<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div bgcolor="#FFFFFF"><p>Well, as I said, it's up to squirrelmail to actually provide the
real client IP. Otherwise dovecot cannot know it. You can try
turning on imap rawlogs (see
<a class="gmail-m_-7957841117467747725moz-txt-link-freetext" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.dovecot.org_Debugging_Rawlog&d=DwMDaQ&c=aqMfXOEvEJQh2iQMCb7Wy8l0sPnURkcqADc2guUW8IM&r=X0jL9y0sL4r4iU_qVtR3lLNo4tOL1ry_m7-psV3GejY&m=tsGwDRgUrhwnh5KZlvG0kkoKFHTZ10ZLURcHI6mywak&s=23MOSSu15fdwptssjVJVkZk1TuC_hg3QMy5t_8nLFmw&e=" target="_blank">https://wiki.dovecot.org/Debugging/Rawlog</a>) and check if
squirrelmail is forwarding client ip or not.<br>
</p></div></blockquote><div>I added:to /etc/dovecot/conf.d/10-master.conf</div><div><div><br></div><div>service postlogin {</div><div> executable = script-login -d rawlog</div><div> unix_listener postlogin {</div><div> }</div><div>}</div><div><br></div></div><div>restarted Dovecot and wforce only seeing this, which shows the loopback address:</div><div><br></div><div><b>Mar 29 10:10:51 imap-login: Info: Login: user=<ouruser>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=10385, secured, session=<8KTTPDyFVIh/AAAB></b></div><div>Mar 29 10:10:51 imap(ouruser)<10385><8KTTPDyFVIh/AAAB>: Info: Connection closed (UID FETCH finished 0.030 secs ago) in=308 out=27743 deleted=0 expunged=0 trashed=0 hdr_count=50 hdr_bytes=10263 body_count=0 body_bytes=0</div><div>Mar 29 10:10:51 auth: Debug: auth client connected (pid=10389)</div><div>Mar 29 10:10:51 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=2MwBPTyFWoh/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=34906 resp=<hidden></div><div>Mar 29 10:10:51 auth: Debug: policy(ouruser,127.0.0.1,<2MwBPTyFWoh/AAAB>): Policy request <a href="https://ourdomain:8084/?command=allow">https://ourdomain:8084/?command=allow</a></div><div>Mar 29 10:10:51 auth: Debug: policy(ouruser,127.0.0.1,<2MwBPTyFWoh/AAAB>): Policy server request JSON: {"device_id":"","login":"ouruser","protocol":"imap","pwhash":"68","remote":"127.0.0.1","tls":false}</div><div>Mar 29 10:10:51 auth: Debug: http-client: peer ip.of.se.vr:8084 (shared): Peer reused</div><div>Mar 29 10:10:51 auth: Debug: http-client[1]: queue <a href="https://ourdomain:8084">https://ourdomain:8084</a>: Setting up connection to ip.of.se.vr:8084 (SSL=ourdomain) (2 requests pending)</div><div>Mar 29 10:10:51 auth: Debug: http-client[1]: request [Req7: POST <a href="https://ourdomain:8084/?command=allow">https://ourdomain:8084/?command=allow</a>]: Submitted (requests left=2)</div><div>Mar 29 10:10:51 auth: Debug: http-client[1]: peer ip.of.se.vr:8084: Creating 1 new connections to handle requests (already 0 usable, connecting to 0, closing 0)</div><div>Mar 29 10:10:52 auth: Debug: http-client: peer ip.of.se.vr:8084 (shared): Backoff timer expired</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: peer ip.of.se.vr:8084: Making new connection 1 of 1 (0 connections exist, 0 pending)</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: conn ip.of.se.vr:8084 [6]: HTTPS connection created (1 parallel connections exist)</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: conn ip.of.se.vr:8084 [6]: Connected</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: conn ip.of.se.vr:8084 [6]: Starting SSL handshake</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: conn ip.of.se.vr:8084 [6]: SSL handshake to ip.of.se.vr:8084 failed: Connection closed</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: peer ip.of.se.vr:8084: Connection failed (1 connections exist, 0 pending)</div><div>Mar 29 10:10:52 auth: Debug: http-client: peer ip.of.se.vr:8084: Failed to make connection (1 connections exist, 0 pending)</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: peer ip.of.se.vr:8084: Failed to establish any connection within our peer pool: SSL handshake to ip.of.se.vr:8084 failed: Connection closed (1 connections exist, 0 pending)</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: