日志查看方法
发布时间:2016-09-07

邮件收发的过程会体现在日志中,即可以通过查看日志文件来排查收发故障。日志文件在umail安装目录下的logs子目录下(umail/logs),下面的日志文件均以SMTP session successful代表成功。在日志中,从左向右的箭头“→”代表你方服务器发送给对方的信息,从右向左的箭头“←”表示对方发送给你方的信息。

下面将以“外发邮件”、“内接邮件”和“内部发给内部”三种情况进行说明。

1、“外发邮件(出站)”日志查看步骤

邮件外发的过程,日志大致的经过步骤是:

SMTP-(in)→AntiVirus(反病毒检测) →AntiSpam(反垃圾检测)→Content-Filter(内容过滤器检测)→Routing(路由)→SMTP-(out)。

但一般查看SMTP-(in)→SMTP-(out)即可,详细步骤如下:

(1)在邮件外发给外网邮箱没有收到的情况下,请收集“发件人地址”、“收件人地址”和“发送时间”。

(2)进入umail/logs目录下

(3)打开当天的smtp(in)日志,并按快捷键“Ctrl+F”或“编辑---查找”。输入收件人或发件人进行查找(对照时间)。

(4)以下是smtp(in)日志的具体分析。

Wed 2011-05-04 10:52:41: ----------
Wed 2011-05-04 10:52:50: Session 2885; child 1; thread 6648
Wed 2011-05-04 10:52:50: Accepting SMTP connection from [127.0.0.1:1122]
连接是从127.0.0.1本地发起的。

Wed 2011-05-04 10:52:50: --> 220 ESMTP READY
Wed 2011-05-04 10:52:50: <-- EHLO U-Mail 
Wed 2011-05-04 10:52:50: --> 250-mail.comingchina.com Hello U-Mail, pleased to meet
Wed 2011-05-04 10:52:50: --> 250-ETRN
Wed 2011-05-04 10:52:50: --> 250-AUTH=LOGIN
Wed 2011-05-04 10:52:50: --> 250-AUTH LOGIN
Wed 2011-05-04 10:52:50: --> 250-8BITMIME
Wed 2011-05-04 10:52:50: --> 250 SIZE 0
Wed 2011-05-04 10:52:50: <-- AUTH LOGIN
Wed 2011-05-04 10:52:50: --> 334 VXNlcm5hbWU6
Wed 2011-05-04 10:52:50: <-- bmFuY3l6aG91QHp5bC5uZXQuY24=
Wed 2011-05-04 10:52:50: --> 334 UGFzc3dvcmQ6
Wed 2011-05-04 10:52:50: <-- ******
Wed 2011-05-04 10:52:50: --> 235 Authentication successful
U-Mail邮件系统的一些认证等系统信息

Wed 2011-05-04 10:52:50: Authenticated as zzz@comingchina.com
Wed 2011-05-04 10:52:50: <-- MAIL FROM: zzz@comingchina.com
发件人是zzz@comingchina.com

Wed 2011-05-04 10:52:50: --> 250 <zzz@comingchina.com>, Sender ok
Wed 2011-05-04 10:52:50: <-- RCPT TO: <umailtest@126.com>
Wed 2011-05-04 10:52:50: --> 250 <umailtest@126.com>, Recipient ok
Wed 2011-05-04 10:52:50: <-- DATA
收件人是umailtest@126.com 

Wed 2011-05-0410:52:50:Creating tempfile(SMTP):e:\umail\queues\temp\md5003945.tmp
Wed 2011-05-04 10:52:50: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2011-05-04 10:52:50: Message size: 151764 bytes
创建邮件的过程

Wed 2011-05-04 10:52:50: Passing message through AntiVirus (Size: 151764)...
Wed 2011-05-04 10:52:50: *  Message is clean (no viruses found)
Wed 2011-05-04 10:52:50: ---- End AntiVirus results
Wed 2011-05-04 10:52:50: Passing message to SmtpHook plugin
Wed2011-05-0410:52:50:fnSMTPMessageFuncNowprocessing:e:\umail\queues\temp\md50003940045.tmp
Wed2011-05-0410:52:50:Messagecreationsuccessful:e:\umail\queues\inbound\md50000104217.msg
Wed2011-05-0410:52:50:-->250Ok,messagesaved<Message-ID:1ED6394AFE03482980C5D258864BD8A5@IBMX61>
Wed 2011-05-04 10:52:50: <-- QUIT
Wed 2011-05-04 10:52:50: --> 221 See ya in cyberspace
反病毒及系统方面的检测

