Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Use 

 as a guide to reading the preceding log file.

Following are some sample log entries based on various situations.

A message is injected into the Cisco IronPort appliance for a single recipient. The message is 
successfully delivered.

A new connection is initiated into the system and assigned an Injection ID (ICID) 
of “5.” The connection was received on the Management IP interface and was 
initiated from the remote host at 10.1.1.209.

The message was assigned a Message ID (MID) of “6” after the 

MAIL FROM

 

command is issued from the client.

The sender address is identified and accepted.

The recipient is identified and assigned a Recipient ID (RID) of “0.”

MID 5 is accepted, written to disk, and acknowledged.

Receiving is successful and the receiving connection closes.

Next the message delivery process starts. It is assigned a Delivery Connection ID 
(DCID) of “8” from 192.168.42.42 and to 10.5.3.25.

The message delivery starts to RID “0.”

Delivery is successful for MID 6 to RID “0.”

The delivery connection closes.

Wed Jun 16 21:42:34 2004 Info: New SMTP ICID 282204970 interface mail.example.com 

(1.2.3.4) address 2.3.4.5 reverse dns host unknown verified no

Wed Jun 16 21:42:34 2004 Info: ICID 282204970 SBRS None

Wed Jun 16 21:42:35 2004 Info: Start MID 200257070 ICID 282204970

Wed Jun 16 21:42:35 2004 Info: MID 200257070 ICID 282204970 From: <someone@foo.com>

Wed Jun 16 21:42:36 2004 Info: MID 200257070 ICID 282204970 RID 0 To: <user@example.com>

Wed Jun 16 21:42:38 2004 Info: MID 200257070 Message-ID 

'<37gva9$5uvbhe@mail.example.com>'

Wed Jun 16 21:42:38 2004 Info: MID 200257070 Subject 'Hello'

Wed Jun 16 21:42:38 2004 Info: MID 200257070 ready 24663 bytes from <someone@foo.com>

Wed Jun 16 21:42:38 2004 Info: MID 200257070 antivirus negative

Wed Jun 16 21:42:38 2004 Info: MID 200257070 queued for delivery