Re: [qmailadmin] qmailadmin-1.2.9 logger patch

2007-08-22 Thread Tom Collins
On Aug 21, 2007, at 4:49 PM, Rainer Duffner wrote: I am too lazy to check - does the onchange-facility log the IP of the client? Going through the apache logfile can be tedious, if it is large. If you looked at John's message that I replied to, you'll see that although the script isn't

Re: [qmailadmin] qmailadmin-1.2.9 logger patch

2007-08-22 Thread John Simpson
On 2007-08-22, at 1133, Tom Collins wrote: On Aug 21, 2007, at 4:49 PM, Rainer Duffner wrote: I am too lazy to check - does the onchange-facility log the IP of the client? Going through the apache logfile can be tedious, if it is large. If you looked at John's message that I replied to,

Re: [qmailadmin] qmailadmin-1.2.9 logger patch

2007-08-21 Thread Metin KAYA
Hi John, At fist, thanks a lot for your suggestions. I am aware of your onchange script, but our topic is security. I think that we cannot give remote client IP as parameter in your onchange script. We took note of our customers' complaints. They claim that somebody always logging in system via

Re: [qmailadmin] qmailadmin-1.2.9 logger patch

2007-08-21 Thread John Simpson
On 2007-08-21, at 0433, Metin KAYA wrote: I am aware of your onchange script, but our topic is security. I think that we cannot give remote client IP as parameter in your onchange script. We took note of our customers' complaints. They claim that somebody always logging in system via

Re: [qmailadmin] qmailadmin-1.2.9 logger patch

2007-08-21 Thread Tom Collins
On Aug 21, 2007, at 12:45 PM, John Simpson wrote: and before you do this: if your qmailadmin interface is available on a non-SSL web site, that needs to be changed. otherwise, anybody with a packet sniffer in the right place will be able to literally WATCH your users log into their domains,

Re: [qmailadmin] qmailadmin-1.2.9 logger patch

2007-08-21 Thread Rainer Duffner
Am 22.08.2007 um 01:29 schrieb Tom Collins: On Aug 21, 2007, at 12:45 PM, John Simpson wrote: and before you do this: if your qmailadmin interface is available on a non-SSL web site, that needs to be changed. otherwise, anybody with a packet sniffer in the right place will be able to

[qmailadmin] qmailadmin-1.2.9 logger patch

2007-08-20 Thread Metin KAYA
Hi all, I have written a patch that create log file for qmailadmin-1.2.9. When a user's password or quota changed, a user deleted from the system or a user created this patch logs the events. Sample lines from log file: [EMAIL PROTECTED] ~]# cat /var/log/qmailadmin.log 12/08/2007

Re: [qmailadmin] qmailadmin-1.2.9 logger patch

2007-08-20 Thread John Simpson
On 2007-08-20, at 0427, Metin KAYA wrote: I have written a patch that create log file for qmailadmin-1.2.9. When a user's password or quota changed, a user deleted from the system or a user created this patch logs the events. better suggestion for you. i've written a patch to