<div dir="ltr"><div dir="ltr">Hi Marc,<div><br></div><div>The same document says this:</div><div><br></div><div><h2 id="gmail-rawlog_binary" style="color:rgb(0,0,0);font-family:Arial,"Lucida Grande",sans-serif">rawlog binary</h2><span class="gmail-anchor" id="gmail-line-36" style="color:rgb(0,0,0);font-family:Arial,"Lucida Grande",sans-serif;font-size:16px"></span><span class="gmail-anchor" id="gmail-line-37" style="color:rgb(0,0,0);font-family:Arial,"Lucida Grande",sans-serif;font-size:16px"></span><p class="gmail-line862" style="color:rgb(0,0,0);font-family:Arial,"Lucida Grande",sans-serif;font-size:16px">It works by checking if <tt>dovecot.rawlog/</tt> directory exists in the logged in user's home directory, and writing the traffic to <tt>yyyymmdd-HHMMSS-pid.in</tt> and <tt>.out</tt> files. Each connection gets their own in/out files. <b>Rawlog will simply skip users who don't have the <tt>dovecot.rawlog/</tt> directory and the performance impact for those users is minimal.</b></p><p class="gmail-line862" style="color:rgb(0,0,0);font-family:Arial,"Lucida Grande",sans-serif;font-size:16px"><b><br></b></p></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 30 Dec 2020 at 20:10, Marc Roos <<a href="mailto:M.Roos@f1-outsourcing.eu">M.Roos@f1-outsourcing.eu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <br>
You know by any chance how to limit this only for one user?<br>
<br>
<br>
<br>
-----Original Message-----<br>
From: Odhiambo Washington [mailto:<a href="mailto:odhiambo@gmail.com" target="_blank">odhiambo@gmail.com</a>] <br>
Sent: 30 December 2020 18:00<br>
To: dovecot<br>
Subject: Re: import_environment = $import_environment DEBUG=1 where <br>
should this be logged?<br>
<br>
<br>
Hi Marc,<br>
<br>
If you read the link keenly - Debugging/Rawlog - Dovecot Wiki <br>
<<a href="https://wiki.dovecot.org/Debugging/Rawlog" rel="noreferrer" target="_blank">https://wiki.dovecot.org/Debugging/Rawlog</a>> - you will realize that you need to do some stuff.<br>
I have done them and they produced the results.<br>
<br>
Edit /path/to/dovecot/conf.d/10-master.conf and add the following:<br>
<br>
Under this block:<br>
<br>
add executable = imap postlogin to the block that has service imap { <br>
....<br>
...<br>
}<br>
<br>
Then create another block in the same file as follows:<br>
<br>
service postlogin {<br>
executable = script-login -d rawlog<br>
unix_listener postlogin {<br>
}<br>
}<br>
<br>
Identify the user for whom you want the rawlogs:<br>
<br>
doveadm user -u <a href="mailto:technical@mydomain.name" target="_blank">technical@mydomain.name</a><br>
userdb: <a href="mailto:technical@mydomain.name" target="_blank">technical@mydomain.name</a><br>
user : <a href="mailto:technical@mydomain.name" target="_blank">technical@mydomain.name</a><br>
home : /var/spool/virtual/<a href="http://mydomain.name/technical" rel="noreferrer" target="_blank">mydomain.name/technical</a><br>
uid : 26<br>
gid : 26<br>
<br>
Now do the following:<br>
cd /var/spool/virtual/<a href="http://mydomain.name/technical" rel="noreferrer" target="_blank">mydomain.name/technical</a><br>
mkdir dovecot.rawlog<br>
chown -R 26:26 dovecot.rawlog<br>
<br>
systemctl restart dovecot (or however you do it in CentOS)<br>
<br>
Now login to imap as the user .. perform some operations.<br>
<br>
Now look inside <br>
/var/spool/virtual/<a href="http://mydomain.name/technical/dovecot.rawlog/" rel="noreferrer" target="_blank">mydomain.name/technical/dovecot.rawlog/</a><br>
<br>
PS: Adapt as necessary. I tested this on FreeBSD with dovecot- 2.3.11.3<br>
<br>
Ignore the /tmp/rawlog/%u portion of the HOWTO. I did it too, but there <br>
was nothing in /tmp/rawlog/ even though I created the directory and did <br>
chmod 1777 /tmp/rawlog.<br>
<br>
Adios.<br>
<br>
<br>
<br>
<br>
On Wed, 30 Dec 2020 at 19:30, Marc Roos <<a href="mailto:M.Roos@f1-outsourcing.eu" target="_blank">M.Roos@f1-outsourcing.eu</a>> <br>
wrote:<br>
<br>
<br>
<br>
<br>
You can also set DEBUG environment to have rawlog log an info <br>
message <br>
why it's not doing anything:<br>
import_environment = $import_environment DEBUG=1<br>
<br>
Where should this message appear, I also don't have this one.<br>
<br>
[1]<br>
<a href="https://wiki2.dovecot.org/Debugging/Rawlog" rel="noreferrer" target="_blank">https://wiki2.dovecot.org/Debugging/Rawlog</a><br>
<br>
<br>
<br>
<br>
-- <br>
<br>
Best regards,<br>
Odhiambo WASHINGTON,<br>
Nairobi,KE<br>
+254 7 3200 0004/+254 7 2274 3223<br>
"Oh, the cruft.", grep ^[^#] :-)<br>
<br>
<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>Best regards,<br>Odhiambo WASHINGTON,<br>Nairobi,KE<br>+254 7 3200 0004/+254 7 2274 3223<br>"<span style="font-size:12.8px">Oh, the cruft.</span><span style="font-size:12.8px">", </span><span style="font-size:12.8px">grep ^[^#] :-)</span></div></div></div></div></div>