Now I’m really confused. After sending and receiving several email through MUA testing filters, sending through MUA has stopped. No more activity in mail.log. I rebooted server and reissued command to stop Fail2ban and tried again. Imap is connecting, but no more activity in mail.log
mail.log output
Jan 1 14:31:16 mx postfix/postscreen[30831]: CONNECT from [209.85.160.175]:47019 to [172.31.65.246]:25
Jan 1 14:31:22 mx postfix/postscreen[30831]: PASS NEW [209.85.160.175]:47019
Jan 1 14:31:22 mx postfix/smtpd[30840]: connect from mail-qt1-f175.google.com[209.85.160.175]
Jan 1 14:31:23 mx postfix/smtpd[30840]: Anonymous TLS connection established from mail-qt1-f175.google.com[209.85.160.175]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
Jan 1 14:31:23 mx postfix/smtpd[30840]: 47ntrq0bKVz20Yh: client=mail-qt1-f175.google.com[209.85.160.175]
Jan 1 14:31:23 mx postfix/cleanup[30851]: 47ntrq0bKVz20Yh: message-id=<23FD9679-2BC8-4D80-AAA8-84207F28A62C@gmail.com>
Jan 1 14:31:23 mx postfix/qmgr[2407]: 47ntrq0bKVz20Yh: from=<cliffponder@gmail.com>, size=2720, nrcpt=1 (queue active)
Jan 1 14:31:23 mx postfix/smtpd[30840]: disconnect from mail-qt1-f175.google.com[209.85.160.175] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
Jan 1 14:31:23 mx postfix/10025/smtpd[30860]: connect from mx.cliffponder.com[127.0.0.1]
Jan 1 14:31:23 mx postfix/10025/smtpd[30860]: 47ntrq2fSGz24Sc: client=mx.cliffponder.com[127.0.0.1]
Jan 1 14:31:23 mx postfix/cleanup[30851]: 47ntrq2fSGz24Sc: message-id=<23FD9679-2BC8-4D80-AAA8-84207F28A62C@gmail.com>
Jan 1 14:31:23 mx postfix/qmgr[2407]: 47ntrq2fSGz24Sc: from=<cliffponder@gmail.com>, size=3313, nrcpt=1 (queue active)
Jan 1 14:31:23 mx postfix/10025/smtpd[30860]: disconnect from mx.cliffponder.com[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
Jan 1 14:31:23 mx amavis[12543]: (12543-01) Passed CLEAN {RelayedInbound}, [209.85.160.175]:47019 [196.52.2.35] ESMTP/ESMTP <cliffponder@gmail.com> -> <mail@cliffponder.com>, (ESMTPS://[209.85.160.175]:47019 < ESMTPSA://196.52.2.35), Queue-ID: 47ntrq0bKVz20Yh, Message-ID: <23FD9679-2BC8-4D80-AAA8-84207F28A62C@gmail.com>, mail_id: KLDB1_eziL5o, b: 7zj_n08lD, Hits: -0.2, size: 2720, queued_as: 47ntrq2fSGz24Sc, Subject: "Where does this go?", From: <cliffponder@gmail.com> (dkim:AUTHOR), X-Mailer: iPhone_Mail_(17C54), helo=mail-qt1-f175.google.com, Tests: [DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,DKIM_VALID_EF=-0.1,FREEMAIL_FROM=0.001,RCVD_IN_DNSWL_NONE=-0.0001,RCVD_IN_MSPIKE_H2=-0.001,SPF_HELO_NONE=0.001,SPF_PASS=-0.001], autolearn=ham autolearn_force=no, autolearnscore=-0.199, dkim_i=@gmail.com, dkim_sd=20161025:gmail.com, 273 ms
Jan 1 14:31:23 mx postfix/amavis/smtp[30856]: 47ntrq0bKVz20Yh: to=<mail@cliffponder.com>, orig_to=<noidea@cliffponder.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.36, delays=0.07/0.01/0.01/0.28, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 47ntrq2fSGz24Sc)
Jan 1 14:31:23 mx postfix/qmgr[2407]: 47ntrq0bKVz20Yh: removed
Jan 1 14:31:23 mx postfix/pipe[30861]: 47ntrq2fSGz24Sc: to=<mail@cliffponder.com>, relay=dovecot, delay=0.05, delays=0.01/0.02/0/0.03, dsn=2.0.0, status=sent (delivered via dovecot service)
Jan 1 14:31:23 mx postfix/qmgr[2407]: 47ntrq2fSGz24Sc: removed
Jan 1 14:34:43 mx postfix/anvil[30842]: statistics: max connection rate 1/60s for (smtpd:209.85.160.175) at Jan 1 14:31:22
Jan 1 14:34:43 mx postfix/anvil[30842]: statistics: max connection count 1 for (smtpd:209.85.160.175) at Jan 1 14:31:22
Jan 1 14:34:43 mx postfix/anvil[30842]: statistics: max cache size 1 at Jan 1 14:31:22
Jan 1 14:43:58 mx postfix/submission/smtpd[31437]: connect from mx.cliffponder.com[127.0.0.1]
Jan 1 14:43:58 mx postfix/submission/smtpd[31437]: Anonymous TLS connection established from mx.cliffponder.com[127.0.0.1]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
