Local Mail Transfer Protocol Messages
Classification
Rule Name | Rule Type | Common Event | Classification |
---|---|---|---|
Local Mail Transfer Protocol Messages | Base Rule | Message Transfer Out | Information |
DSN 2.0.0 - Success : Unknown Status | Sub Rule | General Message Information | Information |
DSN 2.1.0 - Success : Other Address Status | Sub Rule | General Message Information | Information |
DSN 2.1.1 - Success : Bad Dst Mailbox Addr | Sub Rule | Bad Destination Mailbox Address | Warning |
DSN 2.1.2 - Success : Bad Dst System Addr | Sub Rule | Bad Destination System Address | Warning |
DSN 2.1.3 - Success : Bad Dst Mailbox Syntax | Sub Rule | Bad Destination Mailbox Syntax | Warning |
DSN 2.1.4 - Success : Dst Mailbox Addr Ambiguous | Sub Rule | Destination Mailbox Address Ambiguous | Warning |
DSN 2.1.5 - Success : Dst Address Valid | Sub Rule | Destination Address Valid | Information |
DSN 2.1.6 - Success : Dst Addr Moved No Fwd Addr | Sub Rule | Destination Address Moved With No Forwarding | Warning |
DSN 2.1.7 - Success : Bad Sender Mbox Addr Syntax | Sub Rule | Bad Sender Mailbox Address Syntax | Warning |
DSN 2.1.8 - Success : Bad Sender System Address | Sub Rule | Bad Sender System Address | Warning |
DSN 2.2.0 - Success : Undefined Mbox Status | Sub Rule | General Email Delivery Information | Information |
DSN 2.2.1 - Success : Mailbox Disabled | Sub Rule | Mailbox Disabled | Warning |
DSN 2.2.2 - Success : Mailbox Full | Sub Rule | Mailbox Full | Error |
DSN 2.2.3 - Success : Msg Len Exceeds Admin Limit | Sub Rule | Message Length Exceeds Administrative Limit | Warning |
DSN 2.2.4 - Success : Mailing List Expansion Prob | Sub Rule | Mailing List Expansion Problem | Error |
DSN 2.3.0 - Success : Undefined Mail System Status | Sub Rule | General Email Delivery Information | Information |
DSN 5.3.1 - Failure : Mail System Full | Sub Rule | Mail System Full | Critical |
DSN 2.3.2 - Success : System Not Accepting Msgs | Sub Rule | System Not Accepting Messages | Warning |
DSN 2.3.3 - Success : System Missing Features | Sub Rule | System Missing Required Features | Warning |
DSN 2.3.4 - Success : Message Too Big | Sub Rule | Message Too Large | Warning |
DSN 2.3.5 - Success : System Incorrect Config | Sub Rule | System Incorrectly Configured | Warning |
DSN 2.4.0 - Success : Undefined Network Status | Sub Rule | General Email Delivery Information | Information |
DSN 2.4.1 - Success : No Answer From Host | Sub Rule | No Answer From Host | Warning |
DSN 2.4.2 - Success : Bad Connection | Sub Rule | Bad Connection | Warning |
DSN 2.4.3 - Success : Directory Server Failure | Sub Rule | Host Not Found | Warning |
DSN 2.4.4 - Success : Unable To Route | Sub Rule | Unable To Route | Warning |
DSN 2.4.5 - Success : Mail System Congestion | Sub Rule | Mail System Congestion | Warning |
DSN 2.4.6 - Success : Routing Loop Detected | Sub Rule | Routing Loop Detected | Warning |
DSN 2.4.7 - Success : Delivery Time Expired | Sub Rule | Delivery Time Expired | Warning |
DSN 2.5.0 - Success : Undefined Protocol Status | Sub Rule | General Email Delivery Information | Information |
DSN 2.5.1 - Success : Invalid Command | Sub Rule | Suspicious Activity | Suspicious |
DSN 2.5.2 - Success : Syntax Error | Sub Rule | Syntax Error | Warning |
DSN 2.5.3 - Success : Too Many Recipients | Sub Rule | Suspicious Activity | Suspicious |
DSN 2.5.4 - Success : Invalid Command Arguments | Sub Rule | Invalid Options | Warning |
DSN 2.5.5 - Success : Wrong Protocol Version | Sub Rule | Wrong Protocol Version | Error |
DSN 2.6.0 - Success : Undefined Media Error | Sub Rule | Email Delivery Message Queued | Information |
