Re: [exim] capturing a message

Top Page
Delete this message
Reply to this message
Author: Nigel Wade
Date:  
To: exim users
Subject: Re: [exim] capturing a message
Randy Bush wrote:
>> Headers are only present in rejectlog if they have actually been sent.
>> This means, if you reject earlier than the DATA phase, you haven't
>> received the headers, so you cannot log them.
>> In the present case you rejected after DATA, so headers should be there.
>
> unless there are blank or garbled lines early in what should be the
> header set. which is exactly the case i am debugging. reject only has
>
> 2008-03-18 11:10:16 1JbZhv-0007L9-Op H=localhost (obscure.com)
> [127.0.0.1] F=<whodini@???> rejected after DATA: illegal header
> syntax or sender address
> Envelope-from: <whodini@???>
> Envelope-to: <whodini@???>
> P Received: from localhost ([127.0.0.1] helo=obscure.com)
>         by obscure.com with esmtp (Exim 4.68 (FreeBSD))
>         (envelope-from <whodini@???>)
>         id 1JbZhv-0007L9-Op
>         for whodini@???; Tue, 18 Mar 2008 11:10:15 +0000
>   Subject: Upload Report
>   X-Spam-Score: -3.1 (---)

>
> and the code at which i am looking gets very twisty after generating the
> Subject: so i *really* want to see what it sent.
>
> randy
>


That message appears to be coming in over the loopback interface.

You should be able to capture traffic on port 25 of the loopback
interface using Wireshark. How useful that is depends on how much
traffic occcurs on that port/interface.

-- 
Nigel Wade, System Administrator, Space Plasma Physics Group,
             University of Leicester, Leicester, LE1 7RH, UK
E-mail :    nmw@???
Phone :     +44 (0)116 2523548, Fax : +44 (0)116 2523555