The Mail log contains information about individual messages processed by Kerio MailServer. The log includes all message types:
incoming messages,
outgoing messages,
mailing list messages,
DSN (Delivery Status Notification).
All messages received via SMTP or HTTP protocols or downloaded via POP3. Here is an example of two log lines associated with one message as well as description of individual items:
[30/Nov/2005 17:57:14] Recv: Queue-ID: 438dd9ea-00000000,[30/Nov/2005 17:57:14] Recv: Queue-ID: 438dd9ea-00000000,Service: SMTP, From: <jwayne@company.com>, To: <jwayne@company.com>,Size: 1229, User: jwayne@company.com, Sender-Host: 195.39.55.2,SSL: yes
[30/Nov/2005 17:57:15] Sent: Queue-ID: 438dd9ea-00000000,Recipient: <wsmith@company.com>, Result: delivered, Status: 2.0.0
[30/Nov/2005 17:57:14]
— the date and time when the message was delivered or sent.
Recv/Sent
— this section provides information whether the server has already received the message or the message is just being sent. The status can therefore be Sent
or Recv
(i.e. Received).
Queue-ID: 438d6fb6-00000003
— the number generated by the server in the queue of outgoing messages. It is an identifier which uses identical numbers for all log lines associated with one messages. Each message is first received by the server, then it is sent. This implies that at least two log lines must belong to each message (for reception and sending). Moreover, each message can be delivered to multiple users (each addressee has a special log line).
Service: HTTP
— protocol, that has been used by the server to receive the message (HTTP, SMTP). This information is included in incoming messages only. The information is not displayed for outgoing messages, it would be meaningless. All outgoing messages are sent by SMTP.
From: <jwayne@company.com>
— email address of the sender.
To: <jwayne@company.com>
— email address of the recipient.
Size: 378
— size of the message in bytes.
User: jwayne@company.com
— user account from which the message was sent.
Sender-Host: 195.39.55.2
— IP address of the computer from which the message has been sent.
SSL: yes
— informs whether the connection is SSL-secured (displayed for SMTP only).
Recipient: <thenry@company.com>
— email address of the addressee.
Result: delivered
— information about the result of the delivery process.
Status: 2.0.0
— code of the SMTP response (for detailed information, see RFC 821 and 1893). If the code starts with the 2 digit, the message was delivered successfully. If the code starts with the 4 or the 5 digit, the message delivery failed.
Messages of this type are usually generated by Kerio MailServer. If the delivery fails, the sender receives a delivery status notification (DSN).
[30/Nov/2005 15:31:40] Recv: Queue-ID: 438db7cc-00000000,Service: DSN, From: <>, To: <jwayne@company.com>, Size: 1650,Report: failed
[30/Nov/2005 15:31:40]
— the date and time when the message was generated
Recv:
— this section provides information whether the server has already received the message or the message is just being sent. The status can therefore be Sent
or Received
.
Queue-ID: 438db7cc-00000000
— the number generated by the server in the queue of outgoing messages.
Service: DSN
— Delivery Status Notification; messages generated by Kerio MailServer.
From: <>
— this item is empty because the message was generated by the mail server.
To: <jwayne@company.com>
— email address of the recipient.
Size: 1650
— message size in bytes.
Report: failed
— the type of notification.
The Mail log contains all mailing list messages. The individual postings, as well as mailing list control messages are logged
[30/Nov/2005 19:09:11] Recv: Queue-ID: 438deac7-00000009,Service: List, From: <mailinglist-bounce@company.com>, To:<jwayne@company.com>, Size: 3302, Answer: subscribe response
[30/Nov/2005 19:09:11]
— date and time when the message was received.
Recv:
— this section provides information whether the server has already received the message or the message is just being sent. The status can therefore be Sent
or Received
.
Queue-ID: 438deac7-00000009
— the number generated by the server in the queue of outgoing messages.
Service: List
— mailing list flag.
<discussion@company.com>
— email address of the sender.
To: <jwayne@company.com>
— email address of the recipient.
Size: 1397
— size of the message in bytes.
Answer: subscribe response
— type of message.
Messages generated by a user filter (e.g. autoreply).