/dev/rob0: > > On Mon, Feb 20, 2017 at 02:48:15PM +0000, Luis Miguel Flores dos > > Santos wrote: > > > Hi, exist a way to know which mail client try or are connected in > > > 587? Like Android Mail, Outlook, thunderbird? > > > > No, because to protocol doesn't care about "which client". > > The actual problem, whatever it is, might be better addressed from > the angle of the IMAP server. MUAs generally do much more with the > imapd than with postfix/submission; the latter is typically a short, > single transaction. > > Perhaps there is no associated IMAP login, in which case there's a > high probability that you're faced with malware.
You can use a policy daemon, http://www.maiamailguard.com/maia/wiki/p0f to add a header with the client type. This is a perl script that needs to be edited to use the right server IP address ($mta_ipaddr in the script) and port (25 in the script). With recent versions of Postfix, the policy protocol sends the local and remote IP address and port, so you could use $attr{'server_address'} and $attr{'server_port'} in the script. Background: lcamtuf.coredump.cx/p0f3/ Wietse
