Welcome, if you would like to post a comment please register.
We also encourage you to explore all things Zimbra with our team and members of the community.
I have an "ex-employee heard something they weren't supposed to" situation to clean up, and I haven't found anything in the logs yet that suggests the server was broken into.
Is there any *easy* way to determine that a user forwarded a message from their mailbox, without looking through every single sent box?
Put your product and version in your profile/signature - All opinions strictly my own, even though I have an employer these days.
If you [SOLVE] something, please tell everyone how for the archives
And, please... read what people write, and answer the questions they asked, not the ones they didn't.
A forward (and reply for that matter) are simply new messages injected into the system, so you would probably have to do some digging into the users mailbox(es) to actually see what happened.
A forward (and reply for that matter) are simply new messages injected into the system, so you would probably have to do some digging into the users mailbox(es) to actually see what happened.
Well, they are that from *postfix's* point of view, certainly, but *the web client* knows what it did. What the issues are with ZCO and ZMobile, I'm not sure; I know POP and IMAP connections it couldn't figure it out on.
Put your product and version in your profile/signature - All opinions strictly my own, even though I have an employer these days.
If you [SOLVE] something, please tell everyone how for the archives
And, please... read what people write, and answer the questions they asked, not the ones they didn't.
Bugzilla
Wiki
Source
Does Zimbra log *forwards* of messages? 
Linear Mode
