ePrism User Guide - EdgeWave

Examining Log Files
For example, the following analysis string is interpreted as follows:
analysis=rSFFFFTUF099000FFFFFFTK000TFT000TF--50000000F1F-FF
Final action: Redirect, STA Upper
RBL: off SPF: off
Anti-Virus: Kaspersky passed
Malformed: no Attachments: passed Message Affirmation: off
PBMF: no match
DCC: off STA: metric=99, spam=yes, threshold=upper OCF: off
The following table describes each character in the analysis string.
TABLE 1. Analysis Code Descriptions
Analysis Code Description Possible Values
r Final Action (Redirect) D - Reject
A - Accept
V - Valid
S - Spam
T - Trust
R - Relay
H - Modify Header
h - Add Header
Q - Quarantine
d - Discard Mail
L - Just Log
B - Bounce Mail
r - Redirect
C - BCC
z - Temporary Reject
- None
S
Final Action Code (S - STA
Upper)
W - PBMF
w - Trusted Senders List
D - DCC
S - STA Upper
s - STA Lower
V - Anti-virus
C - Attachment Control
M - Malformed
R - RBL
F - OCF
X - Crash (insufficient data)
O - Relay
- None
F Notify Sender? (False) T - True, F - False
F Notify Recipient? (False) T - True, F - False
F Notify Admin? (False) T - True, F - False
F Notify Other? (False) T - True, F - False
255