MDaemon Technologies, Ltd.

Paul

1/11/25, 7:31 PM

Hello,

Trying to understand what this connection is doing.

SMTP sessions and IMAP sessions in same log shows emails being received and users logging in and retrieving emails, which is prettry straight forward. The POP3 session, on the other hand, is little vague. What is this connection doing?

Also, what is the difference between INBOUND message, INCOMING message, Local message?

Local message, I thought was for internal messages, but it shows outside address.

and lastly, would there be a way to log by session also? the all log is very helpful in searching and for research but it gets confusing as some sessions are mixed with others and it hard to tell which session, a message belongs to.

Any help would be greatly appreciated.

Fri 2025-01-10 01:38:03.868: ----------
Fri 2025-01-10 01:38:05.800: Session 13305050; child 0001
Fri 2025-01-10 01:38:05.800: Accepting POP3 connection from 87.250.235.147:54688 to Removed:110
Fri 2025-01-10 01:38:05.800: Location Screen says connection is from Russia, Europe
Fri 2025-01-10 01:38:05.800: --> +OK Removed.com POP3 MDaemon 24.5.2 ready <MDAEMON-F202501100138.AA3805800MD7057@Removed.com>
Fri 2025-01-10 01:38:05.934: <-- USER Removed.Removed@Removed.com
Fri 2025-01-10 01:38:05.934: --> +OK Removed.Removed@Removed.com... User ok
Fri 2025-01-10 01:38:06.068: <-- PASS ******
Fri 2025-01-10 01:38:06.072: Authenticated as Removed.Removed@Removed.com
Fri 2025-01-10 01:38:06.090: --> +OK Removed.Removed@Removed.com's mailbox has 3846 total messages (778374204 octets)
Fri 2025-01-10 01:38:06.224: <-- UIDL
Fri 2025-01-10 01:38:06.224: --> +OK
Fri 2025-01-10 01:38:06.224: Sending UIDL response (not logged)
Fri 2025-01-10 01:38:06.903: <-- QUIT
Fri 2025-01-10 01:38:06.904: --> +OK Removed.Removed@Removed.com Removed.com POP3 Server signing off (3846 messages left)
Fri 2025-01-10 01:38:06.904: POP3 session complete (Bytes in/out: 69/198372)

3
Posts

14
Views

A

Arron Staff

1/12/25, 8:48 AM

The connection is checking to see if there are any messages that the client has not downloaded.

>Also, what is the difference between INBOUND message, INCOMING message, Local message?

I'm not sure I'm understanding what you are asking, but I'll give it a shot. If this does not answer your question, please provide more information.

MDaemon's Inbound queue is where inbound messages are placed. These messages could be received via SMTP or ActiveSync. At this point there is a message file (MSG) and a control file (CTE). When a message is processed from the inbound queue it can go to the deferred queue whose only purpose is to delay the delivery of email. Messages that will be delivered to local mailboxes, lists, gateways, etc, are placed into the local queue. Messages that will be delivered to external mailboxes are placed into the Remote queue.

You can have MDaemon log each service into its own file. (Server Settings / Logging / Log Mode, Log each service into a separate log file). This should make it easier to read the sessions. IMAP sessions, because the can last for so long, will still be split up.

You can also enable the options for Log ID strings in mail sesssion logs (Server Settings / Logging / More Settings), this will add an ID to each session so that it is easier to identify a single session in the logs.

The option to use colors when displaying mail session logs can also make it easier to ready the log if you are looking at in in the UI. It will not help if you are opening the log files in a text editor.

If you are looking for log snippets for a specific message, you can also search for the message in Remote Administration (Messages and Queues / Message Indexing / Message Search) Searching for messages will be faster if you have indexing enabled. When a message is returned in the search results, you can double click on it to see the message and the log transcripts associated with the message.

P

Paul

1/12/25, 11:58 AM

Thank you so much your detailed explanation.

Really appreciate it!

Help reading log file