Displaying 1 result from an estimated 1 matches for "pix68zmjw".
Did you mean:
pax68zmjw
2019 Aug 09
3
Should dovecot not be using different logging facility and severity levels?
...info:Aug 9 16:19:49 mail03 dovecot: imap-login: Aborted login (auth
failed, 1 attempts in 2 secs): user=<xxxxx>, method=PLAIN, rip=x.x.x.x,
lip=x.x.x.x, TLS, session=<14Pb3a+Pih68zmjw>
lev_info:Aug 9 16:19:51 mail03 dovecot: auth-worker(29664):
pam(krinfo,188.206.104.240,<99cO3q+Pix68zmjw>): unknown user
lev_info:Aug 9 16:19:53 mail03 dovecot: imap-login: Aborted login (auth
failed, 1 attempts in 2 secs): user=<xxxxx>, method=PLAIN, rip=x.x.x.x,
lip=x.x.x.x, TLS, session=<99cO3q+Pix68zmjw>
This is how failed attempts are logged by vsftpd
fac_authpriv:Aug 9 16:2...