Network Prevent for Email operational log codes

Network Prevent for Email
operational log codes

Status codes for
Network Prevent for Email
operational log
lists the defined
Network Prevent for Email
operational logging codes by category.
Status codes for
Network Prevent for Email
operational log
Code
Description
Core Events
1100
Starting
Network Prevent for Email
1101
Shutting down
Network Prevent for Email
1102
Reconnecting to FileReader (tid=
id
)
Where
id
is the thread identifier.
The RequestProcessor attempts to re-establish its connection with the FileReader for detection.
1103
Reconnected to the FileReader successfully (tid=
id
)
The RequestProcessor was able to re-establish its connection to the FileReader.
Core Errors
5100
Could not connect to the FileReader (tid=
id
timeout=.3s)
An attempt to re-connect to the FileReader failed.
5101
FileReader connection lost (tid=
id
)
The RequestProcessor connection to the FileReader was lost.
Connectivity Events
1200
Listening for incoming connections (local=
hostname
)
Hostnames
is an IP address or fully-qualified domain name.
1201
Connection accepted (tid=
id
cid=
N
local=
hostname
:
port
remote=
hostname
:
port
)
Where
N
is the connection identifier.
1202
Peer disconnected (tid=
id
cid=
N
local=
hostname
:
port
remote=
hostname
:
port
)
1203
Forward connection established (tid=
id
cid=
N
local=
hostname
:
port
remote=
hostname
:
port
)
1204
Forward connection closed (tid=
id
cid=
N
local=
hostname
:
port
remote=
hostname
:
port
)
1205
Service connection closed (tid=
id
cid=
N
local=
hostname
:
port
remote=
hostname
:
port
messages=1 time=0.14s)
Connectivity Errors
5200
Connection is rejected from the unauthorized host (tid=
id
local=
hostname
:
port
remote=
hostname
:
port
)
5201
Local connection error (tid=
id
cid=
N
local=
hostname
:
port
remote=
hostname
:
port
reason=
Explanation
)
5202
Sender connection error (tid=
id
cid=
N
local=
hostname
:
port
remote=
hostname
:
port
reason=
Explanation
)
5203
Forwarding connection error (tid=
id
cid=
N
local=
hostname
:
port
remote=
hostname
:
port
reason=
Explanation
)
5204
Peer disconnected unexpectedly (tid=
id
cid=
N
local=
hostname
:
port
remote=
hostname
:
port
reason=
Explanation
)
5205
Could not create listener (address=local=
hostname
:
port
reason=
Explanation
)
5206
Authorized MTAs contains invalid hosts:
hostname
,
hostname
, ...
5207
MTA restrictions are active, but no MTAs are authorized to communicate with this host
5208
TLS handshake failed (reason=
Explanation
tid=
id
cid=
N
local=
hostname
remote=
hostname
)
5209
TLS handshake completed (tid=
id
cid=
N
local=
hostname
remote=
hostname
)
5210
All forward hosts unavailable (tid=
id
cid=
N
reason=
Explanation
)
5211
DNS lookup failure (tid=
id
cid=
N
NextHop=
hostname
reason=
Explanation
)
5303
Failed to encrypt incoming message (tid=
id
cid=
N
local=
hostname
remote=
hostname
)
5304
Failed to decrypt outgoing message (tid=
id
cid=
N
local=
hostname
remote=
hostname
)
Message Events
1300
Message complete (cid=
N
message_id=3 dlp_id=
message_identifier
size=
number
sender=
email_address
recipient_count=
N
disposition=
response
estatus=
statuscode
rtime=
N
dtime=
N
mtime=
N
Where:
  • Recipient_count is the total number of addressees in the To, CC, and BCC fields.
  • Response is the
    Network Prevent for Email
    response which can be one of:
    PASS, BLOCK, BLOCK_AND_REDIRECT, REDIRECT, MODIFY, or ERROR
    .
  • Thee status is an Enhanced Status code.
  • The
    rtime
    is the time in seconds for
    Network Prevent for Email
    to fully receive the message from the sending MTA.
  • The
    dtime
    is the time in seconds for
    Network Prevent for Email
    to perform detection on the message.
  • The
    mtime
    is the total time in seconds for
    Network Prevent for Email
    to process the message Message Errors.
Message Errors
5300
Error while processing message (cid=
N
message_id=
header_ID
dlp_id=
message_identifier
size=0 sender=
email_address
recipient_count=
N
disposition=
response
estatus=
statuscode
rtime=
N
dtime=
N
mtime=
N
reason=
Explanation
Where
header_ID
is an RFC 822 Message-Id header if one exists.
5301
Sender rejected during re-submit
5302
Recipient rejected during re-submit