[Dovecot] logging
Timo Sirainen
tss at iki.fi
Tue Mar 15 23:15:25 EET 2005
On Sun, 2005-03-13 at 15:48 -0600, F. Even wrote:
> I'm curious about exactly what this means in my log:
>
> Mar 13 10:56:20 cerebus dovecot: imap-login: Disconnected [130.94.242.20]
> Mar 13 10:56:51 cerebus last message repeated 177 times
> Mar 13 10:57:32 cerebus last message repeated 179 times
>
> Now...does Dovecot ONLY log the names of users on successful attempts?
By default, yes.
> Is this "Disconnected" log entry an indication someone ran a
> username/password attack against the imap server and failed to
> authenticate? If so, is there any way to make this a little more verbose,
> so I can perhaps see what names, etc. the annoying idiot is throwing
> against my server....?
auth_verbose = yes
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20050315/e57c5c14/attachment.pgp
More information about the dovecot
mailing list