User Tools

Site Tools


software:postfix:quickreference

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
software:postfix:quickreference [2020/09/14 20:00] – created rodolicosoftware:postfix:quickreference [2020/09/23 19:09] (current) rodolico
Line 11: Line 11:
   - That is the user that has been hacked   - That is the user that has been hacked
  
 +===== Look for specific activity =====
  
 +The mail log (/var/log/mail.log on Debian derivatives) contains way too much information most of the time. Here, //grep// is your friend. You can find different things based on which daemon is reporting the line item, then further refine by adding an additional grep after.
  
 +For example, if you were moving a domain from one server to another, it is common to allow the old server to accept messages for a while to keep from losing your clients e-mail. So, for example, if you wanted to know the last time any mail was delivered to an example.com account, you would do.
 +<code bash>grep delivered mail.log | grep example.com | tail</code>
 +
 +  * If you want to see who is sending mail, try looking for the submission daemon in the log. You can then narrow it down with a second grep<code bash>grep submission /var/log/mail.log | grep keyword_to_search_for</code>
 +  * If you want to see who is receiving mail, look for the delivered keyword in the log. This only shows you mail that has been accepted and delivered. <code bash>grep delivered mail.log | grep keywork_to_search_for</code>
 +
 +===== Change attachment max size =====
 +
 +Actually, this is the total message size. It is in bytes, so it is a very large number.
 +
 +To see what the current setting is, type <code bash>postconf | grep message_size_limit</code>. If the value is not explicitly entered in main.cf, the default value is show.
 +
 +To set a new value, type <code bash>postconf -e message_size_limit=26214400</code>. The number is 25 Megabytes, or 25*1024*1024 (from a calculator). Obviously, you need to reload or restart postfix for this to take effect.
software/postfix/quickreference.1600131626.txt.gz · Last modified: 2020/09/14 20:00 by rodolico