[Dovecot] Tracing an IP of a user who deleted the message

[Andy Shellam]

Would it be better to have a shared mailbox called "office" with each 
user having their own login, and, where appropriate, with ACLs so only 
the relevant people can access it.

I'm not sure completely how to do this as I'm in the process of learning 
1.0 after a 2 year break from Dovecot, but I'm sure it could be done.

Andy.

Eugene Gladchenko wrote:
> Hello,
>
> Dovecot writes to the log file lines like these:
>
> May 10 13:19:04 mailserver dovecot: IMAP(office): copy -> Trash: uid=1131, msgid=<45E669BE.8090705 at example.com>, box=Sent
> May 10 13:19:05 mailserver dovecot: IMAP(office): deleted: uid=1131, msgid=<45E669BE.8090705 at example.com>, box=Sent
> May 10 13:53:08 mailserver dovecot: IMAP(office): copy -> Trash: uid=1719, msgid=<002701b483f5$7aa257e0$23833bda at example.com>
> May 10 13:53:08 mailserver dovecot: IMAP(office): deleted: uid=1719, msgid=<002701b483f5$7aa257e0$23833bda at example.com>
>
> I've got a bunch of users that work with the login 'office'. Is it
> possible to determine the IP of the user that deleted messages? If not,
> what can be done about it in the future?
>
> Thank you.
>
>