9htv3r5D

1********************
2
3BEGIN EXAMPLE MESSAGE HEADERS
4
5********************
6
7Return-Path: <customerservice@xrite.com>
8Delivered-To: user0@example.com
9Received: from mail8.example.com (localhost [127.0.0.1])
10	by mail8.example.com (Postfix) with ESMTP id C888961803B
11	for <user0@example.com>; Thu, 23 Aug 2018 12:09:14 -0700 (PDT)
12X-Virus-Scanned: amavisd-new at mail8.example.com
13X-Spam-Flag: YES
14X-Spam-Score: 1.105
15X-Spam-Level: *
16X-Spam-Status: Yes, score=1.105 tagged_above=0 required=0
17	tests=[HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.105,
18	RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001]
19	autolearn=no autolearn_force=no
20Received: from mail8.example.com ([127.0.0.1])
21	by mail8.example.com (mail8.example.com [127.0.0.1]) (amavisd-new, port 10024)
22	with ESMTP id M3N941Q6NbKl for <user0@example.com>;
23	Thu, 23 Aug 2018 12:09:08 -0700 (PDT)
24Received: from GREXCAP003.XRITE.com (grexcap003.xrite.com [208.71.80.106])
25	by mail8.example.com (Postfix) with ESMTPS id D168961803A
26	for <user666@example.com>; Thu, 23 Aug 2018 12:09:06 -0700 (PDT)
27Received: from 806946-VM166 (192.168.171.140) by GREXCAP003.XRITE.com
28 (10.27.148.218) with Microsoft SMTP Server id 14.2.347.0; Thu, 23 Aug 2018
29 15:08:55 -0400
30MIME-Version: 1.0
31From: X-Rite Customer Service <customerservice@xrite.com>
32To: <user666@example.com>
33Date: Thu, 23 Aug 2018 15:08:55 -0400
34Subject: ***Spam*** My X-Rite Registration Verification
35Content-Type: text/html; charset="us-ascii"
36Content-Transfer-Encoding: quoted-printable
37Message-ID: <dab86839-9402-44d7-87ba-ae6bc31e7dc1@GREXCAP003.XRITE.com>
38
39********************
40
41END EXAMPLE MESSAGE HEADERS
42
43********************
44
45
46********************
47
48BEGIN TEXT OF /usr/local/etc/amavisd.conf
49
50********************
51
52use strict;
53
54# @bypass_virus_checks_maps = (1);  # controls running of anti-virus code
55# @bypass_spam_checks_maps  = (1);  # controls running of anti-spam code
56# $bypass_decode_parts = 1;         # controls running of decoders&dearchivers
57
58$daemon_user  = 'vscan';     # (no default;  customary: vscan or amavis), -u
59$daemon_group = 'vscan';     # (no default;  customary: vscan or amavis), -g
60
61# Set hostname.
62$myhostname = "mail8.example.com";
63$localhost_name = $myhostname;
64$mydomain = "mail8.example.com";	# = 'example.com';   # a convenient default for other settings
65
66$MYHOME = '/var/amavis';   # a convenient default for other settings, -H
67$TEMPBASE = "$MYHOME/tmp";   # working directory, needs to exist, -T
68$ENV{TMPDIR} = $TEMPBASE;    # environment variable TMPDIR, used by SA, etc.
69$db_home   = "$MYHOME/db";      # dir for bdb nanny/cache/snmp databases, -D
70$QUARANTINEDIR = '/var/virusmails';  # -Q
71$quarantine_subdir_levels = 2;  # add level of subdirs to disperse quarantine
72# $release_format = 'resend';     # 'attach', 'plain', 'resend'
73# $report_format  = 'arf';        # 'attach', 'plain', 'resend', 'arf'
74# $daemon_chroot_dir = $MYHOME;   # chroot directory or undef, -R
75# $helpers_home = "$MYHOME/var";  # working directory for SpamAssassin, -S
76
77$lock_file = '/var/amavis/var/amavisd.lock';  # -L
78$pid_file = '/var/amavis/var/amavisd.pid';   # -P
79
80@local_domains_maps = 1;
81@mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10
82                  10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 );
83
84# Socket file, used by amavisd-release or amavis-milter.
85$unix_socketname = "$MYHOME/amavisd.sock";  # amavisd-release or amavis-milter
86               # option(s) -p overrides $inet_socket_port and $unix_socketname
87
88#
89# BDB
90#
91$enable_db = 0;              # enable use of BerkeleyDB/libdb (SNMP and nanny)
92$nanny_details_level = 2;    # nanny verbosity: 1: traditional, 2: detailed
93
94$inet_socket_port = [10024, 10026, 10027, 9998];
95
96$policy_bank{'MYNETS'} = {   # mail originating from @mynetworks
97    originating => 1,  # is true in MYNETS by default, but let's make it explicit
98    os_fingerprint_method => undef,  # don't query p0f for internal clients
99    allow_disclaimers => 1, # enables disclaimer insertion if available
100    enable_dkim_signing => 1,
101};
102
103# Postfix will re-route mail from authenticated users to this port.
104$interface_policy{'10026'} = 'ORIGINATING';
105$policy_bank{'ORIGINATING'} = {  # mail supposedly originating from our users
106    originating => 1,         # declare that mail was submitted by our smtp client
107    allow_disclaimers => 1,   # enables disclaimer insertion if available
108    enable_dkim_signing => 1,
109
110    # notify administrator of locally originating malware
111    spam_admin_maps  => ["root\@$mydomain"],
112    # notify administrator of locally originating malware
113    virus_admin_maps => ["root\@$mydomain"],
114    spam_admin_maps  => ["root\@$mydomain"],
115    bad_header_admin_maps => ["root\@$mydomain"],
116    banned_admin_maps => ["root\@$mydomain"],
117    warnbadhsender   => 0,
118    warnbannedsender => 0,
119
120    # force MTA conversion to 7-bit (e.g. before DKIM signing)
121    smtpd_discard_ehlo_keywords => ['8BITMIME'],
122    terminate_dsn_on_notify_success => 0,  # don't remove NOTIFY=SUCCESS option
123
124    # Bypass checks
125    #bypass_spam_checks_maps => [1],    # don't check spam
126    #bypass_virus_checks_maps => [1],   # don't check virus
127    #bypass_banned_checks_maps => [1],  # don't check banned file names and types
128    #bypass_header_checks_maps => [1],  # don't check bad header
129};
130
131$interface_policy{'10027'} = 'MLMMJ';
132$policy_bank{'MLMMJ'} = {
133    originating => 1,           # declare that mail was submitted by our smtp client
134    allow_disclaimers => 0,     # we use 'mlmmj-amime-receive' program to handle disclaimer/footer
135    enable_dkim_signing => 1,   # enable DKIM signing for outbound
136    virus_admin_maps => ["root\@$mydomain"],
137    spam_admin_maps  => ["root\@$mydomain"],
138    smtpd_discard_ehlo_keywords => ['8BITMIME'],
139    terminate_dsn_on_notify_success => 0,  # don't remove NOTIFY=SUCCESS option
140    # Amavisd performs the checks for email sent to mailing list, so no need to
141    # check again for outbound.
142    bypass_spam_checks_maps => [1],     # don't check spam
143    bypass_virus_checks_maps => [1],    # don't check virus
144    bypass_banned_checks_maps => [1],   # don't check banned file names and types
145    bypass_header_checks_maps => [1],   # don't check bad header
146};
147
148$interface_policy{'SOCK'} = 'AM.PDP-SOCK'; # only applies with $unix_socketname
149
150# Use with amavis-release over a socket or with Petr Rehor's amavis-milter.c
151# (with amavis-milter.c from this package or old amavis.c client use 'AM.CL'):
152$policy_bank{'AM.PDP-SOCK'} = {
153  protocol => 'AM.PDP',
154  auth_required_release => 0,  # do not require secret_id for amavisd-release
155};
156
157$sa_tag_level_deflt  = 2.0;  # add spam info headers if at, or above that level
158$sa_tag2_level_deflt = 6.2;  # add 'spam detected' headers at that level
159$sa_kill_level_deflt = 6.9;  # triggers spam evasive actions (e.g. blocks mail)
160$sa_dsn_cutoff_level = 10;   # spam level beyond which a DSN is not sent
161$sa_crediblefrom_dsn_cutoff_level = 18; # likewise, but for a likely valid From
162#$sa_quarantine_cutoff_level = 25; # spam level beyond which quarantine is off
163
164$sa_mail_body_size_limit = 400*1024; # don't waste time on SA if mail is larger
165$sa_local_tests_only = 0;    # only tests which do not require internet access?
166
167$virus_admin               = "virusalert\@$mydomain";  # notifications recip.
168
169$mailfrom_notify_admin     = "virusalert\@$mydomain";  # notifications sender
170$mailfrom_notify_recip     = "virusalert\@$mydomain";  # notifications sender
171$mailfrom_notify_spamadmin = "spam.police\@$mydomain"; # notifications sender
172$mailfrom_to_quarantine = ''; # null return path; uses original sender if undef
173
174@addr_extension_virus_maps      = ('virus');
175@addr_extension_banned_maps     = ('banned');
176@addr_extension_spam_maps       = ('spam');
177@addr_extension_bad_header_maps = ('badh');
178# $recipient_delimiter = '+';  # undef disables address extensions altogether
179# when enabling addr extensions do also Postfix/main.cf: recipient_delimiter=+
180
181$path = '/usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/usr/bin:/bin';
182# $dspam = 'dspam';
183
184$MAXLEVELS = 14;
185$MAXFILES = 3000;
186$MIN_EXPANSION_QUOTA =      100*1024;  # bytes  (default undef, not enforced)
187$MAX_EXPANSION_QUOTA = 500*1024*1024;  # bytes  (default undef, not enforced)
188
189$sa_spam_subject_tag = '***Spam*** ';
190$defang_virus  = 1;  # MIME-wrap passed infected mail
191$defang_banned = 0;  # MIME-wrap passed mail containing banned name
192# for defanging bad headers only turn on certain minor contents categories:
193$defang_by_ccat{CC_BADH.",3"} = 1;  # NUL or CR character in header
194$defang_by_ccat{CC_BADH.",5"} = 1;  # header line longer than 998 characters
195$defang_by_ccat{CC_BADH.",6"} = 1;  # header field syntax error
196
197@keep_decoded_original_maps = (new_RE(
198    # let virus scanner (clamav) see full original message (can be slow)
199    # this setting is required if we're going to use third-party clamav
200    # signatures. for example, Sanesecurity signatures.
