1 Topic by HellBilly

  • HellBilly
  • Member
  • Offline
  • Registered: 2017-06-05
  • Posts: 11

Topic: Mailbox access log...

==== Required information ====
- iRedMail version: v0.9.6
- Linux/BSD distribution name and version: Debian Jessie
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hello,

One of my users reported that his mailbox is suddenly empty.
I believe he deleted his emails by mistake.

Is there a log file that can show me specific mailbox access (who accessed / what he did (delete/move email) etc)???

Thanx in advance

Vassilis

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,792

Re: Mailbox access log...

If you have configure like below in Dovecot, you should be able to track it:

plugin {
    ...
    mail_log_events = delete undelete expunge mailbox_delete mailbox_rename
    ...
}

3 Reply by HellBilly (edited by HellBilly 2017-11-21 23:36:12)

  • HellBilly
  • Member
  • Offline
  • Registered: 2017-06-05
  • Posts: 11

Re: Mailbox access log...

Thank you ZhangHuangbin for your quick reply.

In which conf file do I have to add this line?

/etc/dovecot/dovecot.conf?

Regards

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,792

Re: Mailbox access log...

On Linux/OpenBSD, it's /etc/dovecot/dovecot.conf.
FYI: https://docs.iredmail.org/file.locations.html#dovecot

5 Reply by HellBilly

  • HellBilly
  • Member
  • Offline
  • Registered: 2017-06-05
  • Posts: 11

Re: Mailbox access log...

And which log file will contain those events?

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,792

Re: Mailbox access log...

Dovecot log file. FYI:
https://docs.iredmail.org/file.locations.html