Sender Policy Framework Message
Vendor Documentation
Classification
| Rule Name | Rule Type | Classification | Common Event |
|---|---|---|---|
| Sender Policy Framework Message | Base Rule | Ops/Information | General Email Handling Message |
| PRA From Header Passed | Sub Rule | Ops/Information | Email Accepted |
| Purported Responsible Address Sender Header Passed | Sub Rule | Ops/Information | Email Accepted |
| No HELO Identity | Sub Rule | Ops/Warning | Email Transaction Failed |
| HELO Identity Passed | Sub Rule | Ops/Information | Email Accepted |
| HELO Identity Passed | Sub Rule | Ops/Information | Email Accepted |
| MAILFROM Identity Failed | Sub Rule | Ops/Warning | Email Transaction Failed |
| MAILFROM Identity Permanent Error | Sub Rule | Ops/Warning | Email Transaction Failed |
| MAILFROM Invalid Identity Format | Sub Rule | Ops/Warning | Email Transaction Failed |
| No MAILFROM Identity | Sub Rule | Ops/Warning | Email Transaction Failed |
| PRA Identity Soft Fail | Sub Rule | Ops/Warning | Email Transaction Failed |
| No PRA From Identity | Sub Rule | Ops/Warning | Email Transaction Failed |
| No PRA Sender Identity | Sub Rule | Ops/Warning | Email Transaction Failed |
| No PRA Identity | Sub Rule | Ops/Warning | Email Transaction Failed |
Mapping with LogRhythm Schema
| Device Key in Log Message | LogRhythm Schema | Data Type | Schema Description |
<sname> | Text\String | ||
| MID | <session> | Number | |
| <object> | Text\String | ||
| <subject> | Text\String | ||
| <sender> | Text\String | ||
| <tag1> | Text\String | ||
| <tag2> | Text\String |