Quick question about logging
Mark.Martinec+amavis at ijs.si
Fri Mar 11 17:59:28 CET 2011
> Running 2.6.4 with Zimbra.
> I've noticed sometimes there are two sets of IP addresses logged:
> Mar 10 17:22:55 mymail amavis: (25723-14) Passed SPAMMY,
> [22.214.171.124] [126.96.36.199] ...
> Can someone tell me where these are pulled from?
> (Which part of the message header.)
This is coming from a default log template, it inserts macros %a and %e,
if nonempty. According to README.customize:
a original SMTP session client IP address (info from XFORWARD)
e best guess of the originator IP address collected from the Received trace
More information about the amavis-users