Results 1 to 5 of 5

Thread: [SOLVED] How to find out who was logging by SMTP with password?

  1. #1
    Join Date
    Oct 2009
    Location
    www
    Posts
    14
    Rep Power
    5

    Default [SOLVED] How to find out who was logging by SMTP with password?

    Hello,
    How (which log, what to search for) can I find who was relaying emails through our Zimbra? Either through webmail or using authenticated connection? Which log file contains such info and how can I see "who" , "from where" and "when" was logging in?

    Regards,
    Anton.

  2. #2
    y@w's Avatar
    y@w
    y@w is offline Moderator
    Join Date
    Jan 2008
    Posts
    658
    Rep Power
    8

    Default

    /var/log/zimbra.log will tell you who logs in via SMTP (grep for saslauthd) and /opt/zimbra/log/audit.log will tell you who logs in via the web interface, etc.

  3. #3
    Join Date
    Oct 2009
    Location
    www
    Posts
    14
    Rep Power
    5

    Default

    Thank you.

    Someone has sent a lot of emails through us on 26.Nov, but zimbra.log (with it's rotations) dates back to just 30.Nov. Is it possible to get the any useful info from other logs, which goes a bit more in the past - mail.*, messages?

  4. #4
    y@w's Avatar
    y@w
    y@w is offline Moderator
    Join Date
    Jan 2008
    Posts
    658
    Rep Power
    8

    Default

    If you are using Zimbra 5.0, you could do a zmmsgtrace for that day to see where the emails went and who sent them. I'm not sure what other useful information you would find though.

  5. #5
    ArcaneMagus's Avatar
    ArcaneMagus is offline Moderator
    Join Date
    Feb 2007
    Location
    Portland, OR
    Posts
    1,147
    Rep Power
    10

    Default

    The mail.* files, if they go back further then zimbra.log, might contain useful information about the postfix lines, messages might contain the sasl lines.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Samba password sync
    By lpizzina in forum Administrators
    Replies: 6
    Last Post: 07-11-2010, 08:08 PM
  2. Logging of Password Changes
    By dionrowney in forum Administrators
    Replies: 2
    Last Post: 01-29-2009, 03:32 PM
  3. SMTP transaction logging
    By olliemaitland in forum Administrators
    Replies: 0
    Last Post: 07-11-2008, 05:02 AM
  4. Cant send through smtp, asking for password
    By johnshaft in forum Administrators
    Replies: 2
    Last Post: 08-01-2007, 12:36 AM
  5. need advice on configuring zimbra to work with fax server
    By pheonix1t in forum Administrators
    Replies: 0
    Last Post: 07-11-2007, 07:46 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •