Results 1 to 2 of 2

Thread: Is there a quick way to determine the source of a message?

  1. #1
    Join Date
    Jul 2010
    Northeastern Illinois
    Rep Power

    Default Is there a quick way to determine the source of a message?

    Going through our zimbra.log today and looking for potential problems, I noticed a number of messages being queued up for unreachable servers in places where I doubt we have any legitimate business activity. Using grep, I can see all of the resend attempts and disconnection by hex characters, or by the questionable domains. What I would LIKE to be able to figure out is how to trace which machine might possibly be sending messages, preferably by internal IP address. Is it necessary to install additional logging tools? Any ideas?

  2. #2
    Join Date
    Jun 2008
    Berkeley, CA
    Rep Power


    Usually you can search by messageID or other details, to locate the original injection of the message. However, if the messages have been sitting in the queue for a while, you might have to look at older logs, or the logs may even have been rotated out of existence. You might find some older info in /var/log/maillog or in /opt/zimbra/log/mailbox.log.

    Also if you can locate the actual message (not sure where it's stored, shouldn't be hard to find, though), you can read the Received: headers assuming it was injected via SMTP. If it was injected via ZCO or ZWC, it *may* have have an X-Originating-IP header, provided you don't haven't turned it off in the Admin console.

Similar Threads

  1. Emails bouncing with "Error Text: 401,'null'"
    By sholden in forum Zimbra Connector for Outlook
    Replies: 27
    Last Post: 08-20-2008, 04:59 PM
  2. Sits at loading screen?
    By moshen in forum General Questions
    Replies: 8
    Last Post: 02-19-2008, 01:15 PM
  3. Installation Problem
    By Ju-Pao in forum Installation Help
    Replies: 39
    Last Post: 05-15-2007, 02:54 PM
  4. Installs but won't start on Linux FC6
    By iain in forum General Questions
    Replies: 6
    Last Post: 03-29-2007, 10:19 AM
  5. M3 problem with shares
    By titangears in forum Users
    Replies: 4
    Last Post: 01-12-2006, 12:01 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts