> Apologies in advance if this is an obscure question, but I am not a
> SquirrelMail user; just somebody investigating an IT issue.
>
> One of our clients uses SquirrelMail v1.4.2.

http://www.squirrelmail.org/security/
11 issues + 25KB in changelog.

> They suspect there may have
> been a security breach where somebody has been accessing a mailbox they
> shouldn't have as a result of learning a user's password.
>
> Does SquirrelMail log the IP address of accesses to mailboxes, and is this
> enabled by default?
>
> If so, could you please advise how we access this information?

If you don't use SquirrelMail logging plugin, you have only webserver
access logs and maybe imap authentication logs.

http://www.squirrelmail.org/plugin_view.php?id=67
http://www.squirrelmail.org/plugin_view.php?id=52

-- 
Tomas


-------------------------------------------------------
All the advantages of Linux Managed Hosting--Without the Cost and Risk!
Fully trained technicians. The highest number of Red Hat certifications in
the hosting industry. Fanatical Support. Click to learn more
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=107521&bid=248729&dat=121642
--
squirrelmail-users mailing list
Posting Guidelines: 
http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: [email protected]
List Archives: 
http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to