i'd also check /sys/log/mail