btb:
> Jun 24 11:20:21 mta postfix/postscreen[5758]: CONNECT from
> [173.201.193.182]:45771 to [10.3.70.5]:25
> Jun 24 11:20:21 mta postfix/postscreen[5758]: PASS OLD [173.201.193.182]:45771
> Jun 24 11:20:21 mta postfix/smtpd[7066]: connect from
> p3plsmtp18-01-2.prod.phx3.secureserver.net[173.201.193.182]
> Jun 24 11:20:21 mta postfix/smtpd[7066]: NOQUEUE: reject: MAIL from
> p3plsmtp18-01-2.prod.phx3.secureserver.net[173.201.193.182]: 552 5.3.4
> Message size exceeds fixed limit; proto=ESMTP
> helo=<p3plwbeout18-01.prod.phx3.secureserver.net>
> Jun 24 11:21:21 mta postfix/smtpd[7066]: disconnect from
> p3plsmtp18-01-2.prod.phx3.secureserver.net[173.201.193.182]
>
> can this event be correlated with the envelope sender and recipient[s]?
> it would be a helpful detail in the process of associating reports
> from end users with this event.
There is no sender and there is no recipient. Postfix rejects the
MAIL FROM command.
In fact, a smart client would have hung up before even sending the
MAIL FROM command. Postfix announces the SIZE limit in the EHLO
response. All you'd see in the logfile are a connect and disconnect.
Wietse
