You are right. Even if I did not manage to get what I wanted, based on your tips, I worked with "warn subject". It revealed that those few messages are 100% spam, passing my machine and being rejected by Exchange which incorporates MS SmartScreen.
I will work on spam detection to close this gap. Thank you very much. You helped me a lot. Regards, Marius. -----Original Message----- From: Wietse Venema [mailto:wie...@porcupine.org] Sent: Sunday, April 27, 2014 3:16 PM To: Marius Gologan Cc: 'Postfix users' Subject: Re: sender ip in smtp log line Marius Gologan: > I made a test (log below). The warning header appears in "cleanup" log line. > Not in the same line with the smtp client log, with Exchange rejection. > > Apr 27 03:14:03 gateway postfix/cleanup[10319]: 76D2343520: warning: header > X-SMTP-Client-Addr: ip.add.re.ss from host.s-domain.com[ip.add.re.ss]; > from=sen...@s-domain.com to=recipi...@r-domain.com proto=ESMTP > helo=host.s-domain.com: client address ip.add.re.ss You are using HEADER_CHECKS instead of SMTP_HEADER_CHECKS. Wietse