The argument to the -lc (logs containing) flag is a regular expression,
or regex for short. The period is a special regex character meaning
"match any character". The backslash escapes this special meaning so the
period is treated literally as a period and not any character.
It would probably work the same either way, but without the slash the
regex would also (for instance) match "bi...@billybobxcom". Not likely
that any other string in the logs would match with something other than
a period in that position. I just included it so you would ask, and I
could explain. ;)
Maxwell Smart wrote:
Is that slash after billybob (# qmlog -lc "bi...@billybob\.com" smtp
)supposed to be there or is it a typo?
Jake Vickers wrote:
Jim Shupert wrote:
Eric Shubert wrote:
Jim Shupert wrote:
could someone remind me how I might look in the logs to see any and
all references to [email protected]
here is my situation a user says she is not getting email from (
let us call them ) [email protected]
so i wish to see if billy mail hits my server and is ???? rejected
or what not etc.
thanks!
jS
Providing you have QTP installed (and you really should),
# qmlog -lc "bi...@billybob\.com" smtp
Cool, eh?
Most Cool -- Thanks!
-- i wish i had a better idea on how to understand the log
might you tell me what relevance the below has - what it means ? why
the reject?
< snip
10-26 08:36:31 CHKUSER accepted sender: from <[email protected]::>
remote <mail-out2.fuse.net:unknown:216.68.8.171>
rcpt <> : sender accepted
10-26 08:36:31 qmail-smtpd: spf-reject: HELO(mail-out2.fuse.net) from
216.68.8.171. MAILFROM:[email protected]
10-26 08:36:36 tcpserver: end 3876 status 0
10-26 08:36:36 tcpserver: status: 0/100
10-26 08:36:39 tcpserver: status: 1/100
10-26 08:36:39 tcpserver: pid 3877 from 217.23.9.164
10-26 08:36:39 tcpserver: ok 3877
sifter.pps-inc.com:192.168.200.222:25 :217.23.9.164::1803
10-26 08:36:39 tcpserver: status: 2/100
10-26 08:36:39 tcpserver: pid 3878 from 216.37.105.169
10-26 08:36:39 tcpserver: ok 3878
sifter.pps-inc.com:192.168.200.222:25 :216.37.105.169::33074
10-26 08:36:39 rblsmtpd: 216.37.105.169 pid 3878: 451
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL77346
</snip
spf-reject: HELO(mail-out2.fuse.net) from
216.68.8.171. MAILFROM:[email protected]
and i did a spf test w http://www.kitterman.com/spf/validate.html
Found v=spf1 record for billybob.com
v=spf1 a mx a:ecsubs.com include:cust-spf.exacttarget.com -all
my bottom line is it looks like it was accepted [ accepted sender:
from <[email protected]::> ]
so maybe I should ask my user to look in her spam folder?
any informed insights welcomed -- i am learning ....THANKS!
( and I have changed the name & domain , of course )
It accepted it because the sender was okay, but the SPF record did not
pass. Check your /var/qmail/control/spfbehavior file. It's probably at
the default of 3 which is okay for most, but you may need to lower it
to 2 or 1 to get that particular email to work. There's more info on
the wiki.
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
