On Thu, May 22, 2025 at 11:55 AM Wietse Venema via Postfix-users <postfix-users@postfix.org> wrote:
> What is the "Case 2" Postfix From: logging? > > - The logging from the cleanup proccess shows the From: display > name as received by Postfix, before canonical mapping. > > - The logging from the smtp process shows the From: display name > as delivered by Postfix, after canonical mapping. > > Please show complete logfile records including the date, time, and > so on. Full logs below. The only thing that was munged was my work email address. Thunderbird sent it as John Doe <donotreply-...@carespot.com>, Postfix rewrote the from address to donotre...@carespot.com I believe the 2 info lines are the header logging you requested. The header in the received email looks like this: User-Agent: Mozilla Thunderbird To: m***n...@carespot.com Subject: [CAUTION SPOOFING] Test Subject From: "donotre...@carespot.com" <donotre...@carespot.com> X-TsbHttpDeliveryResponseType: Success client-request-id: 1c579855-6162-400e-825f-84b1d30fe5a8 request-id: 1c579855-6162-400e-825f-84b1d30fe5a8 May 22 16:58:23 vm-prod-netbox postfix/smtpd[438511]: connect from unknown[172.22.224.31] May 22 16:58:23 vm-prod-netbox postfix/smtpd[438511]: 6A63814A356: client=unknown[172.22.224.31] May 22 16:58:23 vm-prod-netbox postfix/cleanup[438514]: 6A63814A356: message-id=<afeb17d5-22dc-4a3f-816f-d90293a52...@carespot.com> May 22 16:58:23 vm-prod-netbox postfix/cleanup[438514]: 6A63814A356: info: header From: John Doe <donotreply-...@carespot.com> from unknown[172.22.224.31]; from=<donotre...@carespot.com> to=<m***n...@carespot.com> proto=ESMTP helo=<[172.22.224.31]>: From: John Doe <donotreply-...@carespot.com> May 22 16:58:23 vm-prod-netbox postfix/qmgr[265519]: 6A63814A356: from=<donotre...@carespot.com>, size=597, nrcpt=1 (queue active) May 22 16:58:24 vm-prod-netbox postfix/smtp[438515]: 6A63814A356: info: header From: John Doe <donotreply-...@carespot.com>: From: John Doe <donotreply-...@carespot.com> May 22 16:58:24 vm-prod-netbox postfix/smtp[438515]: 6A63814A356: to=<m***n...@carespot.com>, relay=smtp.azurecomm.net[20.221.43.114]:587, delay=1.2, delays=0.2/0.01/0.71/0.32, dsn=2.6.0, status=sent (250 2.6.0 1c579855-6162-400e-825f-84b1d30fe5a8 Queued mail for delivery) May 22 16:58:24 vm-prod-netbox postfix/qmgr[265519]: 6A63814A356: removed May 22 16:58:28 vm-prod-netbox postfix/smtpd[438511]: disconnect from unknown[172.22.224.31] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5 _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
