This example illustrates log output for an incoming SMTP message when connection logging is enabled, via LOG_CONNECTION=3.
28-Feb-2007 11:50:59.10 tcp_local + O (1) TCP|18.104.22.168|25|22.214.171.124|1244 SMTP (2) 28-Feb-2007 11:51:15.12 tcp_local ims-ms EE 1 email@example.com rfc822;firstname.lastname@example.org adam@ims-ms-daemon THOR.SIROE.COM (THOR.SIROE.COM [126.96.36.199]) (3) 28-Feb-2007 11:51:15.32 ims-ms D 1 email@example.com rfc822;firstname.lastname@example.org adam@ims-ms-daemon 28-Feb-2007 11:51:15.66 tcp_local + C (4) TCP|188.8.131.52|25|184.108.40.206|1244 SMTP
The remote system opens a connection. The O character indicates that this entry regards the opening of a connection; the + character indicates that this entry regards an incoming connection.
The IP numbers and ports for the connection are shown. In this entry, the receiving system (the system making the log file entry) has IP address 220.127.116.11 and the connection is being made to port 25; the sending system has IP address 18.104.22.168 and is sending from port 1244.
In the entry for the enqueue of the message from the incoming TCP/IP channel (tcp_local) to the ims-ms channel recipient, note that information beyond the default is included since LOG_CONNECTION=3 is enabled. Specifically, the name that the sending system claimed on its HELO or EHLO line, the sending system’s name as found by a DNS reverse lookup on the connection IP number, and the sending system’s IP address are all logged; see Chapter 12, Configuring Channel Definitions behavior.
The inbound connection is closed. The C character indicates that this entry regards the closing of a connection; the + character indicates that this entry regards an incoming connection.