Please don't top-post in an in-line posted thread... On 9/2/2009 3:10 AM, Thomas G. Lau wrote: >>>>> We would like to use rawlog to make sure when does user delete email, >>>>> can we filter particular command that user sent to dovecot server >>>>> instead of log the whole email content as well? how would you all >>>>> provide prove to client that mail lost is not caused by your server?
>>>> You don't want rawlog for this (thats for troubleshooting), you want >>>> mail_log: >>>> >>>> http://wiki.dovecot.org/Plugins/MailLog >>> maillog does not provide when does client execute delete command, so >>> it does not work. >> I don't use it, but are you sure/have you tested it? >> >> From the referenced page: >> >> "Messages' UID and Message-ID header is logged for each action. Here's >> an example: >> >> imap(user): copy -> Trash: uid=908, msgid=<123....@bar> >> imap(user): deleted: uid=908, msgid=<123....@bar> >> imap(user): expunged: uid=908, msgid=<123....@bar>" >> >> It doesn't show it, but I'm fairly certain the log lines *do* include a >> date/time stamp. > try it with pop3 server, it does not work. I don't use POP, only IMAP... So, this is open-source... maybe start a new thread and ask for help on how to modify the code for the mail_log plugin to get what you want, or maybe even Timo can do it if it is simple enough... But rawlog is not the tool for this, so please start a new thread... -- Best regards, Charles