DSN 2.6.1 - Success : Media Not Supported | Sub Rule | Media Not Supported | Warning |
DSN 2.6.2 - Success : Conversation Req And Denied | Sub Rule | Conversation Required And Denied | Error |
DSN 2.6.3 - Success : Conv Req But Not Supported | Sub Rule | Conversation Required But Not Supported | Error |
DSN 2.6.4 - Success : Conv With Loss Performed | Sub Rule | Conversation With Loss Performed | Warning |
DSN 2.6.5 - Success : Conversation Failed | Sub Rule | Conversation Failed | Error |
DSN 2.7.0 - Success : Undefined Security Status | Sub Rule | Undefined Security Status | Activity |
DSN 2.7.1 - Success : Message Refused | Sub Rule | Message Refused | Warning |
DSN 2.7.2 - Success : Mailing List Expansion Deny | Sub Rule | Mailing List Expansion Denied | Error |
DSN 2.7.3 - Success : Security Conversation Failed | Sub Rule | Conversation Failed | Error |
DSN 2.7.4 - Success : Features Not Supported | Sub Rule | Feature Not Supported | Warning |
DSN 2.7.5 - Success : Cryptographic Failure | Sub Rule | Cryptographic Failure | Error |
DSN 2.7.7 - Success : Message Integrity Failure | Sub Rule | Message Failed Validation | Error |
DSN 2.7.6 - Success : Missing Crypto Algorithm | Sub Rule | Cryptographic Algorithm Missing | Error |
DSN 5.1.7 - Failure : Bad Sender Mbox Addr Syntax | Sub Rule | Bad Sender Mailbox Address Syntax | Warning |
DSN 5.1.8 - Failure : Bad Sender System Address | Sub Rule | Bad Sender System Address | Warning |
DSN 5.2.0 - Failure : Undefined Mbox Status | Sub Rule | General Email Delivery Information | Information |
DSN 5.0.0 - Failure : Unknown Status | Sub Rule | General Message Information | Information |
DSN 5.1.0 - Failure : Other Address Status | Sub Rule | General Message Information | Information |
DSN 5.1.1 - Failure : Bad Dst Mailbox Addr | Sub Rule | Bad Destination Mailbox Address | Warning |
DSN 5.1.2 - Failure : Bad Dst System Addr | Sub Rule | Bad Destination System Address | Warning |
DSN 5.1.3 - Failure : Bad Dst Mailbox Syntax | Sub Rule | Bad Destination Mailbox Syntax | Warning |
DSN 5.1.4 - Failure : Dst Mailbox Addr Ambiguous | Sub Rule | Destination Mailbox Address Ambiguous | Warning |
DSN 5.1.5 - Failure : Dst Address Valid | Sub Rule | Destination Address Valid | Information |
DSN 5.1.6 - Failure : Dst Addr Moved No Fwd Addr | Sub Rule | Destination Address Moved With No Forwarding | Warning |
DSN 5.2.1 - Failure : Mailbox Disabled | Sub Rule | Mailbox Disabled | Warning |
DSN 5.2.2 - Failure : Mailbox Full | Sub Rule | Mailbox Full | Error |
DSN 5.2.3 - Failure : Msg Len Exceeds Admin Limit | Sub Rule | Message Length Exceeds Administrative Limit | Warning |
DSN 5.2.4 - Failure : Mailing List Expansion Prob | Sub Rule | Mailing List Expansion Problem | Error |
DSN 5.3.0 - Failure : Undefined Mail System Status | Sub Rule | General Email Delivery Information | Information |
DSN 2.3.1 - Success : Mail System Full | Sub Rule | Mail System Full | Critical |
DSN 5.3.2 - Failure : System Not Accepting Msgs | Sub Rule | System Not Accepting Messages | Warning |
DSN 5.3.3 - Failure : System Missing Features | Sub Rule | System Missing Required Features | Warning |
DSN 5.3.4 - Failure : Message Too Big | Sub Rule | Message Too Large | Warning |
DSN 5.3.5 - Failure : System Incorrect Config | Sub Rule | System Incorrectly Configured | Warning |
DSN 5.4.0 - Failure : Undefined Network Status | Sub Rule | General Email Delivery Information | Information |
DSN 5.4.1 - Failure : No Answer From Host | Sub Rule | No Answer From Host | Warning |
DSN 5.4.2 - Failure : Bad Connection | Sub Rule | Bad Connection | Warning |
DSN 5.4.3 - Failure : Directory Server Failure | Sub Rule | Host Not Found | Warning |
