Webmail session log | MDaemon Technologies Community Forum
  1. Forum
  2. MDaemon
  3. Webmail session log

Webmail session log

  • P

    Hello,

    One of our users email got compromised and we are trying to see if there is a log that logs webmail session.

    We know the IP and tried searching through "ALL" log but couldn't find anything.

    We are basically trying to figure out what happened after they got access.

    Thank you.

    0 likes
  • A

    Check the WDaemon and Webmail logs in the MDaemon\Logs directory.

    You could also use a tool like Notepad++ and search all the log files in the MDaemon\Logs directory for the IP address.

    --
    Arron Caruth

    0 likes
  • P

    Thank you for your reply.

    The funny is thing is I can't seem to locate the IP anywhere on the logs.

    Also, when a user logs into webmail, on the advanced settings, there is a past 30 web sign-on's listed.

    Where can I see that as a administrator?

    Thank you.

    0 likes
  • P

    Also, our Wdaemon and Webmail logs are empty. However, all logs are checked in the setting.

    would it be a setting we didnt enable?

    0 likes
  • P

    Please ignore the last post. The webmail log was unchecked.

    Thank you

    0 likes
  • A

    It should have been enabled by default, but you may have disabled it.

    Go to Setup / Server Settings / Logging / Settings, is the box for "Log full webmail/HTTP/IM activity" checked?  If its not, check the box, click OK.  Login to webmail and see if a WDaemon and Webmail log are created.

     

    --
    Arron Caruth

    0 likes
  • P

    Thank you and sorry for the troubles.

    0 likes
  • A

    No worries.

    --
    Arron Caruth

    0 likes
Please login to reply to this topic!

Participants