These log messages refer to the ANTISPAM (Anti-spam related events) category.
2.4.1. spam_found (ID: 05900001)
- Default Severity
- NOTICE
- Log Message
- Email was classified as spam.
- Explanation
- An email was classified as spam, but no action was taken.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
- Parameters
- sourceip
from
to
profile
tests
link_categories
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.2. spam_found (ID: 05900002)
- Default Severity
- INFORMATIONAL
- Log Message
- Email was classified as spam and has been tagged.
- Explanation
- An email was classified as spam and was tagged according to the configuration.
- Firewall Action
- tag
- Recommended Action
- None
- Revision
- 1
- Parameters
- sourceip
from
to
profile
methods
link_categories
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.3. spam_found (ID: 05900003)
- Default Severity
- INFORMATIONAL
- Log Message
- Email was classified as spam and was rejected.
- Explanation
- An email was classified as spam and was rejected.
- Firewall Action
- reject
- Recommended Action
- None
- Revision
- 1
- Parameters
- sourceip
from
to
profile
methods
link_categories
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.4. memory_allocation_failure (ID: 05900010)
- Default Severity
- ERROR
- Log Message
- Failed to allocate memory required for anti-spam.
- Explanation
- A memory allocation failure occurred. The system will be unable to perform anti-spam scanning on this email.
- Firewall Action
- None
- Recommended Action
- Review configuration to reduce memory consumption.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.5. domain_verification_timeout (ID: 05900020)
- Default Severity
- ERROR
- Log Message
- Domain Verification failed because the DNS query timed out.
- Explanation
- Domain Verification failed because the DNS query timed out.
- Firewall Action
- None
- Recommended Action
- Verify that DNS is configured correctly.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.6. domain_verification_error (ID: 05900021)
- Default Severity
- ERROR
- Log Message
- Domain Verification failed because a DNS query could not be sent.
- Explanation
- Domain Verification failed because a DNS query could not be sent.
- Firewall Action
- None
- Recommended Action
- Verify that DNS is configured correctly.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.7. link_protection_allocation_failure (ID: 05900030)
- Default Severity
- ERROR
- Log Message
- Failed to allocate memory for Link Protection.
- Explanation
- A memory allocation failure occurred while performing Link Protection. Malicious links may slip through unnoticed as a result.
- Firewall Action
- None
- Recommended Action
- Review configuration to reduce memory consumption.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.8. link_protection_timeout (ID: 05900031)
- Default Severity
- ERROR
- Log Message
- Link Protection query timed out.
- Explanation
- A link could not be classified because the WCF servers did not respond.
- Firewall Action
- None
- Recommended Action
- Verify that the system is configured to allow WCF lookups.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.9. link_protection_wcf_error (ID: 05900032)
- Default Severity
- ERROR
- Log Message
- Link Protection WCF error.
- Explanation
- A link could not be classified because a query could not be sent to the WCF servers.
- Firewall Action
- None
- Recommended Action
- Verify that the system is configured to allow WCF lookups.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.10. link_protection_no_license (ID: 05900033)
- Default Severity
- ERROR
- Log Message
- Link Protection has been disabled due to license restrictions.
- Explanation
- A valid Web Content Filtering license is required to use Link Protection.
- Firewall Action
- None
- Recommended Action
- Extend valid time for Web Content Filtering.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.11. dnsbl_allocation_failure (ID: 05900040)
- Default Severity
- ERROR
- Log Message
- Failed to allocate memory for DNSBL lookup. DNSBL: <dnsbl>
- Explanation
- A memory allocation failure occurred while performing DNSBL lookup.
- Firewall Action
- None
- Recommended Action
- Review configuration to reduce memory consumption.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
dnsbl
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.12. dnsbl_timeout (ID: 05900041)
- Default Severity
- ERROR
- Log Message
- DNSBL check failed because the DNS query timed out. DNSBL: <dnsbl>
- Explanation
- DNSBL check failed because the DNS query timed out.
- Firewall Action
- None
- Recommended Action
- Verify that DNS is configured correctly.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
dnsbl
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.13. dnsbl_error (ID: 05900042)
- Default Severity
- ERROR
- Log Message
- DNSBL check failed because a DNS query could not be sent. DNSBL: <dnsbl>
- Explanation
- DNSBL check failed because a DNS query could not be sent.
- Firewall Action
- None
- Recommended Action
- Verify that DNS is configured correctly.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
dnsbl
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.14. dcc_allocation_failure (ID: 05900050)
- Default Severity
- ERROR
- Log Message
- Failed to allocate memory for DCC.
- Explanation
- A memory allocation failure occurred while performing DCC.
- Firewall Action
- None
- Recommended Action
- Review configuration to reduce memory consumption.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.15. dcc_timeout (ID: 05900051)
- Default Severity
- ERROR
- Log Message
- DCC query timed out.
- Explanation
- DCC check failed because no response was received from the DCC servers.
- Firewall Action
- None
- Recommended Action
- Verify that the DCC servers are reachable.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.16. dcc_query_error (ID: 05900052)
- Default Severity
- ERROR
- Log Message
- Failed to send DCC query.
