This is a quick guide on how to read the Qmail logs.
All message activity is written to /var/log/qmail/current. There can be a lot of information here, so lets break it down line by line. Below is a snippet from /var/log/qmail/current. I added numbers on the left hand side for the sake of learning.
1. @40000000461d81581ec60f34 new msg 5915497 2. @40000000461d81581eda8194 info msg 5915497: bytes 22122 from <[email protected]> qp 99024 uid 89 3. @40000000461d8158214e737c starting delivery 4088258: msg 5915497 to local [email protected] 4. @40000000461d81582155ca64 status: local 2/10 remote 0/60 5. @40000000461d815824de127c delivery 4088258: success: did_1+0+0/ 6. @40000000461d815824f572dc end msg 5915497
Holy @#$%!, what does all this mean? Here it is, line by line:
1. This indicates that a new message has entered the queue. It is denoted by number: 5915497
2. This tells us where the message was from. In this case: [email protected]
3. Here, we see that the message is trying to deliver to a local user: [email protected] Note the delivery sub id number: 4088258
4. This tells us what the queue volume is like. Not important at this moment.
5. This lets us know the message was delivered successfully to [email protected] Note again the delivery sub id number: 4088258
6. Now qmail says, okay, the message denoted by the number: 5915497 is complete.
So when looking at the logs, first locate a from address or destination address in the logs. Once that is found, find the message id number (should be up 1 or 2 lines) and once you find that, you can discover what the message is doing when in the queue.