Log username and source IP address
Open, 60Public3 Story Points

Description

For deployment requirements, we need Guam to log the source IP address and username of the client connecting to IMAP.

We need to get these on the info level.

I can see how it would also be useful to log failed authentication attempt's (provided) username and source IP address, but that is of a later concern.

Details

Ticket Type
Task

Related Objects

StatusAssignedTask
Open seigo
vanmeeuwen added a parent task: Restricted Maniphest Task.Apr 12 2016, 3:39 PM

Should be implemented as a rule.

seigo moved this task from Backlog to Pending on the Guam board.Dec 13 2016, 2:01 PM
terba added a subscriber: terba.Sep 12 2017, 12:13 PM

I also miss this feature as this would enable log based intrusion detection/prevention on IMAP accounts. Cyrus logs are only logging 127.0.0.1 as client IP because of Guam proxying, and Guam is not logging authentication events with IP.

pasik added a subscriber: pasik.Nov 25 2017, 2:40 PM