On 12/6/2018 9:59 AM, Rich Shepard wrote: > Today's pflogsumm report includes this rejection: > > Recipient address rejected: Please see http (total: 2) > 2 rshep...@appl-ecosys.com > > Since this is my address I'm curious why two incoming messages were > rejected > when many more were passed. I'd appreciate advice on how I can identify > these two messages in /var/log/maillog.1 among all the logged incoming > messages to this address. > > TIA, > > Rich >
To see just the logged rejection (which is often enough): grep reject: /var/log/maillog.1 | grep rshep...@appl-ecosys.com To see more context of the connection that was rejected, open the file with your favorite text editor and search for /reject: .*rshepard@appl-ecosys Wild guess: some spammer used your own address as sender, and the connection was rejected by some of your spam controls, probably an rbl. -- Noel Jones