Noel Jones:
> At 06:39 AM 8/10/2007, Justin Piszcz wrote:
> >This has been discussed on the mailing list before; however, I never
> >found a good conclusion or way to make this ALWAYS report an IP,
> >each time a client connects, is there a way to make sure I always
> >get an IP and never unknown in the logs? Otherwise I would need to
> >run other software/packet sniffing to find out what IP's are connecting?
>
> I'm pretty sure this can only happen when the client disconnects
> before completing the TCP handshake, which prevents the kernel from
> reporting the IP to postfix. There is nothing postfix can do about
> this since the problem is outside of postfix.
It's the other end of the handshake.
The TCP handshake (i.e. the client-to-kernel handshake) did complete,
but the client disconnected before Postfix accepted the connection
(the kernel-to-Postfix handshake). The kernel discarded the connection
information, and reported an error when Postfix asked for the client
IP address. Postfix ten reported the client as "unknown".
Wietse
|