[Discuss] dovecot: "Disconnected (no auth attempts in 0 secs)"?

[dsr at randomstring.org (Dan Ritter)]

Daniel Barrett wrote: 
> >>On 12/17/20 9:38 AM, Daniel Barrett wrote:
> >>>    imap-login: Info: Disconnected (no auth attempts in 0 secs): user=<>, ...
> >>> 
> >>> Does anybody know if this indicates a problem that needs fixing?
> 
> >Kent Borg wrote: 
> >> I see them in my log file. My guess, at least in my case: Someone on the
> >> open internet (judging by the IP) was trying to break in but quit talking
> >> when authentication was expected.
> 
> On December 17, 2020, Dan Ritter wrote:
> >Yup, this. Nuisance value.
> 
> Thanks for the guesses, but I'm pretty sure in my case something else
> is happening. The computer in question is firewalled from all incoming
> requests from the internet, and as mentioned, the IMAP server is
> accessible only via localhost. More detail from the Stack Overflow
> writeup mentioned above:
> 
>   Dec 14 14:36:18 imap-login: Info: Disconnected (no auth attempts in 0 secs):
>   user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<ezeLwXG2K+F/AAAB>
> 
> Also the messages appear every 30 minutes like clockwork.
> 
> My best guess is that one of the (several) IMAP clients on the
> computer is disconnecting every 30 minutes, but I don't know if this
> is due to a misconfiguration or just normal behavior...?

Do you have a monitoring daemon checking to see if the IMAPd is
running?

rip=127.0.0.1 means it's on your machine, or proxied through it.

-dsr-