OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Monitorizing SMTP connection process

From: mouss (mlist.onlyfree.fr)
Date: Tue Dec 18 2007 - 12:12:15 CST


Carlos Jiménez wrote:
> Hello:
>
>
>
> I have a mail server running Postfix and functioning as a Mail Gateway.
> I’d like to monitorize all the SMTP connection process between my
> Postfix and other MTA. I thought in the mail log it could be possible to
> see the “EHLO”, “MAIL FROM”, “RCPT TO”, “DATA”… commands or “steps” in
> an easier way. Is it possible to do?
>
> Is it possible to see anything more than “connected to or disconnected
> to” or the different queues or processes of Postfix?
>
>
>
> I am also interested in obtaining the “EHLO” result of the remote MTA
> when it attemps to establish the connection with my Postfix. I have been
> only able to obtain if the sender IP is on a RBL, on the contrary I have
> not been able to obtain it (when IP is not on a RBL). Is the any way to
> accomplish it?
>

Try:

smtpd_helo_restrictions =
        warn_if_reject reject

In fact, any check that returns WARN will do.

This will add a log line.

Before you ask, if you want the subject or another header, use WARN in
header_checks.

>
>
> I’ve tried configuring the debug level to 2 or 3, but it seems not to be
> enough.
>
>
>
> Could you help me?
>
>
>
> Thanks in advance.
>
>
>
> Carlos.
>