Tracemail

Tracemail allows you to analyze log traffic of received (Received E-mails) and sent (Sent E-mails) e-mails. Furthermore, it shows information related to POP, IMAP and Webmail services access in real time (Access Info). This tool also flags up any issues related to a specific account or email.

Tracemail keeps a data history up to 30 days.

 

To view the log register:

  1. Click on the Tracemail entry in the control panel sidebar;
  2. Select the kind of data that you want to check;
  3. Enter the name of the domain whose log details you want to check;
  4. Enter the name of an email account whose log details you want to check.
  5. Enter a date

Once the fields are filled, you will see the search results. For each result, you will be able to view its outcome, the date/time of the event and other useful information that you can use to analyze the data.

Each result can be exported in PDF format individually, and you can export the overall report of all the results in CSV format.

 

Access info

By selecting the Access item in the Action field, the logins and logouts of users within the POP, IMAP and Webmail services will be shown. The accesses are categorised as "Successful" and "Failed". At the time of logout from POP and IMAP sessions, the amount of traffic generated, the number of messages deleted within the session and the email client used by the user to connect to the service are recorded.

The details shown by Tracemail in the login section are as follows:

Status Description
Action Type of action record (e.g. login, logout)
Login Date and time of the action (e.g. 27/8/2019, 12:51:36)
Logout Date and time of the action (e.g. 27/8/2019, 12:51:36)
User Username of whom performed the action (e.g. john.doe@moximail.net)
Protocol Access protocol to MoxiMail systems (e.g. IMAP)
msg deleted imap Number of messages deleted during action (0)
Extrapolated messages imap Number of messages removed during action (0)
Imap msg trashed Number of messages discarded during action (0)
Customer Email suite used by the user (e.g. Microsoft Outlook 2016)
Server Server where the action takes place (e.g. pop06) **
Local IP IP address of the MoxiMail server where the action takes place (e.g. 185.97.217.80)
Session Unique ID of the session in which the action takes place (e.g. ImlxDheRE95bj8Qu)
Remote IP IP address of the server where the user is connected from (e.g. 91.143.196.46)
In traffic Incoming traffic generated by the event (e.g. 1 KB)
Out of traffic Outgoing traffic generated by the event (e.g. 1 KB)

Failed login

For failed logins, the reason is recorded (e.g. incorrect password, disabled user, unauthorized IP, invalid OTP). In case of unsuccessful login, the cause is indicated under Access error:

   
authentication failed The password entered is not correct
many connections The user has simultaneously exceeded the maximum number of connections
unauthorized ip The user is trying to log in from an unauthorized IP
disabled by user The user is disabled

Connection error, timeouts, or incorrect username errors are not present in the access list.

 

Received E-mails

By selecting the Received E-mails item, you can view all the emails received by a specific domain or account. Received emails are categorized into acceptedquarantinedrejected.

For each result, various details are indicated, including the delivery status of the message, the folder in which it was delivered, if it was forwarded to another email address, if an automatic reply was sent, or if a message filtering rule was applied. The results of the Antivirus and Antispam tests are also provided.

For rejected or quarantined messages, you can check the reasons why the Email Security system has decided not to deliver the email message to the user.

Messages marked as spam that are received from global mail server markets will not be reported.

 

Locate Message

For each result listed, it is also possible to use the Locate Message function which allows you to locate the folder where the message is currently located, including the trash, or whether the message has been deleted or downloaded via POP protocol.

The locate message function may not be available if the recipient's mailbox has set up an outward forwarding of messages.

 

Sent E-mails

By selecting the Sent E-mails item it is possible to view all the emails sent from the domain or account indicated and determine, in real time, whether a message just sent has already been delivered or not.

The Sent E-mails function also reports any messages blocked by the MoxiMail Email Security antispam and antivirus system. The sending of these messages is blocked to prevent the spread of unwanted or risky material and to keep the reputation of our SMTP sending systems high.

For each result, various details are indicated including sender and recipient, subject and size of the message, server and port used for sending. The mails are divided into deliveredrejectedqueued to the recipient server.

 

PDF report

The PDF Report function allows you to generate a document containing all the detailed information relating to the individual results of Accesses, Received E-mails, Sent E-mails, which can be sent to MoxiMail technical support or shared with customers and IT contacts.

Tracemail is a tool designed and created by the MoxiMail research and development team. In its implementation, the policies of the GDPR were respected, thus safeguarding the privacy of users.

 

  • Tracemail, Panel

Was this answer helpful?

0 Users Found This Useful