Matthew Kitchin via Postfix-users:
> On Thu, May 22, 2025 at 11:55?AM Wietse Venema via Postfix-users
> <postfix-users@postfix.org> wrote:
>
> > What is the "Case 2" Postfix From: logging?
> >
> > - The logging from the cleanup proccess shows the From: display
> > name as received by Postfix, before canonical mapping.
> >
> > - The logging from the smtp process shows the From: display name
> > as delivered by Postfix, after canonical mapping.
> >
> > Please show complete logfile records including the date, time, and
> > so on.
>
> Full logs below. The only thing that was munged was my work email
> address. Thunderbird sent it as John Doe
> <donotreply-...@carespot.com>, Postfix rewrote the from address to
> donotre...@carespot.com
>
> May 22 16:58:23 vm-prod-netbox postfix/smtpd[438511]: connect from
> unknown[172.22.224.31]
> May 22 16:58:23 vm-prod-netbox postfix/smtpd[438511]: 6A63814A356:
> client=unknown[172.22.224.31]
> May 22 16:58:23 vm-prod-netbox postfix/cleanup[438514]: 6A63814A356:
> message-id=<afeb17d5-22dc-4a3f-816f-d90293a52...@carespot.com>
> May 22 16:58:23 vm-prod-netbox postfix/cleanup[438514]: 6A63814A356:
> info: header From: John Doe <donotreply-...@carespot.com> from
> unknown[172.22.224.31]; from=<donotre...@carespot.com>
> to=<m***n...@carespot.com> proto=ESMTP helo=<[172.22.224.31]>: From: John
> Doe <donotreply-...@carespot.com>
Postfix receives the message with
From: John Doe <donotreply-...@carespot.com>
> May 22 16:58:23 vm-prod-netbox postfix/qmgr[265519]: 6A63814A356:
> from=<donotre...@carespot.com>, size=597, nrcpt=1 (queue active)
> May 22 16:58:24 vm-prod-netbox postfix/smtp[438515]: 6A63814A356:
> info: header From: John Doe <donotreply-...@carespot.com>: From: John
> Doe <donotreply-...@carespot.com>
And Postfix delivers the message with
From: John Doe <donotreply-...@carespot.com>
This is the same as the received header. I suppose that the canonical
mapping did not happen, or that you made a mistake while censorong
the real email address.
> The header in the received email looks like this:
> User-Agent: Mozilla Thunderbird
> To: m***n...@carespot.com
> Subject: [CAUTION SPOOFING] Test Subject
> From: "donotre...@carespot.com" <donotre...@carespot.com>
> X-TsbHttpDeliveryResponseType: Success
> client-request-id: 1c579855-6162-400e-825f-84b1d30fe5a8
> request-id: 1c579855-6162-400e-825f-84b1d30fe5a8
Next time, please include the MESSAGE-ID header. This should match
the message ID that was logged by Postfix.
Wietse
> May 22 16:58:24 vm-prod-netbox postfix/smtp[438515]: 6A63814A356:
> to=<m***n...@carespot.com>, relay=smtp.azurecomm.net[20.221.43.114]:587,
> delay=1.2, delays=0.2/0.01/0.71/0.32, dsn=2.6.0, status=sent (250
> 2.6.0 1c579855-6162-400e-825f-84b1d30fe5a8 Queued mail for delivery)
> May 22 16:58:24 vm-prod-netbox postfix/qmgr[265519]: 6A63814A356: removed
> May 22 16:58:28 vm-prod-netbox postfix/smtpd[438511]: disconnect from
> unknown[172.22.224.31] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
> _______________________________________________
> Postfix-users mailing list -- postfix-users@postfix.org
> To unsubscribe send an email to postfix-users-le...@postfix.org
>
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
