The SMTPStats.SMTPClientFailures table contains logging data about errors/usage for the SMTP Services in VPOP3. These are used for the Intrusion Protection facility & logging.

• id - sequential ID for the event
• ipaddress - the SMTP client's IP address
• datetime - the date & time the event occurred
• errortype - the type of event (see below)
• errordetails - data relating to the type of event
• ignore - if the event has been ignored by an administrator (eg if the IP address has been removed from the block list)

The ErrorType value indicates the type of SMTP event as below:

• 0 = authentication failure
• 1 = SMTP relay denied
• 2 = SMTP relay allowed
• 3 = Unrecognised local recipient
• 4 = Recognised local recipient
• 5 = Message detected as spam
• 6 = Virus detected in message
• 7 = SMTP rule blocked the message
• 8 = DNS Blacklist blocked the message
• 9 = SMTP syntax error (eg unrecognised command or RCPT TO command without a preceding MAIL FROM, etc)
• 10 = Message too big
• 11 = Message contained attachment blocked by the attachment filter
• 12 = Message contained a 'partial' attachment (partial attachments are considered dangerous and are extremely rarely used legitimately nowadays)
• 13 = The message was rejected due to an SPF error (see Services → SMTP → Spam Reduction → SPF section)