Original IP in webmail logins

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
armitage318
Advanced member
Advanced member
Posts: 71
Joined: Sat Sep 13, 2014 2:01 am

Original IP in webmail logins

Postby armitage318 » Thu Oct 18, 2018 4:40 pm

Hi,
I use ZCS 8.8.7
I just noticed that for webmail logins I don't have "real ip" of end users (just the local Zimbra address, let's say 123.123.123.123)

Code: Select all

2018-10-18 18:33:33,189 INFO  [qtp998351292-135000:https:https://mail.mydomain.it/service/soap/BatchRequest] [name=test@mail.mydomain.it;mid=162;ip=[b]123.123.123.123[/b];port=58344;ua=ZimbraWebClient - FF62 (Win)/8.8.7_GA_1964;soapId=1c1b86cb;] soap - (batch) DiscoverRightsRequest elapsed=1


how can I log original ip address even for webmail?
Thank you!


phoenix
Ambassador
Ambassador
Posts: 25783
Joined: Fri Sep 12, 2014 9:56 pm

Re: Original IP in webmail logins

Postby phoenix » Thu Oct 18, 2018 4:54 pm

The wonders of an internet search (or searching these forums or wiki) would get you the answer:https://www.startpage.com/do/dsearch?query=%2Bzimbra+%2B%22x-originating-ip%22&cat=web&pl=opensearch&language=english
Regards

Bill

Rspamd: A high performance spamassassin replacement

If you'd like to see this implemented in a future version of ZCS then please vote on Bugzilla entries 97706 & 108168
armitage318
Advanced member
Advanced member
Posts: 71
Joined: Sat Sep 13, 2014 2:01 am

Re: Original IP in webmail logins

Postby armitage318 » Fri Oct 19, 2018 8:40 am

phoenix wrote:The wonders of an internet search (or searching these forums or wiki) would get you the answer:https://www.startpage.com/do/dsearch?query=%2Bzimbra+%2B%22x-originating-ip%22&cat=web&pl=opensearch&language=english


Hi phoenix,
thank you very much for your reply.
I followed this guide:

https://wiki.zimbra.com/wiki/Log_Files (logging the originating ip).

Basically I just added 127.0.0.1 as "trusted ip" (I have all Zimbra services on just one server).

After zmmailbox restart, I still see the server's (public) ip address in webmail logins.

Code: Select all

2018-10-19 10:34:01,370 INFO  [qtp998351292-141:http://localhost:8080/service/soap/AuthRequest] [name=mailtest@mydomain.net;oip=112.112.112.112;ua=zclient/8.8.7_GA_1964;soapId=3185d417;] security - cmd=Auth; account=mailtest@mydomain.net; protocol=soap;


Should I add "112.112.112.112" (fake server public ip address, just for example)?

Thank you again.
phoenix
Ambassador
Ambassador
Posts: 25783
Joined: Fri Sep 12, 2014 9:56 pm

Re: Original IP in webmail logins

Postby phoenix » Fri Oct 19, 2018 9:04 am

The wiki article you've followed is just for logging the originating ip in a multi-server (proxy) environment, you need it for a single environment, I'm guessing? You need to (sort of) follow the instructions in the first article in search link I gave you, that article tells you which entry needs changing in the admin UI, you need to enable it.
Regards

Bill

Rspamd: A high performance spamassassin replacement

If you'd like to see this implemented in a future version of ZCS then please vote on Bugzilla entries 97706 & 108168

Return to “Administrators”

Who is online

Users browsing this forum: Google [Bot] and 13 guests