missing emails - correction

[Sruli Saurymper]

On 08/09/17 09:18, Sruli Saurymper wrote:
>
>
>
> On 07/09/17 06:26, Liutauras Adomaitis wrote:
>> On 2017 m. rugsėjo 3 d., sekmadienis 16:39:59 EEST Sruli Saurymper wrote:
>>> On 03/09/17 13:41, hede wrote:
>>>> Am Sun, 3 Sep 2017 10:40:03 +0100 schrieb Sruli Saurymper 
>> <sruli at saurymper.com>:
>>>>>>> I have looked at their email client (thunderbird) and roundcube and the
>>>>>>> email is not there, however when I checked the server
>>>>>>> (/var/spool/imap/domain/d/domain.com/n/user/name/) the email is clearly
>>>>>>> there.
>>>> You could check it via telnet / openssl s_client.
>>>>
>>>> Search the web for how to do so. For example:
>>>> openssl s_client -crlf -connect imapserver.example.com:993
>>>> A login imapuser imappassword
>>>> B select INBOX
>>>> C UID SEARCH FROM "somebody"
>>>>
>>>>  -> check if your mail is found
>>>>
>>>> D fetch 123 rfc822.header
>>>>
>>>>  -> if it's mail #123, then check if it's readable
>>>>
>>>> E logout
>>>>
>>>>
>>>> Maybe it's marked as deleted (for examble by a spam filter like
>>>> mailwasher) so thunderbird and roundcube won't show it. Or the cyrus-,
>>>> thunderbird- and/or roundcube databases are corrupted - there are a ways
>>>> to fix this. (
>>>>
>>>>  thunderbird: rebuild imap tree by rebuilding the global database.
>>>>  cyrus: "su - cyrus; /usr/lib/cyrus-imapd/reconstruct -r
>>>>  user/[username at domain.tld]"> 
>>>> )
>>>>
>>>> I'm just guessing - I don't have any real clue...
>>> Couldn't fetch any headers but the search found 6 emails, I have 6 in
>>> the Inbox, so it did not find the one in question.
>>> How can I check if a email has DELETED flag?
>> You can use:
>> /usr/lib/cyrus-imapd/cyrdump <mailbox> | less
>> command to dump mailbox. That should also have a list of messages with deleted 
>> flag.
>> /usr/lib/cyrus-imapd/unexpunge -l <mailbox>
>> command should show the list of email which are expunged from the mailbox, but 
>> still available for recovery. Unlike as with /deleted flag, the recovery of 
>> expunged emails can be done by Cyrus IMAP addministrator from console only. 
>> Messages expunged from mailbox are not accessible for user via IMAP in any 
>> way.
>>
>> Liutauras
> Thanks, /usr/lib/cyrus-imapd/unexpunge -l <mailbox> did show that they
> are expunged.
> However you wrote that expunged email are only recoverable by console,
> I wonder how the MailWasher application can read it.
I was mistaken, mailwasher does NOT display the expunged emails, I still
need to know how to find who/when deletes/expunges the emails, how do I
find that?
> Most importantly how / where can I see in the logs the full trail of
> how / who deleted / expunged the email?
>
> Many thanks
> Sruli
>>
>>
>> _______________________________________________
>> users mailing list
>> users at lists.kolab.org
>> https://lists.kolab.org/mailman/listinfo/users
>
>
>
> _______________________________________________
> users mailing list
> users at lists.kolab.org
> https://lists.kolab.org/mailman/listinfo/users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kolab.org/pipermail/users/attachments/20170908/0047a8a1/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.kolab.org/pipermail/users/attachments/20170908/0047a8a1/attachment.sig>