On Thu, May 22, 2025 at 11:55 AM Wietse Venema via Postfix-users
<[email protected]> wrote:

> What is the "Case 2" Postfix From: logging?
>
> - The logging from the cleanup proccess shows the From: display
>    name as received by Postfix, before canonical mapping.
>
> - The logging from the smtp process shows the From: display name
>    as delivered by Postfix, after canonical mapping.
>
> Please show complete logfile records including the date, time, and
> so on.

Full logs below. The only thing that was munged was my work email
address. Thunderbird sent it as John Doe
<[email protected]>, Postfix rewrote the from address to
[email protected]

I believe the 2 info lines are the header logging you requested.

The header in the received email looks like this:
User-Agent: Mozilla Thunderbird
To: m***[email protected]
Subject: [CAUTION SPOOFING] Test Subject
From: "[email protected]" <[email protected]>
X-TsbHttpDeliveryResponseType: Success
client-request-id: 1c579855-6162-400e-825f-84b1d30fe5a8
request-id: 1c579855-6162-400e-825f-84b1d30fe5a8

May 22 16:58:23 vm-prod-netbox postfix/smtpd[438511]: connect from
unknown[172.22.224.31]
May 22 16:58:23 vm-prod-netbox postfix/smtpd[438511]: 6A63814A356:
client=unknown[172.22.224.31]
May 22 16:58:23 vm-prod-netbox postfix/cleanup[438514]: 6A63814A356:
message-id=<[email protected]>
May 22 16:58:23 vm-prod-netbox postfix/cleanup[438514]: 6A63814A356:
info: header From: John Doe <[email protected]> from
unknown[172.22.224.31]; from=<[email protected]>
to=<m***[email protected]> proto=ESMTP helo=<[172.22.224.31]>: From: John
Doe <[email protected]>
May 22 16:58:23 vm-prod-netbox postfix/qmgr[265519]: 6A63814A356:
from=<[email protected]>, size=597, nrcpt=1 (queue active)
May 22 16:58:24 vm-prod-netbox postfix/smtp[438515]: 6A63814A356:
info: header From: John Doe <[email protected]>: From: John
Doe <[email protected]>
May 22 16:58:24 vm-prod-netbox postfix/smtp[438515]: 6A63814A356:
to=<m***[email protected]>, relay=smtp.azurecomm.net[20.221.43.114]:587,
delay=1.2, delays=0.2/0.01/0.71/0.32, dsn=2.6.0, status=sent (250
2.6.0 1c579855-6162-400e-825f-84b1d30fe5a8 Queued mail for delivery)
May 22 16:58:24 vm-prod-netbox postfix/qmgr[265519]: 6A63814A356: removed
May 22 16:58:28 vm-prod-netbox postfix/smtpd[438511]: disconnect from
unknown[172.22.224.31] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to