Typically, on more complex mail configurations, things like mail queue, deferred messages, etc are stored in a structure in /var/spool/, independent of /var/mail.
You can see /var/mail used separately from /var/spool/mail (AKA: not symlinked).
Local mail will end up in /var/mail - while SMTP daemon handling email for virtual mailboxes, etc will happen in /var/spool/mail
/var/spool/mail
is a symbolic link to/var/mail
on my Debian/Sid system:What you ask is really a matter of preferences; meaning: whatever mail delivery daemon you have in use on your system can use either or.
More specifically, it's a mere matter of preference of options laid out by the FHS.
Typically, on more complex mail configurations, things like mail queue, deferred messages, etc are stored in a structure in /var/spool/, independent of /var/mail.
You can see /var/mail used separately from /var/spool/mail (AKA: not symlinked). Local mail will end up in /var/mail - while SMTP daemon handling email for virtual mailboxes, etc will happen in /var/spool/mail