----- Message from Wietse Venema <wie...@porcupine.org> ---------
Date: Thu, 9 Sep 2021 18:58:21 -0400 (EDT)
From: Wietse Venema <wie...@porcupine.org>
Subject: Re: STARTTLS abuse
To: Jaroslaw Rafa <r...@rafa.eu.org>
Cc: postfix-users@postfix.org
Jaroslaw Rafa:
I also don't have the summary part "ehlo=xxx starttls=xxx ..." etc. in my
disconnect message, the log line is just "disconnect from
static.148.188.201.195.clients.your-server.de[195.201.188.148]".
The commands=x/y counts were added in Postfix 3.0, released in 2015.
They may not have made it into RHEL yet.
They have, e.g.:
Sep 9 04:20:39 emp87 postfix/smtpd[817446]: disconnect from
scanner21.about.spyse.com[165.227.159.53] auth=0/1 commands=0/1
(RHEL 8)
--
Simon Wilson
M: 0400 12 11 16