10 May
2007
10 May
'07
1:15 p.m.
Hello,
Dovecot writes to the log file lines like these:
May 10 13:19:04 mailserver dovecot: IMAP(office): copy -> Trash: uid=1131, msgid=45E669BE.8090705@example.com, box=Sent May 10 13:19:05 mailserver dovecot: IMAP(office): deleted: uid=1131, msgid=45E669BE.8090705@example.com, box=Sent May 10 13:53:08 mailserver dovecot: IMAP(office): copy -> Trash: uid=1719, msgid=002701b483f5$7aa257e0$23833bda@example.com May 10 13:53:08 mailserver dovecot: IMAP(office): deleted: uid=1719, msgid=002701b483f5$7aa257e0$23833bda@example.com
I've got a bunch of users that work with the login 'office'. Is it possible to determine the IP of the user that deleted messages? If not, what can be done about it in the future?
Thank you.
-- Eugene Gladchenko EVG15-RIPE