Re: dovecot proxy messages

That makes sense to me. I don;t have any dovecot proxy's (yet) but if I was looking at the report I would want those broken out as Proxy Logins and Proxy Disconnects and whatever other details.

-Mike
On Apr 24, 2012, at 3:15 PM, Orion Poplawski wrote:

> I just setup a dovecot proxy and am seeing lots of unmatched messages.  Some 
> examples:
> 
>     dovecot: imap-login: proxy(alexand): disconnecting 97.124.147.59 
> (Disconnected by client): 7 Time(s)
>     dovecot: imap-login: proxy(alexand): disconnecting 97.124.147.59 
> (Disconnected by server): 5 Time(s)
>     dovecot: imap-login: proxy(alexand): started proxying to 
> mail.cora.nwra.com:993: user=<alexand>, method=PLAIN, rip=97.124.147.59, 
> lip=4.28.99.182, TLS: 12 Time(s)
> 
>     dovecot: pop3-login: proxy(werne): disconnecting 166.147.82.151 
> (Disconnected by client): 1 Time(s)
>     dovecot: pop3-login: proxy(werne): disconnecting 166.147.82.151 
> (Disconnected by server): 2 Time(s)
>     dovecot: pop3-login: proxy(werne): disconnecting 206.124.7.172 
> (Disconnected by server): 200 Time(s)
>     dovecot: pop3-login: proxy(werne): disconnecting 207.173.60.178 
> (Disconnected by client: Connection reset by peer): 1 Time(s)
>     dovecot: pop3-login: proxy(werne): disconnecting 207.173.60.178 
> (Disconnected by server): 1 Time(s)
>     dovecot: pop3-login: proxy(werne): started proxying to 
> mail.cora.nwra.com:995: user=<werne>, method=PLAIN, rip=166.147.82.151, 
> lip=4.28.99.182, TLS: 3 Time(s)
> 
> 
> So, I think it makes sense to aggregate the proxy logins separate from the 
> regular login totals.  Seem good?  What about the disconnects?
> 
> -- 
> Orion Poplawski
> Technical Manager                     303-415-9701 x222
> NWRA, Boulder Office                  FAX: 303-415-9702
> 3380 Mitchell Lane                       [email protected]
> Boulder, CO 80301                   http://www.nwra.com
> 
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and 
> threat landscape has changed and how IT managers can respond. Discussions 
> will include endpoint security, mobile security and the latest in malware 
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> Logwatch-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/logwatch-devel


------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/