Jan 1 14:43:58 mx postfix/submission/smtpd[31437]: 47nv7L68cyz24NH: client=mx.cliffponder.com[127.0.0.1], sasl_method=LOGIN, sasl_username=mail@cliffponder.com
Jan 1 14:43:58 mx postfix/cleanup[31446]: 47nv7L68cyz24NH: message-id=<23ed62b9284998719e22daacf7bcac84@cliffponder.com>
Jan 1 14:43:58 mx roundcube: <ljc7qo6k> User mail@cliffponder.com [196.52.2.35]; Message <23ed62b9284998719e22daacf7bcac84@cliffponder.com> for Ponderingparadise@gmail.com; 250: 2.0.0 Ok: queued as 47nv7L68cyz24NH
Jan 1 14:43:58 mx postfix/submission/smtpd[31437]: disconnect from mx.cliffponder.com[127.0.0.1] ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=8
Jan 1 14:43:58 mx postfix/qmgr[2407]: 47nv7L68cyz24NH: from=<mail@cliffponder.com>, size=677, nrcpt=1 (queue active)
Jan 1 14:43:59 mx postfix/10025/smtpd[31457]: connect from mx.cliffponder.com[127.0.0.1]
Jan 1 14:43:59 mx postfix/10025/smtpd[31457]: 47nv7M19hBz20YW: client=mx.cliffponder.com[127.0.0.1]
Jan 1 14:43:59 mx postfix/cleanup[31446]: 47nv7M19hBz20YW: message-id=<23ed62b9284998719e22daacf7bcac84@cliffponder.com>
Jan 1 14:43:59 mx postfix/qmgr[2407]: 47nv7M19hBz20YW: from=<mail@cliffponder.com>, size=1841, nrcpt=1 (queue active)
Jan 1 14:43:59 mx postfix/10025/smtpd[31457]: disconnect from mx.cliffponder.com[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
Jan 1 14:43:59 mx amavis[12542]: (12542-02) Passed CLEAN {RelayedInternal}, ORIGINATING/MYNETS LOCAL [127.0.0.1]:35918 ESMTP/ESMTP <mail@cliffponder.com> -> <Ponderingparadise@gmail.com>, (), Queue-ID: 47nv7L68cyz24NH, Message-ID: <23ed62b9284998719e22daacf7bcac84@cliffponder.com>, mail_id: gw0SgfMYG1Jg, b: 5q8sMlKAe, Hits: -1, size: 698, queued_as: 47nv7M19hBz20YW, Subject: "Something is not working in canary", From: <mail@cliffponder.com>, User-Agent: Roundcube_Webmail, helo=localhost, Tests: [ALL_TRUSTED=-1], autolearn=ham autolearn_force=no, autolearnscore=0, dkim_new=dkim:cliffponder.com, 236 ms
Jan 1 14:43:59 mx postfix/amavis/smtp[31453]: 47nv7L68cyz24NH: to=<Ponderingparadise@gmail.com>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.35, delays=0.09/0.02/0/0.24, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 47nv7M19hBz20YW)
Jan 1 14:43:59 mx postfix/qmgr[2407]: 47nv7L68cyz24NH: removed
Jan 1 14:43:59 mx postfix/smtp[31458]: connect to gmail-smtp-in.l.google.com[2607:f8b0:400d:c02::1a]:25: Network is unreachable
Jan 1 14:43:59 mx postfix/smtp[31458]: Trusted TLS connection established to gmail-smtp-in.l.google.com[172.217.197.26]:25: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
Jan 1 14:43:59 mx postfix/smtp[31458]: 47nv7M19hBz20YW: to=<Ponderingparadise@gmail.com>, relay=gmail-smtp-in.l.google.com[172.217.197.26]:25, delay=0.41, delays=0.01/0.02/0.15/0.24, dsn=2.0.0, status=sent (250 2.0.0 OK 1577889839 m29si16010633qkm.49 - gsmtp)
Jan 1 14:43:59 mx postfix/qmgr[2407]: 47nv7M19hBz20YW: removed
Jan 1 14:42:49 mx dovecot: imap(mail@cliffponder.com): Logged out in=44 out=781
Jan 1 14:43:50 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=LOGIN, rip=127.0.0.1, lip=127.0.0.1, mpid=31432, secured, session=<iRPXGhWbuNx/AAAB>
Jan 1 14:43:50 mx dovecot: imap(mail@cliffponder.com): Logged out in=569 out=676
Jan 1 14:43:58 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=LOGIN, rip=127.0.0.1, lip=127.0.0.1, mpid=31454, secured, session=<9RNYGxWb9tx/AAAB>
Jan 1 14:43:59 mx dovecot: imap(mail@cliffponder.com): delete: box=Drafts, uid=55, msgid=<23ed62b9284998719e22daacf7bcac84@cliffponder.com>, size=463, from=Clifford Ponder <mail@cliffponder.com>, subject=Something is not working in canary, flags=(\Deleted \Seen \Recent)
Jan 1 14:43:59 mx dovecot: imap(mail@cliffponder.com): expunge: box=Drafts, uid=55, msgid=<23ed62b9284998719e22daacf7bcac84@cliffponder.com>, size=463, from=Clifford Ponder <mail@cliffponder.com>, subject=Something is not working in canary, flags=(\Deleted \Seen \Recent)
Jan 1 14:43:59 mx dovecot: imap(mail@cliffponder.com): Logged out in=651 out=1153