201    # FYI: http://sanesecurity.com/support/signature-testing/
202    #qr'^MAIL$',
203
204    qr'^MAIL-UNDECIPHERABLE$', # same as ^MAIL$ if mail is undecipherable
205    qr'^(ASCII(?! cpio)|text|uuencoded|xxencoded|binhex)'i,
206    #qr'^Zip archive data',     # don't trust Archive::Zip
207));
208
209$banned_filename_re = new_RE(
210
211### BLOCKED ANYWHERE
212# qr'^UNDECIPHERABLE$',  # is or contains any undecipherable components
213  qr'^\.(exe-ms|dll)$',                   # banned file(1) types, rudimentary
214# qr'^\.(exe|lha|cab|dll)$',              # banned file(1) types
215
216### BLOCK THE FOLLOWING, EXCEPT WITHIN UNIX ARCHIVES:
217# [ qr'^\.(gz|bz2)$'             => 0 ],  # allow any in gzip or bzip2
218  [ qr'^\.(rpm|cpio|tar)$'       => 0 ],  # allow any in Unix-type archives
219
220  qr'.\.(pif|scr)$'i,                     # banned extensions - rudimentary
221# qr'^\.zip$',                            # block zip type
222
223### BLOCK THE FOLLOWING, EXCEPT WITHIN ARCHIVES:
224# [ qr'^\.(zip|rar|arc|arj|zoo)$'=> 0 ],  # allow any within these archives
225
226  qr'^application/x-msdownload$'i,        # block these MIME types
227  qr'^application/x-msdos-program$'i,
228  qr'^application/hta$'i,
229
230# qr'^message/partial$'i,         # rfc2046 MIME type
231# qr'^message/external-body$'i,   # rfc2046 MIME type
232
233# qr'^(application/x-msmetafile|image/x-wmf)$'i,  # Windows Metafile MIME type
234# qr'^\.wmf$',                            # Windows Metafile file(1) type
235
236  # block certain double extensions in filenames
237  qr'^(?!cid:).*\.[^./]*[A-Za-z][^./]*\.\s*(exe|vbs|pif|scr|bat|cmd|com|cpl|dll)[.\s]*$'i,
238
239# qr'\{[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}\}?'i, # Class ID CLSID, strict
240# qr'\{[0-9a-z]{4,}(-[0-9a-z]{4,}){0,7}\}?'i, # Class ID extension CLSID, loose
241
242  qr'.\.(exe|vbs|pif|scr|cpl)$'i,             # banned extension - basic
243# qr'.\.(exe|vbs|pif|scr|cpl|bat|cmd|com)$'i, # banned extension - basic+cmd
244# qr'.\.(ade|adp|app|bas|bat|chm|cmd|com|cpl|crt|emf|exe|fxp|grp|hlp|hta|
245#        inf|ini|ins|isp|js|jse|lib|lnk|mda|mdb|mde|mdt|mdw|mdz|msc|msi|
246#        msp|mst|ocx|ops|pcd|pif|prg|reg|scr|sct|shb|shs|sys|vb|vbe|vbs|vxd|
247#        wmf|wsc|wsf|wsh)$'ix,                # banned extensions - long
248# qr'.\.(asd|asf|asx|url|vcs|wmd|wmz)$'i,     # consider also
249# qr'.\.(ani|cur|ico)$'i,                 # banned cursors and icons filename
250# qr'^\.ani$',                            # banned animated cursor file(1) type
251# qr'.\.(mim|b64|bhx|hqx|xxe|uu|uue)$'i,  # banned extension - WinZip vulnerab.
252);
253# See http://support.microsoft.com/default.aspx?scid=kb;EN-US;q262631
254# and http://www.cknow.com/vtutor/vtextensions.htm
255
256
257# ENVELOPE SENDER SOFT-WHITELISTING / SOFT-BLACKLISTING
258
259@score_sender_maps = ({ # a by-recipient hash lookup table,
260                        # results from all matching recipient tables are summed
261
262# ## per-recipient personal tables  (NOTE: positive: black, negative: white)
263# 'user1@example.com'  => [{'bla-mobile.press@example.com' => 10.0}],
264# 'user3@example.com'  => [{'.ebay.com'                 => -3.0}],
265# 'user4@example.com'  => [{'cleargreen@cleargreen.com' => -7.0,
266#                           '.cleargreen.com'           => -5.0}],
267
268  ## site-wide opinions about senders (the '.' matches any recipient)
269  '.' => [  # the _first_ matching sender determines the score boost
270
271   new_RE(  # regexp-type lookup table, just happens to be all soft-blacklist
272    [qr'^(bulkmail|offers|cheapbenefits|earnmoney|foryou)@'i         => 5.0],
273    [qr'^(greatcasino|investments|lose_weight_today|market\.alert)@'i=> 5.0],
274    [qr'^(money2you|MyGreenCard|new\.tld\.registry|opt-out|opt-in)@'i=> 5.0],
275    [qr'^(optin|saveonlsmoking2002k|specialoffer|specialoffers)@'i   => 5.0],
276    [qr'^(stockalert|stopsnoring|wantsome|workathome|yesitsfree)@'i  => 5.0],
277    [qr'^(your_friend|greatoffers)@'i                                => 5.0],
278    [qr'^(inkjetplanet|marketopt|MakeMoney)\d*@'i                    => 5.0],
279   ),
280
281   #read_hash("/var/amavis/sender_scores_sitewide"),
282
283   { # a hash-type lookup table (associative array)
284     'nobody@cert.org'                        => -3.0,
285     'cert-advisory@us-cert.gov'              => -3.0,
286     'owner-alert@iss.net'                    => -3.0,
287     'slashdot@slashdot.org'                  => -3.0,
288     'securityfocus.com'                      => -3.0,
289     'ntbugtraq@listserv.ntbugtraq.com'       => -3.0,
290     'security-alerts@linuxsecurity.com'      => -3.0,
291     'mailman-announce-admin@python.org'      => -3.0,
292     'amavis-user-admin@lists.sourceforge.net'=> -3.0,
293     'amavis-user-bounces@lists.sourceforge.net' => -3.0,
294     'spamassassin.apache.org'                => -3.0,
295     'notification-return@lists.sophos.com'   => -3.0,
296     'owner-postfix-users@postfix.org'        => -3.0,
297     'owner-postfix-announce@postfix.org'     => -3.0,
298     'owner-sendmail-announce@lists.sendmail.org'   => -3.0,
299     'sendmail-announce-request@lists.sendmail.org' => -3.0,
300     'donotreply@sendmail.org'                => -3.0,
301     'ca+envelope@sendmail.org'               => -3.0,
302     'noreply@freshmeat.net'                  => -3.0,
303     'owner-technews@postel.acm.org'          => -3.0,
304     'ietf-123-owner@loki.ietf.org'           => -3.0,
305     'cvs-commits-list-admin@gnome.org'       => -3.0,
306     'rt-users-admin@lists.fsck.com'          => -3.0,
307     'clp-request@comp.nus.edu.sg'            => -3.0,
308     'surveys-errors@lists.nua.ie'            => -3.0,
309     'emailnews@genomeweb.com'                => -5.0,
310     'yahoo-dev-null@yahoo-inc.com'           => -3.0,
311     'returns.groups.yahoo.com'               => -3.0,
312     'clusternews@linuxnetworx.com'           => -3.0,
313     lc('lvs-users-admin@LinuxVirtualServer.org')    => -3.0,
314     lc('owner-textbreakingnews@CNNIMAIL12.CNN.COM') => -5.0,
315
316     # soft-blacklisting (positive score)
317     'sender@example.net'                     =>  3.0,
318     '.example.net'                           =>  1.0,
319
320   },
321  ],  # end of site-wide tables
322});
323
324
325@decoders = (
326  ['mail', \&do_mime_decode],
327# [[qw(asc uue hqx ync)], \&do_ascii],  # not safe
328  ['F',    \&do_uncompress, ['unfreeze', 'freeze -d', 'melt', 'fcat'] ],
329  ['Z',    \&do_uncompress, ['uncompress', 'gzip -d', 'zcat'] ],
330  ['gz',   \&do_uncompress, 'gzip -d'],
331  ['gz',   \&do_gunzip],
332  ['bz2',  \&do_uncompress, 'bzip2 -d'],
333  ['xz',   \&do_uncompress,
334           ['xzdec', 'xz -dc', 'unxz -c', 'xzcat'] ],
335  ['lzma', \&do_uncompress,
336           ['lzmadec', 'xz -dc --format=lzma',
337            'lzma -dc', 'unlzma -c', 'lzcat', 'lzmadec'] ],
338  ['lrz',  \&do_uncompress,
339           ['lrzip -q -k -d -o -', 'lrzcat -q -k'] ],
340  ['lzo',  \&do_uncompress, 'lzop -d'],
341  ['lz4',  \&do_uncompress, ['lz4c -d'] ],
342  ['rpm',  \&do_uncompress, ['rpm2cpio.pl', 'rpm2cpio'] ],
343  [['cpio','tar'], \&do_pax_cpio, ['pax', 'gcpio', 'cpio'] ],
344           # ['/usr/local/heirloom/usr/5bin/pax', 'pax', 'gcpio', 'cpio']
345  ['deb',  \&do_ar, 'ar'],
346# ['a',    \&do_ar, 'ar'],  # unpacking .a seems an overkill
347  ['rar',  \&do_unrar, ['unrar', 'rar'] ],
348  ['arj',  \&do_unarj, ['unarj', 'arj'] ],
349  ['arc',  \&do_arc,   ['nomarch', 'arc'] ],
350  ['zoo',  \&do_zoo,   ['zoo', 'unzoo'] ],
351# ['doc',  \&do_ole,   'ripole'],
352  ['cab',  \&do_cabextract, 'cabextract'],
353# ['tnef', \&do_tnef_ext, 'tnef'],
354  ['tnef', \&do_tnef],
355# ['lha',  \&do_lha,   'lha'],  # not safe, use 7z instead
356# ['sit',  \&do_unstuff, 'unstuff'],  # not safe
357  [['zip','kmz'], \&do_7zip,  ['7za', '7z'] ],
358  [['zip','kmz'], \&do_unzip],
359  ['7z',   \&do_7zip,  ['7zr', '7za', '7z'] ],
360  [[qw(gz bz2 Z tar)],
361           \&do_7zip,  ['7za', '7z'] ],
362  [[qw(xz lzma jar cpio arj rar swf lha iso cab deb rpm)],
363           \&do_7zip,  '7z' ],
364  ['exe',  \&do_executable, ['unrar','rar'], 'lha', ['unarj','arj'] ],
365);
366
367# Custom Amavisd log template to always log SpamAssassin testing results,
368# useful for troubleshooting. if you want more verbose log, replace it by:
369#
370#   $log_templ = $log_verbose_templ;
371#
372# WARNING: $log_verbose_templ will log mail subject, this may be illegal
373#          according to the laws in some countries.
374#
375# Note: You can find the original log template at the bottom of
376#       /usr/sbin/amavisd-new.
377$log_templ = '
378[?%#D|#|Passed #
379[? [:ccat|major] |#
380OTHER|CLEAN|MTA-BLOCKED|OVERSIZED|BAD-HEADER-[:ccat|minor]|SPAMMY|SPAM|\
381UNCHECKED[?[:ccat|minor]||-ENCRYPTED|]|BANNED (%F)|INFECTED (%V)]#
382 {[:actions_performed]}#
383,[?%p|| %p][?%a||[?%l|| LOCAL] [:client_addr_port]][?%e|| \[%e\]] %s -> [%D|,]#
384[? %q ||, quarantine: %q]#
385[? %Q ||, Queue-ID: %Q]#
386[? %m ||, Message-ID: [:mail_addr_decode_octets|%m]]#
387[? %r ||, Resent-Message-ID: [:mail_addr_decode_octets|%r]]#
388[? %i ||, mail_id: %i]#
389, Hits: [:SCORE]#
390, size: %z#
391[? [:partition_tag] ||, pt: [:partition_tag]]#
392[~[:remote_mta_smtp_response]|["^$"]||[", queued_as: "]]\
393[remote_mta_smtp_response|[~%x|["queued as ([0-9A-Za-z]+)$"]|["%1"]|["%0"]]|/]#
394#, Subject: [:dquote|[:mime2utf8|[:header_field_octets|Subject]|100|1]]#
395#, From: [:uquote|[:mail_addr_decode_octets|[:rfc2822_from]]]#
396[? [:dkim|sig_sd]    ||, dkim_sd=[:dkim|sig_sd]]#
397[? [:dkim|newsig_sd] ||, dkim_new=[:dkim|newsig_sd]]#
398, %y ms#
399[? %#T ||, Tests: \[[%T|,]\]]#
400]
401[?%#O|#|Blocked #
402[? [:ccat|major|blocking] |#
403OTHER|CLEAN|MTA-BLOCKED|OVERSIZED|BAD-HEADER-[:ccat|minor]|SPAMMY|SPAM|\
404UNCHECKED[?[:ccat|minor]||-ENCRYPTED|]|BANNED (%F)|INFECTED (%V)]#
405 {[:actions_performed]}#
406,[?%p|| %p][?%a||[?%l|| LOCAL] [:client_addr_port]][?%e|| \[%e\]] %s -> [%D|,]#
407[? %q ||, quarantine: %q]#
408[? %Q ||, Queue-ID: %Q]#
409[? %m ||, Message-ID: [:mail_addr_decode_octets|%m]]#
410[? %r ||, Resent-Message-ID: [:mail_addr_decode_octets|%r]]#
411[? %i ||, mail_id: %i]#
412, Hits: [:SCORE]#
413, size: %z#
414[? [:partition_tag] ||, pt: [:partition_tag]]#
415#, Subject: [:dquote|[:mime2utf8|[:header_field_octets|Subject]|100|1]]#
416#, From: [:uquote|[:mail_addr_decode_octets|[:rfc2822_from]]]#
417[? [:dkim|sig_sd]    ||, dkim_sd=[:dkim|sig_sd]]#
418[? [:dkim|newsig_sd] ||, dkim_new=[:dkim|newsig_sd]]#
419, %y ms#
420[? %#T ||, Tests: \[[%T|,]\]]#
421]';
422
423$notify_method  = 'smtp:[127.0.0.1]:10025';
424$forward_method = 'smtp:[127.0.0.1]:10025';
425
426# Mark Spam/Virus with third-party clamav signatures: SaneSecurity.
