On Mar 22, 2007, at 1:47 PM, James F. Jarrett wrote:
A teacher at our school just came to me and said a student claimed to
have sent her an e-mail that she did not receive. I did a search
of the
smtp log and found these entries:
@4000000045f187171dd611b4 CHKUSER accepted sender: from <xxxxxxxx::>
remote <mail1.ccds.charlotte.nc.us:unknown:10.64.6.9> rcpt <> : sender
accepted
@4000000045f187171e46b5a4 CHKUSER accepted rcpt: from <xxxxxxx::>
remote
<mail1.ccds.charlotte.nc.us:unknown:10.64.6.9> rcpt
<[EMAIL PROTECTED]> : found existing recipient
(The xxxx and yyyy are the student and teacher's email addresses
respectively). I have two questions:
1: How do I turn this information into a *TIME* of attempted
delivery.
]$ cat ccdlog | tai64nlocal
2007-03-09 11:10:53.500568500 CHKUSER accepted sender: from
<xxxxxxxx::> remote <mail1.ccds.charlotte.nc.us:unknown:10.64.6.9>
rcpt <> : sender accepted
2007-03-09 11:10:53.507950500 CHKUSER accepted rcpt: from <xxxxxxx::>
remote <mail1.ccds.charlotte.nc.us:unknown:10.64.6.9> rcpt
<[EMAIL PROTECTED]> : found existing recipient
2: The teacher says she never got the mail, how do I figure out what
happened to it?
Have you already done a recursive grep through the teacher's Maildir
looking for <xxxxxxx::>?
It's probably not a bad idea to crosscheck with /var/log/qmail/clamd/
current and spamd/current to see if either of those logs show the
student's mail being rejected or tagged as spam.
Oddly enough, we were running an older version of the toaster, and we
updated it to the current version that very evening (About 6:00 pm)
but
that was *AFTER* this took place.
I only mention this as I had heard that the older version of the
toaster
we were running had much poorer logging than the new one, and is the
main reason we updated.
-Steve
--
If this were played upon a stage now, I could condemn it as an
improbable fiction. - Fabian, Twelfth Night, III,v
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
