On Fri 04/Apr/2014 15:15:19 +0200 Lisa Muir wrote: > > Bowie's heads up on the courierd logging helps me concentrate my search, > I'm getting dns "name" of the host that sent the message there instead of > the auth string. > > Apr 4 07:03:10 mail courierd: newmsg,id=01884042.533E4B1D.00001080: dns; > DellXPS ([::ffff:188.141.105.91])
That looks rather like an outgoing message. If you have webmail, the localhost gets there and auth is not logged. > Might be a side effect of running an older version of courier, but I'm > sure I'll find the logging value somewhere! For a different technique, your spammers certainly have bad recipients in their list, so you should see the relevant messages in the older queue subdirs, and get details from Courier's Received: lines in there (or ctlfiles 'i' records). Good luck -- ------------------------------------------------------------------------------ _______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
