Tracemail
Tracemail allows you to analyze log traffic of received (Received E-mails) and sent (Sent E-mails) e-mails. Furthermore, it shows information related to POP, IMAP and Webmail services access in real time (Access Info). This tool also flags up any issues related to a specific account or email.
Tracemail keeps a data history up to 30 days.
To view the log register:
- Click on the Tracemail entry in the control panel sidebar;
- Select the kind of data that you want to check;
- Enter the name of the domain whose log details you want to check;
- Enter the name of an email account whose log details you want to check.
- Enter a date
Once the fields are filled, you will see the search results. For each result, you will be able to view its outcome, the date/time of the event and other useful information that you can use to analyze the data.
Each result can be exported in PDF format individually, and you can export the overall report of all the results in CSV format.
Access info
By selecting the Access item in the Action field, the logins and logouts of users within the POP, IMAP and Webmail services will be shown. The accesses are categorised as "Successful" and "Failed". At the time of logout from POP and IMAP sessions, the amount of traffic generated, the number of messages deleted within the session and the email client used by the user to connect to the service are recorded.
The details shown by Tracemail in the login section are as follows:
| Action | Type of action record (e.g. login, logout) |
| Login | Date and time of the action (e.g. 27/8/2019, 12:51:36) |
| Logout | Date and time of the action (e.g. 27/8/2019, 12:51:36) |
| User | Username of whom performed the action (e.g. john.doe@qboxmail.com) |
| Protocol | Access protocol to Qboxmail systems (e.g. IMAP) |
| msg deleted imap | Number of messages deleted during action (0) |
| Extrapolated messages imap | Number of messages removed during action (0) |
| Imap msg trashed | Number of messages discarded during action (0) |
| Customer | Email suite used by the user (e.g. Microsoft Outlook 2016) |
| Server | Server where the action takes place (e.g. pop06) ** |
| Local IP | IP address of the Qboxmail server where the action takes place (e.g. 185.97.217.80) |
| Session | Unique ID of the session in which the action takes place (e.g. ImlxDheRE95bj8Qu) |
| Remote IP | IP address of the server where the user is connected from (e.g. 91.143.196.46) |
| In traffic | Incoming traffic generated by the event (e.g. 1 KB) |
| Out of traffic | Outgoing traffic generated by the event (e.g. 1 KB) |
Failed login
For failed logins, the reason is recorded (e.g. incorrect password, disabled user, unauthorized IP, invalid OTP). In case of unsuccessful login, the cause is indicated under Access error:
| authentication failed | The password entered is not correct |
| many connections | The user has simultaneously exceeded the maximum number of connections |
| unauthorized ip | The user is trying to log in from an unauthorized IP |
| disabled by user | The user is disabled |
Connection error, timeouts, or incorrect username errors are not present in the access list.
Received E-mails
By selecting the Received E-mails item, you can view all the emails received by a specific domain or account. Received emails are categorised into accepted, quarantined, rejected.
For each result, various details are indicated, including the delivery status of the message, the folder in which it was delivered, if it was forwarded to another email address, if an automatic reply was sent, or if a message filtering rule was applied. The results of the Antivirus and Antispam tests are also provided.
For rejected or quarantined messages, you can check the reasons why the Email Security system has decided not to deliver the email message to the user.
Messages marked as spam that are received from global mail server markets will not be reported.
Locate Message
For each result listed, it is also possible to use the Locate Message function which allows you to locate the folder where the message is currently located, including the trash, or whether the message has been deleted or downloaded via POP protocol.
The locate message function may not be available if the recipient's mailbox has set up an outward forwarding of messages.
Sent E-mails
By selecting the Sent E-mails item it is possible to view all the emails sent from the domain or account indicated and determine, in real time, whether a message just sent has already been delivered or not.
The Sent E-mails function also reports any messages blocked by the Qboxmail Email Security antispam and antivirus system. The sending of these messages is blocked to prevent the spread of unwanted or risky material and to keep the reputation of our SMTP sending systems high.
For each result, various details are indicated including sender and recipient, subject and size of the message, server and port used for sending. The mails are divided into delivered, rejected, queued to the recipient server.
PDF report
The PDF Report function allows you to generate a document containing all the detailed information relating to the individual results of Accesses, Received E-mails, Sent E-mails, which can be sent to Qboxmail technical support or shared with customers and IT contacts.
Tracemail is a tool designed and created by the Qboxmail research and development team. In its implementation, the policies of the GDPR were respected, thus safeguarding the privacy of users.
