Wietse Venema: > No, that would log it too often in normal sessions. Instead it can > be logged for rejected commands. > > reject: from host[addr] ...; from=<sender>, to=<recip>, proto=SMTP, > helo=<helo>, sasl_username=<user>
As in the patch below. Wietse diff -u /var/tmp/postfix-3.2-20160917/src/smtpd/smtpd.c src/smtpd/smtpd.c --- /var/tmp/postfix-3.2-20160917/src/smtpd/smtpd.c 2016-09-17 10:49:09.000000000 -0400 +++ src/smtpd/smtpd.c 2016-09-18 08:36:17.000000000 -0400 @@ -1531,6 +1531,11 @@ vstring_sprintf_append(buf, " proto=%s", state->protocol); if (state->helo_name) vstring_sprintf_append(buf, " helo=<%s>", state->helo_name); +#ifdef USE_SASL_AUTH + if (state->sasl_username) + vstring_sprintf_append(buf, " sasl_username=<%s>", + state->sasl_username); +#endif return (STR(buf)); }