Nortel CallPilot Administrator's Manual page 109

IF the sender is a THEN
remote server
When the mailbox or server becomes disabled, an event is logged. The
event includes the following information:
•
•
Monitoring activities manually
You can manually monitor activities based on the following:
•
•
•
You can define up to 100 activities to monitor. Monitoring provides you with
a detailed list of activities received from the IP address, user ID, or FQDN.
Activities that appear in the list include:
•
•
Copyright © 2007, Nortel Networks
.
Monitoring internal and external activity by calling line ID 109
Note: If the mailbox is disabled, the user cannot log in from
either a telephone or by using a desktop or web messaging
client. Messages are no longer accepted through the
SMTP from that user, regardless of whether the user is
authenticated or not.
After the specified number of unsuccessful attempts,
message reception from the remote server is disabled
and an event is logged. Refer to the online Help topic
Configuring the authentication options on the local server.
Note: If the remote server is disabled, messages from the
remote server are no longer accepted.
Note: If the sender is presenting itself as a local mailbox or a remote
server that does not actually exist, the system treatment is the same
as when the mailbox or remote server does exist. This prevents the
hacker from learning that the mailbox or server are not defined on the
local system.
the user ID (local mailbox number or remote server FQDN) used in the
authentication attempt
the FQDN and IP address from which the last authentication failure
occurred
FQDN of the remote messaging server or desktop or web messaging
client attempting to connect
IP address of the remote messaging server or desktop or web
messaging client attempting to connect
authenticating user ID
all connections with successful authentication attempts
all connections with unsuccessful authentication attempts
Nortel CallPilot
Administrator Guide
NN44200-601 01.11 Standard
5.0 9 November 2007