Wed 2011-05-04 10:52:50: SMTP session successful (Bytes in/out: 151916/435)
Wed 2011-05-04 10:52:50: ----------
如果最后提示SMTP session successful那表明in日志是成功的(即邮件已经成功发送到远程队列),接下来查看outl日志。

(5)如果smtp(in)日志显示“SMTP session successful”字符,那么查看smtp(out)日志。

(6)打开当天的smtp(out)日志,并按快捷键“Ctrl+F”或“编辑---查找”。输入收件人或发件人进行查找(对照时间)。

(7)以下是smtp(out)日志的具体分析。

wed 2011-05-04 10:52:47: ----------
Wed 2011-05-04 10:53:04: Session 2888; child 1
Wed2011-05-04 10:52:52: Parsing message <e:\umail\queues\remote\pd35000136919.msg>
Wed 2011-05-04 10:52:52: *  From: zzz@comingchina.com
Wed 2011-05-04 10:52:52: *  To: umailtest@126.com
Wed2011-05-0410:52:52:*Subject:=?gb2312?B?Rnc6IHtTcGFtP30gUmU6ICCxsbqj1sG38Mm9L4yOsqgvzEvW3S/J7tvaIA==?= =?gb2312?B?s/bYm8G/?=
Wed2011-05-0410:52:52:*Message-ID:<1ED6394AFE03482980C5D258864B@IBMX61>
发件人、收件人、主题等信息

Wed2011-05-0410:52:52: Attempting SMTP connection to [126.com]
Wed 2011-05-04 10:52:53: Resolving MX records for [126.com] (DNS Server: 61.144.56.101)...
Wed2011-05-0410:52:53:*P=010S=000D=126.comTTL=(55)MX=[126mx01.mxmail.netease.com] {220.181.15.138}
解析收件方域名的MX记录与A记录(这里为126.com)

Wed 2011-05-04 10:52:53: Attempting SMTP connection to [220.181.15.138:25]
Wed 2011-05-04 10:52:53: Waiting for socket connection...
Wed2011-05-0410:52:53:*Connectionestablished(192.168.1.183:2612 -220.181.15.138:25)
Wed 2011-05-04 10:52:53: Waiting for protocol to start...
连接收件方服务器的25端口

Wed2011-05-0410:53:01:<--220126.comAnti-spamGTforCoremailSystem(126com[20101010])
Wed 2011-05-04 10:53:01: --> EHLO mail.comingchina.com
Wed 2011-05-04 10:53:01: <-- 250-mail
Wed 2011-05-04 10:53:01: <-- 250-PIPELINING
Wed 2011-05-04 10:53:01: <-- 250-AUTH LOGIN PLAIN
Wed 2011-05-04 10:53:01: <-- 250-AUTH=LOGIN PLAIN
Wed2011-05-0410:53:01:<--250-coremail1Uxr2xKj7kG0xkI17xGrU7I0s8FY2U3Uj8Cz28x1UUUUU7Ic2I0Y2UrU5JizUCa0xDrUUUUj
Wed 2011-05-04 10:53:01: <-- 250 8BITMIME
发件方邮件系统与收件方邮件系统的一些握手信息

Wed 2011-05-04 10:53:01: --> MAIL From:<zzz@comingchina.com>
Wed 2011-05-04 10:53:01: <-- 250 Mail OK
Wed 2011-05-04 10:53:01: --> RCPT To:<umailtest@126.com>
Wed 2011-05-04 10:53:02: <-- 250  <umailtest@126.com>... Recipient ok
Wed 2011-05-04 10:53:02: --> DATA
Wed 2011-05-04 10:53:02: <-- 354 Enter mail, end with "." on a line by itself
上述表明收件人是umailtest@126.com,并且存在该收件人

