I'd like to get the IP-address of the webmail-klient logged in my maillog (for being compliant with coming data retention policies). I've noticed that with login_trusted_networks pointing at my dovecot directors, we get rip=client-ip logged on the backends. How is the proxy providing this to the dovecot backends? Anybody know what magic we need to implement in our webmail-solution to be able to forward the webmail-client-ip and have it logged as rip= in dovecot? I belive it will be enough to have it logged as rip= on the directors, maybe not needed to be forwarded all the way to the backends (but that would be nice as well). -jf
On 3.7.2013, at 23.29, Jan-Frode Myklebust <janfrode at tanso.net> wrote:> I'd like to get the IP-address of the webmail-klient logged in my > maillog (for being compliant with coming data retention policies). I've > noticed that with login_trusted_networks pointing at my dovecot > directors, we get rip=client-ip logged on the backends. How is the proxy > providing this to the dovecot backends? Anybody know what magic we need > to implement in our webmail-solution to be able to forward the > webmail-client-ip and have it logged as rip= in dovecot?a ID ("x-originating-ip" "1.2.3.4") Other things you could send in the same command: x-originating-port, x-connected-ip, x-connected-port And in case others are wondering, POP3 and LMTP use: XCLIENT ADDR=1.2.3.4 PORT=12345> I belive it will be enough to have it logged as rip= on the directors, > maybe not needed to be forwarded all the way to the backends (but that > would be nice as well).If backend has login_trusted_networks pointing to directors, then the IP gets forwarded to backends as well.
Jan-Frode Myklebust skrev den 2013-07-03 22:29:> I belive it will be enough to have it logged as rip= on the > directors, > maybe not needed to be forwarded all the way to the backends (but > that > would be nice as well).it would be loggin webservers ip, not webmail client ip, if thats not accepted, turn off webmail -- senders that put my email into body content will deliver it to my own trashcan, so if you like to get reply, dont do it