DSN 5.4.4 - Failure : Unable To Route | Sub Rule | Unable To Route | Warning |
DSN 5.4.5 - Failure : Mail System Congestion | Sub Rule | Mail System Congestion | Warning |
DSN 5.4.6 - Failure : Routing Loop Detected | Sub Rule | Routing Loop Detected | Warning |
DSN 5.4.7 - Failure : Delivery Time Expired | Sub Rule | Delivery Time Expired | Warning |
DSN 5.5.0 - Failure : Undefined Protocol Status | Sub Rule | General Email Delivery Information | Information |
DSN 5.5.1 - Failure : Invalid Command | Sub Rule | Suspicious Activity | Suspicious |
DSN 5.5.2 - Failure : Syntax Error | Sub Rule | Syntax Error | Warning |
DSN 5.5.3 - Failure : Too Many Recipients | Sub Rule | Suspicious Activity | Suspicious |
DSN 5.5.4 - Failure : Invalid Command Arguments | Sub Rule | Invalid Options | Warning |
DSN 5.5.5 - Failure : Wrong Protocol Version | Sub Rule | Wrong Protocol Version | Error |
DSN 5.6.0 - Failure : Undefined Media Error | Sub Rule | Undefined Media Error | Error |
DSN 5.6.1 - Failure : Media Not Supported | Sub Rule | Media Not Supported | Warning |
DSN 5.6.2 - Failure : Conversation Req And Denied | Sub Rule | Conversation Required And Denied | Error |
DSN 5.6.3 - Failure : Conv Req But Not Supported | Sub Rule | Conversation Required But Not Supported | Error |
DSN 5.6.4 - Failure : Conv With Loss Performed | Sub Rule | Conversation With Loss Performed | Warning |
DSN 5.6.5 - Failure : Conversation Failed | Sub Rule | Conversation Failed | Error |
DSN 5.7.0 - Failure : Undefined Security Status | Sub Rule | Undefined Security Status | Activity |
DSN 5.7.1 - Failure : Message Refused | Sub Rule | Message Refused | Warning |
DSN 5.7.2 - Failure : Mailing List Expansion Deny | Sub Rule | Mailing List Expansion Denied | Error |
DSN 5.7.3 - Failure : Security Conversation Failed | Sub Rule | Conversation Failed | Error |
DSN 5.7.4 - Failure : Features Not Supported | Sub Rule | Feature Not Supported | Warning |
DSN 5.7.5 - Failure : Cryptographic Failure | Sub Rule | Cryptographic Failure | Error |
DSN 5.7.6 - Failure : Missing Crypto Algorithm | Sub Rule | Cryptographic Algorithm Missing | Error |
DSN 5.7.7 - Failure : Message Integrity Failure | Sub Rule | Message Failed Validation | Error |
DSN 4.0.0 - Delayed : Unknown Status | Sub Rule | General Message Information | Information |
DSN 4.1.0 - Delayed : Other Address Status | Sub Rule | General Message Information | Information |
DSN 4.1.1 - Delayed : Bad Dst Mailbox Addr | Sub Rule | Bad Destination Mailbox Address | Warning |
DSN 4.1.2 - Delayed : Bad Dst System Addr | Sub Rule | Bad Destination System Address | Warning |
DSN 4.1.3 - Delayed : Bad Dst Mailbox Syntax | Sub Rule | Bad Destination Mailbox Syntax | Warning |
DSN 4.1.4 - Delayed : Dst Mailbox Addr Ambiguous | Sub Rule | Destination Mailbox Address Ambiguous | Warning |
DSN 4.1.5 - Delayed : Dst Address Valid | Sub Rule | Destination Address Valid | Information |
DSN 4.1.6 - Delayed : Dst Addr Moved No Fwd Addr | Sub Rule | Destination Address Moved With No Forwarding | Warning |
DSN 4.1.7 - Delayed : Bad Sender Mbox Addr Syntax | Sub Rule | Bad Sender Mailbox Address Syntax | Warning |
DSN 4.1.8 - Delayed : Bad Sender System Address | Sub Rule | Bad Sender System Address | Warning |
DSN 4.2.0 - Delayed : Undefined Mbox Status | Sub Rule | General Email Delivery Information | Information |
DSN 4.2.1 - Delayed : Mailbox Disabled | Sub Rule | Mailbox Disabled | Warning |
DSN 4.2.2 - Delayed : Mailbox Full | Sub Rule | Mailbox Full | Error |
DSN 4.2.3 - Delayed : Msg Len Exceeds Admin Limit | Sub Rule | Message Length Exceeds Administrative Limit | Warning |
DSN 4.2.4 - Delayed : Mailing List Expansion Prob | Sub Rule | Mailing List Expansion Problem | Error |
