jzaw wrote:
|
| On Saturday, Sep 20, 2003, at 15:53 Europe/London, Dan Egli wrote:
|
|> -----BEGIN PGP SIGNED MESSAGE-----
|> Hash: SHA1
|>
|> IS there a way to make Exim log who has authenticated? the reject log
|> shows failed authentications, but I want to track SUCCESSFULL
|> authentications
|
|
|
| youll get something like this in your main log
|
|
| Sep 20 16:24:56 w exim[26108]: 2003-09-20 16:24:56 1A0jbU-0006n6-77 <=
| jz@???
| H=w.dnsalias.org (w.dnsalias.org) [217.155.135.45] U=someuser P=asmtp
| A=auth_cram:someusername
| S=556 id=74335CE1-EB7E-11D7-8BCB-003065427DF8@???
|
| Sep 20 16:25:00 w exim[26109]: 2003-09-20 16:25:00 1A0jbU-0006n6-77 =>
| jzaw@???
| R=dnslookup T=remote_smtp H=mx1.mail.yahoo.com [64.157.4.78]
|
| Sep 20 16:25:00 w exim[26109]: 2003-09-20 16:25:00 1A0jbU-0006n6-77
| Completed
|
|
| notice the serialisation they all have in common 1A0jbU-0006n6-77
| (is of course unique to the message)
| you can see which user authenticated and what method
| and you can track it to see if the send was completed in this case it
| took about 4 seconds to complete
| the lines may have other messages in between them so look for the
| message serial
Nice but that is not going to work for me. This server uses AMaViS to
scan for viruses, but the way Amavis works is that receives the message
then scans it and if it's ok it drops it back on the Queue. But of
course that means a new Message ID/Serial.
