It's relative path under /var/spool/postfix/. In iRedMail-0.8.6, i suppose it's "./dovecot-auth". You can do a quick check.
- Dear ZHB
OK and thank you, so i think no need to change that path
when i check to dovecot.log with tail -f always show a log
Feb 5 10:12:27 colo postfix/smtpd[14913]: disconnect from unknown[37.xxx.xxx.xxx ]
Feb 5 10:12:30 colo postfix/smtpd[15409]: connect from unknown[37.xxx.xxx.xxx]
Feb 5 10:12:41 colo postfix/smtpd[15409]: warning: unknown[37.xxx.xxx.xxx]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Feb 5 10:12:41 colo postfix/smtpd[15409]: lost connection after AUTH from unkno wn[37.37.xxx.xxx.xxx]
Feb 5 10:12:41 colo postfix/smtpd[15409]: disconnect from unknown[37.37.xxx.xxx.xxx ]
Feb 5 10:12:42 colo postfix/smtpd[14913]: connect from unknown[37.xxx.xxx.xxx]
Feb 5 10:12:52 colo postfix/smtpd[14913]: warning: unknown[37.xxx.xxx.xxx]: SASL LOGIN authentication failed: Connection lost to authentication server
Feb 5 10:12:52 colo postfix/smtpd[14913]: lost connection after AUTH from unknown[37.37.xxx.xxx.xxx]
Feb 5 10:12:52 colo postfix/smtpd[14913]: disconnect from unknown[37.xxx.xxx.xxx]
Feb 5 10:13:03 colo postfix/smtpd[15409]: connect from unknown[37.xxx.xxx.xxx]
The IP address alway changes, and requests are coming in from all over the world. It it more likely a break in attempt or something ?
or just IMAP client tries to connect to a Dovecot server using the SASL LOGIN protocol,
then asked password ?
can i safely ignore this message ?
Did you upgrade Postfix or Dovecot 2 weeks ago? Any other changes 2 weeks ago?
there is no change on postfix / dovecot .. only change main.CF (add some public IP to mynetworks.
thanks
