hi, We participated in some police enquiries about emails sent to blackmail people and get the source IP. The ISP answered that they use proxy systems and they requires IP+port to be able to track the source. We just helped the case but it sparkle the idea that i better start to log the tcp port as well on my servers logs.
In postfix the IP is logged but not the TCP port. To be ahead in future legal issues i wanted to know if there is a way to : - add the TCP port to the log messages - add the tcp port to a header in the mail (so it stick to it) i did not find in the mailling list archive or the googlebrain or the doc any way to do that. Perhaps a very simple milter but i also did not find a logging milter (but they seems hard to find those milters anyway). Any ideas or experience doing that ? best regards, Ghislain.
