The Mail log contains information about individual messages processed by Kerio MailServer. The log includes all message types:
incoming messages,
outgoing messages,
mailing list messages,
DSN (Delivery Status Notification).
All messages received via SMTP or HTTP protocols or downloaded via POP3. Here is an example of two log lines associated with one message as well as description of individual items:
[30/Nov/2005 17:57:14] Recv: Queue-ID:
438dd9ea-00000000,[30/Nov/2005 17:57:14] Recv:
Queue-ID: 438dd9ea-00000000,Service: SMTP, From:
<jwayne@company.com>, To: <jwayne@company.com>,Size:
1229, User: jwayne@company.com, Sender-Host: 195.39.55.2,SSL:
yes
[30/Nov/2005 17:57:15] Sent: Queue-ID:
438dd9ea-00000000,Recipient:
<wsmith@company.com>, Result: delivered, Status: 2.0.0
[30/Nov/2005 17:57:14]
— the date
and time when the message was delivered or sent.
Recv/Sent
— this section provides
information whether the server has already received the message or the message
is just being sent. The status can therefore be Sent
or
Recv
(i.e. Received).
Queue-ID: 438d6fb6-00000003
— the
number generated by the server in the queue of outgoing messages. It is an
identifier which uses identical numbers for all log lines associated with one
messages. Each message is first received by the server, then it is sent. This
implies that at least two log lines must belong to each message (for reception
and sending). Moreover, each message can be delivered to multiple users (each
addressee has a special log line).
Service: HTTP
— protocol, that has
been used by the server to receive the message (HTTP, SMTP). This information
is included in incoming messages only. The information is not displayed for
outgoing messages, it would be meaningless. All outgoing messages are sent by
SMTP.
From: <jwayne@company.com>
—
email address of the sender.
To: <jwayne@company.com>
—
email address of the recipient.
Size: 378
— size of the message in
bytes.
User: jwayne@company.com
— user
account from which the message was sent.
Sender-Host: 195.39.55.2
—
IP address of
the computer from which the message has been sent.
SSL: yes
— informs whether the
connection is SSL-secured (displayed for SMTP only).
Recipient: <thenry@company.com>
— email address of the addressee.
Result: delivered
— information
about the result of the delivery process.
Status: 2.0.0
— code of the SMTP
response (for detailed information, see
RFC 821 and 1893).
If the code starts with the 2 digit, the message was delivered successfully. If
the code starts with the 4 or the 5 digit, the message delivery failed.
Messages of this type are usually generated by Kerio MailServer. If the delivery fails, the sender receives a delivery status notification (DSN).
[30/Nov/2005 15:31:40] Recv: Queue-ID:
438db7cc-00000000,Service: DSN, From: <>, To:
<jwayne@company.com>, Size: 1650,Report:
failed
[30/Nov/2005 15:31:40]
— the date
and time when the message was generated
Recv:
— this section provides
information whether the server has already received the message or the message
is just being sent. The status can therefore be Sent
or
Received
.
Queue-ID: 438db7cc-00000000
— the
number generated by the server in the queue of outgoing messages.
Service: DSN
— Delivery
Status Notification; messages generated by Kerio
MailServer.
From: <>
— this item is empty
because the message was generated by the mail server.
To: <jwayne@company.com>
—
email address of the recipient.
Size: 1650
— message size in bytes.
Report: failed
— the type of
notification.
The Mail log contains all mailing list messages. The individual postings, as well as mailing list control messages are logged
[30/Nov/2005 19:09:11] Recv: Queue-ID:
438deac7-00000009,Service: List, From:
<mailinglist-bounce@company.com>, To:<jwayne@company.com>,
Size: 3302, Answer: subscribe response
[30/Nov/2005 19:09:11]
— date and
time when the message was received.
Recv:
— this section provides
information whether the server has already received the message or the message
is just being sent. The status can therefore be Sent
or
Received
.
Queue-ID: 438deac7-00000009
— the
number generated by the server in the queue of outgoing messages.
Service: List
— mailing list flag.
<discussion@company.com>
—
email address of the sender.
To: <jwayne@company.com>
—
email address of the recipient.
Size: 1397
— size of the message in
bytes.
Answer: subscribe response
— type of
message.
Messages generated by a user filter (e.g. autoreply).