Please don't top-post in an in-line posted thread...
On 9/2/2009 3:10 AM, Thomas G. Lau wrote:
We would like to use rawlog to make sure when does user delete email, can we filter particular command that user sent to dovecot server instead of log the whole email content as well? how would you all provide prove to client that mail lost is not caused by your server?
You don't want rawlog for this (thats for troubleshooting), you want mail_log:
maillog does not provide when does client execute delete command, so it does not work.
I don't use it, but are you sure/have you tested it?
From the referenced page:
"Messages' UID and Message-ID header is logged for each action. Here's an example:
imap(user): copy -> Trash: uid=908, msgid=123.foo@bar imap(user): deleted: uid=908, msgid=123.foo@bar imap(user): expunged: uid=908, msgid=123.foo@bar"
It doesn't show it, but I'm fairly certain the log lines *do* include a date/time stamp.
try it with pop3 server, it does not work.
I don't use POP, only IMAP...
So, this is open-source... maybe start a new thread and ask for help on how to modify the code for the mail_log plugin to get what you want, or maybe even Timo can do it if it is simple enough...
But rawlog is not the tool for this, so please start a new thread...
--
Best regards,
Charles