On Tue, Jun 09, 2015 at 01:23:47PM -0400, Forrest wrote: > postfix/smtpd[12345]: warning: unknown[212.156.86.90]: SASL LOGIN > authentication failed: authentication failure > > so I presume that's port 25, as I have submission running as another > configuration in master.cf.
By default the logs don't distinguish between SMTP serverices listening on different ports. You need to override "syslog_name" in master.cf to get service-specific logging. The commented-out submission entry in recent stock master.cf files starts with: #submission inet n - n - - smtpd # -o syslog_name=postfix/submission So that log entry might be for the submission port, unless you've configured it along the lines above. -- Viktor.