WSM Reference Guide - WatchGuard Technologies

Traffic LogsSMTP Proxy Traffic Log MessagesText in Message FieldAssociated FieldsSMTP AV ERRORfilenameerrorsenderrecipientSMTP REQrcvd_bytessent_bytessenderrecipientSMTP MESSAGE FORMATheadermime_errorsenderrecipientsSMTP IPS MATCHips_msgsignature_idSMTP TOO MANY RECIPIENTSnum_recipientsSMTP RESPONSE SIZE TOO LONGheaders_sizeSMTP LINE LENGTH TOO LONGline_lengthSMTP MESSAGE SIZE TOO LONGsizeSMTP HEADERS SIZE TOO LONGheaders_sizeMessage MeaningValue that appears in associated field(s)The SMTP cannot finish an antivirus scan, usually because anattachment was encryptedfile namedescription of errorsender e-mail address (from envelope)recipient e-mail addresses (from envelope)Auditing information about an SMTP requestsize of message before proxyingsize of message after proxyingsender e-mail address (from envelope)recipient e-mail addresses (from envelope)The SMTP header uses a format that is not correctheader with improper formatdescription of format errorsender e-mail address (from envelope)recipient e-mail addresses (from envelope)The SMTP proxy found an IPS signature matchdescription of the signature that matchedthe signature ID of the rule that matchedThe number of e-mail addresses in the TO field is larger than theconfigured limitnumber of recipientsThe SMTP server sent a response that is too longtotal size of message headers (up to when log emitted; full headers canbe larger)The SMTP client or server has sent a line that is longer than theconfigured limittotal size of header line (up to when log emitted; full line can be larger)The SMTP client sent a message larger than the configured limitsize in bytes of message received (up to when log emitted; full messagecan be larger)The SMTP client sent a header section that is larger than the SMTP limittotal size of message headers (up to when log emitted; full headers canbe larger)DNS Proxy Traffic Log MessagesText in Message FieldAssociated FieldsDNS INVALID NUMBER OF QUESTIONSDNS OVERSIZED QUERY NAMEDNS COMPRESSED QUERY NAMEDNS PARSE ERRORDNS NOT INTERNET CLASSquery_classDNS DENIED OPCODErulenamequery_opcodeDNS DENIED QUERY TYPErulenamequery_typeDNS UNDERSIZED QUESTIONMessage MeaningValue that appears in associated field(s)There is more than one RRs inquiry in one DNS requestThe total DNS query frame size is larger than the DNS protocol limitThe client used a DNS compression scheme in the query nameThe DNS request or respone is not in the correct format.The DNS query is not in IP protocol formatname or number of its classThe opcode matches a configured proxy rulename of rule matched in rulesetname of the denied opcode (IQUERY, STATUS, UPDATE)The query type matches a configured proxy rulename of rule matched in rulesetname of denied type (a, MX, NS)The name component of the DNS query is too small32 WatchGuard System Manager