Feature #3042

Log imap actions

Added by Filippo Carletti over 6 years ago. Updated over 6 years ago.

Status:CLOSEDStart date:
Priority:NormalDue date:
Assignee:-% Done:

100%

Category:nethserver-mail-server
Target version:v6.6
Resolution: NEEDINFO:No

Description

An option to log all actions made by imap clients could help discovering mailbox abusers.
dovecot has a plugin:
http://wiki2.dovecot.org/Plugins/MailLog
I'd say "default=disabled" as it could be verbose.

Associated revisions

Revision fb1e2375
Added by Edoardo Spadoni over 6 years ago

config: added log imap actions plugin. Refs #3042

Revision 06d8b34a
Added by Giacomo Sanchietti over 6 years ago

template: fix typo in comment. Refs #3042

History

#1 Updated by Giacomo Sanchietti over 6 years ago

I suggest to use LogActions property for backward compatibility.

#2 Updated by Giacomo Sanchietti over 6 years ago

  • Status changed from NEW to TRIAGED
  • Target version changed from ~FUTURE to v6.6
  • % Done changed from 0 to 20

#3 Updated by Giacomo Sanchietti over 6 years ago

  • Status changed from TRIAGED to ON_DEV
  • Assignee set to Edoardo Spadoni
  • % Done changed from 20 to 30

#4 Updated by Edoardo Spadoni over 6 years ago

  • Status changed from ON_DEV to MODIFIED
  • Assignee deleted (Edoardo Spadoni)
  • % Done changed from 30 to 60
Test Case
  • Enable LogActions property: config setprop dovecot LogActions enabled
  • Update dovecot conf: signal-event nethserver-mail-server-update
  • Check logs for the actions: tail -f /var/log/imap

As you can see all actions are logged, i.e. (mail moved to trash).

#5 Updated by Giacomo Sanchietti over 6 years ago

  • Category set to nethserver-mail-server
  • Status changed from MODIFIED to ON_QA
  • % Done changed from 60 to 70
Package in nethserver-testing:
  • nethserver-mail-server-1.8.5-1.2.g06d8b34.ns6.noarch.rpm

#6 Updated by Filippo Carletti over 6 years ago

  • Status changed from ON_QA to VERIFIED
  • % Done changed from 70 to 90
# config getprop dovecot LogActions
# yum --enablerepo=nethserver-testing update nethserver-mail-server
...
Updated:
  nethserver-mail-server.noarch 0:1.8.5-1.2.g06d8b34.ns6
# config getprop dovecot LogActions
disabled
# tail /var/log/imap
Feb 26 18:53:23 ns65 dovecot: imap(admin): flag_change: box=INBOX, uid=1, msgid=<20150226175238.D6D5F41C28@ns65.neth.net>, from=root@ns65.neth.net (root), subject=test, flags=(\Seen \Recent)

I also set LogActions to disabled and imap actions stopped being logged.

#7 Updated by Giacomo Sanchietti over 6 years ago

  • Status changed from VERIFIED to CLOSED
  • % Done changed from 90 to 100
Released in nethserver-base:
  • nethserver-mail-server-1.8.6-1.ns6.noarch.rpm

Also available in: Atom PDF