I don't know how this happened. I'm not sure if there is a coredump somewhere because I don't know what user, and I have nothing for 'root' or 'dovecot'. Any advice, or should I make all my coredumps go to a central writable directory so I have better chance of catching it if it happens again? Is it maybe from someone connecting to postfix and causing a SMTP-AUTH to timeout? Although that is unlikely because users should not know how to reach this server's SMTP ports. I cut most of the surrounding log entries below because they seemed unrelated normal activity, but two of the lines below I left because of the timestamp.
socket: type: listen client: path: /var/spool/postfix/private/auth mode: 384 user: postfix group: postfix
Mar 8 17:02:17 boomhauer dovecot: auth-worker(default): BUG: PASSV had
missing parameters
Mar 8 17:03:47 boomhauer dovecot: auth-worker(default): BUG: PASSV had
missing parameters
Mar 8 17:05:17 boomhauer dovecot: imap-login: Disconnected: Inactivity:
method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
Mar 8 17:05:17 boomhauer dovecot: child 72819 (login) killed with signal 11
Mar 8 17:06:47 boomhauer dovecot: imap-login: Disconnected: Inactivity:
method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
Mar 8 17:06:47 boomhauer dovecot: child 72857 (login) killed with signal 11