[Dovecot] login_trusted_networks from webmail ?

[Timo Sirainen]

On 3.7.2013, at 23.29, Jan-Frode Myklebust <janfrode at tanso.net> wrote:

> I'd like to get the IP-address of the webmail-klient logged in my
> maillog (for being compliant with coming data retention policies). I've
> noticed that with login_trusted_networks pointing at my dovecot
> directors, we get rip=client-ip logged on the backends. How is the proxy
> providing this to the dovecot backends? Anybody know what magic we need
> to implement in our webmail-solution to be able to forward the
> webmail-client-ip and have it logged as rip= in dovecot?

a ID ("x-originating-ip" "1.2.3.4")

Other things you could send in the same command: x-originating-port, x-connected-ip, x-connected-port

And in case others are wondering, POP3 and LMTP use: XCLIENT ADDR=1.2.3.4 PORT=12345

> I belive it will be enough to have it logged as rip= on the directors,
> maybe not needed to be forwarded all the way to the backends (but that
> would be nice as well).

If backend has login_trusted_networks pointing to directors, then the IP gets forwarded to backends as well.