Printable Version of Topic
Click here to view this topic in its original format
XMail Forum > Documentation and Knowledge Base > Xmail Logfile Format


Posted by: hschneider May 6 2005, 12:20 PM
QUOTE

Log files are named like this: prefix-YYYYMMDDHHmm. If you rotate logs (cmd line switch: -Mh hours) the last 4 digits are the time when you rotate them otherwise they are 0000 (midnigt). If you don't rotate logs this can happen also two times a year when DST (Daylight Saving Time) starts or ends.

CTRL (Administration Server)

      Field N  Description
      1  Client IP Address
      2  User Name
      3  Password
      4  Date / Time
      5  Request Result. Can be REQ: AUTH or REQ: FAIL

FING (Finger Server)

      Field N  Description
      1  Host
      2  Domain
      3  Ip Address
      4  Date / Time
      5  Query

FILTERS

      Field N  Description
      1  Sender (Mail From)
      2  Recipient (Rcpt To)
      3  Local Ip
      4  Remote Ip
      5  Date / Time
      6  Filter Type
      7  Filter Info
      8  Exec Result
      9  Exit Code
      10  Executable

LMAIL (Local Mail Server)

      Field N  Description
      1  SMTP Domain
      2  Message File
      3  Message ID
      4  Date / Time

POP3 (Pop3 Server)

      Field N  Description
      1  Server FQDN
      2  Server Domain
      3  Client IP
      4  Date / Time
      5  User
      6  Password

PSYNC (Pop3 Synch Server)

      Field N  Description
      1  Date / Time
      2  Local Domain
      3  Local User
      4  Remote Domain
      5  Remote User
      6  Authentication Type
      7  Status
      8  Message
      9  Size
      10  Message Err
      11  Size Err

SMAIL (SendMail Server)

      Field N  Description
      1  Server Domain
      2  Message File
      3  Message ID
      4  Sender (Mail From)
      5  Recipient (Rcpt To)
      6  Delivery Type (see below for explanation)
      7  Resolved Rcpt To
      8  Date / Time

      Delivery Type  Description
      SMTP  Delivery to a remote SMTP server
      LOCAL  Delivery to a local user
      FWD  Forward to a different recipent
      EXTRN  Filtered
      FILTER  Filtered
      RLYS  Delivery through a relay SMTP server
      REDIR  Redirect to a different recipent (can be local)
      LREDIR  Redirect to a local recipient

SMTP (Smtp Server)

      Field N  Description
      1  Server FQDN
      2  Server Domain
      3  Ip Address
      4  Date / Time
      5  Client Domain
      6  Destination Domain
      7  Sender (Mail From)
      8  Recipient (Rcpt To)
      9  Message ID
      10  Status (see below for explanation)
      11  Authenticated User
      12  Message Size
      13  Client FQDN

      Status  Description
      AUTH=EFAIL:TYPE=PLAIN  Plain Authentication Failed
      AUTH=EFAIL:TYPE=LOGIN  Login Authentication Failed
      AUTH=EFAIL:TYPE=CRAM-MD5  Cram-Md5 Authentication Failed
      AUTH=EFAIL:TYPE=EXTRN  External Authentication Failed
      DATA=EFILTER  Rejected by SMTP Message Filter
      ETRN=EACCESS  ETRN SMTP Command is disabled (AllowSmtpETRN=0 in server.tab)
      RECV=OK  Message sent
      RCPT=OK  Recipient accepted
      RCPT=ESYNTAX  Syntax error in RCPT TO
      RCPT=EDSBL  Account disabled (ReceiveEnable=0 in user.tab)
      RCPT=EFULL  Exceeded storage allocation
      RCPT=EACCESS  Access denied to mailing list
      RCPT=EAVAIL  Mailbox unavailable
      RCPT=ERELAY  Relay denied
      RCPT=ENBR  Too many recipients (-Sr maxrcpts cmd line swicth, default 100)
      SNDRIP=EIPSPAM  Sender IP in spammers.tab
      SNDRIP=EIPMAP  Sender IP is positive to maps check (CustMapsList in server.tab)
      SNDRIP=ERDNS  Sender ip reverse DNS Lookup Failed (SMTP-RDNSCheck set server.tab)
      SMTP=EERRS  Too many errors with the SMTP session (SMTP-MaxErrors set in server.tab)
      SNDR=EEMPTY  Empty return path
      SNDR=ESYNTAX  Syntax error in MAIL FROM
      SNDR=ENODNS  Sender domain has no DNS/MX entries (CheckMailerDomain=1 in server.tab)
      SNDR=ESPAM  Found in spam-address.tab
      SIZE=EBIG  Message exceeds fixed maximum message size (MaxMessageSize in server.tab)
      VRFY=EACCESS  VRFY SMTP Command is disabled (AllowSmtpVRFY=0 in server.tab)



Originale source see http://www.henry.it/xmail/logs.html

By default, logging is incactive and has to be enabled first. Turn on logging with these parameters:
-Sl -Pl -Ql -Yl -Cl -Ll

.. where l is a lowercase L

Parameters are set in the registry (Windows) or in the XMail startup script (other platforms).

Powered by Invision Power Board (http://www.invisionboard.com)
© Invision Power Services (http://www.invisionpower.com)