Indubitably, you need to check the dovecot logs (could be either /var/ log/maillog or /var/log/dovecot.log depending on your config) for that user. If you see that user logging into the mail system by POP or IMAP, it means that user's machine got the e-mail and the user deleted it. On Jul 28, 2008, at 8:57 AM, Götz Reinicke wrote: > dovecot-1.0.7-2.el5