aborted vs dropped

[sfurkan]

Hi,

What difference is there between the ABORTED and the DROPPED action?

Thanks.

[marc.luescherFRE]

My understanding : 

ABORTED = normally sending system stops sending process either timeout or network issue

DROPPED = recipient system "drops" message due to a filter or policy match

See also :

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118295-technote-esa-00.html

Regards

Marc

[Ken Stieers]

To expand a little on Marc's comment:

Aborted happens when the mail isn't completely received, not matter why.

For example,  if the mail is going to a non-existent address, and you have an LDAP accept query and the listener is set to check it during the SMTP conversation, that will appear as an abort.

If the accept query is applied at the work queue, that can be configured as a bounce or a drop.