Help needed to locate an E-Mail

[Götz Reinicke]

Hi Alex,

Alex Neuman schrieb:
> So in the dovecot logs there is absolutely *no* indication of the user 
> reading the mailbox?
> On Jul 29, 2008, at 1:16 AM, Götz Reinicke wrote:
> 
>> we use IMAP only and the user definitively didn't deleted or 
>> downloaded the mail by hand.
> 
>> I'v scaned all of the usere mailboxfiles, and the mails where not there.
> Scanning all the mailboxes only assumes the mails were there to begin with.
> 
> If you eliminate the impossible, whatever remains, however improbable, 
> must be the truth.

I know :)

> Do you know the "from:" and "to:" of the e-mails in question? If you 
> know this, or if you can get the message ID from mailwatch, grep the 
> /var/log/maillog file to see exactly what happened to the message. Can 
> you cut and paste this here?
> 

It's in the original posting, The last sendmail message is "stat=Sent"



[root at mail ~]# grep m6SD9Ted006352 /var/log/maillog

Jul 28 15:09:33 mail sendmail[6352]: m6SD9Ted006352: 
from=<Ludwig at huberverlag.de>, size=60521, class=0, nrcpts=1, 
msgid=<0ADBD67BD6811A4BB2144D805124714D910C85D0 at KAEX1.Dom.Rastatt.de>, 
proto=ESMTP, daemon=MTA, relay=tm14.itroot.de [85.115.30.14]

Jul 28 15:09:39 mail MailScanner[13408]: Logging message m6SD9Ted006352 
to SQL

Jul 28 15:09:39 mail MailScanner[13412]: m6SD9Ted006352: Logged to 
MailWatch SQL

Jul 28 15:09:40 mail sendmail[6411]: m6SD9Ted006352: to=fschnize, 
delay=00:00:10, xdelay=00:00:01, mailer=local, pri=180521, dsn=2.0.0, 
stat=Sent

Regards

Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 420
Fax  +49 7141 969 55 420
E-Mail goetz.reinicke at filmakademie.de

Filmakademie Baden-Württemberg GmbH
Mathildenstr. 20
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016
Vorsitzende des Aufsichtsrats:
Prof. Dr. Claudia Hübner
Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium

Geschäftsführer:
Prof. Thomas Schadt