Jan 1 14:43:59 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=LOGIN, rip=127.0.0.1, lip=127.0.0.1, mpid=31460, secured, session=<rJhjGxWbAt1/AAAB>
Jan 1 14:43:59 mx dovecot: imap(mail@cliffponder.com): Logged out in=70 out=822
Jan 1 14:43:59 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=LOGIN, rip=127.0.0.1, lip=127.0.0.1, mpid=31462, secured, session=<hUBnGxWbCt1/AAAB>
Jan 1 14:43:59 mx dovecot: imap(mail@cliffponder.com): Logged out in=331 out=1622
Jan 1 14:44:00 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=LOGIN, rip=127.0.0.1, lip=127.0.0.1, mpid=31466, secured, session=<uC9qGxWbEN1/AAAB>
Jan 1 14:44:00 mx dovecot: imap(mail@cliffponder.com): Logged out in=436 out=1665
Jan 1 14:45:00 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 311.412 secs ago) in=14 out=432
Jan 1 14:45:01 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.35, lip=172.31.65.246, mpid=31515, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<FoQNHxWbYsHENAIj>
Jan 1 14:45:01 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.35, lip=172.31.65.246, mpid=31516, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<BJcNHxWbYMHENAIj>
Jan 1 14:45:01 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.35, lip=172.31.65.246, mpid=31517, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<BKEOHxWbX8HENAIj>
Jan 1 14:45:01 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.35, lip=172.31.65.246, mpid=31518, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<VrAOHxWbYcHENAIj>
Jan 1 14:45:02 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.35, lip=172.31.65.246, mpid=31525, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<KlYfHxWbZMHENAIj>
Jan 1 14:45:11 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 302.395 secs ago) in=14 out=432
Jan 1 14:45:31 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 301.557 secs ago) in=14 out=432
Jan 1 14:45:53 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 303.329 secs ago) in=14 out=432
Jan 1 14:46:11 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 301.210 secs ago) in=14 out=432
Jan 1 14:46:40 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 304.146 secs ago) in=14 out=432
Jan 1 14:46:53 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 301.810 secs ago) in=14 out=432
Jan 1 14:47:25 mx dovecot: imap(mail@cliffponder.com): Connection closed (IDLE finished 142.578 secs ago) in=44 out=833
Jan 1 14:47:25 mx dovecot: imap(mail@cliffponder.com): Connection closed (UID FETCH finished 123.217 secs ago) in=158 out=6592
Jan 1 14:47:25 mx dovecot: imap(mail@cliffponder.com): Connection closed (UID FETCH finished 64.982 secs ago) in=128 out=3253
Jan 1 14:47:25 mx dovecot: imap(mail@cliffponder.com): Connection closed (UID SEARCH finished 59.152 secs ago) in=1132 out=7049
Jan 1 14:47:25 mx dovecot: imap(mail@cliffponder.com): Connection closed (UID SEARCH finished 63.454 secs ago) in=1031 out=7938
Jan 1 14:47:25 mx dovecot: imap-login: Disconnected (no auth attempts in 74 secs): user=<>, rip=196.52.2.35, lip=172.31.65.246, TLS: Disconnected, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<ftGhJxWbbsHENAIj>
Jan 1 14:47:25 mx dovecot: imap-login: Disconnected (no auth attempts in 45 secs): user=<>, rip=196.52.2.35, lip=172.31.65.246, TLS: Disconnected, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<qtShJxWbccHENAIj>
Jan 1 14:47:25 mx dovecot: imap-login: Disconnected (no auth attempts in 145 secs): user=<>, rip=196.52.2.35, lip=172.31.65.246, TLS: Disconnected, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<gtehJxWbXcHENAIj>
Jan 1 14:47:25 mx dovecot: imap-login: Disconnected (no auth attempts in 134 secs): user=<>, rip=196.52.2.35, lip=172.31.65.246, TLS: Disconnected, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<pt2hJxWbZcHENAIj>
Jan 1 14:47:25 mx dovecot: imap-login: Disconnected (no auth attempts in 114 secs): user=<>, rip=196.52.2.35, lip=172.31.65.246, TLS: Disconnected, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<pt2hJxWbaMHENAIj>
