Out of curiosity, why does postfix display the base64 encoded "Password:" 
string on failed authentication, instead of the user/email that actually failed?

eg:
warning: unknown[59.2.250.144]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
warning: unknown[1.219.223.120]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
warning: unknown[14.34.85.245]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
warning: unknown[5.202.234.36]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
warning: unknown[37.25.36.50]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
warning: unknown[58.242.86.203]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
warning: unknown[43.129.246.148]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
warning: unknown[60.29.100.218]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
warning: unknown[218.28.30.132]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
warning: unknown[65.210.80.9]: SASL LOGIN authentication failed: UGFzc3dvcmQ6


Isn't the above useless? Should it say something like:


SASL LOGIN authentication failed: failed@email.address


PS:
I know that I can add -v to the smtpd submission process to get thousands of 
debug lines and among them is the user/email address that failed, but that 
seems like a horrible hack to get around the silly base64 encoded string.

_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to