427#   *) The order matters, first match wins. Set to 'undef' to keep as infected
428#   *) Anything declared as undefined will be marked as a virus
429@virus_name_to_spam_score_maps =(new_RE(
430    # SaneSecurity + Foxhole
431    [ qr'^Sanesecurity\.(Malware|Badmacro|Foxhole|Rogue|Trojan)\.' => undef ],
432    [ qr'^Sanesecurity\.MalwareHash\.'    => undef ],
433    [ qr'^Sanesecurity.TestSig_'          => undef ],
434    [ qr'^Sanesecurity\.'                 => 0.1 ],
435
436    # winnow
437    [ qr'^winnow\.(Exploit|Trojan|malware)\.'     => undef ],
438    [ qr'^winnow\.(botnet|compromised|trojan)'    => undef ],
439    [ qr'^winnow\.(exe|ms|JS)\.'                  => undef ],
440    [ qr'^winnow\.phish\.'                        => 3.0 ],
441    [ qr'^winnow\.'                               => 0.1 ],
442
443    # bofhland
444    [ qr'^Bofhland\.Malware\.'                    => undef ],
445    [ qr'^BofhlandMWFile'                         => undef ],
446    [ qr'^Bofhland\.Phishing\.'                   => 3.0 ],
447    [ qr'^Bofhland\.'                             => 0.1 ],
448
449    # porcupine.ndb
450    [ qr'^Porcupine\.(Malware|Trojan)\.'          => undef ],
451    [ qr'^Porcupine\.(Junk|Spammer)\.'            => 3.0 ],
452    [ qr'^Porcupine\.Phishing\.'                  => 3.0 ],
453    [ qr'^Porcupine\.'                            => 0.01 ],
454
455    # phishtank.ndb
456    [ qr'^PhishTank\.Phishing\.'                  => 3.0 ],
457
458    # SecuriteInfo
459    [ qr'^SecuriteInfo\.com\.Spammer\.'           => 3.0 ],
460
461    # Others
462    [ qr'^Structured\.(SSN|CreditCardNumber)\b'            => 0.1 ],
463    [ qr'^(Heuristics\.)?Phishing\.'                       => 0.1 ],
464    [ qr'^(Email|HTML)\.Phishing\.(?!.*Sanesecurity)'      => 0.1 ],
465    [ qr'^Email\.Spam\.Bounce(\.[^., ]*)*\.Sanesecurity\.' => 0   ],
466    [ qr'^Email\.Spammail\b'                               => 0.1 ],
467    [ qr'^MSRBL-(Images|SPAM)\b'                           => 0.1 ],
468    [ qr'^VX\.Honeypot-SecuriteInfo\.com\.Joke'            => 0.1 ],
469    [ qr'^VX\.not-virus_(Hoax|Joke)\..*-SecuriteInfo\.com(\.|\z)' => 0.1 ],
470    [ qr'^Email\.Spam.*-SecuriteInfo\.com(\.|\z)'          => 0.1 ],
471    [ qr'^Safebrowsing\.'                                  => 0.1 ],
472    [ qr'^INetMsg\.SpamDomain'                             => 0.1 ],
473    [ qr'^Doppelstern\.(Spam|Scam|Phishing|Junk|Lott|Loan)'=> 0.1 ],
474    [ qr'^ScamNailer\.'                                    => 0.1 ],
475    [ qr'^HTML/Bankish'                                    => 0.1 ],
476    [ qr'(-)?SecuriteInfo\.com(\.|\z)'                     => undef ],
477    [ qr'^MBL_NA\.UNOFFICIAL'                              => 0.1 ],
478    [ qr'^MBL_'                                            => undef ],
479));
480
481@av_scanners = (
482    ['ClamAV-clamd',
483    \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd.sock"],
484    qr/\bOK$/, qr/\bFOUND$/,
485    qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
486);
487
488@av_scanners_backup = (
489    ['ClamAV-clamscan', 'clamscan',
490    "--stdout --disable-summary -r --tempdir=$TEMPBASE {}", [0], [1],
491    qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
492);
493
494#
495# Port used to release quarantined mails.
496#
497$interface_policy{'9998'} = 'AM.PDP-INET';
498$policy_bank{'AM.PDP-INET'} = {
499    protocol => 'AM.PDP',       # select Amavis policy delegation protocol
500    inet_acl => [qw( 127.0.0.1 [::1] )],    # restrict access to these IP addresses
501    auth_required_release => 1,    # 0 - don't require secret_id for amavisd-release
502    #log_level => 4,
503    #always_bcc_by_ccat => {CC_CLEAN, 'admin@example.com'},
504};
505
506#########################
507# Default action applied to detected spam/virus/banned/bad-header, and how to
508# quarantine them
509#
510# Available actions:
511#
512#   - D_PASS: Mail will pass to recipients, regardless of bad contents.
513#             If a quarantine is configured, a copy of the mail will go there.
514#             Note that including a recipient in a @*_lovers_maps is
515#             functionally equivalent to setting '*_destiny = D_PASS;'
516#             for that recipient.
517#
518#   - D_BOUNCE: Mail will not be delivered to its recipients. A non-delivery
519#               notification (bounce) will be created and sent to the sender.
520#
521#   - D_REJECT: Mail will not be delivered to its recipients. Amavisd will
522#               send the typical 55x reject response to the upstream MTA and
523#               that MTA may create a reject notice (bounce) and return it to
524#               the sender.
525#               This notice is not as informative as the one created using
526#               D_BOUNCE, so usually D_BOUNCE is preferred over D_REJECT.
527#               If a quarantine is configured, a copy of the mail will go
528#               there, if not mail message will be lost, but the sender should
529#               be notified their message was rejected.
530#
531#   - D_DISCARD: Mail will not be delivered to its recipients and the sender
532#                normally will NOT be notified.
533#                If a quarantine is configured, a copy of the mail will go
534#                there, if not mail message will be lost. Note that there are
535#                additional settings available that can send notifications to
536#                persons that normally may not be notified when an undesirable
537#                message is found, so it is possible to notify the sender even
538#                when using D_DISCARD.
539#
540# Where to store quarantined mail message:
541#
542#   - 'local:spam-%i-%m', quarantine mail on local file system.
543#   - 'sql:', quarantine mail in SQL server specified in @storage_sql_dsn.
544#   - undef, do not quarantine mail.
545
546# SPAM.
547$final_spam_destiny = D_PASS;
548$spam_quarantine_method = 'sql:';
549$spam_quarantine_to = 'spam-quarantine';
550
551# Virus
552$final_virus_destiny = D_DISCARD;
553$virus_quarantine_method = 'sql:';
554$virus_quarantine_to = 'virus-quarantine';
555
556# Banned
557$final_banned_destiny = D_REJECT;
558$banned_files_quarantine_method = 'sql:';
559$banned_quarantine_to = 'banned-quarantine';
560
561# Bad header.
562$final_bad_header_destiny = D_PASS;
563$bad_header_quarantine_method = 'sql:';
564$bad_header_quarantine_to = 'bad-header-quarantine';
565
566#########################
567# Quarantine CLEAN mails.
568# Don't forget to enable clean quarantine in policy bank 'MYUSERS'.
569#
570#$clean_quarantine_method = 'sql:';
571#$clean_quarantine_to = 'clean-quarantine';
572
573# a string to prepend to Subject (for local recipients only) if mail could
574# not be decoded or checked entirely, e.g. due to password-protected archives
575#$undecipherable_subject_tag = '***UNCHECKED*** ';  # undef disables it
576$undecipherable_subject_tag = undef;
577
578# Hope to fix 'nested MAIL command' issue on high load server.
579$smtp_connection_cache_enable = 0;
580
581# The default set of header fields to be signed can be controlled
582# by setting %signed_header_fields elements to true (to sign) or
583# to false (not to sign). Keys must be in lowercase, e.g.:
584# 0 -> off
585# 1 -> on
586$signed_header_fields{'received'} = 0;
587$signed_header_fields{'to'} = 1;
588
589#
590# DKIM
591#
592# Enable DKIM verification globally.
593$enable_dkim_verification = 1;  # enable DKIM signatures verification
594
595# Disable DKIM signing globally, because it's controlled per policy bank.
596#$enable_dkim_signing = 1;
597
598# Add dkim_key here.
599dkim_key("example.com", "dkim", "/var/lib/dkim/example.com.pem");
600
601# Note that signing mail for subdomains with a key of a parent
602# domain is treated by recipients as a third-party key, which
603# may 'hold less merit' in their eyes. If one has a choice,
604# it is better to publish a key for each domain (e.g. host1.a.cn)
605# if mail is really coming from it. Sharing a pem file
606# for multiple domains may be acceptable, so you don't need
607# to generate a different key for each subdomain, but you
608# do need to publish it in each subdomain. It is probably
609# easier to avoid sending addresses like host1.a.cn and
610# always use a parent domain (a.cn) in 'From:', thus
611# avoiding the issue altogether.
612
613# Add new dkim_key for other domain.
614#dkim_key('Your_New_Domain_Name', 'dkim', 'Your_New_Pem_File');
615
616@dkim_signature_options_bysender_maps = ( {
617    # ------------------------------------
618    # For domain: suctest.com.
619    # ------------------------------------
620    # 'd' defaults to a domain of an author/sender address,
621    # 's' defaults to whatever selector is offered by a matching key
622
623    "example.com"    => { d => "example.com", a => 'rsa-sha256', ttl =>  7*24*3600 },
624
625    # catchall defaults
626    '.' => { a => 'rsa-sha256', c => 'relaxed/simple', ttl => 30*24*3600 },
627} );
628
629#
630# Disclaimer settings
631#
632# Uncomment this line to enable singing disclaimer in outgoing mails.
633#$defang_maps_by_ccat{+CC_CATCHALL} = [ 'disclaimer' ];
634
635# Program used to signing disclaimer in outgoing mails.
636$altermime = '/usr/local/bin/altermime';
637
638# Disclaimer in plain text formart.
