Help answer threads with 0 replies.
Go Back > Forums > Linux Forums > Linux - Newbie
User Name
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!


  Search this Thread
Old 02-03-2014, 04:44 PM   #1
LQ Newbie
Registered: Feb 2014
Posts: 10

Rep: Reputation: Disabled
Where are incoming mails logged?

I am really a beginner with Linux.

I have located /var/log/maillog

As I understand it this shows mail being sent through this server? For example if I authenticate as a valid user on the system and send an email I will see a log entry here?

If I send an email from say my hotmail account to a domain which is handled by this server it gets put into the mailbox for that account (according to my settings in /etc/mail/virtusertable) will it be logged in /var/log/maillog? I suppose I don't know if sendmail (this system is I think running sendmail) handles receiving emails as well.

Many thanks
Old 02-03-2014, 04:53 PM   #2
Senior Member
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,748

Rep: Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301
Any mail message passing through the mail service on the system will be logged.

There is no difference between a local user sending mail (if it is using the local service for delivery) or a remote connection making a connection for delivery. All messages get logged.

The only time a message ISN'T logged will be when the user client makes a connection to a remote mail service for delivery, or for retrieving mail. Since the local service isn't being contacted, there can be no messages logged.
1 members found this post helpful.
Old 02-03-2014, 04:59 PM   #3
LQ Newbie
Registered: Feb 2014
Posts: 10

Original Poster
Rep: Reputation: Disabled
Ok. Thanks. I can see them coming in.

The problem is that my client's server is sending out hundreds of emails an hour. It is set up for SMTP auth. I think the most likely candidate is a virus on his office Windows machine which is using his Outlook accounts to send the mails.

Another candidate is that someone has got hold of his password and is sending them from elsewhere. Looking at the maillog I think I can see what looks like the IP address of where the user came from : if this is his machine that will answer that one.

However; having changed the passwords for these users I am still seeing dozens of emails going through sendmail. Since they say to=<someaddress rather than from=< I assume they are outward bound? EDIT: yes. Clearing /var/spool/mqueue seems to have dealt with this.


-- Justin Wyllie

Last edited by justinwyllie; 02-03-2014 at 05:31 PM.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Incoming mails + remote backup minim Linux - General 3 04-06-2010 05:16 AM
incoming mails only from particular server senthilvael Linux - Server 0 11-21-2007 02:40 PM
How to get incoming e-mails to go to IMAP inbox? capitalista Linux - Networking 1 12-11-2005 10:50 PM
Incoming mails not working bobcatch Linux - Networking 0 02-24-2005 11:03 AM
No incoming mails gubak Linux - Networking 1 12-06-2004 03:10 AM > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 12:52 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration