| version 1.8, 2004/12/09 12:33:31 |
version 1.9, 2004/12/09 17:42:15 |
|
|
| # 2004-10-19 - created |
# 2004-10-19 - created |
| # |
# |
| |
|
| # $Platon: perl-modules/Platon/Log/Mail/Postfix.pm,v 1.7 2004/12/09 10:31:27 rajo Exp $ |
# $Platon: perl-modules/Platon/Log/Mail/Postfix.pm,v 1.8 2004/12/09 12:33:31 rajo Exp $ |
| |
|
| package Platon::Log::Mail::Postfix; |
package Platon::Log::Mail::Postfix; |
| |
|
| Line 160 sub savelog($$;) |
|
| Line 160 sub savelog($$;) |
|
| # postfix/smtpd[5502]: NOQUEUE: reject: RCPT from mailgw.xxx.sk[58.95.16.250]: 550 <xxx@gimmel.xxx.sk>: Recipient address rejected: User unknown in local recipient table; from=<gqumt@chaexxx.net> to=<xxx@gimmel.xxx.sk> proto=ESMTP helo=<mailgw.xxx.sk> |
# postfix/smtpd[5502]: NOQUEUE: reject: RCPT from mailgw.xxx.sk[58.95.16.250]: 550 <xxx@gimmel.xxx.sk>: Recipient address rejected: User unknown in local recipient table; from=<gqumt@chaexxx.net> to=<xxx@gimmel.xxx.sk> proto=ESMTP helo=<mailgw.xxx.sk> |
| # postfix/smtpd[5583]: NOQUEUE: reject: RCPT from daleth.ip.xxx.sk[58.95.17.170]: 554 <bucek@xxx.sk>: Relay access denied; from=<bucek@gimmel.xxx.sk> to=<bucek@xxx.sk> proto=ESMTP helo=<[58.95.17.170]> |
# postfix/smtpd[5583]: NOQUEUE: reject: RCPT from daleth.ip.xxx.sk[58.95.17.170]: 554 <bucek@xxx.sk>: Relay access denied; from=<bucek@gimmel.xxx.sk> to=<bucek@xxx.sk> proto=ESMTP helo=<[58.95.17.170]> |
| # postfix/smtpd[5291]: NOQUEUE: reject: RCPT from rev-95-1-57-83.xxx.sk[95.1.57.83]: 553 <haluz@domain.sk>: Sender address rejected: not owned by user rajo@gimmel.xxx.sk; from=<haluz@xxx.sk> to=<rajo@xxx.sk> proto=ESMTP helo=<[10.254.0.111]> |
# postfix/smtpd[5291]: NOQUEUE: reject: RCPT from rev-95-1-57-83.xxx.sk[95.1.57.83]: 553 <haluz@domain.sk>: Sender address rejected: not owned by user rajo@gimmel.xxx.sk; from=<haluz@xxx.sk> to=<rajo@xxx.sk> proto=ESMTP helo=<[10.254.0.111]> |
| my ($void1, $addr, $status, $rest1, $rest2, $info) = split(/[;:] /, $xx->{rest}); |
# postfix/smtpd[7446]: NOQUEUE: reject: RCPT from unknown[80.65.71.48]: 554 Service unavailable; Client host [80.65.71.48] blocked using dnsbl.sorbs.net; Exploitable Server See: http://www.dnsbl.sorbs.net/lookup.shtml?80.65.71.48; from=<xxxt@xxxx.com> to=<xxx@xxxx.sk> proto=ESMTP helo=<xxxx.sk> |
| $xx->{rest} = "$rest1: $rest2"; |
|
| ($xx->{sasl_username}) = ($rest2 =~ m/user (\S+)$/o); |
my ($addr, $status, $info) = ($xx->{rest} =~ m/[^:]+: ([^:]+): (.*)[;:] ([^;:]+)$/o); |
| |
($xx->{sasl_username}) = ($status =~ m/user (\S+)$/o); |
| ($xx->{client_hostname}, $xx->{client_ip}) = ($addr =~ m/(\S+)\[([\.0-9]+)\]$/o); |
($xx->{client_hostname}, $xx->{client_ip}) = ($addr =~ m/(\S+)\[([\.0-9]+)\]$/o); |
| ($xx->{status}) = ($status =~ m/^(\d+)/o); |
($xx->{status}) = ($status =~ m/^(\d+)/o); |
| |
$xx->{rest} = $status; |
| # $info = 'from=<> to=<webmaster@foobar.sk> proto=ESMTP helo=<rage.xyzt.net>' |
# $info = 'from=<> to=<webmaster@foobar.sk> proto=ESMTP helo=<rage.xyzt.net>' |
| _parse_by_equal($info, $xx); |
_parse_by_equal($info, $xx); |
| $xx->{from} =~ s/[\<>]//go; |
$xx->{from} =~ s/[\<>]//go; |