From: Bron Gondwana (no email)
Date: Thu Mar 13 2008 - 20:07:52 EDT
On Thu, Mar 13, 2008 at 11:57:31AM +0100, Ciprian Marius Vizitiu wrote:
> Hi listers,
>
>
>
> It's written in the manuals that by creating a folder under
> /var/lib/imap/log/username Cyrus will log at protocol level details for
> "username". Question: how can I do the same for a mailbox which is above
> user.* level? Of course I could enable logging for all users =:-o and then
> try to correlate those logs but I thought I should ask.
>
>
>
> Background: on a perfectly functioning Cyrus IMAP some of my users are...
> abusing one common IMAP folder in subtle ways so I just want to be able to
> catch the offenders that's why I'm only interested in the "COPY" and/or
> "APPEND" commands.
My "Auditlog" patches would probably be pretty handy for that! You
would get log entries for every append and copy, associated via
sessionid to a login event. You'll need both:
cyrus-sessionid-2.3.11.diff and
cyrus-auditlog-2.3.11.diff
from http://cyrus.brong.fastmail.fm/
(and you'll have to build cyrus from source or a custom package for
your packaging system as appropriate)
you also need to add 'auditlog: yes' to the imapd.conf.
Bron.
---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
|
|
|