Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to debug an unfamiliar mail server and I can't find any logs for postfix. In the documentation it says:

Postfix logs all failed and successful deliveries to a logfile. The file is usually called `/var/log/maillog` or `/var/log/mail`; the exact pathname is defined in the `/etc/syslog.conf`. 

I checked /etc/syslog.conf and it listed /var/log/maillog but there is nothing there. The previous admin disabled all logging in other applications and I think it might be the same here. Is there a way I can reenable logging so I can continue to debug?

Edit: As requested when I run postconf syslog_facility it returns syslog_facility = mail.

My syslog daemon is syslogd and I've verified it is running using the command /usr/sbin/syslogd -l /var/run/log -l /var/named/var/run/log -s. I've pasted the syslog.conf below (removing commented lines):

*.err;kern.warning;auth.notice;mail.crit        /dev/console
*.notice;authpriv.none;kern.debug;;mail.crit;news.err   /var/log/messages
security.*                  /var/log/security;             /var/log/auth.log                   /var/log/maillog                    /var/log/lpd-errs                    /var/log/xferlog
cron.*                      /var/log/cron
*.=debug                    /var/log/debug.log
*.emerg                     *
*.*                     /var/log/ppp.log
share|improve this question
Please show the output of "postconf syslog_facility" and paste it here together with the content of your syslog.conf. Btw: What syslog-daemon do you use? Have you verified it is running? – sebokopter Jul 13 '11 at 20:10
up vote 2 down vote accepted

All postfix logs should (by default) go into /var/log/mail.log (and similar for errors). Authentication logs should go to /var/log/auth.log.

And that could be all, I assume.

share|improve this answer
I have an auth.log but no mail.log. Is this something that can be overridden in config? – devnill Jul 13 '11 at 20:54
According to your syslog.conf all mail should go to /var/log/maillog (as is stated on the fifth line of the config file). And there you can override default settings and specify your own configs. – koressak Jul 14 '11 at 12:40

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.