have stunnel logging remote ip's?

jamesbond

Well-Known Member
Oct 9, 2002
738
1
168
Cpanel doesn't log remote ip addresses of people who log in securely (2083/2096) due to the use of stunnel. The ip's show up as 127.0.0.1

Is there a way have to stunnel log these ip's or perhaps some other way to solve this?
 

chirpy

Well-Known Member
Verifed Vendor
Jun 15, 2002
13,466
31
473
Go on, have a guess
Not that I'm aware of. You can find out which IP's used stunnel, but marrying them up actual cPanel logins will prove tricky to impossible:

grep stunnel /var/log/messages
 

jamesbond

Well-Known Member
Oct 9, 2002
738
1
168
chirpy said:
Not that I'm aware of. You can find out which IP's used stunnel, but marrying them up actual cPanel logins will prove tricky to impossible:[/B]
That's what I thought.

Comparing timestamps of stunnel logs in /var/log/messages to the mail logs does help you identify the remote ip's. It's better than nothing :)