Can dovecot be leveraged to exploit Solr/Log4shell?
John Fawcett
john at voipsupport.it
Tue Dec 14 17:39:33 UTC 2021
On 14/12/2021 03:23, Scott wrote:
> Is this assuming you log at some verbose level ? What if you log at WARN or higher ?
>
> For production it seems kind of silly to log search queries anyways.
>
> Scott
It's a pretty much standard install where most things are at INFO level.
Probably could turn it down, but has not been an issue.
I think the logic behind it is much like web server logs where every
single request gets a log entry.
John
More information about the dovecot
mailing list