Cisco Cisco Email Security Appliance C190 User Guide

Cisco AsyncOS 9.1 for Email 사용 설명서

13 장     안티스팸

  규칙 업데이트 모니터링

수신 릴레이 및 로깅 

다음 로그 예에서는 발신자의 SenderBase Reputation 점수가 처음에 줄 1에 보고됩니다. 나중에 수
신 릴레이가 처리된 후에 올바른 SenderBase Reputation 점수가 줄 5에 보고됩니다. 

수신 릴레이 및 메일 로그 

다음 예에서는 수신 릴레이 정보가 포함된 일반적인 로그 항목을 보여줍니다.

헤더 사용을 지정하는 로그 구성 

Cisco 어플라이언스는 메시지 수신 시 표시되는 헤더만 검사합니다. 따라서 로컬로 추가되었거나
(예: Microsoft Exchange 헤더 등) Cisco 어플라이언스에서 메시지를 수신할 때 추가된 헤더는 처리
되지 않습니다. 사용된 헤더를 확인하는 데 유용한 한 가지 방법은 사용하는 헤더를 포함하도록 
AsyncOS 로깅을 구성하는 것입니다. 

헤더에 대한 로깅 설정을 구성하려면 

 항목을 참조하십시오. 

규칙 업데이트 모니터링

라이센스 계약에 동의한 경우 가장 최근의 Cisco Anti- Spam 및 Cisco Intelligent Multi-Scan 규칙 업
데이트를 볼 수 있습니다. 

Fri Apr 28 17:07:29 2006 Info: ICID 210158 ACCEPT SG UNKNOWNLIST match 
nx.domain  SBRS rfc1918

Fri Apr 28 17:07:29 2006 Info: Start MID 201434 ICID 210158

Fri Apr 28 17:07:29 2006 Info: MID 201434 ICID 210158 From: <joe@sender.com>

Fri Apr 28 17:07:29 2006 Info: MID 201434 ICID 210158 RID 0 To: <mary@example.com>

Fri Apr 28 17:07:29 2006 Info: MID 201434 IncomingRelay(senderdotcom): Header 
Received found, IP 192.192.108.1 being used, SBRS 6.8

Fri Apr 28 17:07:29 2006 Info: MID 201434 Message-ID 
'<7.0.1.0.2.20060428170643.0451be40@sender.com>'

Fri Apr 28 17:07:29 2006 Info: MID 201434 Subject 'That report...'

Fri Apr 28 17:07:29 2006 Info: MID 201434 ready 2367 bytes from <joe@sender.com>

Fri Apr 28 17:07:29 2006 Info: MID 201434 matched all recipients for per-recipient policy 
DEFAULT in the inbound table

Fri Apr 28 17:07:34 2006 Info: ICID 210158 close

Fri Apr 28 17:07:35 2006 Info: MID 201434 using engine: CASE spam negative

Fri Apr 28 17:07:35 2006 Info: MID 201434 antivirus negative

Fri Apr 28 17:07:35 2006 Info: MID 201434 queued for delivery

Wed Aug 17 11:20:41 2005 Info: MID 58298 IncomingRelay(myrelay): Header Received found, 

IP 192.168.230.120 being used