From: Barry R Cisna <brcisna@ea...> - 2008-11-11 14:00:15
This is the first time this has happened this school year. One teacher
lost all contents of her inbox. She is very comptuer savy,and I asked if
she may have created an account in Outlook or Outlook Express on her
laptop that would have pulled all the contents of her inbox off of the
Squirrelmail server. This happend two times last year,both times the same
user. I always wondred if they may have figured out how to 'try" and setup
an email account via Outlook/Outlook Express. I don't think so,but I'll
never know for sure. Luckily I had a day old back up of our email boxes.
I myself have looked at users email boxes via webmin to see what size they
are getting in their email boxes during school. Could this be a
possibility?Two different locales in the box at one time?
This is dovecot/sendmail/SM 1.4.8-4 (Centos5) default install.
Of course the contents of all her other email folders are still there.
How would one go about troubleshooting this type of thing? I'm more
curious than anything to find out what would have caused this,to try and
prevent it from happening again.
From: Marc Powell <marc@en...> - 2008-11-11 15:01:23
On Nov 11, 2008, at 7:56 AM, Barry R Cisna wrote:
> Hello List,
> This is the first time this has happened this school year. One teacher
> lost all contents of her inbox. She is very comptuer savy,and I
> asked if
> she may have created an account in Outlook or Outlook Express on her
> laptop that would have pulled all the contents of her inbox off of the
> Squirrelmail server.
Certainly fits the symptoms and is the only cause I've ever seen in
that environment (we provide services to schools and libraries).
Perhaps she has it configured on her computer at home, a tech turned
on a machine she had used in the past or she has it configured on her
computer and doesn't realize it.
I don't use dovecot but I'm pretty sure it logs the protocol used to
access a mailbox and the IP that accessed it. If you see POP(3), it's
a client like Outlook and likely to be your culprit. If that's the
case, and she doesn't know what machine it is, your only logical
recourse is to change her password to prevent further logins from that