======SMTPStats.SMTPClientFailures table====== The [[SMTPStats]].SMTPClientFailures table contains logging data about errors/usage for the SMTP Services in VPOP3. These are used for the [[smtp_ids_ips|Intrusion Protection]] facility & logging. ====Columns==== * id - sequential ID for the event * ipaddress - the SMTP client's IP address * datetime - the date & time the event occurred * errortype - the type of event (see below) * errordetails - data relating to the type of event * ignore - if the event has been ignored by an administrator (eg if the IP address has been removed from the block list) ===ErrorType=== The ErrorType value indicates the type of SMTP event as below: * 0 = authentication failure * 1 = SMTP relay denied * 2 = SMTP relay allowed * 3 = Unrecognised local recipient * 4 = Recognised local recipient * 5 = Message detected as spam * 6 = Virus detected in message * 7 = SMTP rule blocked the message * 8 = DNS Blacklist blocked the message * 9 = SMTP syntax error (eg unrecognised command or RCPT TO command without a preceding MAIL FROM, etc) * 10 = Message too big * 11 = Message contained attachment blocked by the attachment filter * 12 = Message contained a 'partial' attachment (partial attachments are considered dangerous and are extremely rarely used legitimately nowadays) * 13 = The message was rejected due to an SPF error (see Services -> SMTP -> Spam Reduction -> SPF section)