store | blogs | forums | twitter | facebook | wiki | downloads | support portal
Atomic Secure Linux
It is currently Sun Aug 18, 2019 5:09 pm

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 7 posts ] 
Author Message
 Post subject: log of mail deletions
Unread postPosted: Thu Apr 09, 2015 10:20 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue Jan 23, 2007 10:18 am
Posts: 116
Was just wondering if Plesk on Linux kept any logfile as to mailbox deletion of contents.


An imap client is missing some mail, I'm thinking he may have deleted it from his iphone, not sure if I have anything to tell me when/if this occurred.


Top
 Profile  
Reply with quote  
 Post subject: Re: log of mail deletions
Unread postPosted: Fri Apr 10, 2015 6:10 am 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 8329
Location: earth
If you had auditd enabled that may have logged a delete action. That would be in /var/log/audit/


Top
 Profile  
Reply with quote  
 Post subject: Re: log of mail deletions
Unread postPosted: Fri Apr 10, 2015 6:24 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jan 23, 2007 10:18 am
Posts: 116
no such luck, empty folder


Top
 Profile  
Reply with quote  
 Post subject: Re: log of mail deletions
Unread postPosted: Fri Apr 10, 2015 9:33 am 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 8329
Location: earth
Not much else logged then, at most you'll get a successful login record from the imap server, but nothing about what the user did. Any chance the user had multiple devices connecting to the account?


Top
 Profile  
Reply with quote  
 Post subject: Re: log of mail deletions
Unread postPosted: Fri Apr 10, 2015 11:59 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jan 23, 2007 10:18 am
Posts: 116
At least outlook 2010 and an iphone, maybe another device too.

Many folders, folders exist, contents gone. No archive file or deleted items to be found.

Was able to restore, but still... I'd like to know why they went to begin with.

This auditd, how does it work to give me more info in future. (googling now)


Top
 Profile  
Reply with quote  
 Post subject: Re: log of mail deletions
Unread postPosted: Fri Apr 10, 2015 12:37 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 8329
Location: earth
So an observation Ive had here, the iphone clients (and many others) default to using POP. If that is the case (and it will be logged as a POP connection) then what could be happening is that the mail is being downloaded to the specific phone, which is going to delete the message off the server unless it is configured not to.


Top
 Profile  
Reply with quote  
 Post subject: Re: log of mail deletions
Unread postPosted: Fri Apr 10, 2015 12:39 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue Jan 23, 2007 10:18 am
Posts: 116
If he has another device, that may be possible, but the iphone I'm aware of is definitely set to imap.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group