MailEnable events and where they are logged on Plesk server

Question

How to check why mail was not delivered to inbox?

Where MailEnable events are logged to? 

Answer

In Plesk for Windows Server, MailEnable log files are stored in:

• %plesk_dir%Mail ServersMail EnableLogging
• C:Program Files (x86)Mail EnableLogging(for new installations)

Mail message passes though several stages on its way to the recipient mailbox. 

Those are:

• Mail hits MailEnable mail server by SMTP

  To track a message that entered MailEnable via SMTP, review SMTP Activity log:

  SMTP-IN A88C0A1E5695465897642AFE193D76CB.MAI 364 127.0.0.1 220 mailenable.com.au ESMTP MailEnable Service, Version: --9.00 ready at 04/15/16 12:47:27 0 0
  SMTP-IN A88C0A1E5695465897642AFE193D76CB.MAI 364 127.0.0.1 HELO HELO me2k 250 Requested mail action okay, completed 43 18
  SMTP-IN A88C0A1E5695465897642AFE193D76CB.MAI 364 127.0.0.1 MAIL MAIL FROM:<[email protected]> 250 Requested mail action okay, completed 43 37
  SMTP-IN A88C0A1E5695465897642AFE193D76CB.MAI 364 127.0.0.1 RCPT RCPT TO:<[email protected]> 250 Requested mail action okay, completed 43 35
  SMTP-IN A88C0A1E5695465897642AFE193D76CB.MAI 364 127.0.0.1 DATA DATA 354 Start mail input; end with <CRLF>.<CRLF> 46 6
  SMTP-IN 992EC28E0D0049B2AB185EF782CBB7DE.MAI 364 127.0.0.1 QUIT QUIT 221 Service closing transmission channel 42 6

• Mail filter checks

  Mail filter checking results (spam checks, for example) are written to SMTP Debug log. If the message was not delivered due to failed mail filter checking, it will be shown there:

  ME-I0101: [1292] Local Delivery: Address ([SMTP:[email protected]]) is local.
  ME-I0149: [1292] 045735963AA0494A9E0242AADD83E0CA.MAI was received successfully and delivery thread was initiated
  ME-I0070: (recv) socket [1292] was gracefully closed during [QUIT] command by the remote client 203.0.113.2.
  ME-I0074: [1292] (Debug) End of conversation
  Message 045735963AA0494A9E0242AADD83E0CA.MAI has link to blacklisted IP. www.example.com (203.0.113.2) was found in blacklist Barracuda Reputation Block List
  ME-F0xxx: [045735963AA0494A9E0242AADD83E0CA.MAI] Inbound message detected as spam and deleted.

• Mail delivery to Inbox folder of recipient mailbox

  Message delivery can be confirmed by reviewing post office log files located in ..Mail EnableLoggingSF:

  [67A0CFCE2B4D4E11949EF1F6D249592D.MAI] Delivered message from [SMTP:[email protected]] to PO=example.com MBX=john_doe FLD=Inbox

• Actions made in MailEnable webmail

  Actions like login to webmail, list folders, list emails, send email, delete email are logged to WEBMAIL-Activity log located in ..Mail EnableLoggingWebMail:

  SYS-LOGIN [email protected] 0 0 WIN-TVSNFL1C14UIME_ADMIN
  FOLDERS-LIST example.com john_doe 0 0 WIN-TVSNFL1C14UIME_ADMIN
  MESSAGES-LIST example.com john_doe Inbox 0 0 WIN-TVSNFL1C14UIME_ADMIN
  MESSAGE-READ example.com john_doe Inbox74328D7091647238C82416ABED0933A.MAI 0 0 WIN-TVSNFL1C14UIME_ADMIN
  MESSAGE-DELETE example.com john_doe Inbox74328D7091647238C82416ABED0933A.MAI 0 0 WIN-TVSNFL1C14UIME_ADMIN

  To enable WebMail logging

  1. Start MailEnable Management console.

  2. Expand Servers > localhost > Services and Connectors > right-click on WebMail to open its Properties.

  3. Switch to the Logging tab:

     • Set Logging Status to Log to Debug Log

     • Scroll logging mode to the highest Logins, listings, all actions

  4. Click OK to apply the changes.

     

  5. Apply…