Aleksei Shpakovskii:
> Hi,
>
> To answer the original Hadmut question: I believe that in order to log both
> postfix and saslauthd to the same file, you should configure both of them
> to use same logging backend (syslog), and configure that backend to save
> their logs to the same place.
This is not needed. Postfix 3.0 and later log the AUTH failure AND
the client IP address together:
postfix/smtpd[xxx]: disconnect from unknown[x.x.x.x] auth=0/1 commands=0/1
This is logged even when AUTH is disabled (as it should be on port 25).
Wietse
