[Dovecot] disconnecting (disconnected by server)
Hi all,
I just recognized a lot of log entries like this on my proxy:
Dec 03 13:50:54 imap-login: Info: proxy(mail@example.com): disconnecting 1.2.3.4 (Disconnected by server): user=mail@example.com, method=PLAIN, rip=1.2.3.4, lip=2.4.6.8, TLS, session=<qk02v6DsJwBTlUQX>
There are no similar entries on the backends.
What does this mean? Something I have to worry about?
Regards Patrick
# 2.2.7: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 auth_mechanisms = plain login default_process_limit = 150 director_mail_servers = 172.17.1.2 172.17.1.1 director_servers = 172.17.1.3 172.17.1.4 director_user_expire = 5 mins lmtp_proxy = yes log_path = /var/log/dovecot.log managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { user = dovecot } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { address = 172.17.1.3 port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director } service lmtp { inet_listener lmtp { address = 172.17.1.3 port = 24 } } service managesieve-login { executable = managesieve-login director inet_listener sieve { port = 4190 } } service pop3-login { executable = pop3-login director } ssl_cert =
# 2.2.2: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 auth_mechanisms = plain login disable_plaintext_auth = no dotlock_use_excl = no hostname = mb01.example.com listen = 172.17.1.1 log_path = /var/log/dovecot.log login_trusted_networks = 172.17.1.3 172.17.1.4 mail_fsync = always mail_gid = vmail mail_home = /var/mail/%d/%n mail_location = maildir:~/Maildir mail_plugins = quota mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spamverdacht { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User quota::file:%h/Maildir/dovecot-quota quota_rule2 = INBOX.Trash:ignore quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve/sieve_after.sieve sieve_default = /usr/local/etc/dovecot/sieve/default.sieve sieve_dir = ~/sieve } postmaster_address = postmaster@example.com protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { mode = 0666 user = vmail } } service lmtp { inet_listener lmtp { address = 172.17.1.1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/etc/dovecot/quota_warning.sh unix_listener quota-warning { user = vmail } user = root } ssl_cert =
On 3.12.2013, at 14.55, Patrick Westenberg pw@wk-serv.de wrote:
I just recognized a lot of log entries like this on my proxy:
Dec 03 13:50:54 imap-login: Info: proxy(mail@example.com): disconnecting 1.2.3.4 (Disconnected by server): user=mail@example.com, method=PLAIN, rip=1.2.3.4, lip=2.4.6.8, TLS, session=<qk02v6DsJwBTlUQX>
There are no similar entries on the backends.
What does this mean? Something I have to worry about?
See the session ID “qk02v6DsJwBTlUQX”. Find the disconnection message from the backend server’s logs by grepping it.
Timo Sirainen schrieb:
See the session ID “qk02v6DsJwBTlUQX”. Find the disconnection message from the backend server’s logs by grepping it.
There is only the login entry:
Dec 03 13:50:53 imap-login: Info: Login: user=mail@example.com, method=PLAIN, rip=1.2.3.4, lip=2.3.4.5, mpid=3707, TLS, session=<qk02v6DsJwBTlUQX>
On 3.12.2013, at 22.15, Patrick Westenberg pw@wk-serv.de wrote:
Timo Sirainen schrieb:
See the session ID “qk02v6DsJwBTlUQX”. Find the disconnection message from the backend server’s logs by grepping it.
There is only the login entry:
Dec 03 13:50:53 imap-login: Info: Login: user=mail@example.com, method=PLAIN, rip=1.2.3.4, lip=2.3.4.5, mpid=3707, TLS, session=<qk02v6DsJwBTlUQX>
Oh, right, Adding %{session} to mail_log_prefix is useful. Maybe I’ll make it the default some day.
Timo Sirainen schrieb:
On 3.12.2013, at 22.15, Patrick Westenberg pw@wk-serv.de wrote:
Timo Sirainen schrieb:
See the session ID “qk02v6DsJwBTlUQX”. Find the disconnection message from the backend server’s logs by grepping it.
There is only the login entry:
Dec 03 13:50:53 imap-login: Info: Login: user=mail@example.com, method=PLAIN, rip=1.2.3.4, lip=2.3.4.5, mpid=3707, TLS, session=<qk02v6DsJwBTlUQX>
Oh, right, Adding %{session} to mail_log_prefix is useful. Maybe I’ll make it the default some day.
Now I see more, but the logout seems quite normal:
Dec 03 21:39:07 imap-login: Info: proxy(mail@example.com): disconnecting 2.4.6.8 (Disconnected by server): user=mail@example.com, method=PLAIN, rip=2.4.6.8, lip=2.3.4.5, TLS, session=<eaeiR6fs1gBUdqox>
Dec 03 21:39:07 eaeiR6fs1gBUdqox -- imap(mail@example.com): Info: Disconnected: Logged out in=63 out=778
On 3.12.2013, at 22.43, Patrick Westenberg pw@wk-serv.de wrote:
Now I see more, but the logout seems quite normal:
Dec 03 21:39:07 imap-login: Info: proxy(mail@example.com): disconnecting 2.4.6.8 (Disconnected by server): user=mail@example.com, method=PLAIN, rip=2.4.6.8, lip=2.3.4.5, TLS, session=<eaeiR6fs1gBUdqox>
Dec 03 21:39:07 eaeiR6fs1gBUdqox -- imap(mail@example.com): Info: Disconnected: Logged out in=63 out=778
Right, I guess that’s then what it always does. Logout sequence goes:
C: a LOGOUT S: * Bye S: a OK S: <disconnect>
The server doesn’t wait for client to disconnect. So proxy sees that server does the disconnection. The other possibility would have been that it saw client disconnecting.
participants (2)
-
Patrick Westenberg
-
Timo Sirainen