postfix-users

Re: connect from unknown[unknown]

Subject: Re: connect from unknown[unknown]
From: wietse AT porcupine DOT org (Wietse Venema)
To: Postfix users <postfix-users AT postfix DOT org>
Date: Fri, 10 Aug 2007 11:22:14 -0400 (EDT)
Noel Jones:
> At 06:39 AM 8/10/2007, Justin Piszcz wrote:
> >This has been discussed on the mailing list before; however, I never 
> >found a good conclusion or way to make this ALWAYS report an IP, 
> >each time a client connects, is there a way to make sure I always 
> >get an IP and never unknown in the logs?  Otherwise I would need to 
> >run other software/packet sniffing to find out what IP's are connecting?
> 
> I'm pretty sure this can only happen when the client disconnects 
> before completing the TCP handshake, which prevents the kernel from 
> reporting the IP to postfix.  There is nothing postfix can do about 
> this since the problem is outside of postfix.

It's the other end of the handshake.

The TCP handshake (i.e. the client-to-kernel handshake) did complete,
but the client disconnected before Postfix accepted the connection
(the kernel-to-Postfix handshake). The kernel discarded the connection
information, and reported an error when Postfix asked for the client
IP address. Postfix ten reported the client as "unknown".

        Wietse

<Prev in Thread] Current Thread [Next in Thread>