The example below shows a fairly basic example of the sort of log entries one might see if a local user sends a message out an outgoing TCP/IP channel, for example, to the Internet. In this example, LOG_CONNECTION is enabled. The lines marked with (1) and (2) are one entry—they would appear on one physical line in an actual log file. Similarly, the lines marked with (3) - (7) are one entry and would appear on one physical line.
16-Feb-2007 15:41:32.36 tcp_intranet tcp_local EE 1 (1) email@example.com rfc822;firstname.lastname@example.org email@example.com (2) siroe.com (siroe.com [188.8.131.52]) 16-Feb-2007 15:41:34.73 tcp_local DE 1 (3) firstname.lastname@example.org rfc822;email@example.com firstname.lastname@example.org (4) thor.siroe.com dns;thor.siroe.com (TCP|184.108.40.206|2788|220.127.116.11|25) (5) (thor.siroe.com ESMTP Sendmail ready Thu 15 Feb 2007 21:37:29 -0700 [MST]) (6) smtp;250 2.1.5 <email@example.com>... Receipt ok (7)
This line shows the date and time of an enqueue with ESMTP (EE) from the tcp_intranet channel to the tcp_local channel of a one (1) block message.
This is part of the same physical line of the log file as (1), presented here as a separate line for typographical convenience. It shows the envelope From: address, in this case firstname.lastname@example.org, and the original version and current version of the envelope To: address, in this case email@example.com.
This shows the date and time of a dequeue with ESMTP (DE) from the tcp_local channel of a one (1) block message that is, a successful send by the tcp_local channel to some remote SMTP server.
This shows the envelope From: address, the original envelope To: address, and the current form of the envelope To: address.
This shows that the actual system to which the connection was made is named thor.siroe.com in the DNS, that the local sending system has IP address 18.104.22.168 and is sending from port 2788, that the remote destination system has IP address 22.214.171.124 and the connection port on the remote destination system is port 25.
This shows the SMTP banner line of the remote SMTP server.
This shows the SMTP status code returned for this address; 250 is the basic SMTP success code and in addition, this remote SMTP server responds with extended SMTP status codes and some additional text.