On Fri, 2009-06-12 at 09:55 -0700, Jonathan Feally wrote:
> Jesse Norell wrote:
> > That's exactly what dbmail_pbsp does already, just in a separate table.
> > Maybe you just need to enable pbsp in your config file?  (I don't
> > remember that support being removed, but it's possible.  It's still in
> > the sql schema though.)
> >   
> The pbsp is only used with the pop3 daemon.

  There are both pop_before_smtp and imap_before_smtp config values
(though I can't say that they still work, but on the ancient version
we're running they do).

>  Also, there is no attachment 
> of user to ip in that table. Just the timestamp and IP is stored so that 
> the smtp can determine that the sending IP did authenticate recently.

  Doh, indeed that's true; I misread that earlier.


> A better approach to this would probably be a security log table.
> user_idnr, service, login_time, logout_time, session_id, session_status, 
> ip_address, tcp_port.
> This essentially would require a new table, and some db_update calls in 
> the right places.

  Agreed, that'd be a more useful setup.  Also consider marking failed
login attempts (though you might resort to syslog for non-matching
usernames).  There have been requests for logging the above as well as
messages/bytes transferred stats and such in the past, I have no idea
where things are at on that front, but could put those counters in as
well.


-- 
Jesse Norell
Kentec Communications, Inc.
je...@kci.net
_______________________________________________
Dbmail-dev mailing list
Dbmail-dev@dbmail.org
http://mailman.fastxs.nl/cgi-bin/mailman/listinfo/dbmail-dev

Reply via email to