What happened to this connection?

Sep 17, 2020
310
19
23
Hello,

I'm trying to see what happened to this connection.
I have different who/what rules in place to block we.bs domain including

smtpd_recipient_restrictions =
check_sender_access hash:/etc/postfix/sender_reject_domain

But I don't see a reject, I also can't see a TO: or FROM: in the log either before or after these entries.
Since I don't know the above, I can't look in tracking center.

Thanks


Oct 31 13:53:42 mgw postfix/postscreen[25411]: CONNECT from [142.44.174.127]:33439 to [138.3.23.10]:25
Oct 31 13:53:42 mgw postfix/postscreen[25411]: PASS OLD [142.44.174.127]:33439
Oct 31 13:53:42 mgw postfix/smtpd[26868]: connect from planalto-mx-7.planoemalta.we.bs[142.44.174.127]
Oct 31 13:53:42 mgw postfix/smtpd[26868]: Anonymous TLS connection established from planalto-mx-7.planoemalta.we.bs[142.44.174.127]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Oct 31 13:53:42 mgw postfix/smtpd[26868]: disconnect from planalto-mx-7.planoemalta.we.bs[142.44.174.127] ehlo=2 starttls=1 quit=1 commands=4
 
Thanks!
I though that would be an option.
Since when the message comes in to postscreen, it unfortunately doesn't have a mail id to track it, so it's hard to figure out where it went to.
Any secrets on how to do that?
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!