06-06-2012 05:20 AM
Hi
I have found inthe log that the ICID has 0.
maillog: Info: MID 647070031 ICID 0 From: <elvire888.kortessem@yyy.com>
can it be possible?
thanx in advance
06-06-2012 08:44 AM
ICID 0 indicates messages which were generated within the appliance rather than received via SMTP. This includes bounces, messages rewritten by content filters, etc.
++Don
06-07-2012 12:47 AM
Thanks for your reply Don,
i have another proboem that ICID connection entry is not available for a particular user, here is the sample log
]$ zgrep 790799390 mailrelay.log-20120512.gz
May 11 13:17:31 mailrelay009 maillog: Info: Start MID 790799390 ICID 1158631400
May 11 13:17:31 mailrelay009 maillog: Info: MID 790799390 ICID 1158631400 From: elvire888.kortessem@yyy.com
May 11 13:17:31 mailrelay009 maillog: Info: MID 790799390 ICID 1158631400 RID 0 To: elvire888.kortessem@yyy.com
May 11 13:17:31 mailrelay009 maillog: Info: MID 790799390 ready 697 bytes from elvire888.kortessem@yyy.com
thanks in advance
06-07-2012 11:01 AM
If you mean that last line which includes "ready 697 bytes", the ICID isn't given on that line. Roughly speaking, the ICID is only given on log entries which correspond directly to steps in the SMTP transaction. So the initial connection results in the "New SMTP ICID" log entry and the log entry noting the sender group, the "MAIL FROM" command results in the "Start MID" and "From:" log entries, each "RCPT TO" results in a "To:" entry, and "QUIT" results in the "ICID ### close" entry. Log entries having to do with the contents of the message, such as its subject, message ID, size, anti-spam result, etc., don't correspond directly to steps in the SMTP transaction, so they don't log the ICID.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: