Discussion:
log pop3
Osvaldo Rivas
2010-09-30 18:53:15 UTC
Permalink
Hello, everyone.



I have a problem with leaking information, I wonder if somewhere I can find
a log of connections made by pop3, for a user.



Thanks.
Torsten Kersandt
2010-09-30 18:54:30 UTC
Permalink
On bsd it would be <https://209.44.113.195:19055/syslog/edit_log.cgi?idx=5>
/var/log/maillog







From: Osvaldo Rivas [mailto:spadons-***@public.gmane.org]
Sent: 30 September 2010 19:53
To: qmr-iGp6mRlwfsr/sFSC9fAAV0B+***@public.gmane.org
Subject: [qmr] log pop3



Hello, everyone.



I have a problem with leaking information, I wonder if somewhere I can find
a log of connections made by pop3, for a user.



Thanks.
fchan
2010-09-30 19:01:58 UTC
Permalink
X-Spam-Status: No, hits=3.9 required=8.0
X-Spam-Level: +++
X-No-Archive: yes
X-Qmail-Scanner-MOVED-X-Spam-Status: No, score=1.7 required=3.9
X-Qmail-Scanner-MOVED-X-Spam-Level: +
Namegenie-Scanbot: 2.01 (Clear:RC:0(209.44.113.195):SA:0(1.7/3.9):.
Processed in 2.257821 secs)
Date: Thu, 30 Sep 2010 19:54:30 +0100
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0359_01CB60D9.4C903500"
Thread-Index: Actg0Ln2bwe2KTd2RXCv60azmvg67wAABn4A
Content-Language: en-gb
Subject: RE: [qmr] log pop3
On bsd it would be
<https://209.44.113.195:19055/syslog/edit_log.cgi?idx=5>/var/log/maillog
Sent: 30 September 2010 19:53
Subject: [qmr] log pop3
Hello, everyone.
I have a problem with leaking information, I wonder if somewhere I
can find a log of connections made by pop3, for a user.
Thanks.
More specifically /var/log/qmail/qmail-pop3d and use tai64nlocal to
decrupt the log data data. Here is the format

tai64nlocal < current | less

I hope this helps.
Frank
Osvaldo Rivas
2010-10-01 16:10:41 UTC
Permalink
As I can interpret this information? for example as I can know that the host
was logged on to the account user-9IKiO1iGCm/QT0dZR+***@public.gmane.org



De: fchan [mailto:fchan-PCEehkLxq9Idnm+***@public.gmane.org]
Enviado el: jueves, 30 de septiembre de 2010 03:02 p.m.
Para: qmr-iGp6mRlwfsr/sFSC9fAAV0B+***@public.gmane.org
Asunto: Fwd: RE: [qmr] log pop3



Return-Path: <qmr-return-39658-fchan=molsci.org-iGp6mRlwfsr/sFSC9fAAV0B+***@public.gmane.org>
Delivered-To: fchan-PCEehkLxq9Idnm+***@public.gmane.org
X-Spam-Status: No, hits=3.9 required=8.0
X-Spam-Level: +++
Mailing-List: contact qmr-help-iGp6mRlwfsr/sFSC9fAAV0B+***@public.gmane.org; run by ezmlm
X-No-Archive: yes
List-Post: <mailto:qmr-iGp6mRlwfsr/sFSC9fAAV0B+***@public.gmane.org>
List-Help: <mailto:qmr-help-iGp6mRlwfsr/sFSC9fAAV0B+***@public.gmane.org>
List-Unsubscribe: <mailto:qmr-unsubscribe-iGp6mRlwfsr/sFSC9fAAV0B+***@public.gmane.org>
List-Subscribe: <mailto:qmr-subscribe-iGp6mRlwfsr/sFSC9fAAV0B+***@public.gmane.org>
Reply-To: qmr-iGp6mRlwfsr/sFSC9fAAV0B+***@public.gmane.org
Delivered-To: mailing list qmr-iGp6mRlwfsr/sFSC9fAAV0B+***@public.gmane.org
X-Qmail-Scanner-MOVED-X-Spam-Status: No, score=1.7 required=3.9
X-Qmail-Scanner-MOVED-X-Spam-Level: +
Namegenie-Scanbot-Mail-From: torsten-***@public.gmane.org via vernon.namegenie.net
Namegenie-Scanbot: 2.01 (Clear:RC:0(209.44.113.195):SA:0(1.7/3.9):.
Processed in 2.257821 secs)
From: "Torsten Kersandt" <torsten-***@public.gmane.org>
To: <qmr-iGp6mRlwfsr/sFSC9fAAV0B+***@public.gmane.org>
Date: Thu, 30 Sep 2010 19:54:30 +0100
Message-ID: <035801cb60d0$eacbcd00$c0636700$@net>
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0359_01CB60D9.4C903500"
Thread-Index: Actg0Ln2bwe2KTd2RXCv60azmvg67wAABn4A
Content-Language: en-gb
Subject: RE: [qmr] log pop3

On bsd it would be <https://209.44.113.195:19055/syslog/edit_log.cgi?idx=5>
/var/log/maillog







From: Osvaldo Rivas [mailto:spadons-***@public.gmane.org]
Sent: 30 September 2010 19:53
To: qmr-iGp6mRlwfsr/sFSC9fAAV0B+***@public.gmane.org
Subject: [qmr] log pop3



Hello, everyone.



I have a problem with leaking information, I wonder if somewhere I can find
a log of connections made by pop3, for a user.



Thanks.







More specifically /var/log/qmail/qmail-pop3d and use tai64nlocal to decrupt
the log data data. Here is the format



tai64nlocal < current | less



I hope this helps.

Frank
Rakesh Maharjan
2010-10-02 11:34:10 UTC
Permalink
Thank you very much,


Yes, my mail server finally worked after i changed to owner
#chown -R clamav:clamav /var/run/clamav


once again thank you very much.
Rakesh Maharjan
Post by Osvaldo Rivas
As I can interpret this information? for example as I can know that the host
Enviado el: jueves, 30 de septiembre de 2010 03:02 p.m.
Asunto: Fwd: RE: [qmr] log pop3
X-Spam-Status: No, hits=3.9 required=8.0
X-Spam-Level: +++
X-No-Archive: yes
X-Qmail-Scanner-MOVED-X-Spam-Status: No, score=1.7 required=3.9
X-Qmail-Scanner-MOVED-X-Spam-Level: +
vernon.namegenie.net
Namegenie-Scanbot: 2.01 (Clear:RC:0(209.44.113.195):SA:0(1.7/3.9):.
Processed in 2.257821 secs)
Date: Thu, 30 Sep 2010 19:54:30 +0100
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0359_01CB60D9.4C903500"
Thread-Index: Actg0Ln2bwe2KTd2RXCv60azmvg67wAABn4A
Content-Language: en-gb
Subject: RE: [qmr] log pop3
On bsd it would be
<https://209.44.113.195:19055/syslog/edit_log.cgi?idx=5>
/var/log/maillog
Sent: 30 September 2010 19:53
Subject: [qmr] log pop3
Hello, everyone.
I have a problem with leaking information, I wonder if somewhere I can find
a log of connections made by pop3, for a user.
Thanks.
More specifically /var/log/qmail/qmail-pop3d and use tai64nlocal to decrupt
the log data data. Here is the format
tai64nlocal < current | less
I hope this helps.
Frank
Loading...