Logging IP address in error logs

Martin Schmid scm at aps-systems.ch
Thu Jan 19 16:55:04 CET 2017


I accidently didn't reply to the list before, so here's a little summary:

In general, my setup is working flawlessly with amavis as frontend and 
xmail as backend server.
Since amavis behaves as a kind of proxy, it also sends the error status 
codes from the real SMTP server to the client while connected.
There may be disadvantages exposing amavis but I'm pretty satified so far.

My goal would be to use fail2ban to automatically lock out ip adresses 
that cause some errors such ass dropping sessions without quit.
To accomplish this I would need to find the offending IP in the log. 
That's all I'm after.

It seems that there is no option covering this. It seems that I have to 
patch the script.



Am 19.01.2017 um 16:23 schrieb Dusan Obradovic:
>
>> On Jan 19, 2017, at 11:40, Dino Edwards 
>> <dino.edwards at mydirectmail.net 
>> <mailto:dino.edwards at mydirectmail.net>> wrote:
>>
>> He said that he is not using postfix or any other SMTP servers as 
>> first receiver before Amavis so that can't be it, please see below. 
>> So, the way he describes it, amavis is listening on port 25 and I'm 
>> not sure how this whole thing works without a SMTP service. The 
>> original problem he describes wouldn't be a problem if a SMTP server 
>> was in front.
>
> It would work technically speaking, because amavisd service speaks ESMTP.
>
> $inet_socket_port = 25
> $forward_method = lmtp_service


-- 
Martin Schmid
APS systems AG, Neumatt 4, CH-4626 Niederbuchsiten
Tel direkt: +41 62 389 8891, Fax: +41 62 389 8880, Tel: +41 62 389 8888
www.aps-systems.ch

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20170119/2908dd70/attachment.html>


More information about the amavis-users mailing list