Lawful Intercept: Login (login-intercept) Plugin

Note

This plugin is provided by Dovecot Pro's Lawful Intercept Framework.

This plugin allows capturing of the entire IMAP, POP3 or ManageSieve session, including the authentication commands. This plugin is configured for a Dovecot proxy.

Configuration

login_plugins {
  login_intercept = yes
}

The interception is enabled if Passdb returns a non-empty intercept extra field.

IMPORTANT NOTES

• Passdb ONLY, not userdb
• Currently this fully works only when user is proxied, not on backends. However, it works also on a backend if all connections use SSL/TLS.

Debugging

Normally the login-intercept plugin doesn't log much of anything even in error situations, because we want to avoid making visible which users are being intercepted. For debugging you need to enable intercept_debug.