Koozali.org: home of the SME Server

Email Message Tracking

Offline CmdLn

  • ***
  • 57
  • +0/-0
Email Message Tracking
« on: September 10, 2015, 08:32:25 AM »
How can I track an email message? Specifically how can I tell if/when it arrived and when it was delivered to the users mailbox?

Offline stephdl

  • *
  • 1,523
  • +0/-0
    • Linux et Geekeries
Re: Email Message Tracking
« Reply #1 on: September 10, 2015, 09:41:50 AM »
See the /var/log/qpsmtpd/current log
See http://wiki.contribs.org/Koozali_Foundation
irc : Freenode #sme_server #sme-fr

!!! Please write your knowledge to the Wiki !!!

Offline mmccarn

  • *
  • 2,656
  • +10/-0
Re: Email Message Tracking
« Reply #2 on: September 10, 2015, 01:17:47 PM »
The header of an email message contains a record of the servers that the message has passed through - examining the email in question should tell you quite a bit.

Here's an article with more detail:
https://www.arclab.com/en/kb/email/how-to-read-and-analyze-the-email-header-fields-spf-dkim.html

The qpsmtpd log files would also give you information on messages that had been blocked by your server for whatever reason (the sending server is listed on an RBL, or spamassassin is convinced that the message was junk, etc).  If necessary, the qpsmtpd logs could be used to confirm that the message you're examining hasn't been intentionally manipulated after receipt.

Offline CmdLn

  • ***
  • 57
  • +0/-0
Re: Email Message Tracking
« Reply #3 on: September 11, 2015, 11:04:33 AM »
I was able get some info about the message from a specific sender with this command in /var/log/qpsmtpd

grep "RCPT TO:<recipient@my.domain>" * -B 4 -A 10 | grep -A 15 "MAIL FROM:<address@senders.domain>" | tai64nlocal