DSN 4.3.0 - Delayed : Undefined Mail System Status | Sub Rule | General Email Delivery Information | Information |
DSN 4.3.1 - Delayed : Mail System Full | Sub Rule | Mail System Full | Critical |
DSN 4.3.2 - Delayed : System Not Accepting Msgs | Sub Rule | System Not Accepting Messages | Warning |
DSN 4.3.3 - Delayed : System Missing Features | Sub Rule | System Missing Required Features | Warning |
DSN 4.3.4 - Delayed : Message Too Big | Sub Rule | Message Too Large | Warning |
DSN 4.3.5 - Delayed : System Incorrect Config | Sub Rule | System Incorrectly Configured | Warning |
DSN 4.4.0 - Delayed : Undefined Network Status | Sub Rule | General Email Delivery Information | Information |
DSN 4.4.1 - Delayed : No Answer From Host | Sub Rule | No Answer From Host | Warning |
DSN 4.4.2 - Delayed : Bad Connection | Sub Rule | Bad Connection | Warning |
DSN 4.4.3 - Delayed : Directory Server Failure | Sub Rule | Host Not Found | Warning |
DSN 4.4.4 - Delayed : Unable To Route | Sub Rule | Unable To Route | Warning |
DSN 4.4.5 - Delayed : Mail System Congestion | Sub Rule | Mail System Congestion | Warning |
DSN 4.4.6 - Delayed : Routing Loop Detected | Sub Rule | Routing Loop Detected | Warning |
DSN 4.4.7 - Delayed : Delivery Time Expired | Sub Rule | Delivery Time Expired | Warning |
DSN 4.5.0 - Delayed : Undefined Protocol Status | Sub Rule | General Email Delivery Information | Information |
DSN 4.5.1 - Delayed : Invalid Command | Sub Rule | Suspicious Activity | Suspicious |
DSN 4.5.2 - Delayed : Syntax Error | Sub Rule | Syntax Error | Warning |
DSN 4.5.3 - Delayed : Too Many Recipients | Sub Rule | Suspicious Activity | Suspicious |
DSN 4.5.4 - Delayed : Invalid Command Arguments | Sub Rule | Invalid Options | Warning |
DSN 4.5.5 - Delayed : Wrong Protocol Version | Sub Rule | Wrong Protocol Version | Error |
DSN 4.6.0 - Delayed : Undefined Media Error | Sub Rule | Undefined Media Error | Error |
DSN 4.6.1 - Delayed : Media Not Supported | Sub Rule | Media Not Supported | Warning |
DSN 4.6.2 - Delayed : Conversation Req And Denied | Sub Rule | Conversation Required And Denied | Error |
DSN 4.6.3 - Delayed : Conv Req But Not Supported | Sub Rule | Conversation Required But Not Supported | Error |
DSN 4.6.4 - Delayed : Conv With Loss Performed | Sub Rule | Conversation With Loss Performed | Warning |
DSN 4.6.5 - Delayed : Conversation Failed | Sub Rule | Conversation Failed | Error |
DSN 4.7.0 - Delayed : Undefined Security Status | Sub Rule | Undefined Security Status | Activity |
DSN 4.7.1 - Delayed : Message Refused | Sub Rule | Message Refused | Warning |
DSN 4.7.2 - Delayed : Mailing List Expansion Deny | Sub Rule | Mailing List Expansion Denied | Error |
DSN 4.7.3 - Delayed : Security Conversation Failed | Sub Rule | Conversation Failed | Error |
DSN 4.7.4 - Delayed : Features Not Supported | Sub Rule | Feature Not Supported | Warning |
DSN 4.7.5 - Delayed : Cryptographic Failure | Sub Rule | Cryptographic Failure | Error |
DSN 4.7.6 - Delayed : Missing Crypto Algorithm | Sub Rule | Cryptographic Algorithm Missing | Error |
DSN 4.7.7 - Delayed : Message Integrity Failure | Sub Rule | Message Failed Validation | Error |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type |
---|---|---|
N/A | <severity> | Text/String |
N/A | <process> | Text/String |
N/A | <protname> | String |
N/A | <processid> | Numeric |
N/A | <session> | Text/String |
N/A | <recipient> | Text/String |
N/A | <dname> | Text/String |
N/A | <dip> | Numeric |
N/A | <dport> | Numeric |
N/A | <milliseconds> | Numeric |
N/A | <vmid> | Numeric |
N/A | <status> | Text/String |
N/A | <responsecode> | Numeric |