639@altermime_args_disclaimer = qw(--disclaimer=/etc/postfix/disclaimer/_OPTION_.txt --disclaimer-html=/etc/postfix/disclaimer/_OPTION_.txt --force-for-bad-html);
640
641@disclaimer_options_bysender_maps = ({
642    # Per-domain, per-user disclaimer setting:
643    # '<domain>' => /path/to/disclaimer.txt,
644    # '<email>' => /path/to/disclaimer.txt,
645
646    # Catch-all disclaimer setting: /etc/postfix/disclaimer/default.txt
647    '.' => 'default',
648},);
649
650$sql_allow_8bit_address = 1;
651$timestamp_fmt_mysql = 1;
652
653# Reporting and quarantining.
654@storage_sql_dsn = (
655    ['DBI:mysql:database=amavisd;host=127.0.0.1;port=3306', 'amavisd', '2jEPPLoRe82SnlxR0wdq1pZOb7DYow'],
656);
657
658# Lookup for per-recipient, per-domain and global policy.
659@lookup_sql_dsn = @storage_sql_dsn;
660
661# Don't send email with subject "UNCHECKED contents in mail FROM xxx".
662delete $admin_maps_by_ccat{&CC_UNCHECKED};
663
664# Do not notify administrator about SPAM/VIRUS from remote servers.
665$virus_admin = undef;
666$spam_admin = undef;
667$banned_admin = undef;
668$bad_header_admin = undef;
669
670#
671# Pre-define some policy banks.
672#
673# You can assign certain policy banks to clients/senders you want to whitelist
674# with parameter `@client_ipaddr_policy` and @author_to_policy_bank_maps.
675$policy_bank{'FULL_WHITELIST'} = {
676    bypass_spam_checks_maps => [1],
677    spam_lovers_maps => [1],
678    bypass_decode_parts => 1,
679    bypass_virus_checks_maps => [1],
680    virus_lovers_maps => [1],
681    bypass_banned_checks_maps => [1],
682    banned_files_lovers_maps  => [1],
683    bypass_header_checks_maps => [1],
684    bad_header_lovers_maps => [1],
685};
686
687$policy_bank{'NO_SPAM_CHECK'} = {
688    bypass_spam_checks_maps => [1],
689    spam_lovers_maps => [1],
690};
691
692$policy_bank{'NO_VIRUS_CHECK'} = {
693    bypass_decode_parts => 1,
694    bypass_virus_checks_maps => [1],
695    virus_lovers_maps => [1],
696};
697
698$policy_bank{'NO_BANNED_CHECK'} = {
699    bypass_banned_checks_maps => [1],
700    banned_files_lovers_maps  => [1],
701};
702
703$policy_bank{'NO_BAD_HEADER_CHECK'} = {
704    bypass_header_checks_maps => [1],
705    bad_header_lovers_maps => [1],
706};
707
708#$policy_bank{'MILD_WHITELIST'} = {
709#    score_sender_maps => [ { '.' => [-1.8] } ],
710#};
711
712#
713# Logging
714#
715$do_syslog = 1;             # log via syslogd (preferred)
716$syslog_facility = 'mail';  # Syslog facility as a string
717$log_level = 5;             # Amavisd log level.
718                            # Verbosity: 0, 1, 2, 3, 4, 5, -d.
719$sa_debug = 1;              # SpamAssassin debugging (require $log_level).
720                            # Default if off (0).
721
722# Amavisd on some Linux/BSD distribution use $banned_namepath_re instead of
723# $banned_filename_re, so we define some blocked file types here.
724#
725# Sample input for $banned_namepath_re:
726#
727#   P=p003\tL=1\tM=multipart/mixed\nP=p002\tL=1/2\tM=application/octet-stream\tT=dat\tN=my_docum.zip
728#   P=p003,L=1,M=multipart/mixed | P=p002,L=1/2,M=application/zip,T=zip,N=FedEx_00628727.zip | P=p005,L=1/2/2,T=asc,N=FedEx_00628727.doc.wsf
729#
730# What it means:
731#   - T: type. e.g. zip archive.
732#   - M: MIME type. e.g. application/octet-stream.
733#   - N: suggested (MIME) name. e.g. my_docum.zip.
734
735$banned_namepath_re = new_RE(
736    #[qr'T=(rar|arc|arj|zoo|gz|bz2)(,|\t)'xmi => 'DISCARD'],     # Compressed file types
737    [qr'T=x-(msdownload|msdos-program|msmetafile)(,|\t)'xmi => 'DISCARD'],
738    [qr'T=(hta)(,|\t)'xmi => 'DISCARD'],
739
740    # Dangerous mime types
741    [qr'T=(9|386|LeChiffre|aaa|abc|aepl|ani|aru|atm|aut|b64|bat|bhx|bkd|blf|bll|bmw|boo|bps|bqf|breaking_bad|buk|bup|bxz|cc|ccc|ce0|ceo|cfxxe|chm|cih|cla|class|cmd|com|cpl|crinf|crjoker|crypt|cryptolocker|cryptowall|ctbl|cxq|cyw|dbd|delf|dev|dlb|dli|dll|dllx|dom|drv|dx|dxz|dyv|dyz|ecc|exe|exe-ms|exe1|exe_renamed|exx|ezt|ezz|fag|fjl|fnr|fuj|good|gzquar|hlp|hlw|hqx|hsq|hts|iva|iws|jar|js|kcd|keybtc@inbox_com|let|lik|lkh|lnk|locky|lok|lol!|lpaq5|magic|mfu|micro|mim|mjg|mjz|nls|oar|ocx|osa|ozd|pcx|pgm|php2|php3|pid|pif|plc|pr|pzdc|qit|qrn|r5a|rhk|rna|rsc_tmp|s7p|scr|shs|ska|smm|smtmp|sop|spam|ssy|swf|sys|tko|tps|tsa|tti|ttt|txs|upa|uu|uue|uzy|vb|vba|vbe|vbs|vbx|vexe|vxd|vzr|wlpginstall|ws|wsc|wsf|wsh|wss|xdu|xir|xlm|xlv|xnt|xnxx|xtbl|xxe|xxx|xyz|zix|zvz|zzz)(,|\t)'xmi => 'DISCARD'],
742
743    # Dangerous file name extensions
744    [qr'N=.*\.(9|386|LeChiffre|aaa|abc|aepl|ani|aru|atm|aut|b64|bat|bhx|bkd|blf|bll|bmw|boo|bps|bqf|breaking_bad|buk|bup|bxz|cc|ccc|ce0|ceo|cfxxe|chm|cih|cla|class|cmd|com|cpl|crinf|crjoker|crypt|cryptolocker|cryptowall|ctbl|cxq|cyw|dbd|delf|dev|dlb|dli|dll|dllx|dom|drv|dx|dxz|dyv|dyz|ecc|exe|exe-ms|exe1|exe_renamed|exx|ezt|ezz|fag|fjl|fnr|fuj|good|gzquar|hlp|hlw|hqx|hsq|hts|iva|iws|jar|js|kcd|keybtc@inbox_com|let|lik|lkh|lnk|locky|lok|lol!|lpaq5|magic|mfu|micro|mim|mjg|mjz|nls|oar|ocx|osa|ozd|pcx|pgm|php2|php3|pid|pif|plc|pr|pzdc|qit|qrn|r5a|rhk|rna|rsc_tmp|s7p|scr|shs|ska|smm|smtmp|sop|spam|ssy|swf|sys|tko|tps|tsa|tti|ttt|txs|upa|uu|uue|uzy|vb|vba|vbe|vbs|vbx|vexe|vxd|vzr|wlpginstall|ws|wsc|wsf|wsh|wss|xdu|xir|xlm|xlv|xnt|xnxx|xtbl|xxe|xxx|xyz|zix|zvz|zzz)$'xmi => 'DISCARD'],
745);
746
747# $bounce_killer_score defaults to 100, it will cause quota exceed notification
748# email sent by Dovecot quarantined by Amavisd.
749$penpals_bonus_score = 8;    # (no effect without a @storage_sql_dsn database)
750$penpals_threshold_high = $sa_kill_level_deflt;  # don't waste time on hi spam
751$bounce_killer_score = 100;  # spam score points to add for joe-jobbed bounces
752
753# Selectively disable some of the header checks
754#
755# Duplicate or multiple occurrence of a header field
756$allowed_header_tests{'multiple'} = 0;
757
758# Missing some headers. e.g. 'Date:'
759$allowed_header_tests{'missing'} = 0;
760
761# Listen on specified addresses.
762$inet_socket_bind = ['127.0.0.1'];
763
764# Set ACL
765@inet_acl = qw(127.0.0.1 [::1]);
766
767# Num of pre-forked children.
768# WARNING: it must match (equal to or larger than) the number set in
769# `maxproc` column in Postfix master.cf for the `smtp-amavis` transport.
770$max_servers = 3;
771
7721;  # insure a defined return
773
774********************
775
776END TEXT OF /usr/local/etc/amavisd.conf
777
778********************
779
780********************
781
782BEGIN TEXT of /usr/local/etc/mail/spamassassin/local.cf
783
784********************
785
786#---------------------------------------------------------------------
787# This file is part of iRedMail, which is an open source mail server
788# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
789#
790# iRedMail is free software: you can redistribute it and/or modify
791# it under the terms of the GNU General Public License as published by
792# the Free Software Foundation, either version 3 of the License, or
793# (at your option) any later version.
794#
795# iRedMail is distributed in the hope that it will be useful,
796# but WITHOUT ANY WARRANTY; without even the implied warranty of
797# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
798# GNU General Public License for more details.
799#
800# You should have received a copy of the GNU General Public License
801# along with iRedMail.  If not, see <http://www.gnu.org/licenses/>.
802#---------------------------------------------------------------------
803
804#
805# Sample SpamAssassin rules. It should be located at:
806#   /etc/mail/spamassassin/local.cf
807#
808# Shipped within iRedMail project:
809#   * http://iRedMail.googlecode.com/
810#
811# See also:
812#    $ man Mail::SpamAssassin::Conf
813#
814
815
816# These two lines will not affect due to Amavisd use its
817# own variables setting in /etc/amavisd.conf.
818required_score      5.0
819rewrite_header      subject [ SPAM ]
820
821report_safe         0
822lock_method         flock
823
824#
825# Bayesian support
826#
827# References:
828# - http://wiki.apache.org/spamassassin/BayesInSpamAssassin
829# - http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/README.bayes
830# Addition plugin for Roundcube webmail to call sa-learn
831# - http://www.tehinterweb.co.uk/roundcube/#pimarkasjunk2
832#
833use_bayes          1
834bayes_auto_learn   1
835bayes_auto_expire  1
836
837# Store bayesian data in MySQL.
838# Please make sure you have correct server address, port and database name.
839# bayes_store_module Mail::SpamAssassin::BayesStore::MySQL
840# bayes_sql_dsn      DBI:mysql:sa_bayes:127.0.0.1:3306
841
842# Store bayesian data in PostgreSQL.
843# Please make sure you have correct server address, port and database name.
844#bayes_store_module Mail::SpamAssassin::BayesStore::PgSQL
845#bayes_sql_dsn      DBI:Pg:sa_bayes:127.0.0.1:5432
846
847# SQL username and password.
848#bayes_sql_username sa_user
849#bayes_sql_password wouldnt-you-like-to-know
850
851# Override the username used for storing data in the database.
852# This could be used to group users together to share bayesian filter data.
853# You can also use this config option to trick sa-learn to learn data as a specific user.
854#bayes_sql_override_username vscan
855
856
857# Turn off ALL DNSBL (DNS Blocklists)
858#skip_rbl_checks  1
859# Turn off DNSBL: rhsbl.ahbl.org.
860# Check /usr/share/spamassassin/20_dnsbl_teest.cf to see the rule name.
