[CentOS] Logwatch - Dovecot logs

Mohan mk at nerdplanet.co.uk
Tue Dec 9 12:10:43 UTC 2008

Hi ,

dovecot doesnt log anything to /var/log/secure. its a default centos 4.4 
installation. All dovecot messages are logged to /var/log/messages.

I tried connecting to the port 110 via telnet directly and typed user 
<random name>  and pass <random pass> if the username exist it shows 
authentication failure in the log and report user=root for eg if i try 
as root. but if i try some username like idontexist in the logs  
user=    shows blank. but in both the cases it didnt log the remote host 
IP address the rhost=   remains blank.

How to make dovecot to log all connection attempts remote host ip address.



Kai Schaetzl wrote:
> Mohan wrote on Mon, 08 Dec 2008 15:52:47 +0000:
>> The remote host ip is not 
>> present even in the /var/log/messages file
> what about /var/log/secure?
> Kai

More information about the CentOS mailing list