Page MenuHomekolab.org

Log username and source IP address
Open, NormalPublic3 Story Points

Description

For deployment requirements, we need Guam to log the source IP address and username of the client connecting to IMAP.

We need to get these on the info level.

I can see how it would also be useful to log failed authentication attempt's (provided) username and source IP address, but that is of a later concern.

Details

Ticket Type
Task

Related Objects

StatusAssignedTask
Open seigo

Event Timeline

vanmeeuwen added a parent task: Restricted Maniphest Task.Apr 12 2016, 3:39 PM

Should be implemented as a rule.

seigo moved this task from Backlog to Pending on the Guam board.Dec 13 2016, 2:01 PM
terba added a subscriber: terba.Sep 12 2017, 12:13 PM

I also miss this feature as this would enable log based intrusion detection/prevention on IMAP accounts. Cyrus logs are only logging 127.0.0.1 as client IP because of Guam proxying, and Guam is not logging authentication events with IP.

pasik added a subscriber: pasik.Nov 25 2017, 2:40 PM
vanmeeuwen lowered the priority of this task from 60 to Normal.Mar 28 2019, 8:12 AM