Dear All,
We would like to use rawlog to make sure when does user delete email, can we filter particular command that user sent to dovecot server instead of log the whole email content as well? how would you all provide prove to client that mail lost is not caused by your server?
On 9/1/2009, Thomas G. Lau (thomas.lau@ntt.com.hk) wrote:
We would like to use rawlog to make sure when does user delete email, can we filter particular command that user sent to dovecot server instead of log the whole email content as well? how would you all provide prove to client that mail lost is not caused by your server?
You don't want rawlog for this (thats for troubleshooting), you want mail_log:
http://wiki.dovecot.org/Plugins/MailLog
--
Best regards,
Charles
Dear Charles,
maillog does not provide when does client execute delete command, so it does not work.
Thomas Lau Product Engineer Product Development NTT Com Asia Limited Phone: +852 3793-0733 Address: 12/F., Guardian House, 32 Oi Kwan Road, Wan Chai, Hong Kong Email: thomas.lau@ntt.com.hk
Charles Marcus wrote:
On 9/1/2009, Thomas G. Lau (thomas.lau@ntt.com.hk) wrote:
We would like to use rawlog to make sure when does user delete email, can we filter particular command that user sent to dovecot server instead of log the whole email content as well? how would you all provide prove to client that mail lost is not caused by your server?
You don't want rawlog for this (thats for troubleshooting), you want mail_log:
On 9/1/2009 7:03 AM, Thomas G. Lau wrote:
We would like to use rawlog to make sure when does user delete email, can we filter particular command that user sent to dovecot server instead of log the whole email content as well? how would you all provide prove to client that mail lost is not caused by your server?
You don't want rawlog for this (thats for troubleshooting), you want mail_log:
maillog does not provide when does client execute delete command, so it does not work.
I don't use it, but are you sure/have you tested it?
From the referenced page:
"Messages' UID and Message-ID header is logged for each action. Here's an example:
imap(user): copy -> Trash: uid=908, msgid=<123.foo@bar> imap(user): deleted: uid=908, msgid=<123.foo@bar> imap(user): expunged: uid=908, msgid=<123.foo@bar>"
It doesn't show it, but I'm fairly certain the log lines *do* include a date/time stamp.
--
Best regards,
Charles
Dear Charles,
try it with pop3 server, it does not work.
Charles Marcus wrote:
On 9/1/2009 7:03 AM, Thomas G. Lau wrote:
We would like to use rawlog to make sure when does user delete email, can we filter particular command that user sent to dovecot server instead of log the whole email content as well? how would you all provide prove to client that mail lost is not caused by your server?
You don't want rawlog for this (thats for troubleshooting), you want mail_log:
maillog does not provide when does client execute delete command, so it does not work.
I don't use it, but are you sure/have you tested it?
From the referenced page:
"Messages' UID and Message-ID header is logged for each action. Here's an example:
imap(user): copy -> Trash: uid=908, msgid=<123.foo@bar> imap(user): deleted: uid=908, msgid=<123.foo@bar> imap(user): expunged: uid=908, msgid=<123.foo@bar>"
It doesn't show it, but I'm fairly certain the log lines *do* include a date/time stamp.
Please don't top-post in an in-line posted thread...
On 9/2/2009 3:10 AM, Thomas G. Lau wrote:
We would like to use rawlog to make sure when does user delete email, can we filter particular command that user sent to dovecot server instead of log the whole email content as well? how would you all provide prove to client that mail lost is not caused by your server?
You don't want rawlog for this (thats for troubleshooting), you want mail_log:
maillog does not provide when does client execute delete command, so it does not work.
I don't use it, but are you sure/have you tested it?
From the referenced page:
"Messages' UID and Message-ID header is logged for each action. Here's an example:
imap(user): copy -> Trash: uid=908, msgid=<123.foo@bar> imap(user): deleted: uid=908, msgid=<123.foo@bar> imap(user): expunged: uid=908, msgid=<123.foo@bar>"
It doesn't show it, but I'm fairly certain the log lines *do* include a date/time stamp.
try it with pop3 server, it does not work.
I don't use POP, only IMAP...
So, this is open-source... maybe start a new thread and ask for help on how to modify the code for the mail_log plugin to get what you want, or maybe even Timo can do it if it is simple enough...
But rawlog is not the tool for this, so please start a new thread...
--
Best regards,
Charles
Le 2 sept. 09 à 09:10, Thomas G. Lau a écrit :
Dear Charles,
try it with pop3 server, it does not work.
Hello Thomas,
Don't you see messages like these ones with regular logging:
POP3(someuser): Disconnected: Logged out top=0/0, retr=0/0, del=1/4, size=615
(by "regular", I mean with Dovecot's basic logging capabilities,
without resorting to some plugin)
Here, the user has deleted one message out of four messages (del=1/4).
At least, this allows to tell that a DELE command has been explicitely
sent by the client.
Axel
On Wed, 2009-09-02 at 15:10 +0800, Thomas G. Lau wrote:
try it with pop3 server, it does not work.
mail_log plugin works with pop3. Do you see anything at all in logs? If not, try to figure out that first http://wiki.dovecot.org/Logging). If you do, set mail_debug=yes and show the logs what happens when user logs in.
participants (4)
-
Axel Luttgens
-
Charles Marcus
-
Thomas G. Lau
-
Timo Sirainen