Am 08.08.2014 um 22:40 schrieb Gene Heskett: > On Friday 08 August 2014 14:11:21 Alex did opine >> I have a fedora20 system with dovecot-2.2.13 running various services, >> including pop3. I'm noticing some users are frequently hamming pop3, >> and wondered if this was normal, or something I should be >> investigating? >> >> Aug 8 14:05:20 email dovecot: pop3-login: Login: user=<user1>, >> method=PLAIN, rip=97.77.115.121, lip=192.168.1.1, mpid=30509, >> session=<DnRtDCIAUQBhTXN5> >> Aug 8 14:05:21 email dovecot: pop3(user1): Disconnected: Logged out >> top=0/0, retr=0/0, del=0/15, size=5693601
i would ask the user to change at least to 3 minutes instead 1 44000 loglines per month and user is a lot if everybody would do that > I just noticed the rip address and the local address aren't even in the > same network block, that would make me check your network as NO > 192.168.xx.xx address is supposed to be accessible from a world wide > address beyond your router unless you've enabled a port forward rule in > the router that's why it is the *local* IP just normal in any case of proxying
signature.asc
Description: OpenPGP digital signature
