Hi all,

In section Postfix is this:

unverified_recipient_tempfail_action = defer_if_permit
unknown_address_tempfail_action = defer_if_permit
unknown_helo_hostname_tempfail_action = defer_if_permit
unverified_sender_tempfail_action = defer_if_permit

Does somebody know how to solve that?
Thank you.

really nobody can help?

Update the postfix filter:

http://logreporters.sourceforge.net/

What was the original problem at all - what needs to be solved there?

I solved it I added that lines into logwatch ignore.conf file.
I really don't feel to compile that new filter for postfix.

I believe the problem IDOL sees is unmatched log lines when setting the aforementioned postfix directives. These directives were added back in mid-2009. I believe these are handed in postfix-logwatch's postfix filter, and the OP probably has a very old version.

@IDOL - there is nothing to compile - there are only two text files to add / replace. Plus you'll get some documentation. :-)

Can you verify the version of the postfix filter you have installed?

Can you provide some sample log lines so that I can verify the filter handles these? This will help you and others.

What kind of logs u mean?

there is nothing to compile - there are only two text files to add / replace.
so u mean, all i hafto do is, i need to put postfix-logwatch and postfix-logwatch into /etc/logwatch/scripts/ directory?

Let's check your current version of the postfix filter being used by logwatch. This is independent of postfix itself.

The version of the file should be located in the file:

/usr/share/logwatch/scripts/services/postfix

You can try to run:

perl -T /usr/share/logwatch/scripts/services/postfix --version

but if your version is very old, try this:

grep -i version /usr/share/logwatch/scripts/services/postfix

What you'll do is download the gzip'd postfix-logwatch archive, extract the files, and there is a README inside the archive to guide you to install.

well so, here is the output: postfix: 1.38.01

Pretty old version: 2010-03-02 (version: 1.39.01)

I'd suggest updating to the latest. Then, you shouldn't need to ignore those lines in your ignore.conf file.

well, so i tried to copy those files into */scripts directory, but the problem persists now

Can you post a couple of the exact log lines that are being reported as Unmatched?

yeh, sure, here is it:

**Unmatched Entries**

1 Dec 23 03:56:01 localhost postfix/smtpd[7014]: unverified_recipient_tempfail_action = defer_if_permit
1 Dec 23 13:01:55 localhost postfix/smtpd[8678]: unknown_address_tempfail_action = defer_if_permit
1 Dec 23 08:03:21 localhost postfix/smtpd[7740]: reject_invalid_hostname: ham-cannon.twitter.com
1 Dec 23 14:52:37 localhost postfix/smtpd[9062]: unverified_recipient_tempfail_action = defer_if_permit
1 Dec 23 04:46:48 localhost postfix/smtpd[7052]: reject_invalid_hostname: ns304586.ovh.net

and so on.

Ah, ok you've enabled debug output in postfix, so these typically would not be in the log file normally.

There are many possible debug diagnostics that are output at different; some I've handled, others I haven't.

If you'd like me to add some additional ones, can you send me a log file? You can send them to the email address on the logreporters site or contained in the README.

I'll update the filter to include those mentioned above.

I've posted a new release that resolves these issues.

http://logreporters.sourceforge.net/