what's this anvilled as "unknown[unknown]"

[Len Conrad]

tail -f -100 /var/log/maillog | awk 'tolower ($0) ~ /exceeded/ {print
$3, $11, $13 }'


07:18:18 391 unknown[unknown]
07:18:18 392 unknown[unknown]
07:18:19 394 unknown[unknown]
07:18:20 395 unknown[unknown]
07:18:21 396 unknown[unknown]
07:18:26 397 unknown[unknown]
07:18:27 398 unknown[unknown]
07:18:28 399 unknown[unknown]
07:18:28 400 unknown[unknown]

How can postfix anvil an IP that postfix says is [unknown] ?

Len

[Ralf Hildebrandt]

* Len Conrad <[hidden email]>:

>
> tail -f -100 /var/log/maillog | awk 'tolower ($0) ~ /exceeded/ {print $3,
> $11, $13 }'
>
>
> 07:18:18 391 unknown[unknown]
> 07:18:18 392 unknown[unknown]
> 07:18:19 394 unknown[unknown]
> 07:18:20 395 unknown[unknown]
> 07:18:21 396 unknown[unknown]
> 07:18:26 397 unknown[unknown]
> 07:18:27 398 unknown[unknown]
> 07:18:28 399 unknown[unknown]
> 07:18:28 400 unknown[unknown]
>
> How can postfix anvil an IP that postfix says is [unknown] ?

Interesting question! I think it's related to:
http://www.arschkrebs.de/postfix/postfix_unknown.shtml

--
Ralf Hildebrandt ([hidden email])          [hidden email]
Postfix - Einrichtung, Betrieb und Wartung       Tel. [phone]
http://www.arschkrebs.de                              I'm looking for a job
Electronic Mail is not secure, may not be read every day, and should
not be used for urgent or sensitive issues.

[Wietse Venema]

Len Conrad:

>
> tail -f -100 /var/log/maillog | awk 'tolower ($0) ~ /exceeded/ {print
> $3, $11, $13 }'
>
>
> 07:18:18 391 unknown[unknown]
> 07:18:18 392 unknown[unknown]
> 07:18:19 394 unknown[unknown]
> 07:18:20 395 unknown[unknown]
> 07:18:21 396 unknown[unknown]
> 07:18:26 397 unknown[unknown]
> 07:18:27 398 unknown[unknown]
> 07:18:28 399 unknown[unknown]
> 07:18:28 400 unknown[unknown]
>
> How can postfix anvil an IP that postfix says is [unknown] ?

The client hung up before Postfix smtpd could handle the connection.
If this happens often, see STRESS_README for suggestions.

        Wietse