/var/log/secure instead of maillog

[Brian]

I decided to use the secure log instead of the maillog.  My maillog grows about 20 megs a day and after about three days, the daemon starts to wig out on me.  Here is the code for Scan Addr:

sub scanaddr ($) {

my $s = $_[0];
my @paddrs; # Packed IP addresses.
my @addrs; # ASCII addresses.
my $junk;

if ($s =~ m/from /) {

$s =~ s/.*from (\S+).*/$1/;

#$s =~ s/.*\[(\S+)\].*/$1/;

push(@addrs, $s);

return @addrs;
}

return ();
}

Dont forget to relocate $logfile!

Bfons

[Anonymous]

when i successfully login to the pop server i get the following in my /var/log/secure

Dec 18 13:50:26 hostname xinetd[19384]: START: pop3 pid=19630 from=209.xx.xx.xx

when i attempt to login with a bad password i get the following..

Dec 18 14:14:47 hostname xinetd[19384]: START: pop3 pid=19735 from=209.xx.xx.xx

so, how do you expect to differ and authenticated user and a non authenticated user? all i have to do is attempt to retrieve email from you server and after i fail then i can send mail through your server? how do you expect that to work?