep 2 16:51:11 mail postfwd2/policy[7072]: [RULES] rule=23,
> > > id=GLOBAL-RATE-02, queue=4WyBXH6Dp7z6C7g,
> > > client=a.b.t-com.sk[178.41.x.y], user=redacted1,
> > > sender=<redact...@example.com>, recipient=<redact...@example.com>,
> > > helo=<redacted3>, proto=ESMTP, state=DATA, rate=rate/D/0.00s,
> > > delay=0.01s, hits=GLOBAL-RATE-01;GLOBAL-RATE-02, action=WARN GLOBAL rate
> > > limit of C messages in 1 hour exceeded [D hits]
> > > Sep 2 16:51:11 mail postfix/smtps/smtpd[3697]: 4WyBXH6Dp7z6C7g: warn:
> > > DATA from a.b.t-com.sk[178.41.x.y]: GLOBAL rate limit of C messages in 1
> > > hour exceeded [D hits]; from=<redact...@example.com>
> > > to=<redact...@example.com> proto=ESMTP helo=<redacted3>
> > > Sep 2 16:51:15 mail postfix/smtps/smtpd[3697]: lost connection after
> > > DATA (6 bytes) from a.b.t-com.sk[178.41.x.y]
> > >
> > >
> > > Could the last message "lost connection" report the queue id, so log
> > > parser
> > > would drop that queue id?
Don't confuse an SMTP connection with a mail transaction, a single
connection may cover multiple mail transactions, and the connection
closure log entry is about *all* of them, not a particular one.
It is even possible for a mail transaction to terminate after creating a
queue file, but without yielding a message, and without a server-side
"reject", and yet for the connection to continue (e.g. "RSET" before
"DATA", or any time prior to the last BDAT).
--
Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
