Author: Dave C. Date: To: exim-users Subject: [Exim] Authentication logging
Exim currently logs the following..
2000-06-22 18:30:06 rejected MAIL FROM from (xxx) [x.x.x.x]: not authenticated
Is there any option for it to log the full text of the MAIL FROM:
command as well? The IP address is there, bust that often doesnt help
much, if its an off-network IP (which is the whole point of the auth),
since we have no idea who was trying to do that (assuming its one of
our customers with a misconfig, rather than some random abuse - since
we run this on a nonstandard port I figure the former is more likely)
If we have the MAIL FROM: contents, that would help quite a bit..