OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: cryptic error messages

From: Sheldon T. Hall (pftandem.artell.net)
Date: Thu Feb 01 2007 - 12:01:18 CST


 Rich Morin says ...

> I've been getting occasional error messages of the form:
>
> ERR: Feb 1 08:29:58 mini postfix/smtpd[18633]:
> connect from g3po[192.168.1.211]

Beyond the initial "ERR:" something has tacked on there, that looks like a
perfectly normal connect message to me. I assume that labelling it as an
error is something your logging system is doing, or something else.
Normally, postfix produces a "connect from" line every time a client, errrr,
well, connects to it.
 
> By way of background, "g3po" is our front-end mail server
> (B&W Power Mac G3; Mac OS X 10.4.8) and 192.168.1.211 is
> the correct IP address for it. It handles all incoming
> mail, passing email with valid recipients on to "mini".

So one would expect it to connect, non?
 
> I've looked at mini's mail.log file and can't see any
> error messages that correspond to these emailed error
> messages.

Those error messages get _emailed_, not just written to the log?

> Can anyone tell me what kinds of problems
> might generate this type of message?

Since the "error" isn't one, I'd assume some sort of misconfiguration/bug
in the log system, or some abberation introduced by whoever produced the
postfix package you're using.

FWIW, I run a completely vanilla, installed-from-source postfix. My server
gets many, many connections per day, of which exactly zero are reported as
"ERR:".

-Shel