[Dovecot] Tracing an IP of a user who deleted the message

Eugene Gladchenko eugene at donpac.ru
Thu May 10 13:15:24 EEST 2007


Hello,

Dovecot writes to the log file lines like these:

May 10 13:19:04 mailserver dovecot: IMAP(office): copy -> Trash: uid=1131, msgid=<45E669BE.8090705 at example.com>, box=Sent
May 10 13:19:05 mailserver dovecot: IMAP(office): deleted: uid=1131, msgid=<45E669BE.8090705 at example.com>, box=Sent
May 10 13:53:08 mailserver dovecot: IMAP(office): copy -> Trash: uid=1719, msgid=<002701b483f5$7aa257e0$23833bda at example.com>
May 10 13:53:08 mailserver dovecot: IMAP(office): deleted: uid=1719, msgid=<002701b483f5$7aa257e0$23833bda at example.com>

I've got a bunch of users that work with the login 'office'. Is it
possible to determine the IP of the user that deleted messages? If not,
what can be done about it in the future?

Thank you.

-- 
Eugene Gladchenko
EVG15-RIPE



More information about the dovecot mailing list