1

Topic: Information/logs about deleted emails

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 9.4
- Linux/BSD distribution name and version: RHEL6.3
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx):Apache
- Manage mail accounts with iRedAdmin-Pro?
- Related log if you're reporting an issue:
====

Hi,
One of user is complaining that all his previous emails are missing from the mailbox. I don't see any mails in the file system also. Is there a way to check (logs) whether the mails were deleted or expunged by anyone.

Thanks in advance..
Divakar

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Information/logs about deleted emails

What do you mean "previous emails"?

3

Re: Information/logs about deleted emails

All the mails prior to 12PM today are missing..

4

Re: Information/logs about deleted emails

Did you see any related log about those "previous emails" in Postfix log file?

5

Re: Information/logs about deleted emails

Yes.. The user had large number of mails in his mailbox.
To simply put my ask - If an email is deleted, is it recorded anywhere?

6

Re: Information/logs about deleted emails

I mean, check Postfix log file to see whether there's any email sent to this user, or delivered.

bmdivakar wrote:

To simply put my ask - If an email is deleted, is it recorded anywhere?

You have to update Dovecot config file to log this action:
http://wiki2.dovecot.org/Plugins/MailLog