> On Tue, 13 May 2003, Chris Knipe wrote:
>
> > 2003-05-13 22:09:57 SMTP connection from [66.35.250.206] (TCP/IP
connection
> > count = 2)
> > 2003-05-13 22:10:35 SMTP connection from [216.92.131.4] (TCP/IP
connection
> > count = 2)
> > 2003-05-13 22:10:58 SMTP connection from [216.92.131.4] (TCP/IP
connection
> > count = 3)
> >
> > .....
> >
> > It happens quite often as well... Don't know if this is a known issue,
bug,
> > or just me that didn't configure something properly, but ya... (And no,
> > nothing's removed, or edited, etc from the logs)
>
> You don't say which release, or what OS you are using. Is there any
> evidence in the log that the 66.35.250.206 connection has finished
> before the first 216.92.131.4 connection? Because it looks as if that is
> what happened.
Ewps... Exim 4.14 on FreeBSD 4.8-STABLE.
The logging is quite extensive, and QUITs are logged. There is therefore no
termination logged in the log files of the session. Sometimes, the counter
will actually start at 3, or 4 even though there is actually just one single
connection.... I have the following configured:
log_selector = +all -incoming_port -smtp_protocol_error
Another good example:
2003-05-13 00:25:52 SMTP connection from [216.92.131.4] (TCP/IP connection
count = 1)
^^^^^^^^^^ That's correct.
2003-05-13 00:26:06 19FLk8-000ACS-sY <=
php-general-return-147357-savage=savage.za.org@???
H=(pb1.pair.com) [216.92.131.4] I=[192.168.1.1]:25 P=smtp
S=1726 id=1052778327.17247.0.camel@??? T="Re: [PHP] Session
Cookies" from <php-general-return-147357-savage=savage.za.org@???>
for s
avage@???
2003-05-13 00:26:06 3 args: /usr/sbin/exim -Mc 19FLk8-000ACS-sY
2003-05-13 00:26:11 SMTP connection from (pb1.pair.com) [216.92.131.4]
closed by QUIT
^^^^^^^^^^ The connection is terminated
2003-05-13 00:26:17 7 args: /usr/sbin/sendmail -oMr scanned-ok -i -f
<php-general-return-147357-savage=savage.za.org@???>
cknipe@???
2003-05-13 00:26:17 19FLkP-000ACo-sD <=
php-general-return-147357-savage=savage.za.org@??? U=vscan
P=scanned-ok S=2199 id=1052778327.17247.0.camel@c
oogle.localdomain T="Re: [PHP] Session Cookies" from
<php-general-return-147357-savage=savage.za.org@???> for
cknipe@???
2003-05-13 00:26:17 19FLk8-000ACS-sY => cknipe@???
<savage@???>
F=<php-general-return-147357-savage=savage.za.org@???> R=spam_ro
uter T=spamcheck S=1995
2003-05-13 00:26:17 19FLk8-000ACS-sY Completed
2003-05-13 00:26:17 3 args: /usr/sbin/exim -Mc 19FLkP-000ACo-sD
2003-05-13 00:26:17 19FLkP-000ACo-sD => cknipe <cknipe@???>
F=<php-general-return-147357-savage=savage.za.org@???>
R=delivery_local T=stor
e_delivery S=1886
2003-05-13 00:26:17 19FLkP-000ACo-sD Completed
^^^^ Delivery completed after all the spam/virus stuff...
2003-05-13 00:30:19 SMTP connection from [195.92.249.251] (TCP/IP connection
count = 2)
^^^^^^^ There is no previous connection logged, thus the counter should be
1, and not 2...
Once again, nothing was removed / altered in the logs (except for me being
descriptive)
--
me