Wed2011-05-0410:53:02:Sending<e:\umail\queues\remote\pd35000136919.msg>to[220.181.15.138]
Wed 2011-05-04 10:53:03: Transfer Complete
Wed 2011-05-04 10:53:04: <-- 250 2.0.0 p441lm7L013317 Message accepted for delivery
Wed 2011-05-04 10:53:04: --> QUIT
创建邮件,并发送邮件到收件人

Wed 2011-05-04 10:53:04: <-- 221 2.0.0 ssg2 closing connection
Wed 2011-05-04 10:53:04: SMTP session successful (Bytes in/out: 505/152474)
Wed 2011-05-04 10:53:04: ----------
如果最后提示SMTP session successful那表明邮件已经发送成功了,已经到达收件方服务器了。

(8)如果smtp(out)日志显示“SMTP session successful”字符,那么代表邮件已成功发送给收件人(已成功从远程队列发出给收件人了)。

 

2、“内接邮件(入站)”日志查看步骤

邮件内接(别人发给你)的过程,日志的经过步骤是:
SMTP-(in)---AntiVirus(反病毒检测)---AntiSpam(反垃圾检测)---Content-Filter(内容过滤器检测)---Routing(路由) 
但一般查看SMTP-(in)即可,详细步骤如下:

(1)在别人发送邮件给您没有收到的情况下。请收集“发件人地址”、“收件人地址”和“发送时间”。

(2)进入umail/logs目录下。 

(3)打开当天的smtp(in)日志,并按快捷键“Ctrl+F”或“编辑---查找”。输入收件人或发件人进行查找(对照时间)。

(4)以下是smtp(in)日志的具体分析

Wed 2011-05-04 10:49:51: ----------
Wed 2011-05-04 10:50:28: Session 2752; child 1; thread 79944
Wed 2011-05-04 10:49:54: Accepting SMTP connection from [93.152.162.153:4443]
Wed 2011-05-04 10:49:54: --> 220 ESMTP READY
Wed 2011-05-04 10:49:55: <-- HELO 126.com
Wed 2011-05-04 10:49:55: EHLO/HELO response delayed 10 seconds
发送方连接到您们服务器

Wed 2011-05-04 10:50:05: --> 250 mail.comingchina.com Hello 126.com, pleased to meet
Wed 2011-05-04 10:50:06: <-- MAIL FROM: <umailtest@126.com>
Wed 2011-05-04 10:50:06: Performing IP lookup (126.com)
Wed 2011-05-04 10:50:06: *  D=126.com TTL=(60) A=[207.155.222.58]
Wed2011-05-0410:50:07:*P=010S=000D=126.comTTL=(60)MX=[126mx01.mxmail.netease.com]
Wed 2011-05-04 10:50:07: *  D=126.com TTL=(52) A=[207.155.222.58]
Wed 2011-05-04 10:50:07: ---- End IP lookup results
解析发件人的MX记录与A记录(这里是126.com)

Wed 2011-05-04 10:50:07: Performing SPF lookup (fujibedford.com / 93.152.162.153)
Wed 2011-05-04 10:50:17: *  DNS: 10 second wait for DNS response exceeded 
Wed 2011-05-04 10:50:17: *  Result: none; no SPF record in DNS
Wed 2011-05-04 10:50:17: ---- End SPF results
检测发件方域名的SPF记录,SPF是一项反垃圾技术

Wed 2011-05-04 10:50:17: --> 250 <umailtest@126.com>, Sender ok
Wed 2011-05-04 10:50:18: <-- RCPT TO: zzz@comingchina.com
邮件发件者、接收者地址

Wed 2011-05-04 10:50:18: Performing DNS-BL lookup (93.152.162.153 - connecting IP)
Wed 2011-05-04 10:50:18: *  zen.spamhaus.org - failed
Wed 2011-05-04 10:50:19: *  cblless.anti-spam.org.cn - failed
Wed 2011-05-04 10:50:19: ---- End DNS-BL results
对发件方域名或IP地址进行DNS-BL检测,这也是一项反垃圾技术

Wed 2011-05-04 10:50:19: --> 250 <zzz@comingchina.com>, Recipient ok
Wed 2011-05-04 10:50:23: <-- DATA
Wed 2011-05-0410:50:23:Creatingtempfile(SMTP):e:\umail\queues\temp\md5003858.tmp
Wed 2011-05-04 10:50:23: --> 354 Enter mail, end with <CRLF>.<CRLF>
Wed 2011-05-04 10:50:24: Message size: 585 bytes
发件方发送邮件到U-Mail

