cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1598
Views
0
Helpful
3
Replies

is ICID can have value 0?

hashim.km
Level 1
Level 1

Hi

I have found inthe log that the ICID has 0.

maillog: Info: MID 647070031 ICID 0 From: <elvire888.kortessem@yyy.com>

can it be possible?

thanx in advance

3 Replies 3

Donald Nash
Level 3
Level 3

ICID 0 indicates messages which were generated within the appliance rather than received via SMTP. This includes bounces, messages rewritten by content filters, etc.

++Don

Thanks for your reply Don,

i have another proboem that ICID connection entry is not available for a particular user, here is the sample log

]$ zgrep 790799390  mailrelay.log-20120512.gz

May 11 13:17:31 mailrelay009 maillog: Info: Start MID 790799390 ICID 1158631400

May 11 13:17:31 mailrelay009 maillog: Info: MID 790799390 ICID 1158631400 From: elvire888.kortessem@yyy.com

May 11 13:17:31 mailrelay009 maillog: Info: MID 790799390 ICID 1158631400 RID 0 To: elvire888.kortessem@yyy.com

May 11 13:17:31 mailrelay009 maillog: Info: MID 790799390 ready 697 bytes from elvire888.kortessem@yyy.com

thanks in advance

If you mean that last line which includes "ready 697 bytes", the ICID isn't given on that line. Roughly speaking, the ICID is only given on log entries which correspond directly to steps in the SMTP transaction. So the initial connection results in the "New SMTP ICID" log entry and the log entry noting the sender group, the "MAIL FROM" command results in the "Start MID" and "From:" log entries, each "RCPT TO" results in a "To:" entry, and "QUIT" results in the "ICID ### close" entry. Log entries having to do with the contents of the message, such as its subject, message ID, size, anti-spam result, etc., don't correspond directly to steps in the SMTP transaction, so they don't log the ICID.