in my logs

daniel_1983 at protonmail.com daniel_1983 at protonmail.com
Sun Apr 15 13:27:07 EEST 2018

Dear list,

One of my users is reading e-mail from his phone. When he logs in, this is what I see in my logs : 

Apr 10 16:17:58 auth-worker(17101): Debug: sql(xxx at mydomain.tld, query: SELECT email as user, password FROM users WHERE email = LOWER('xxx at mydomain.tld')
Apr 10 16:17:58 imap-login: Info: Login: user=<xxx at mydomain.tld>, method=LOGIN, rip=, lip=, mpid=19286, TLS, session=<E6cEB4BprgA0uKRJ>

Both lines show a remote IP of, which is strange since all my users are, and connect from, Algeria. According to the ispinfo website (http://www.ispinfo.net/isp/, this IP belongs to Microsoft.

Could it be that the outlook app uses microsoft's servers to fetch the mail before handing them to the user ? 


More information about the dovecot mailing list