Jan 1 14:47:25 mx dovecot: imap-login: Disconnected (no auth attempts in 32 secs): user=<>, rip=196.52.2.35, lip=172.31.65.246, TLS: Disconnected, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<reGhJxWbdMHENAIj>
Jan 1 14:47:25 mx dovecot: imap-login: Disconnected (no auth attempts in 92 secs): user=<>, rip=196.52.2.35, lip=172.31.65.246, TLS: Disconnected, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<guWhJxWba8HENAIj>
Jan 1 14:48:09 mx dovecot: imap-login: Disconnected (tried to use disallowed plaintext auth): user=<mail@cliffponder.com>, rip=172.105.80.20, lip=172.31.65.246, session=<WH1MKhWbiOasaVAU>
Jan 1 14:48:33 mx dovecot: imap-login: Disconnected (tried to use disallowed plaintext auth): user=<mail@cliffponder.com>, rip=172.105.80.20, lip=172.31.65.246, session=<ohKvKxWb3OasaVAU>
Jan 1 14:48:33 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.35, lip=172.31.65.246, mpid=31774, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<9i2yKxWbd8HENAIj>
Jan 1 14:48:53 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.35, lip=172.31.65.246, mpid=31784, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<lPPnLBWbecHENAIj>
Jan 1 14:50:49 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 135.909 secs ago) in=14 out=432
Jan 1 14:50:49 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 115.619 secs ago) in=14 out=432
Jan 1 14:51:50 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=31892, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<EKx3NxWbAcDENAJY>
Jan 1 14:52:31 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=31918, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<r0TiORWbBMDENAJY>
Jan 1 14:53:02 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=31941, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<hpW6OxWbBsDENAJY>
Jan 1 14:53:43 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=31961, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<mXItPhWbCMDENAJY>
Jan 1 14:54:23 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=31985, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<UMyYQBWbCsDENAJY>
Jan 1 14:55:05 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32014, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<+dAQQxWbDMDENAJY>
Jan 1 14:55:45 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32041, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<XGdvRRWbDsDENAJY>
Jan 1 14:56:25 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32068, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<kpTcRxWbEMDENAJY>
Jan 1 14:56:54 mx dovecot: imap-login: Disconnected (tried to use disallowed plaintext auth): user=<mail@cliffponder.com>, rip=172.105.80.20, lip=172.31.65.246, session=<VlqVSRWbMuusaVAU>
Jan 1 14:56:55 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 304.873 secs ago) in=14 out=432
Jan 1 14:57:06 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32116, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<T4RJShWbE8DENAJY>
Jan 1 14:57:32 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 301.198 secs ago) in=14 out=432
Jan 1 14:57:47 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32136, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<6cfBTBWbFsDENAJY>
Jan 1 14:58:04 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 301.670 secs ago) in=14 out=432
Jan 1 14:58:27 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32165, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<oVEdTxWbGcDENAJY>
Jan 1 14:58:30 mx dovecot: imap-login: Disconnected (no auth attempts in 95 secs): user=<>, rip=196.52.2.88, lip=172.31.65.246, TLS: Disconnected, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<oEpMTxWbEsDENAJY>
Jan 1 14:58:30 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 124.683 secs ago) in=14 out=432
Jan 1 14:58:30 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 42.560 secs ago) in=14 out=432
