Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
Chapter 5 Logging
Log Types
5-174
Cisco IronPort AsyncOS 7.1 for Email Daily Management Guide
OL-22160-02
Log Entries for Generated or Re-Written Messages
Some functions, such as rewrite/redirect actions (
alt-rcpt-to
filters, anti-spam
rcpt rewrite,
bcc()
actions, anti-virus redirections, etc.), create new messages.
When looking through the logs, you might need to check the results and add in
further MIDs and possibly DCIDs. Entries such as these are possible:
further MIDs and possibly DCIDs. Entries such as these are possible:
Tue Jun 1 20:02:16 2004 Info: MID 14 generated based on MID 13 by
bcc filter 'nonetest'
or:
Tue Jan 6 15:03:18 2004 Info: MID 2 rewritten to 3 by antispam
Fri May 14 20:44:43 2004 Info: MID 6 rewritten to 7 by
alt-rcpt-to-filter filter 'testfilt'
An interesting point to note about ‘rewritten’ entries is that they can appear after
lines in the log indicating use of the new MID.
lines in the log indicating use of the new MID.
Tue Aug 3 16:38:53 2004 Info: MID 25781 Subject 'Virus Scanner Test
#22'
Tue Aug 3 16:38:53 2004 Info: MID 257 ready 1627 bytes from
<test@virus.org>
Tue Aug 3 16:38:53 2004 Warning: MID 257, Message Scanning Problem:
Continuation line seen before first header
Tue Aug 3 16:38:53 2004 Info: Message aborted MID 25781 Dropped by
filter 'drop_zip_c'
Tue Aug 3 16:38:53 2004 Info: Message finished MID 257 done
Tue Aug 3 16:38:53 2004 Info: ICID 44785 close