Cisco Cisco Content Security Management Appliance M1070 用户指南
12-41
Cisco IronPort AsyncOS 7.2.0 for Security Management User Guide
OL-21768-01
Chapter 12 Logging
All Cisco IronPort logs optionally include the following three items:
•
Message-ID: When this option is configured, every message will have its
Message ID header logged, if it is available. This Message ID may have come
from the received message or may have been generated by AsyncOS. For
example:
Message ID header logged, if it is available. This Message ID may have come
from the received message or may have been generated by AsyncOS. For
example:
•
Remote Response: When this option is configured, every message will have
its remote response status code logged, if it is available. For example:
its remote response status code logged, if it is available. For example:
The remote response string is the human-readable text received after the
response to the DATA command during the delivery SMTP conversation. In
this example, the remote response after the connection host issued the data
command is “queued as 9C8B425DA7.”
response to the DATA command during the delivery SMTP conversation. In
this example, the remote response after the connection host issued the data
command is “queued as 9C8B425DA7.”
White space, punctuation, and, in the case of the 250 response, the OK
characters are stripped from the beginning of the string. Only whitespace is
stripped from the end of the string. For example, Cisco IronPort appliances,
by default, respond to the DATA command with this string:
characters are stripped from the beginning of the string. Only whitespace is
stripped from the end of the string. For example, Cisco IronPort appliances,
by default, respond to the DATA command with this string:
250 Ok: Message
MID accepted
. So, the entry “Message MID accepted” would be logged if the
remote host were another Cisco IronPort appliance.
•
Original Subject Header: When this option is enabled, the original subject
header of each message is included in the log.
header of each message is included in the log.
Tue Apr 6 14:38:34 2004 Info: MID 1 Message-ID
Message-ID-Content
Tue Apr 6 14:38:34 2004 Info: MID 1 RID [0] Response 'queued as
9C8B425DA7'
[...]
250 ok hostname
250 Ok: queued as 9C8B425DA7
Tue May 31 09:20:27 2005 Info: Start MID 2 ICID 2
Tue May 31 09:20:27 2005 Info: MID 2 ICID 2 From: <mary@example.com>