861score DNS_FROM_AHBL_RHSBL 0
862
863score URIBL_AB_SURBL 0 0.3306 0 0.3812
864score URIBL_JP_SURBL 0 0.3360 0 0.4087
865score URIBL_OB_SURBL 0 0.2617 0 0.3008
866score URIBL_PH_SURBL 0 0.2240 0 0.2800
867score URIBL_SBL 0 0.1094 0 0.1639
868score URIBL_SC_SURBL 0 0.3600 0 0.4498
869score URIBL_WS_SURBL 0 0.1533 0 0.2140
870
871# For SpamAssassin-3.2.x. Reference:
872# http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Plugin_SPF.html
873#do_not_use_mail_spf 0
874#do_not_use_mail_spf_query   1
875#ignore_received_spf_header  1
876
877# Trusted networks. Examples:
878#   192.168/16            # all in 192.168.*.*
879#   212.17.35.15          # just that host
880#   !10.0.1.5 10.0.1/24   # all in 10.0.1.* but not 10.0.1.5
881#   DEAD:BEEF::/32        # all in that ipv6 prefix
882# Local host (127.0.0.1) will automatically be trusted implicitly.
883#trusted_networks 192.168/16
884
885# Whitelist from SPF.
886#whitelist_from_spf joe@example.com fred@example.com
887#whitelist_from_spf *@example.com
888
889# Whitelist from DKIM.
890loadplugin Mail::SpamAssassin::Plugin::DKIM
891whitelist_from_dkim *@paypal.com
892whitelist_from_dkim *@linkedin.com
893whitelist_from_dkim *@twitter.com
894whitelist_from_dkim *@bounce.twitter.com
895
896# Whitelist domains.
897# Reference: http://wiki.apache.org/spamassassin/ManualWhitelist
898#whitelist_from         *@gmail.com
899
900# Locales.
901ok_locales          all
902
903# Some sample custom file rules. Refer to SpamAssassin wiki site for more
904# details: http://wiki.apache.org/spamassassin/WritingRules
905#
906# Filter Headers.
907# -- Subject
908#header LOCAL_DEMONSTRATION_SUBJECT      Subject =~ /\btest\b/i
909#score LOCAL_DEMONSTRATION_SUBJECT       0.1
910# -- From
911#header LOCAL_DEMONSTRATION_FROM From =~ /test\.com/i
912#score LOCAL_DEMONSTRATION_FROM  0.1
913# -- Look at all the headers and match if any of them contain the specified regex:
914#header LOCAL_DEMONSTRATION_ALL  ALL =~ /test\.com/i
915#score LOCAL_DEMONSTRATION_ALL   0.1
916#
917# Filter mail body.
918#body LOCAL_DEMONSTRATION_RULE /test/
919#score LOCAL_DEMONSTRATION_RULE 0.1
920#describe LOCAL_DEMONSTRATION_RULE This is a simple test rule
921
922# Decrease score for authenticated senders.
923# IMPORTANT NOTES:
924#
925#   1) Please replace 'your\.server\.com' by the value of Postfix parameter
926#      "myhostname".
927#   2) Please set 'smtpd_sasl_authenticated_header = yes' in Postfix main.cf.
928#
929#header AUTHENTICATED_SENDER Received =~ /Authenticated\ sender\:.*by\ your\.server\.com/
930#describe AUTHENTICATED_SENDER Header 'Received:' contains 'Authenticated sender:'
931#score AUTHENTICATED_SENDER -3
932
933# Checks if domain name of an envelope sender address matches the domain name
934# of the first untrusted relay (if any), or any trusted relay otherwise.
935# https://wiki.apache.org/spamassassin/Rules/RP_MATCHES_RCVD
936score RP_MATCHES_RCVD 0
937
938********************
939
940END TEXT of /usr/local/etc/mail/spamassassin/local.cf
941
942********************
943
944********************
945
946BEGIN OUTPUT of MySQL COMMAND 'select * from policy where policy_name='@.' \G' from amavisd.policy table
947
948********************
949
950mysql> select * from policy where policy_name='@.' \G
951*************************** 1. row ***************************
952                          id: 3
953                 policy_name: @.
954                 virus_lover: N
955                  spam_lover: N
956             unchecked_lover: NULL
957          banned_files_lover: N
958            bad_header_lover: N
959         bypass_virus_checks: N
960          bypass_spam_checks: N
961        bypass_banned_checks: N
962        bypass_header_checks: N
963         virus_quarantine_to:
964          spam_quarantine_to:
965        banned_quarantine_to:
966     unchecked_quarantine_to: NULL
967    bad_header_quarantine_to:
968         clean_quarantine_to: NULL
969       archive_quarantine_to: NULL
970              spam_tag_level: -100
971             spam_tag2_level: 6
972             spam_tag3_level: 6
973             spam_kill_level: 6
974       spam_dsn_cutoff_level: NULL
975spam_quarantine_cutoff_level: NULL
976        addr_extension_virus: NULL
977         addr_extension_spam: NULL
978       addr_extension_banned: NULL
979   addr_extension_bad_header: NULL
980              warnvirusrecip: NULL
981             warnbannedrecip: NULL
982               warnbadhrecip: NULL
983              newvirus_admin: NULL
984                 virus_admin: NULL
985                banned_admin: NULL
986            bad_header_admin: NULL
987                  spam_admin: NULL
988            spam_subject_tag: NULL
989           spam_subject_tag2: NULL
990           spam_subject_tag3: NULL
991          message_size_limit: NULL
992            banned_rulenames: NULL
993          disclaimer_options: NULL
994              forward_method: NULL
995                 sa_userconf: NULL
996                 sa_username: NULL
9971 row in set (0.01 sec)
998
999********************
1000
1001END OUTPUT of MySQL COMMAND 'select * from policy where policy_name='@.' \G' from amavisd.policy table
1002
1003********************
1004
1005********************
1006
1007BEGIN OUTPUT of amavisd/spamassassin debug log for this email
1008
1009********************
1010
1011Aug 23 12:09:08.433 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-05) Net::Server: 2018/08/23-12:09:08 CONNECT TCP Peer: "[127.0.0.1]:15656" Local: "[127.0.0.1]:10024"
1012Aug 23 12:09:08.433 mail8.example.com /usr/local/sbin/amavisd[41214]: idle_proc, hi : was idle, 57914.1 ms, total idle 58.968 s, busy 2.128 s
1013Aug 23 12:09:08.434 mail8.example.com /usr/local/sbin/amavisd[41214]: loaded base policy bank
1014Aug 23 12:09:08.434 mail8.example.com /usr/local/sbin/amavisd[41214]: lookup_ip_acl (inet_acl) arr.obj: key="127.0.0.1" matches "127.0.0.1", result=1
1015Aug 23 12:09:08.435 mail8.example.com /usr/local/sbin/amavisd[41214]: process_request: fileno sock=3, STDIN=0, STDOUT=1
1016Aug 23 12:09:08.435 mail8.example.com /usr/local/sbin/amavisd[41214]: get_deadline switch_to_my_time(new request) - deadline in 480.0 s, set to 288.000 s
1017Aug 23 12:09:08.435 mail8.example.com /usr/local/sbin/amavisd[41214]: prolong_timer switch_to_my_time(new request): timer 288, was 0, deadline in 480.0 s
1018Aug 23 12:09:08.435 mail8.example.com /usr/local/sbin/amavisd[41214]: process_request: suggested_protocol="" on a TCP socket
1019Aug 23 12:09:08.435 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SMTP> 220 [127.0.0.1] ESMTP amavisd-new service ready
1020Aug 23 12:09:08.436 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) switch_to_client_time 480 s, smtp response sent
1021Aug 23 12:09:08.436 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 4: was busy, 2.6 ms, total idle 58.968 s, busy 2.131 s
1022Aug 23 12:09:08.436 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp readline: read 28 bytes, new size: 28
1023Aug 23 12:09:08.436 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 5: was idle, 0.5 ms, total idle 58.969 s, busy 2.131 s
1024Aug 23 12:09:08.437 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SMTP< EHLO mail8.example.com\r\n
1025Aug 23 12:09:08.437 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline switch_to_my_time(rx SMTP EHLO) - deadline in 480.0 s, set to 288.000 s
1026Aug 23 12:09:08.437 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer switch_to_my_time(rx SMTP EHLO): timer 288, was 480, deadline in 480.0 s
1027Aug 23 12:09:08.438 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250-[127.0.0.1]
1028Aug 23 12:09:08.438 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250-VRFY
1029Aug 23 12:09:08.438 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250-PIPELINING
1030Aug 23 12:09:08.438 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250-SIZE
1031Aug 23 12:09:08.438 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250-ENHANCEDSTATUSCODES
1032Aug 23 12:09:08.438 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250-8BITMIME
1033Aug 23 12:09:08.438 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250-SMTPUTF8
1034Aug 23 12:09:08.438 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250-DSN
1035Aug 23 12:09:08.438 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250 XFORWARD NAME ADDR PORT PROTO HELO IDENT SOURCE
1036Aug 23 12:09:08.438 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) switch_to_client_time 480 s, smtp response sent
1037Aug 23 12:09:08.439 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 6: was busy, 2.3 ms, total idle 58.969 s, busy 2.133 s
1038Aug 23 12:09:08.439 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp readline: read 290 bytes, new size: 290
1039Aug 23 12:09:08.439 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 5: was idle, 0.3 ms, total idle 58.969 s, busy 2.133 s
1040Aug 23 12:09:08.439 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP< XFORWARD NAME=grexcap003.xrite.com ADDR=208.71.80.106 PORT=61722\r\n
1041Aug 23 12:09:08.439 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline switch_to_my_time(rx SMTP XFORWARD) - deadline in 480.0 s, set to 288.000 s
1042Aug 23 12:09:08.439 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer switch_to_my_time(rx SMTP XFORWARD): timer 288, was 480, deadline in 480.0 s
1043Aug 23 12:09:08.440 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250 2.5.0 Ok XFORWARD
1044Aug 23 12:09:08.440 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) switch_to_client_time 480 s, smtp response sent
1045Aug 23 12:09:08.440 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 6: was busy, 1.1 ms, total idle 58.969 s, busy 2.134 s
1046Aug 23 12:09:08.440 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 5: was idle, 0.2 ms, total idle 58.969 s, busy 2.134 s
1047Aug 23 12:09:08.440 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP< XFORWARD PROTO=ESMTP HELO=GREXCAP003.XRITE.com IDENT=D168961803A SOURCE=REMOTE\r\n
1048Aug 23 12:09:08.440 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline switch_to_my_time(rx SMTP XFORWARD) - deadline in 480.0 s, set to 288.000 s
1049Aug 23 12:09:08.441 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer switch_to_my_time(rx SMTP XFORWARD): timer 288, was 480, deadline in 480.0 s
1050Aug 23 12:09:08.441 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250 2.5.0 Ok XFORWARD
1051Aug 23 12:09:08.441 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) switch_to_client_time 480 s, smtp response sent
1052Aug 23 12:09:08.441 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 6: was busy, 0.7 ms, total idle 58.969 s, busy 2.135 s
1053Aug 23 12:09:08.441 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 5: was idle, 0.2 ms, total idle 58.969 s, busy 2.135 s
1054Aug 23 12:09:08.441 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP< MAIL FROM:<customerservice@xrite.com> SIZE=1376 BODY=7BIT\r\n
1055Aug 23 12:09:08.441 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline switch_to_my_time(rx SMTP MAIL) - deadline in 480.0 s, set to 288.000 s
1056Aug 23 12:09:08.442 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer switch_to_my_time(rx SMTP MAIL): timer 288, was 480, deadline in 480.0 s
1057Aug 23 12:09:08.442 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) check_mail_begin_task: task_count=6
1058Aug 23 12:09:08.442 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_ip_acl (client_ipaddr_policy) arr.obj: key="208.71.80.106", no match
1059Aug 23 12:09:08.443 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [debug_sender] => undef, "customerservice@xrite.com" does not match
1060Aug 23 12:09:08.443 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) mesage size set to a declared size 1376
1061Aug 23 12:09:08.443 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250 2.1.0 Sender <customerservice@xrite.com> OK
1062Aug 23 12:09:08.443 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) switch_to_client_time 480 s, smtp response sent
1063Aug 23 12:09:08.443 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 6: was busy, 2.2 ms, total idle 58.969 s, busy 2.137 s
1064Aug 23 12:09:08.444 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 5: was idle, 0.2 ms, total idle 58.969 s, busy 2.137 s
1065Aug 23 12:09:08.444 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP< RCPT TO:<user0@example.com> ORCPT=rfc822;user666@example.com\r\n
1066Aug 23 12:09:08.444 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline switch_to_my_time(rx SMTP RCPT) - deadline in 480.0 s, set to 288.000 s
1067Aug 23 12:09:08.444 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer switch_to_my_time(rx SMTP RCPT): timer 288, was 480, deadline in 480.0 s
1068Aug 23 12:09:08.444 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup => undef, "user0@example.com", no lookup tables
1069Aug 23 12:09:08.444 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup: (scalar) matches, result="1"
1070Aug 23 12:09:08.444 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [local_domains] => true,  "user0@example.com" matches, result="1", matching_key="(constant:1)"
1071Aug 23 12:09:08.445 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) query_keys: user0@example.com, user0, @example.com, @.example.com, @.com, @.
