Hello,

whenever it comes to debug some e-mail issues, it always is a little bit hard 
to aggregate all the log lines together. Therefor I would wish some kind of 
identifier that starts at the connect, is carried over all Postfix services up 
to the disconnect state.

Current by using QID:

...
Sep 13 10:20:27 mx postfix/smtpd[290568]: 4MRbxl5mNHzNGG0Q: client=***
Sep 13 10:20:27 mx postfix/cleanup[325288]: 4MRbxl5mNHzNGG0Q: message-id=***
Sep 13 10:20:30 mx postfix/qmgr[287748]: 4MRbxl5mNHzNGG0Q: from=***, size=4188, 
nrcpt=1 (queue active)
Sep 13 10:20:30 mx postfix/lmtp[325310]: 4MRbxl5mNHzNGG0Q: to=***, orig_to=***, 
relay=127.0.0.1[127.0.0.1]:24, delay=2.4, delays=2.3/0.01/0/0.07, dsn=2.0.0, 
status=sent (250 2.0.0 *** 0EhXCE49IGM2yQIAm3ipfw Saved)
Sep 13 10:20:30 mx postfix/qmgr[287748]: 4MRbxl5mNHzNGG0Q: removed
...

Problem:

Is is impossible to find out who connected and several other hard to trace 
problems :-)

Examples:

Sep 13 10:29:51 mx postfix/smtpd[290568]: cid=..... NOQUEUE: permit: CONNECT 
from localhost.localdomain[127.0.0.1]:54612: action=permit_mynetworks for 
Client host=localhost.localdomain[127.0.0.1]:54612 ; proto=SMTP
Sep 13 10:29:51 mx postfix/smtpd[290568]: cid=..... NOQUEUE: permit: HELO from 
localhost.localdomain[127.0.0.1]:54612: action=permit_mynetworks for Client 
host=localhost.localdomain[127.0.0.1]:54612 ; proto=SMTP helo=***
Sep 13 10:29:51 mx postfix/smtpd[290568]: cid=..... lost connection after HELO 
from localhost.localdomain[127.0.0.1]:54612

Sep 13 10:20:19 mx postfix/local/smtpd[321702]: cid=2Ehphj6VTtfMpJBc8EZ5owao9LT 
connect from localhost.localdomain[127.0.0.1]:60654
Sep 13 10:20:27 mx postfix/smtpd[290568]: cid=2Ehphj6VTtfMpJBc8EZ5owao9LT 
4MRbxl5mNHzNGG0Q: client=***
Sep 13 10:20:27 mx postfix/cleanup[325288]: cid=2Ehphj6VTtfMpJBc8EZ5owao9LT 
4MRbxl5mNHzNGG0Q: message-id=***
Sep 13 10:20:30 mx postfix/qmgr[287748]: cid=2Ehphj6VTtfMpJBc8EZ5owao9LT 
4MRbxl5mNHzNGG0Q: from=***, size=4188, nrcpt=1 (queue active)
Sep 13 10:20:30 mx postfix/lmtp[325310]: cid=2Ehphj6VTtfMpJBc8EZ5owao9LT 
4MRbxl5mNHzNGG0Q: to=***, orig_to=***, relay=127.0.0.1[127.0.0.1]:24, 
delay=2.4, delays=2.3/0.01/0/0.07, dsn=2.0.0, status=sent (250 2.0.0 *** 
0EhXCE49IGM2yQIAm3ipfw Saved)
Sep 13 10:20:30 mx postfix/qmgr[287748]: cid=2Ehphj6VTtfMpJBc8EZ5owao9LT 
4MRbxl5mNHzNGG0Q: removed
Sep 13 10:20:30 mx postfix/qmgr[287748]: cid=2Ehphj6VTtfMpJBc8EZ5owao9LT 
qmgr_queue_unthrottle: feedback 1
Sep 13 10:20:30 mx postfix/qmgr[287748]: cid=2Ehphj6VTtfMpJBc8EZ5owao9LT 
qmgr_queue_unthrottle: queue ***@127.0.0.1:24: limit 20 window 6 success 0 
failure 0 fail_
cohorts 0
Sep 13 10:29:51 mx postfix/smtpd[290568]: cid=2Ehphj6VTtfMpJBc8EZ5owao9LT 
disconnect from localhost.localdomain[127.0.0.1]:54612 helo=1 commands=1

Adding it consequently to all services even thouse that have not been shown 
here in the example.

Feedback very welcome. Thanks in advance

Christian Rößner
-- 
Rößner-Network-Solutions
Zertifizierter ITSiBe / CISO
Karl-Bröger-Str. 10, 36304 Alsfeld
Fax: +49 6631 78823409, Mobil: +49 171 9905345
USt-IdNr.: DE225643613, https://roessner.website
PGP fingerprint: 658D 1342 B762 F484 2DDF 1E88 38A5 4346 D727 94E5 

Reply via email to