Finding out who accessed the e-mails

[tilinhonh]

Hi
I had problems with an user emails. The emails disappear sometimes. I think someone may have downloaded the emails. I have already changed the user password, but I have to find out who accessed the email box.

Is there any log where shows who accessed the email box by whathever, IMAP, pop3 or webcliente?

Thanks in advance.

[phoenix]

Have a look in /opt/zimbra/logs/mailbox.log for access details. Messages 'disappear' from Zimbra when someone uses pop3 to access the mailbox and that's the only circumstances when they do.

[mmorse]

go through /opt/zimbra/log and /opt/zimbra/tomcat/logs
*edit:

/opt/zimbra/logs/mailbox.log

no 's' on the end of 'log'

[tilinhonh]

Thank you guys, problem solved.

Best regards,
Tilinho

[phoenix]

go through /opt/zimbra/log and /opt/zimbra/tomcat/logs
*edit:
no 's' on the end of 'log'

Too many fingersss.

[mmorse]

ya know I should just wait 30seconds and refresh before I post-i've been posting just behind but within a minute of you all over the place

[phoenix]

ya know I should just wait 30seconds and refresh before I post-i've been posting just behind but within a minute of you all over the place

OK, I'll stop posting tonight.

[mmorse]

ha, did my 4.5.6 upgades last night so that was why I was up at 2/3am (central us timezone)