1072Aug 23 12:09:08.445 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql sel_policy "user0@example.com", query args: [user0@example.com,-3], [user0,-3], [@example.com,-3], [@.example.com,-3], [@.com,-3], [@.,-3]
1073Aug 23 12:09:08.445 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql select: SELECT users.*, policy.*, users.id FROM users LEFT JOIN policy ON users.policy_id=policy.id WHERE users.email IN (?,?,?,?,?,?) ORDER BY users.priority DESC
1074Aug 23 12:09:08.445 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql begin, nontransaction
1075Aug 23 12:09:08.445 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql: executing clause (6 args): SELECT users.*, policy.*, users.id FROM users LEFT JOIN policy ON users.policy_id=policy.id WHERE users.email IN (?,?,?,?,?,?) ORDER BY users.priority DESC
1076Aug 23 12:09:08.447 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql: "user0@example.com" matches catchall, local=>undef
1077Aug 23 12:09:08.447 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql(user0@example.com) matches, result=(id=>"3", priority=>"5", policy_id=>"0", email=>"@example.com", fullname=>-, id=>"3", policy_name=>-, virus_lover=>-, spam_lover=>-, unchecked_lover=>-, banned_files_lover=>-, bad_header_lover=>-, bypass_virus_checks=>-, bypass_spam_checks=>-, bypass_banned_checks=>-, bypass_header_checks=>-, virus_quarantine_to=>-, spam_quarantine_to=>-, banned_quarantine_to=>-, unchecked_quarantine_to=>-, bad_header_quarantine_to=>-, clean_quarantine_to=>-, archive_quarantine_to=>-, spam_tag_level=>-, spam_tag2_level=>-, spam_tag3_level=>-, spam_kill_level=>-, spam_dsn_cutoff_level=>-, spam_quarantine_cutoff_level=>-, addr_extension_virus=>-, addr_extension_spam=>-, addr_extension_banned=>-, addr_extension_bad_header=>-, warnvirusrecip=>-, warnbannedrecip=>-, warnbadhrecip=>-, newvirus_admin=>-, virus_admin=>-, banned_admin=>-, bad_header_admin=>-, spam_admin=>-, spam_subject_tag=>-, spam_subject_tag2=>-, spam_subject_tag3=>-, message_size_limit=>-, banned_rulenames=>-, disclaimer_options=>-, forward_method=>-, sa_userconf=>-, sa_username=>-, id=>"3")
1078Aug 23 12:09:08.447 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql(user0@example.com) matches, result=(id=>"2", priority=>"0", policy_id=>"3", email=>"@.", fullname=>-, id=>"2", policy_name=>"@.", virus_lover=>"N", spam_lover=>"N", unchecked_lover=>-, banned_files_lover=>"N", bad_header_lover=>"N", bypass_virus_checks=>"N", bypass_spam_checks=>"N", bypass_banned_checks=>"N", bypass_header_checks=>"N", virus_quarantine_to=>"", spam_quarantine_to=>"", banned_quarantine_to=>"", unchecked_quarantine_to=>-, bad_header_quarantine_to=>"", clean_quarantine_to=>-, archive_quarantine_to=>-, spam_tag_level=>"0", spam_tag2_level=>"0", spam_tag3_level=>"0", spam_kill_level=>"0", spam_dsn_cutoff_level=>-, spam_quarantine_cutoff_level=>-, addr_extension_virus=>-, addr_extension_spam=>-, addr_extension_banned=>-, addr_extension_bad_header=>-, warnvirusrecip=>-, warnbannedrecip=>-, warnbadhrecip=>-, newvirus_admin=>-, virus_admin=>-, banned_admin=>-, bad_header_admin=>-, spam_admin=>-, spam_subject_tag=>-, spam_subject_tag2=>-, spam_subject_tag3=>-, message_size_limit=>-, banned_rulenames=>-, disclaimer_options=>-, forward_method=>-, sa_userconf=>-, sa_username=>-, id=>"2", local=>-)
1079Aug 23 12:09:08.447 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(message_size_limit) rec=0, "user0@example.com" result: undef
1080Aug 23 12:09:08.447 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(message_size_limit) rec=1, "user0@example.com" result: undef
1081Aug 23 12:09:08.447 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [message_size_limit] => undef, "user0@example.com" does not match
1082Aug 23 12:09:08.448 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250 2.1.5 Recipient <user0@example.com> OK
1083Aug 23 12:09:08.448 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) switch_to_client_time 480 s, smtp response sent
1084Aug 23 12:09:08.448 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 6: was busy, 4.4 ms, total idle 58.969 s, busy 2.142 s
1085Aug 23 12:09:08.448 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 5: was idle, 0.2 ms, total idle 58.969 s, busy 2.142 s
1086Aug 23 12:09:08.448 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP< DATA\r\n
1087Aug 23 12:09:08.448 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline switch_to_my_time(rx SMTP DATA) - deadline in 480.0 s, set to 288.000 s
1088Aug 23 12:09:08.449 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer switch_to_my_time(rx SMTP DATA): timer 288, was 480, deadline in 480.0 s
1089Aug 23 12:09:08.449 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP [127.0.0.1]:10024 /var/amavis/tmp/amavis-20180823T120807-41214-bHq1cmm0: <customerservice@xrite.com> -> <user0@example.com> SIZE=1376 BODY=7BIT Received: from mail8.example.com ([127.0.0.1]) by mail8.example.com (mail8.example.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <user0@example.com>; Thu, 23 Aug 2018 12:09:08 -0700 (PDT)
1090Aug 23 12:09:08.449 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 354 End data with <CR><LF>.<CR><LF>
1091Aug 23 12:09:08.449 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) switch_to_client_time 480 s, smtp response sent
1092Aug 23 12:09:08.449 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) switch_to_client_time 480 s, receiving data
1093Aug 23 12:09:08.538 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp copy: read 1385 bytes into buffer, new size: 1385
1094Aug 23 12:09:08.538 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp copy: 6 bytes still buffered at end
1095Aug 23 12:09:08.538 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline switch_to_my_time(rx data-end) - deadline in 480.0 s, set to 288.000 s
1096Aug 23 12:09:08.539 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer switch_to_my_time(rx data-end): timer 288, was 480, deadline in 480.0 s
1097Aug 23 12:09:08.539 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP< .<CR><LF>
1098Aug 23 12:09:08.539 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp connection cache, dt: 57.9, state: 1
1099Aug 23 12:09:08.539 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp connection cache, dt: 57.9 -> disabling
1100Aug 23 12:09:08.539 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline get_body_digest - deadline in 480.0 s, set to 30.000 s
1101Aug 23 12:09:08.539 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline digest_pre - deadline in 480.0 s, set to 288.000 s
1102Aug 23 12:09:08.540 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer digest_pre: timer 288, was 288, deadline in 480.0 s
1103Aug 23 12:09:08.540 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_body_digest: reading header section from memory
1104Aug 23 12:09:08.540 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_body_digest: feeding header section to DKIM verifier
1105Aug 23 12:09:08.541 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_body_digest: sending h/b separator to DKIM
1106Aug 23 12:09:08.541 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline digest_hdr - deadline in 480.0 s, set to 288.000 s
1107Aug 23 12:09:08.541 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer digest_hdr: timer 288, was 288, deadline in 480.0 s
1108Aug 23 12:09:08.541 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_body_digest: reading mail body from memory, 0 DKIM signatures
1109Aug 23 12:09:08.541 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline digest_body - deadline in 480.0 s, set to 288.000 s
1110Aug 23 12:09:08.542 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer digest_body: timer 288, was 288, deadline in 480.0 s
1111Aug 23 12:09:08.542 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_body_digest: message size 1376, header+sep 749, body 627
1112Aug 23 12:09:08.542 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) body type (8bit-MIMEtransport): labeled 7BIT, good (h=0, b=0)
1113Aug 23 12:09:08.542 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) body hash: 2a13d3380776be98347bc61bb90afc09
1114Aug 23 12:09:08.543 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ip_from_received: 208.71.80.106
1115Aug 23 12:09:08.543 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ip_from_received: 192.168.171.140
1116Aug 23 12:09:08.544 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_ip_acl (public_nets) arr.obj: key="127.0.0.1" matches "!127.0.0.0/8", result=0
1117Aug 23 12:09:08.544 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_ip_acl (public_nets) arr.obj: key="208.71.80.106" matches "::ffff:0:0/96", result=1
1118Aug 23 12:09:08.544 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_ip_acl (public_nets) arr.obj: key="192.168.171.140" matches "!192.168.0.0/16", result=0
1119Aug 23 12:09:08.545 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) trace: ESMTP://[127.0.0.1]:15656 < ESMTPS://[208.71.80.106]:61722 < Microsoft_SMTP_Server://192.168.171.140
1120Aug 23 12:09:08.545 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) Original mail size: 1376; quota set to: 688000 bytes (fmin=5, fmax=500, qmin=102400, qmax=524288000)
1121Aug 23 12:09:08.545 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql begin, nontransaction
1122Aug 23 12:09:08.545 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql: executing clause (2 args): SELECT id FROM maddr WHERE partition_tag=? AND email=?
1123Aug 23 12:09:08.546 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql begin, nontransaction
1124Aug 23 12:09:08.546 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql: preparing and executing (3 args): INSERT INTO maddr (partition_tag, email, domain) VALUES (?,?,?)
1125Aug 23 12:09:08.551 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql begin, nontransaction
1126Aug 23 12:09:08.552 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql: executing clause (2 args): SELECT id FROM maddr WHERE partition_tag=? AND email=?
1127Aug 23 12:09:08.553 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) find_or_save_addr: record inserted, id=15720, customerservice@xrite.com
1128Aug 23 12:09:08.553 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) save_info_preliminary M3N941Q6NbKl, sender id: 15720, customerservice@xrite.com, new
1129Aug 23 12:09:08.553 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql begin, nontransaction
1130Aug 23 12:09:08.553 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql: executing clause (2 args): SELECT id FROM maddr WHERE partition_tag=? AND email=?
1131Aug 23 12:09:08.554 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) orcpt_encode rfc822, user666@example.com, smtputf8
1132Aug 23 12:09:08.554 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) save_info_preliminary M3N941Q6NbKl, recip id: 2, user0@example.com (ORCPT rfc822;user666@example.com), exists
1133Aug 23 12:09:08.554 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql begin transaction
1134Aug 23 12:09:08.555 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql: executing clause (11 args): INSERT INTO msgs (partition_tag, mail_id, secret_id, am_id, time_num, time_iso, sid, policy, client_addr, size, host) VALUES (?,?,?,?,?,?,?,?,?,?,?)
