Mark Constable writes:
So Sam, would it be possible to use, say, the BACKSCATTER facility to have an idea what message-id was associated with which IP?
Backscatter tracks recipient addresses.
Or, can you suggest anything in courier that I could get access to that would match message-ids to IP?
A newmsg line records each new message received via smtp:May 6 04:07:03 shorty courierd: newmsg,id=00000000000A03CA. 000000004FA63127.00000588: dns; lists.sourceforge.net (lists.sourceforge.net [::ffff:216.34.181.88])
This tracks only messages that have been succesfully received. Gives you the IP address of the connecting SMTP client. You can count how many were received from a given IP address, and go from there.
And, again, a filter module gets access to the control file of each message, which has a complete dossier of what the message is all about; which IP address it came from, more importantly if it was from the authenticated sender, the authenticated identity.
The info is all there, all that's needed is the code to keep track of it all.
pgpvjUSJkaOfF.pgp
Description: PGP signature
------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