Wed 2011-05-04 10:50:24: Performing DKIM lookup
Wed 2011-05-04 10:50:24: *  File: e:\umail\queues\temp\md50003939858.tmp
Wed 2011-05-04 10:50:24: *  Message-ID: 33e28m71s90-59713048-350k4s35@tdmrdei
Wed 2011-05-04 10:50:24: *  Result: neutral
Wed 2011-05-04 10:50:24: ---- End DKIM results
Wed 2011-05-04 10:50:24: Performing DomainKeys lookup (Sender: umailtest@126.com)
Wed 2011-05-04 10:50:24: *  File: e:\umail\queues\temp\md50003939858.tmp
Wed 2011-05-04 10:50:24: *  Message-ID: 33e28m71s90-59713048-350k4s35@tdmrdei
Wed 2011-05-04 10:50:24: *  Querying for policy: 126.com
Wed 2011-05-04 10:50:24: *    Querying: _domainkey.126.com ...
Wed 2011-05-04 10:50:25: *    DNS: *  Name server reports domain name unknown
Wed 2011-05-04 10:50:25: *  Result: neutral
Wed 2011-05-04 10:50:25: ---- End DomainKeys results
系统方面的检测

Wed 2011-05-04 10:50:25: Passing message through AntiVirus (Size: 585)...
Wed 2011-05-04 10:50:25: *  Message is clean (no viruses found)
Wed 2011-05-04 10:50:25: ---- End AntiVirus results
对发件方发送过来的邮件进行反病毒检测

Wed 2011-05-04 10:50:25: Passing message through Outbreak Protection...
Wed 2011-05-04 10:50:25: *  Message-ID: 33e28m71s90-59713048-350k4s35@tdmrdei
Wed 2011-05-04 10:50:25: *  Reference-ID: fgs=0
Wed 2011-05-04 10:50:25: *  Virus result: 0 - Clean
Wed 2011-05-04 10:50:25: *  Spam result: 1 - Clean
Wed 2011-05-04 10:50:25: *  IWF result: 0 - Clean
Wed 2011-05-04 10:50:25: ---- End Outbreak Protection results
Wed 2011-05-04 10:50:25: Passing message to SmtpHook plugin
Wed2011-05-0410:50:25:fnSMTPMessageFuncNowprocessing:e:\umail\queues\temp\md50003939858.tmp
系统方面的检测

Wed 2011-05-04 10:50:25: Passing message through Spam Filter (Size: 585)...
Wed 2011-05-04 10:50:27: *  3.0 MDAEMON_DNSBL MDaemon: marked by MDaemon's DNSBL
Wed 2011-05-04 10:50:27: *  0.7 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
Wed 2011-05-04 10:50:27: *  3.1 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
Wed 2011-05-04 10:50:27: *      [93.152.162.153 listed in zen.spamhaus.org]
Wed 2011-05-04 10:50:27: *  1.0 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
Wed 2011-05-04 10:50:27: *      [93.152.162.153 listed in zen.spamhaus.org]
Wed 2011-05-04 10:50:27: *  3.0 URIBL_BLACK Contains a URL listed in the URIBL.com blacklist
Wed 2011-05-04 10:50:27: *      [URIs: penisbigmiracle.ru]
Wed 2011-05-04 10:50:27: ---- End SpamAssassin results
Wed 2011-05-04 10:50:27: Spam Filter score/req: 10.90/12.0(前面的分小于后面的分)
Wed2011-05-0410:50:27:Messagecreationsuccessful:e:\umail\queues\inbound\md50000104212.msg
Wed2011-05-0410:50:27:-->250Ok,messagesaved<Message-ID:33e28m71s90-59713048-350k4s35@tdmrdei>
Wed 2011-05-04 10:50:28: <-- QUIT
Wed 2011-05-04 10:50:28: --> 221 See ya in cyberspace
计算邮件的分值(评分机制)

Wed 2011-05-04 10:50:28: SMTP session successful (Bytes in/out: 764/395)
Wed 2011-05-04 10:50:28: ----------
如果最后提示SMTP session successful那表明邮件已经接收成功了,已经到达您邮箱。


