English
Chinese (Simplified)
French
German
Italian
Japanese
Russian
Spanish
Vietnamese
Webmail session log
-
Hello,
One of our users email got compromised and we are trying to see if there is a log that logs webmail session.
We know the IP and tried searching through "ALL" log but couldn't find anything.
We are basically trying to figure out what happened after they got access.
Thank you.
-
Arron Staff
Check the WDaemon and Webmail logs in the MDaemon\Logs directory.
You could also use a tool like Notepad++ and search all the log files in the MDaemon\Logs directory for the IP address.
-
Thank you for your reply.
The funny is thing is I can't seem to locate the IP anywhere on the logs.
Also, when a user logs into webmail, on the advanced settings, there is a past 30 web sign-on's listed.
Where can I see that as a administrator?
Thank you.
-
Also, our Wdaemon and Webmail logs are empty. However, all logs are checked in the setting.
would it be a setting we didnt enable?
-
Please ignore the last post. The webmail log was unchecked.
Thank you
-
Arron Staff
It should have been enabled by default, but you may have disabled it.
Go to Setup / Server Settings / Logging / Settings, is the box for "Log full webmail/HTTP/IM activity" checked? If its not, check the box, click OK. Login to webmail and see if a WDaemon and Webmail log are created.
-
Thank you and sorry for the troubles.
-
Arron Staff
No worries.