- Explanation
- A DCC query could not be sent.
- Firewall Action
- None
- Recommended Action
- Verify that the DCC servers are reachable.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.17. dcc_no_license (ID: 05900053)
- Default Severity
- ERROR
- Log Message
- DCC has been disabled due to license restrictions.
- Explanation
- DCC has been disabled due to license restrictions.
- Firewall Action
- None
- Recommended Action
- Extend valid time for DCC.
- Revision
- 1
- Parameters
- sourceip
from
to
profile
- Context Parameters
- Connection
ALG Module Name
ALG Session ID
2.4.18. recipient_email_changed_to_drop_address (ID: 05900196)
- Default Severity
- NOTICE
- Log Message
- SMTPALG: Recipient e-mail address is changed to DNSBL Drop address
- Explanation
- "RCPT TO:" e-mail address is changed to the Drop address configured in DNS Blacklist.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
- Parameters
- sender_email_address
drop_address
- Context Parameters
- ALG Module Name
ALG Session ID
2.4.19. dnsbl_allocate_error (ID: 05900800)
- Default Severity
- EMERGENCY
- Log Message
- Could not allocate memory
- Explanation
- Could not allocate memory.
- Firewall Action
- None
- Recommended Action
- Check memory.
- Revision
- 1
- Parameters
- type
2.4.20. dnsbl_ipcache_add (ID: 05900810)
- Default Severity
- NOTICE
- Log Message
- IP <ipaddr> added to IP Cache for <algname>
- Explanation
- An IP address was added to the IP Cache.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
- Parameters
- type
algname
ipaddr
2.4.21. dnsbl_ipcache_remove (ID: 05900811)
- Default Severity
- NOTICE
- Log Message
- IP <ipaddr> removed from IP Cache for <algname> due to timeout
- Explanation
- An IP address was removed from the IP Cache due to timeout.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
- Parameters
- type
algname
ipaddr
2.4.22. dnsbl_session_add (ID: 05900812)
- Default Severity
- NOTICE
- Log Message
- Session created for IP <ipaddr> for <algname>
- Explanation
- Session created and awaiting processing.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
- Parameters
- type
algname
ipaddr
2.4.23. dnsbl_session_error (ID: 05900813)
- Default Severity
- ERROR
- Log Message
- Error creating Session for IP <ipaddr> for <algname>
- Explanation
- Error creating new Session.
- Firewall Action
- dnsbl will not process mail
- Recommended Action
- Check configuration and dns settings.
- Revision
- 1
- Parameters
- type
algname
ipaddr
2.4.24. dnsbl_ipcache_add (ID: 05900814)
- Default Severity
- NOTICE
- Log Message
- Session for IP <ipaddr> for <algname> is done with result <result>
- Explanation
- An IP address was added to the IP Cache.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
- Parameters
- type
algname
ipaddr
result
2.4.25. dnsbl_disabled (ID: 05900815)
- Default Severity
- EMERGENCY
- Log Message
- DNSBL for <algname> has been disabled
- Explanation
- The DNSBL has been disabled due to few active BlackLists.
- Firewall Action
- None
- Recommended Action
- Check configuration of DNSBL.
- Revision
- 1
- Parameters
- type
algname
2.4.26. dnsbl_active (ID: 05900816)
- Default Severity
- NOTICE
- Log Message
- DNSBL for <algname> has been activated
- Explanation
- The DNSBL has changed status from disabled to active as contact with BlackLists have been restored.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
- Parameters
- type
algname
2.4.27. dnsbl_query_add (ID: 05900817)
- Default Severity
- NOTICE
- Log Message
- Query created for IP <ipaddr> to BlackList <blacklist> for <algname>
- Explanation
- A DNS Query was created.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
- Parameters
- type
algname
ipaddr
blacklist
query
2.4.28. dnsbl_blacklist_disable (ID: 05900818)
- Default Severity
- WARNING
- Log Message
- BlackList <blacklist> for <algname> has been disabled
- Explanation
- BlackList was disable as it failed to respond to the query.
- Firewall Action
- None
- Recommended Action
- Check configuration if keeps begin disabled.
- Revision
- 1
- Parameters
- type
algname
blacklist
2.4.29. dnsbl_txtrecord_truncated (ID: 05900819)
- Default Severity
- WARNING
- Log Message
- TXT records does not fit buffer for Session with IP <ipaddr> for <algname>
- Explanation
- TXT records will not fit the string buffer and will be truncated.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
- Parameters
- type
algname
ipaddr
2.4.30. dnsbl_record_truncated (ID: 05900820)
- Default Severity
- WARNING
- Log Message
- DNSBL name not fit buffer for Session with IP <ipaddr> for <algname>
- Explanation
- DNSBL name will not fit the string buffer and will be truncated.
- Firewall Action
- None
- Recommended Action
- None
- Revision
- 1
- Parameters
- type
algname
ipaddr
cOS Core 15.00.01 Log Reference Guide