3、“内部发给内部”日志查看步骤

内部发给内部(即本域发给本域)的过程,日志的经过步骤是: 
SMTP-(in)---AntiVirus(反病毒检测)---AntiSpam(反垃圾检测)---Content-Filter(内容过滤器检测)---Routing(路由) 
但一般查看SMTP-(in)即可,详细步骤如下:


(1)在内部发给内部没有收到的情况下,请收集“发件人地址”、“收件人地址”和“发送时间”。

(2)进入umail/logs目录下。

(3)打开当天的smtp(in)日志,并按快捷键“Ctrl+F”或“编辑---查找”。输入收件人或发件人进行查找(对照时间)。

(4)以下是smtp(in)日志的具体分析。

Fri 2011-07-22 17:33:47: ----------
Fri 2011-07-22 17:34:40: Session 100; child 1; thread 2372
Fri 2011-07-22 17:34:40: Accepting SMTP connection from [127.0.0.1:1921]
连接是从127.0.0.1本地发起的。

Fri 2011-07-22 17:34:40: --> 220 ESMTP READY
Fri 2011-07-22 17:34:40: <-- EHLO U-Mail WebMail
Fri 2011-07-22 17:34:40: --> 250-domain.com Hello U-Mail WebMail, pleased to meet
Fri 2011-07-22 17:34:40: --> 250-ETRN
Fri 2011-07-22 17:34:40: --> 250-AUTH=LOGIN
Fri 2011-07-22 17:34:40: --> 250-AUTH LOGIN
Fri 2011-07-22 17:34:40: --> 250-8BITMIME
Fri 2011-07-22 17:34:40: --> 250 SIZE 0
Fri 2011-07-22 17:34:40: <-- AUTH LOGIN YWFhQGRvbWFpbi5jb20=
Fri 2011-07-22 17:34:40: --> 334 UGFzc3dvcmQ6
Fri 2011-07-22 17:34:40: <-- ******
邮件服务器的一些认证等系统信息

Fri 2011-07-22 17:34:40: --> 235 Authentication successful
Fri 2011-07-22 17:34:40: Authenticated as aaa@domain.com
Fri 2011-07-22 17:34:40: <-- MAIL FROM: <aaa@domain.com> SIZE=880
Fri 2011-07-22 17:34:40: --> 250 <aaa@domain.com>, Sender ok
Fri 2011-07-22 17:34:40: <-- RCPT TO: <test99@domain.com>
Fri 2011-07-22 17:34:40: --> 250 <test99@domain.com>, Recipient ok
Fri 2011-07-22 17:34:40: <-- DATA
发件人是aaa@domain.com,收件人是test99@domain.com

Fri2011-07-2217:34:40:Creatingtempfile(SMTP):c:\umail\queues\temp\md50000000005.tmp
Fri 2011-07-22 17:34:40: --> 354 Enter mail, end with <CRLF>.<CRLF>
Fri 2011-07-22 17:34:40: Message size: 882 bytes
创建邮件的过程

Fri 2011-07-22 17:34:40: Passing message through AntiVirus (Size: 882)...
Fri 2011-07-22 17:34:40: *  Message is clean (no viruses found)
Fri 2011-07-22 17:34:40: ---- End AntiVirus results
对邮件进行反病毒检测

Fri2011-07-2217:34:40:Messagecreationsuccessful:c:\umail\queues\inbound\md50000000004.msg
Fri2011-07-2217:34:40:-->250Ok,messagesaved<Message-ID:WorldClient-F201107221734.AA34400003@domain.com>
Fri 2011-07-22 17:34:40: <-- QUIT
Fri 2011-07-22 17:34:40: --> 221 See ya in cyberspace
Fri 2011-07-22 17:34:40: SMTP session successful (Bytes in/out: 1033/415)
Fri 2011-07-22 17:34:40: ----------
如果最后提示SMTP session successful那表明邮件已经发送成功了,对方已收到。

购买咨询:400-8270-002
邮件服务器售后服务
U-Mail企业邮箱系统

扫一扫
关注U-Mail微信

版权所有©U-Mail Co.,Ltd.粤ICP备2021023052号    

粤公网安备 44030402001576号

微信扫码 立即咨询
演示平台
返回顶部