Hi guys I know how to view the mail log file, but it only shows the current days log. How do I view previous days? thanks and love your guys work
logrotate is most likely rotating your logs for you. To view yesterday's log, use "more /var/log/mail.log.0". To view, for example the log from the day before yesterday, try "zcat /var/log/mail.log.1.gz | more".
Thanks that worked great. Now the next question. How can I see: 1) When a user downloaded mail 2) If there was any mail downloaded 3) What mail was downloaded. Thanks
1) You can see when user's downloaded mail by looking for entries like: Nov 28 06:25:23 gx courierpop3login: LOGIN, [email protected], ip=[::ffff:69.66.44.241] followed by a line like: Nov 28 06:25:24 gx courierpop3login: LOGOUT, [email protected], ip=[::ffff:69.66.44.241], top=0, retr=4091, time=1 2) There's really no way that I'm aware of to tell if any messages were downloaded, or which ones were downloaded. I suppose you could look at the time difference between the LOGIN and LOGOUT, and assume that if the connect period was only a second then the user probably didn't download 10 MB of messages, but even that vague assumption would be unprovable.