1135Aug 23 12:09:08.556 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql commit
1136Aug 23 12:09:08.557 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) Checking: M3N941Q6NbKl [208.71.80.106] <customerservice@xrite.com> -> <user0@example.com>
1137Aug 23 12:09:08.557 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) 2822.From: <customerservice@xrite.com>
1138Aug 23 12:09:08.558 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(local) rec=0, "user0@example.com" result: "1"
1139Aug 23 12:09:08.558 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field, no such fields: local
1140Aug 23 12:09:08.558 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [local_domains] => true,  "user0@example.com" matches, result="1", matching_key="/cached/"
1141Aug 23 12:09:08.558 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(bypass_virus_checks) rec=0, "user0@example.com" result: undef
1142Aug 23 12:09:08.558 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(bypass_virus_checks) rec=1, "user0@example.com" result: "0"
1143Aug 23 12:09:08.558 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [bypass_virus_checks] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
1144Aug 23 12:09:08.559 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(bypass_banned_checks) rec=0, "user0@example.com" result: undef
1145Aug 23 12:09:08.559 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(bypass_banned_checks) rec=1, "user0@example.com" result: "0"
1146Aug 23 12:09:08.559 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [bypass_banned_checks] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
1147Aug 23 12:09:08.559 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(bypass_spam_checks) rec=0, "user0@example.com" result: undef
1148Aug 23 12:09:08.559 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(bypass_spam_checks) rec=1, "user0@example.com" result: "0"
1149Aug 23 12:09:08.560 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [bypass_spam_checks] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
1150Aug 23 12:09:08.560 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(id) rec=0, "user0@example.com" result: "3"
1151Aug 23 12:09:08.560 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(id) rec=1, "user0@example.com" result: "2"
1152Aug 23 12:09:08.560 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [users.id], 2 matches for "user0@example.com", results: "/cached/"=>"3", "/cached/"=>"2"
1153Aug 23 12:09:08.560 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(policy_id) rec=0, "user0@example.com" result: "0"
1154Aug 23 12:09:08.561 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [users.policy_id] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
1155Aug 23 12:09:08.561 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) Extracting mime components from a string
1156Aug 23 12:09:08.564 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) Issued a new file name: p001
1157Aug 23 12:09:08.565 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) Charging 554 bytes to remaining quota 688000 (out of 688000, (0%)) - by mime_decode
1158Aug 23 12:09:08.566 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) p001 1 Content-Type: text/html, QP, size: 554, SHA1 digest: b4a7f5be24568321b7a95e77f3efc6ab00660a52
1159Aug 23 12:09:08.566 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline mime_decode - deadline in 480.0 s, set to 288.000 s
1160Aug 23 12:09:08.567 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer mime_decode: timer 288, was 288, deadline in 480.0 s
1161Aug 23 12:09:08.567 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline mime_decode-1 - deadline in 480.0 s, set to 288.000 s
1162Aug 23 12:09:08.567 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer mime_decode-1: timer 288, was 288, deadline in 480.0 s
1163Aug 23 12:09:08.567 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) inspect_dsn: parts: text/html
1164Aug 23 12:09:08.567 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) inspect_dsn: not a bounce
1165Aug 23 12:09:08.568 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline dsn_parse - deadline in 480.0 s, set to 288.000 s
1166Aug 23 12:09:08.568 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer dsn_parse: timer 288, was 288, deadline in 480.0 s
1167Aug 23 12:09:08.568 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) decode_parts: level=1, #parts=1 : p001
1168Aug 23 12:09:08.568 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) running file(1) on 1 files, arglist size 24
1169Aug 23 12:09:08.578 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) run_command: [41317] /usr/local/bin/file p001 </dev/null 2>&1
1170Aug 23 12:09:08.593 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) result line from file(1): p001: HTML document, ASCII text, with CRLF, LF line terminators\n
1171Aug 23 12:09:08.595 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_re("HTML document, ASCII text, with CRLF, LF line terminators") matches key "(?^i:\\btext\\b)", result="asc"
1172Aug 23 12:09:08.595 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [map_full_type_to_short_type] => true,  "HTML document, ASCII text, with CRLF, LF line terminators" matches, result="asc", matching_key="(?^i:\\btext\\b)"
1173Aug 23 12:09:08.596 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) File-type of p001: HTML document, ASCII text, with CRLF, LF line terminators; (asc)
1174Aug 23 12:09:08.596 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) decompose_part: p001 - atomic
1175Aug 23 12:09:08.596 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline parts_decode - deadline in 479.9 s, set to 288.000 s
1176Aug 23 12:09:08.597 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer parts_decode: timer 288, was 288, deadline in 479.9 s
1177Aug 23 12:09:08.597 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(bypass_header_checks) rec=0, "user0@example.com" result: undef
1178Aug 23 12:09:08.597 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(bypass_header_checks) rec=1, "user0@example.com" result: "0"
1179Aug 23 12:09:08.597 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [bypass_header_checks] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
1180Aug 23 12:09:08.598 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) check_header: 0, OK
1181Aug 23 12:09:08.598 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(bypass_header_checks) rec=0, "user0@example.com" result: undef
1182Aug 23 12:09:08.598 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(bypass_header_checks) rec=1, "user0@example.com" result: "0"
1183Aug 23 12:09:08.598 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [bypass_header_checks] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
1184Aug 23 12:09:08.598 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) Checking for banned types and filenames
1185Aug 23 12:09:08.599 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(banned_rulenames) rec=0, "user0@example.com" result: undef
1186Aug 23 12:09:08.599 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(banned_rulenames) rec=1, "user0@example.com" result: undef
1187Aug 23 12:09:08.599 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup: (scalar) matches, result="DEFAULT"
1188Aug 23 12:09:08.599 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [banned_filename], 1 matches for "user0@example.com", results: "(constant:DEFAULT)"=>"DEFAULT"
1189Aug 23 12:09:08.599 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) collect banned table[0]: user0@example.com, tables: DEFAULT=>Amavis::Lookup::RE=ARRAY(0x80640ec78)
1190Aug 23 12:09:08.599 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) starting banned checks - traversing message structure tree
1191Aug 23 12:09:08.599 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) check_for_banned (p001) text/html,.asc
1192Aug 23 12:09:08.600 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) doing banned check for user0@example.com on text/html,.asc
1193Aug 23 12:09:08.600 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_re(["text/html",".asc"]), no matches
1194Aug 23 12:09:08.600 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [check_bann:user0@example.com] => undef, ["text/html",".asc"] does not match
1195Aug 23 12:09:08.600 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_re("P=p001\tL=1\tM=text/html\tT=asc"), no matches
1196Aug 23 12:09:08.600 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [banned_namepath_re] => undef, "P=p001\tL=1\tM=text/html\tT=asc" does not match
1197Aug 23 12:09:08.601 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) p.path user0@example.com: "P=p001,L=1,M=text/html,T=asc"
1198Aug 23 12:09:08.601 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) banned check: any=0, all=N (1)
1199Aug 23 12:09:08.601 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_re("MAIL"), no matches
1200Aug 23 12:09:08.601 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [keep_decoded_original] => undef, "MAIL" does not match
1201Aug 23 12:09:08.602 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) Calling virus scanners, 1 files to scan in /var/amavis/tmp/amavis-20180823T120807-41214-bHq1cmm0/parts
1202Aug 23 12:09:08.602 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) invoking av-scanner ClamAV-clamd
1203Aug 23 12:09:08.602 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ask_daemon: proto=DFLT, spawn=0, (ClamAV-clamd) /var/run/clamav/clamd.sock
1204Aug 23 12:09:08.602 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) run_av (ClamAV-clamd): query template(1,0): CONTSCAN {}\n
1205Aug 23 12:09:08.602 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline run_av_pre - deadline in 479.9 s, set to 288.000 s
1206Aug 23 12:09:08.602 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer run_av_pre: timer 288, was 288, deadline in 479.9 s
1207Aug 23 12:09:08.602 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline run_av_scan - deadline in 479.9 s, set to 288.000 s
1208Aug 23 12:09:08.602 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer run_av_scan: timer 288, was 288, deadline in 479.9 s
1209Aug 23 12:09:08.603 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) run_av Using (ClamAV-clamd): (code) CONTSCAN /var/amavis/tmp/amavis-20180823T120807-41214-bHq1cmm0/parts\n
1210Aug 23 12:09:08.603 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline ask_daemon_internal_connect_pre - deadline in 479.9 s, set to 288.000 s
1211Aug 23 12:09:08.603 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline ask_daemon_internal_connect - deadline in 479.9 s, set to 10.000 s
1212Aug 23 12:09:08.603 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer ask_daemon_internal_connect: timer 10, was 288, deadline in 479.9 s
1213Aug 23 12:09:08.603 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ClamAV-clamd: Connecting to socket  /var/run/clamav/clamd.sock
1214Aug 23 12:09:08.603 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) new socket by IO::Socket::UNIX to /var/run/clamav/clamd.sock, timeout set to 10
1215Aug 23 12:09:08.604 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) connected to /var/run/clamav/clamd.sock successfully
1216Aug 23 12:09:08.604 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ClamAV-clamd: Sending CONTSCAN /var/amavis/tmp/amavis-20180823T120807-41214-bHq1cmm0/parts\n to socket /var/run/clamav/clamd.sock
1217Aug 23 12:09:08.604 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: needline=0, flush=1, wr=1, timeout=10
1218Aug 23 12:09:08.604 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: sending 69 chars
1219Aug 23 12:09:08.604 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop sent 69> CONTSCAN /var/amavis/tmp/amavis-20180823T120807-41214-bHq1cmm0/parts\n
1220Aug 23 12:09:08.605 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline ask_daemon_internal_scan - deadline in 479.9 s, set to 288.000 s
1221Aug 23 12:09:08.605 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer ask_daemon_internal_scan: timer 288, was 10, deadline in 479.9 s
1222Aug 23 12:09:08.605 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: needline=0, flush=0, wr=0, timeout=287.998
1223Aug 23 12:09:08.610 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: receiving
1224Aug 23 12:09:08.611 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop read 64 chars< /var/amavis/tmp/amavis-20180823T120807-41214-bHq1cmm0/parts: OK\n
1225Aug 23 12:09:08.611 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: needline=0, flush=0, wr=0, timeout=287.998
1226Aug 23 12:09:08.611 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: receiving
1227Aug 23 12:09:08.611 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop read: got eof
1228Aug 23 12:09:08.611 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline ask_daemon_internal - deadline in 479.9 s, set to 288.000 s
1229Aug 23 12:09:08.612 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer ask_daemon_internal: timer 288, was 288, deadline in 479.9 s
1230Aug 23 12:09:08.612 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline run_av_3 - deadline in 479.9 s, set to 288.000 s
1231Aug 23 12:09:08.612 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer run_av_3: timer 288, was 288, deadline in 479.9 s
1232Aug 23 12:09:08.612 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) run_av (ClamAV-clamd) result: /var/amavis/tmp/amavis-20180823T120807-41214-bHq1cmm0/parts: OK\n
1233Aug 23 12:09:08.612 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) run_av (ClamAV-clamd): CLEAN
1234Aug 23 12:09:08.612 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) run_av (ClamAV-clamd) result: clean
1235Aug 23 12:09:08.613 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) wbl: checking sender <customerservice@xrite.com>
1236Aug 23 12:09:08.613 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) wbl: (SQL) recip <user0@example.com>, 2 matches
1237Aug 23 12:09:08.613 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup: (scalar) matches, result="1"
1238Aug 23 12:09:08.613 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [local_domains] => true,  "customerservice@xrite.com" matches, result="1", matching_key="(constant:1)"
1239Aug 23 12:09:08.614 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) query_keys: customerservice@xrite.com, customerservice, @xrite.com, @.xrite.com, @.com, @.
