LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices

Reply
 
Search this Thread
Old 10-07-2011, 01:44 AM   #1
L1nuxn00b703
Member
 
Registered: Sep 2009
Posts: 108

Rep: Reputation: 15
Help... /var/log/maillog entries


Hello everyone,
Can someone please let me know if this is some kind of security breach on my mail server:

Code:
Oct  6 09:14:08 mail postfix/smtpd[11090]: connect from dslb-088-078-105-108.pools.arcor-ip.net[88.78.105.108]
Oct  6 09:14:08 mail postfix/smtpd[11090]: disconnect from dslb-088-078-105-108.pools.arcor-ip.net[88.78.105.108]
Oct  6 09:17:28 mail postfix/anvil[11092]: statistics: max connection rate 1/60s for (smtp:88.78.105.108) at Oct  6 09:14:08
Oct  6 09:17:28 mail postfix/anvil[11092]: statistics: max connection count 1 for (smtp:88.78.105.108) at Oct  6 09:14:08
Oct  6 09:17:28 mail postfix/anvil[11092]: statistics: max cache size 1 at Oct  6 09:14:08
Oct  6 10:03:40 mail dovecot: IMAP(tom): Disconnected for inactivity
Oct  6 10:03:40 mail dovecot: IMAP(tom): Disconnected for inactivity
Oct  6 10:03:41 mail dovecot: imap-login: Login: user=<tom>, method=PLAIN, rip=::ffff:174.252.113.117, lip=::ffff:173.255.232.71, TLS
Oct  6 10:33:51 mail dovecot: IMAP(tom): Disconnected for inactivity
Oct  6 10:33:54 mail dovecot: imap-login: Login: user=<tom>, method=PLAIN, rip=::ffff:174.252.113.117, lip=::ffff:173.255.232.71, TLS
Oct  6 14:23:14 mail dovecot: IMAP(tom): Disconnected for inactivity
Oct  6 14:23:15 mail dovecot: imap-login: Login: user=<tom>, method=PLAIN, rip=::ffff:174.252.121.26, lip=::ffff:173.255.232.71, TLS
Oct  6 23:30:00 mail dovecot: imap-login: Login: user=<tom>, method=PLAIN, rip=::ffff:174.252.98.14, lip=::ffff:173.255.232.71, TLS
Oct  6 23:45:07 mail dovecot: IMAP(tom): Disconnected for inactivity
There is only 1 user account (tom) which is me and I did not access my server during the above time in the logs. Can anyone let me know what the "Disconnected for inactivity" means even though I wasn't logged in at all.

Thanks.
 
Old 10-07-2011, 07:44 AM   #2
AlucardZero
Senior Member
 
Registered: May 2006
Location: USA
Distribution: Debian
Posts: 4,652

Rep: Reputation: 536Reputation: 536Reputation: 536Reputation: 536Reputation: 536Reputation: 536
It means tom was disconnected for being too idle.

Is your IP 174.252.113.117 (Verizon Wireless)?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Sendmail won't log to /var/log/maillog zumajim Linux - Software 2 07-27-2009 03:38 PM
Can Samhain log my entries in /var/log/secure and /var/log/mesage to a central server abefroman Linux - Software 2 04-13-2008 05:13 PM
write mail log to /var/log/maillog jimmyjiang Red Hat 4 01-15-2008 07:18 PM
why is maillog on my server getting created in /var/log/maillog.3 ? weblink_dipti Linux - Software 2 06-16-2007 05:47 AM
wierd spamassassin entries in /var/log/maillog Pcghost Linux - Software 1 07-15-2003 11:56 AM


All times are GMT -5. The time now is 06:54 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration