On 22/06/14 05:04, Kaz Kylheku wrote:
> On 21.06.2014 20:57, Kaz Kylheku wrote:
> - unparenthesized token: looked-up host name.
> - parenthesized token: HELO string (with brackets if IP).
> - bracketed token: connecting IP.
>
> The third one is always present; either of the preceding two may be
> absent, but they are always in this order.
>
> The looked-up host name is missing if the IP doesn't reverse-resolve.
>
> The parenthesized token is absent if there was no HELO (or empty?)
http://www.exim.org/exim-html-current/doc/html/spec_html/ch-log_files.html
Section 6:
"The number given in square brackets is the IP address of the sending
host. If there is a single, unparenthesized host name in the H field, as
above, it has been verified to correspond to the IP address (see the
host_lookup option). If the name is in parentheses, it was the name
quoted by the remote host in the SMTP HELO or EHLO command, and has not
been verified. If verification yields a different name to that given for
HELO or EHLO, the verified name appears first, followed by the HELO or
EHLO name in parentheses."
--
Cheers,
Jeremy
