Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to find a way to map account access to ip addresses.

The situation is that I believe there are multiple sources accessing the same account via pop3. I want to see the ip addresses that are connecting to a specific account via a protocol.

This is on a RHEL Box with QMail.

If there is not a log that contains this information, I would be interested in any type of plugin or addition that could log these statistics.

share|improve this question

It depends what you're using as your POP server on the qmail host. If qmail-pop3d, then solutions such as vpopmail ( can provide this. Authentication logs that this raises looks like (suitably anonymised of course :-) ):

Aug  5 00:02:28 smurf vpopmail[2098]: vchkpw-pop3: (PLAIN) login success
Aug  5 00:02:31 smurf vpopmail[2100]: vchkpw-pop3: (PLAIN) login success
Aug  5 00:02:32 smurf vpopmail[2102]: vchkpw-pop3: (PLAIN) login success
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.