queue <a href="https://ourdomain:8084">https://ourdomain:8084</a>: Failed to set up connection to ip.of.se.vr:8084 (SSL=ourdomain): SSL handshake to ip.of.se.vr:8084 failed: Connection closed (1 peers pending, 2 requests pending)</div><div>Mar 29 10:10:52 auth: Debug: http-client: peer ip.of.se.vr:8084 (shared): Peer reused</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: queue <a href="https://ourdomain:8084">https://ourdomain:8084</a>: Setting up connection to ip.of.se.vr:8084 (SSL=ourdomain) (2 requests pending)</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: queue <a href="https://ourdomain:8084">https://ourdomain:8084</a>: Started new connection to ip.of.se.vr:8084 (SSL=ourdomain)</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: conn ip.of.se.vr:8084 [6]: Connection close</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: conn ip.of.se.vr:8084 [6]: Connection disconnect</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: conn ip.of.se.vr:8084 [6]: Detached peer</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: conn ip.of.se.vr:8084 [6]: Connection destroy</div><div>Mar 29 10:10:52 auth: Debug: http-client[1]: peer ip.of.se.vr:8084: Creating 1 new connections to handle requests (already 0 usable, connecting to 0, closing 0)</div><div>Mar 29 10:10:52 auth: Debug: http-client: peer ip.of.se.vr:8084 (shared): Starting backoff timer for 6400 msecs</div><div>Mar 29 10:10:53 auth: Debug: http-client[1]: queue <a href="https://ourdomain:8084">https://ourdomain:8084</a>: Timeout (now: 2019-03-29 10:10:53.503)</div><div>Mar 29 10:10:53 auth: Debug: http-client[1]: queue <a href="https://ourdomain:8084">https://ourdomain:8084</a>: Absolute timeout expired for request [Req6: POST <a href="https://ourdomain:8084/?command=report">https://ourdomain:8084/?command=report</a>] (Request queued 2.001 secs ago, not yet sent, 0.000 in other ioloops)</div><div>Mar 29 10:10:53 auth: Debug: http-client[1]: request [Req6: POST <a href="https://ourdomain:8084/?command=report">https://ourdomain:8084/?command=report</a>]: Error: 9008 Absolute request timeout expired (Request queued 2.001 secs ago, not yet sent, 0.000 in other ioloops)</div><div>Mar 29 10:10:53 auth: Debug: http-client[1]: queue <a href="https://ourdomain:8084">https://ourdomain:8084</a>: Dropping request [Req6: POST <a href="https://ourdomain:8084/?command=report">https://ourdomain:8084/?command=report</a>]</div><div>Mar 29 10:10:53 auth: Error: policy(ouruser,127.0.0.1,<8KTTPDyFVIh/AAAB>): Policy server HTTP error: Absolute request timeout expired (Request queued 2.001 secs ago, not yet sent, 0.000 in other ioloops)</div><div>Mar 29 10:10:53 auth: Debug: http-client[1]: request [Req6: POST <a href="https://ourdomain:8084/?command=report">https://ourdomain:8084/?command=report</a>]: Destroy (requests left=2)</div><div>Mar 29 10:10:53 auth: Debug: http-client[1]: request [Req6: POST <a href="https://ourdomain:8084/?command=report">https://ourdomain:8084/?command=report</a>]: Free (requests left=1)</div><div>Mar 29 10:10:53 auth: Debug: http-client[1]: queue <a href="https://ourdomain:8084">https://ourdomain:8084</a>: New timeout</div><div>Mar 29 10:10:53 auth: Debug: http-client[1]: queue <a href="https://ourdomain:8084">https://ourdomain:8084</a>: Set request timeout to 2019-03-29 10:10:53.613 (now: 2019-03-29 10:10:53.503)</div><div>Mar 29 10:10:53 auth: Debug: http-client[1]: queue <a href="https://ourdomain:8084">https://ourdomain:8084</a>: Timeout (now: 2019-03-29 10:10:53.613)</div><div>Mar 29 10:10:53 auth: Debug: http-client[1]: queue <a href="https://ourdomain:8084">https://ourdomain:8084</a>: Absolute timeout expired for request [Req7: POST <a href="https://ourdomain:8084/?command=allow">https://ourdomain:8084/?command=allow</a>] (Request queued 2.000 secs ago, not yet sent, 0.000 in other ioloops)</div><div> </div><div>What feature or setting would I be looking for in Squirrelmail to change to wforce?</div></div></div></div></div></div>