Jan 1 14:58:30 mx dovecot: imap-login: Disconnected (no auth attempts in 26 secs): user=<>, rip=196.52.2.88, lip=172.31.65.246, TLS: Disconnected, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<LFBMTxWbGMDENAJY>
Jan 1 14:58:30 mx dovecot: imap-login: Disconnected (no auth attempts in 58 secs): user=<>, rip=196.52.2.88, lip=172.31.65.246, TLS: Disconnected, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<vlFMTxWbFcDENAJY>
Jan 1 14:58:30 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 205.154 secs ago) in=14 out=432
Jan 1 14:58:30 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 3.014 secs ago) in=14 out=432
Jan 1 14:58:30 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 84.007 secs ago) in=14 out=432
Jan 1 14:58:30 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 287.170 secs ago) in=14 out=432
Jan 1 14:58:30 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 165.418 secs ago) in=14 out=432
Jan 1 14:58:30 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 246.584 secs ago) in=14 out=432
Jan 1 15:02:23 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32559, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<SkosXRWbHsDENAJY>
Jan 1 15:02:23 mx dovecot: imap-login: Disconnected (tried to use disallowed plaintext auth): user=<mail@cliffponder.com>, rip=172.105.80.20, lip=172.31.65.246, session=<kTAwXRWbBu6saVAU>
Jan 1 15:02:53 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32577, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<AYD6XhWbIcDENAJY>
Jan 1 15:04:04 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32735, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<xuA5YxWbJcDENAJY>
Jan 1 15:04:04 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32737, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<weA5YxWbJsDENAJY>
Jan 1 15:04:05 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32740, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<20ZHYxWbKMDENAJY>
Jan 1 15:04:24 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32757, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<ypxdZBWbKcDENAJY>
Jan 1 15:04:24 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=32758, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<9qNdZBWbK8DENAJY>
Jan 1 15:04:53 mx dovecot: imap(mail@cliffponder.com): Connection closed (IDLE finished 47.154 secs ago) in=44 out=847
Jan 1 15:04:53 mx dovecot: imap-login: Disconnected (no auth attempts in 30 secs): user=<>, rip=196.52.2.88, lip=172.31.65.246, TLS handshaking: SSL_accept() syscall failed: Success, session=<o3sfZhWbKsDENAJY>
Jan 1 15:04:53 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=303, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<Z8IhZhWbNMDENAJY>
Jan 1 15:06:02 mx dovecot: imap(mail@cliffponder.com): Connection closed (UID SEARCH finished 68.853 secs ago) in=404 out=3034
Jan 1 15:06:02 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 188.450 secs ago) in=14 out=432
Jan 1 15:06:02 mx dovecot: imap(mail@cliffponder.com): Connection closed (UID SEARCH finished 68.815 secs ago) in=431 out=2885
Jan 1 15:06:02 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 98.055 secs ago) in=14 out=432
Jan 1 15:06:02 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 218.710 secs ago) in=14 out=432
Jan 1 15:06:02 mx dovecot: imap(mail@cliffponder.com): Connection closed (LIST finished 98.057 secs ago) in=14 out=432
Jan 1 15:06:02 mx dovecot: imap(mail@cliffponder.com): Connection closed (IDLE finished 68.339 secs ago) in=44 out=830
Jan 1 15:07:39 mx dovecot: imap-login: Login: user=<mail@cliffponder.com>, method=PLAIN, rip=196.52.2.88, lip=172.31.65.246, mpid=404, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits), session=<I8YHcBWbQMDENAJY>
Jan 1 15:10:44 mx dovecot: imap-login: Disconnected (tried to use disallowed plaintext auth): user=<mail@cliffponder.com>, rip=172.105.80.20, lip=172.31.65.246, session=<RaASexWbrIOsaVAU>