Benny Pedersen:
> Bogdan Enache skrev den 2013-06-08 12:09:
>
> > mx1 postfix/smtpd[1069]: warning: unknown[89.xx.xx.xx]: SASL LOGIN
> > authentication failed: UGFzc3dvcmQ6
> > Which is perfectly normal.
>
> normal in what way ?
>
> i have seen this here aswell with that user
>
> > But how can I also show the username that was tried in the logs? I
> > want
> > to see:
> > 1. Which user keeps entering the wrong password.
>
> UGFzc3dvcmQ6 is a user that uses somekind of tor networking where port
> 25 is not gething direct, so we all see him using more then one ip in
> postfix
In this universe, the string 'UGFzc3dvcmQ6' is the base64-encoded
value of the string 'Password:'.
Wietse
