Server Logs

Log files are named like this: prefix-YYYYMMDD[HHmm]. If you rotate logs (cmd line switch: -Mh hours) the last 4 digits are the time when you rotate them otherwise they are 0000 (midnigt). If you don't rotate logs this can happen also two times a year when DST (Daylight Saving Time) starts or ends.

CTRL (Administration Server)

Field Nø Description

  1. Client IP Address
  2. User Name
  3. Password
  4. Date / Time
  5. Request Result. Can be REQ: AUTH or REQ: FAIL

FING (Finger Server)

Field Nø Description

  1. Host
  2. Domain
  3. Ip Address
  4. Date / Time
  5. Query

FILTERS

Field Nø Description

  1. Sender (Mail From)
  2. Recipient (Rcpt To)
  3. Local Ip
  4. Remote Ip
  5. Date / Time
  6. Filter Type
  7. Filter Info
  8. Exec Result
  9. Exit Code
  10. Executable

LMAIL (Local Mail Server)

Field Nø Description

  1. SMTP Domain
  2. Message File
  3. Message ID
  4. Date / Time

POP3 (Pop3 Server)

Field Nø Description

  1. Server FQDN
  2. Server Domain
  3. Client IP
  4. Date / Time
  5. User
  6. Password

PSYNC (Pop3 Synch Server)

Field Nø Description

  1. Date / Time
  2. Local Domain
  3. Local User
  4. Remote Domain
  5. Remote User
  6. Authentication Type
  7. Status
  8. Message
  9. Size
  10. Message Err
  11. Size Err

SMAIL (SendMail Server)

Field Nø Description

  1. Server Domain
  2. Message File
  3. Message ID
  4. Sender (Mail From)
  5. Recipient (Rcpt To)
  6. Delivery Type (see below for explanation)
  7. Resolved Rcpt To
  8. Date / Time

Delivery Type Description
SMTP Delivery to a remote SMTP server
LOCAL Delivery to a local user
FWD Forward to a different recipent
EXTRN Filtered
FILTER Filtered
RLYS Delivery through a relay SMTP server
REDIR Redirect to a different recipent (can be local)
LREDIR Redirect to a local recipient

SMTP (Smtp Server)

Field Nø Description

  1. Server FQDN
  2. Server Domain
  3. Ip Address
  4. Date / Time
  5. Client Domain
  6. Destination Domain
  7. Sender (Mail From)
  8. Recipient (Rcpt To)
  9. Message ID
  10. Status (see below for explanation)
  11. Authenticated User
  12. Message Size
  13. Client FQDN

Delivery Type Description
AUTH=EFAIL:TYPE=PLAIN Plain Authentication Failed
AUTH=EFAIL:TYPE=LOGIN Login Authentication Failed
AUTH=EFAIL:TYPE=CRAM-MD5 Cram-Md5 Authentication Failed
AUTH=EFAIL:TYPE=EXTRN External Authentication Failed
DATA=EFILTER Rejected by SMTP Message Filter
ETRN=EACCESS ETRN SMTP Command is disabled (AllowSmtpETRN=0 in server.tab)
RECV=OK Message sent
RCPT=OK Recipient accepted
RCPT=ESYNTAX Syntax error in RCPT TO
RCPT=EDSBL Account disabled (ReceiveEnable=0 in user.tab)
RCPT=EFULL Exceeded storage allocation
RCPT=EACCESS Access denied to mailing list
RCPT=EAVAIL Mailbox unavailable
RCPT=ERELAY Relay denied
RCPT=ENBR Too many recipients (-Sr maxrcpts cmd line swicth, default 100)
SNDRIP=EIPSPAM Sender IP in spammers.tab
SNDRIP=EIPMAP Sender IP is positive to maps check (CustMapsList in server.tab)
SNDRIP=ERDNS Sender ip reverse DNS Lookup Failed (SMTP-RDNSCheck set server.tab)
SMTP=EERRS Too many errors with the SMTP session (SMTP-MaxErrors set in server.tab)
SNDR=EEMPTY Empty return path
SNDR=ESYNTAX Syntax error in MAIL FROM
SNDR=ENODNS Sender domain has no DNS/MX entries (CheckMailerDomain=1 in server.tab)
SNDR=ESPAM Found in spam-address.tab
SIZE=EBIG Message exceeds fixed maximum message size (MaxMessageSize in server.tab)
VRFY=EACCESS VRFY SMTP Command is disabled (AllowSmtpVRFY=0 in server.tab)

[top]