Original IP in webmail logins

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
armitage318
Advanced member
Advanced member
Posts: 98
Joined: Sat Sep 13, 2014 2:01 am

Original IP in webmail logins

Post by armitage318 »

Hi,
I use ZCS 8.8.7
I just noticed that for webmail logins I don't have "real ip" of end users (just the local Zimbra address, let's say 123.123.123.123)

Code: Select all

2018-10-18 18:33:33,189 INFO  [qtp998351292-135000:https:https://mail.mydomain.it/service/soap/BatchRequest] [name=test@mail.mydomain.it;mid=162;ip=[b]123.123.123.123[/b];port=58344;ua=ZimbraWebClient - FF62 (Win)/8.8.7_GA_1964;soapId=1c1b86cb;] soap - (batch) DiscoverRightsRequest elapsed=1
how can I log original ip address even for webmail?
Thank you!
phoenix
Ambassador
Ambassador
Posts: 27262
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Original IP in webmail logins

Post by phoenix »

The wonders of an internet search (or searching these forums or wiki) would get you the answer:https://www.startpage.com/do/dsearch?qu ... ge=english
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
armitage318
Advanced member
Advanced member
Posts: 98
Joined: Sat Sep 13, 2014 2:01 am

Re: Original IP in webmail logins

Post by armitage318 »

phoenix wrote:The wonders of an internet search (or searching these forums or wiki) would get you the answer:https://www.startpage.com/do/dsearch?qu ... ge=english
Hi phoenix,
thank you very much for your reply.
I followed this guide:

https://wiki.zimbra.com/wiki/Log_Files (logging the originating ip).

Basically I just added 127.0.0.1 as "trusted ip" (I have all Zimbra services on just one server).

After zmmailbox restart, I still see the server's (public) ip address in webmail logins.

Code: Select all

2018-10-19 10:34:01,370 INFO  [qtp998351292-141:http://localhost:8080/service/soap/AuthRequest] [name=mailtest@mydomain.net;oip=112.112.112.112;ua=zclient/8.8.7_GA_1964;soapId=3185d417;] security - cmd=Auth; account=mailtest@mydomain.net; protocol=soap;
Should I add "112.112.112.112" (fake server public ip address, just for example)?

Thank you again.
phoenix
Ambassador
Ambassador
Posts: 27262
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Original IP in webmail logins

Post by phoenix »

The wiki article you've followed is just for logging the originating ip in a multi-server (proxy) environment, you need it for a single environment, I'm guessing? You need to (sort of) follow the instructions in the first article in search link I gave you, that article tells you which entry needs changing in the admin UI, you need to enable it.
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
Post Reply