2/11    Is there a way to find out a login's last email access?  including
        from which ip the user checked his email from?
        \_ nothing too reliable on the first, nothing on the second.
        \_ finger?
        \_ Silly nerd, stalking's not fashionable these days.
        \_ Depends on how much mail the person receives. If it's a lot, you
           are out of luck. Otherwise "ls -lu" in /var/mail shows last access
           time (note that recieving mail is an "access"). Use that info
           along with "last" and you might be able to match up an IP. VERY
           unreliable though. Lots of dependancies.
                \_ Be aware that the ip might just be that of a nat-fw
                   of a socks proxy, and not the really ip of the person.
                   And don't forget some people use a .forward.