On 05/21/2011 01:00 AM, Reindl Harald wrote:
Hm?
This message was sent by a program, not by a human person.
Your submission to the postfix-users mailing list was rejected for
the following reason:
BOUNCE [email protected]: Admin request: /^subject:\s*help\b/i
-------- Original-Nachricht --------
Betreff: help with rsyslog-filter
Datum: Sat, 21 May 2011 00:57:23 +0200
Von: Reindl Harald<[email protected]>
Organisation: the lounge interactive design
An: Mailing-List postfix<[email protected]>
i need a little help
the following line should filter spam to ivalid rcpt works fine, see
first log-message, but is there any way to exclude lines that also
contains "too large" to see them in the messagelog (2nd line)?
:msg, contains, "RCPT from unknown[10.0.0.20]" ~
No, it matches mail from a specific local IP without fcrdns hostname.
It says nothing about spam.
May 21 00:47:23 mail postfix/smtpd[2005]:
NOQUEUE: reject: RCPT from unknown[10.0.0.20]:
550 5.1.1<[email protected]>: Recipient address rejected:
User unknown in local recipient table;
from=<[email protected]> to=<[email protected]>
May 21 00:42:20 mail postfix/smtpd[2005]:
NOQUEUE: reject: RCPT from unknown[10.0.0.20]:
552 5.7.1<[email protected]>: Recipient address rejected:
Message too large, recipient [email protected] would exceed size limits at this
time;
from=<[email protected]> to=<[email protected]
--
J.
