Hi everyone, I tried checking the archives so I apologize if I overlooked the 
answer.  I have 2 questions, based on the log snippet below.Note that I 
modified my master.cf to show the port number instead of the word "submission" 
as it makes it easier for me to visualize the flow of email.
It's obvious the user is failing authentication, and from what I've read the 
word: UGFzc3dvcmQ6 is literally "Password:"  My question is, does that mean 
postfix is literally receiving that word, or is it obfuscating the real 
password that was attempted?
Anything else for tips or advice is also appreciated.
Apr 19 11:22:51 mail postfix/587/smtpd[12552]: connect from 
unknown[161.47.83.204]Apr 19 11:22:51 mail postfix/587/smtpd[12552]: Anonymous 
TLS connection established from unknown[161.47.83.204]: TLSv1.2 with cipher 
AES128-SHA (128/128 bits)Apr 19 11:22:55 mail postfix/587/smtpd[12552]: 
warning: unknown[161.47.83.204]: SASL login authentication failed: 
UGFzc3dvcmQ6Apr 19 11:22:55 mail postfix/587/smtpd[12552]: NOQUEUE: reject: 
RCPT from unknown[161.47.83.204]: 554 5.7.1 <i...@somerecipient.com>: Recipient 
address rejected: Access denied; from=<marga...@somesender.com> 
to=<i...@somerecipient.com> proto=ESMTP helo=<RDPVM18>Apr 19 11:22:55 mail 
postfix/587/smtpd[12552]: lost connection after RCPT from 
unknown[161.47.83.204]Apr 19 11:22:55 mail postfix/587/smtpd[12552]: disconnect 
from unknown[161.47.83.204] ehlo=2 starttls=1 auth=0/1 mail=1 rcpt=0/1 
commands=4/6


Thanks,Gary

Reply via email to