I am writing a log parser so that when users complain "so and so sent me an email and I didn't get it" I can query the logs and find this with ease. Ultimately, I want ot make this self service through a web page.
In a transaction like this: 119970-Nov 29 13:56:12 mcdb2 postfix/smtpd[12371]: disconnect from unknown[118.201.69.1] 119971-Nov 29 13:56:33 mcdb2 postfix/smtpd[12587]: connect from mail-lf0-f51.google.com[209.85.215.51] 119972:Nov 29 13:56:34 mcdb2 postfix/smtpd[12587]: NOQUEUE: reject: MAIL from mail-lf0-f51.google.com[209.85.215.51]: 552 5.3.4 Message size exceeds fixed limit; proto=ESMTP helo=<mail-lf0-f51.google.com> 119973-Nov 29 13:56:35 mcdb2 postfix/smtpd[12587]: disconnect from mail-lf0-f51.google.com[209.85.215.51] The email is rejected without making reference to the 'from' and or 'to' addresss?. Is there a way I can configure this to include the from here? ideally, make it say: 119972:Nov 29 13:56:34 mcdb2 postfix/smtpd[12587]: NOQUEUE: reject: MAIL from mail-lf0-f51.google.com[209.85.215.51]: 552 5.3.4 Message size exceeds fixed limit; from=<someuser@gmailcom> to=<someu...@ourdomain.com> proto=ESMTP helo=<mail-lf0-f51.google.com> -- Michael Munger, dCAP, MCPS, MCNPS, MBSS High Powered Help, Inc. Microsoft Certified Professional Microsoft Certified Small Business Specialist Digium Certified Asterisk Professional mich...@highpoweredhelp.com
