How to see via command line blocked mails

dioxido_ironport · ‎04-18-2007

Im having a problem...i have a C100 Ironport appliance and i want to know via command line, how to grep and see mails that never went delivered.
For example...i know that someone, like pedro@pedro.com send to my exchange server an email...but in exchange never entered. So i assume that it was filtered by Ironport.
I go to the command line, use grep and 13 and search for pedro@pedro.com and i see something like this
Wed Apr 18 14:17:54 2007 Info: MID 3977209 ICID 8813638 From: <pedro>
Wed Apr 18 14:18:44 2007 Info: MID 3977209 ready 3019672 bytes from <pedro>

I see that 2 mails came from pedro....so i want to see what happened to them...they were bounced? rejected? Delivered?
I dont have any email in the local quarantine... and i want to know how to track what happened to those emails that never entered to my exchange server.
Is there any command?
Than you!

Donald Nash · ‎04-18-2007

Wed Apr 18 14:17:54 2007 Info: MID 3977209 ICID 8813638 From:  
Wed Apr 18 14:18:44 2007 Info: MID 3977209 ready 3019672 bytes from

Now grep for "MID 3977209" to see everything about the message. You can also grep for "ICID 8813638" to see the incoming SMTP connection that delivered it to you.

kluu_ironport · ‎04-19-2007

Wanted to add that you can shortcut the "grep" process by putting everything on one line.

grep -i "Mid 3977209" mail_logs
grep -i "ICID 8813638" mail_logs
grep -i "From: " mail_logs

basically

grep -i "pattern" mail_logs

-i ===> ignore case

Im having a problem...i have a C100 Ironport appliance and i want to know via command line, how to grep and see mails that never went delivered.
For example...i know that someone, like pedro@pedro.com send to my exchange server an email...but in exchange never entered. So i assume that it was filtered by Ironport.
I go to the command line, use grep and 13 and search for pedro@pedro.com and i see something like this
Wed Apr 18 14:17:54 2007 Info: MID 3977209 ICID 8813638 From: 
Wed Apr 18 14:18:44 2007 Info: MID 3977209 ready 3019672 bytes from 

I see that 2 mails came from pedro....so i want to see what happened to them...they were bounced? rejected? Delivered?
I dont have any email in the local quarantine... and i want to know how to track what happened to those emails that never entered to my exchange server.
Is there any command?
Than you!

dioxido_ironport · ‎04-25-2007

Thank you to all who replied!!!