1240Aug 23 12:09:08.614 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql sel_wblist "customerservice@xrite.com", query args: "3", [customerservice@xrite.com,-3], [customerservice,-3], [@xrite.com,-3], [@.xrite.com,-3], [@.com,-3], [@.,-3]
1241Aug 23 12:09:08.614 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql select: SELECT wb FROM wblist JOIN mailaddr ON wblist.sid=mailaddr.id WHERE wblist.rid=? AND mailaddr.email IN (?,?,?,?,?,?) ORDER BY mailaddr.priority DESC
1242Aug 23 12:09:08.614 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql begin, nontransaction
1243Aug 23 12:09:08.614 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql: executing clause (7 args): SELECT wb FROM wblist JOIN mailaddr ON wblist.sid=mailaddr.id WHERE wblist.rid=? AND mailaddr.email IN (?,?,?,?,?,?) ORDER BY mailaddr.priority DESC
1244Aug 23 12:09:08.616 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql, "customerservice@xrite.com" no match
1245Aug 23 12:09:08.616 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(wb), "customerservice@xrite.com" no matching records
1246Aug 23 12:09:08.616 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup => undef, "customerservice@xrite.com" does not match
1247Aug 23 12:09:08.616 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) wbl: (SQL) recip <user0@example.com>, rid=3, got: ""
1248Aug 23 12:09:08.617 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup: (scalar) matches, result="1"
1249Aug 23 12:09:08.617 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [local_domains] => true,  "customerservice@xrite.com" matches, result="1", matching_key="(constant:1)"
1250Aug 23 12:09:08.617 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) query_keys: cached customerservice@xrite.com
1251Aug 23 12:09:08.617 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql sel_wblist "customerservice@xrite.com", query args: "2", [customerservice@xrite.com,-3], [customerservice,-3], [@xrite.com,-3], [@.xrite.com,-3], [@.com,-3], [@.,-3]
1252Aug 23 12:09:08.617 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql select: SELECT wb FROM wblist JOIN mailaddr ON wblist.sid=mailaddr.id WHERE wblist.rid=? AND mailaddr.email IN (?,?,?,?,?,?) ORDER BY mailaddr.priority DESC
1253Aug 23 12:09:08.618 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql begin, nontransaction
1254Aug 23 12:09:08.618 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql: executing clause (7 args): SELECT wb FROM wblist JOIN mailaddr ON wblist.sid=mailaddr.id WHERE wblist.rid=? AND mailaddr.email IN (?,?,?,?,?,?) ORDER BY mailaddr.priority DESC
1255Aug 23 12:09:08.619 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql, "customerservice@xrite.com" no match
1256Aug 23 12:09:08.619 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(wb), "customerservice@xrite.com" no matching records
1257Aug 23 12:09:08.619 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup => undef, "customerservice@xrite.com" does not match
1258Aug 23 12:09:08.619 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) wbl: (SQL) recip <user0@example.com>, rid=2, got: ""
1259Aug 23 12:09:08.619 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [blacklist_recip<user0@example.com>] => undef, "user0@example.com" does not match
1260Aug 23 12:09:08.620 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [blacklist_sender<customerservice@xrite.com>,blacklist_sender] => undef, "customerservice@xrite.com" does not match
1261Aug 23 12:09:08.620 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [whitelist_recip<user0@example.com>] => undef, "user0@example.com" does not match
1262Aug 23 12:09:08.620 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [whitelist_sender<customerservice@xrite.com>,whitelist_sender] => undef, "customerservice@xrite.com" does not match
1263Aug 23 12:09:08.620 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) query_keys: user0@example.com, user0@, example.com, .example.com, .com, .
1264Aug 23 12:09:08.621 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_hash(user0@example.com) matches keys: "."=>ARRAY(0x806503090)
1265Aug 23 12:09:08.621 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [score_recip<user0@example.com>,score_sender], 1 matches for "user0@example.com", results: "."=>[Amavis::Lookup::RE=ARRAY(0x8065003c0),{spamassassin.apache.org=>"-3",emailnews@genomeweb.com=>"-5",clp-request@comp.nus.edu.sg=>"-3",ntbugtraq@listserv.ntbugtraq.com=>"-3",sender@example.net=>"3",owner-alert@iss.net=>"-3",securityfocus.com=>"-3",clusternews@linuxnetworx.com=>"-3",.example.net=>"1",surveys-errors@lists.nua.ie=>"-3",ietf-123-owner@loki.ietf.org=>"-3",cert-advisory@us-cert.gov=>"-3",donotreply@sendmail.org=>"-3",owner-technews@postel.acm.org=>"-3",rt-users-admin@lists.fsck.com=>"-3",owner-postfix-announce@postfix.org=>"-3",lvs-users-admin@linuxvirtualserver.org=>"-3",ca+envelope@sendmail.org=>"-3",owner-sendmail-announce@lists.sendmail.org=>"-3",security-alerts@linuxsecurity.com=>"-3",yahoo-dev-null@yahoo-inc.com=>"-3",slashdot@slashdot.org=>"-3",owner-textbreakingnews@cnnimail12.cnn.com=>"-5",amavis-user-bounces@lists.sourceforge.net=>"-3",mailman-announce-admin@python.org=>"-3",owner-postfix-users@postfix.org=>"-3",nobody@cert.org=>"-3",amavis-user-admin@lists.sourceforge.net=>"-3",cvs-commits-list-admin@gnome.org=>"-3",returns.groups.yahoo.com=>"-3",noreply@freshmeat.net=>"-3",sendmail-announce-request@lists.sendmail.org=>"-3",notification-return@lists.sophos.com=>"-3"}]
1266Aug 23 12:09:08.621 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_re("customerservice@xrite.com"), no matches
1267Aug 23 12:09:08.622 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) query_keys: customerservice@xrite.com, customerservice@, xrite.com, .xrite.com, .com, .
1268Aug 23 12:09:08.622 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_hash(customerservice@xrite.com), no matches
1269Aug 23 12:09:08.622 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [score_sender<customerservice@xrite.com>] => undef, "customerservice@xrite.com" does not match
1270Aug 23 12:09:08.622 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SpamControl: calling spam scanner SpamAssassin
1271Aug 23 12:09:08.623 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline spam_scan_sa_pre - deadline in 479.9 s, set to 476.000 s
1272Aug 23 12:09:08.623 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer spam_scan_sa_pre: timer 476, was 288, deadline in 479.9 s
1273Aug 23 12:09:08.623 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(sa_userconf) rec=0, "user0@example.com" result: undef
1274Aug 23 12:09:08.624 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(sa_userconf) rec=1, "user0@example.com" result: undef
1275Aug 23 12:09:08.624 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [sa_userconf] => undef, "user0@example.com" does not match
1276Aug 23 12:09:08.624 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(sa_username) rec=0, "user0@example.com" result: undef
1277Aug 23 12:09:08.624 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(sa_username) rec=1, "user0@example.com" result: undef
1278Aug 23 12:09:08.624 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [sa_username] => undef, "user0@example.com" does not match
1279Aug 23 12:09:08.625 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA user config: "", username: "vscan", 0, (0)user0@example.com
1280Aug 23 12:09:08.625 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) calling SA parse (0), SA vers 3.4.1, 3.004001, data as STRING_REF, recips_ind [0], user: "vscan"
1281Aug 23 12:09:08.625 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline SA check - deadline in 479.9 s, set to 475.000 s
1282Aug 23 12:09:08.626 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) mimepart digest: b4a7f5be24568321b7a95e77f3efc6ab00660a52:text/html
1283Aug 23 12:09:08.626 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: config: time limit 300.0 s
1284Aug 23 12:09:08.628 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: message: main message type: text/html
1285Aug 23 12:09:08.628 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) CALLING SA check (0)
1286Aug 23 12:09:08.629 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: pms new, time limit in 299.997 s
1287Aug 23 12:09:08.631 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: bayes: tie-ing to DB file R/O /var/amavis/.spamassassin/bayes_toks
1288Aug 23 12:09:08.631 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: bayes: tie-ing to DB file R/O /var/amavis/.spamassassin/bayes_seen
1289Aug 23 12:09:08.632 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: bayes: found bayes db version 3
1290Aug 23 12:09:08.633 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: bayes: DB journal sync: last sync: 0
1291Aug 23 12:09:08.633 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: bayes: not available for scanning, only 161 spam(s) in bayes DB < 200
1292Aug 23 12:09:08.633 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: bayes: untie-ing
1293Aug 23 12:09:08.633 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: adding caller rule hits, 0 rules
1294Aug 23 12:09:08.634 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: config: trusted_networks are not configured; it is recommended that you configure trusted_networks manually
1295Aug 23 12:09:08.636 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: received-header: parsed as [ ip=208.71.80.106 rdns=grexcap003.xrite.com helo=GREXCAP003.XRITE.com by=mail8.example.com ident= envfrom= intl=0 id=D168961803A auth= msa=0 ]
1296Aug 23 12:09:08.636 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: received-header: do not trust any hosts from here on
1297Aug 23 12:09:08.636 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: received-header: relay 208.71.80.106 trusted? no internal? no msa? no
1298Aug 23 12:09:08.641 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: received-header: parsed as [ ip=192.168.171.140 rdns=806946-VM166 helo=806946-VM166 by=GREXCAP003.XRITE.com ident= envfrom= intl=0 id=14.2.347.0 auth= msa=0 ]
1299Aug 23 12:09:08.641 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: received-header: relay 192.168.171.140 trusted? no internal? no msa? no
1300Aug 23 12:09:08.642 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: metadata: X-Spam-Relays-Trusted:
1301Aug 23 12:09:08.642 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: metadata: X-Spam-Relays-Untrusted: [ ip=208.71.80.106 rdns=grexcap003.xrite.com helo=GREXCAP003.XRITE.com by=mail8.example.com ident= envfrom= intl=0 id=D168961803A auth= msa=0 ] [ ip=192.168.171.140 rdns=806946-VM166 helo=806946-VM166 by=GREXCAP003.XRITE.com ident= envfrom= intl=0 id=14.2.347.0 auth= msa=0 ]
1302Aug 23 12:09:08.643 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: metadata: X-Spam-Relays-Internal:
1303Aug 23 12:09:08.643 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: metadata: X-Spam-Relays-External: [ ip=208.71.80.106 rdns=grexcap003.xrite.com helo=GREXCAP003.XRITE.com by=mail8.example.com ident= envfrom= intl=0 id=D168961803A auth= msa=0 ] [ ip=192.168.171.140 rdns=806946-VM166 helo=806946-VM166 by=GREXCAP003.XRITE.com ident= envfrom= intl=0 id=14.2.347.0 auth= msa=0 ]
1304Aug 23 12:09:08.643 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag RELAYSUNTRUSTEDREVIP is now ready, value: 106.80.71.208
1305Aug 23 12:09:08.643 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag RELAYSEXTERNALREVIP is now ready, value: 106.80.71.208
1306Aug 23 12:09:08.643 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: metadata: RelayCountry: Using database: IP::Country::Fast Wed May 15 08:29:48 2013
1307Aug 23 12:09:08.644 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: metadata: X-Relay-Countries: US **
1308Aug 23 12:09:08.645 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: askdns: depend on tags DKIMDOMAIN, rules: DKIMDOMAIN_IN_DWL, __DKIMDOMAIN_IN_DWL_ANY
1309Aug 23 12:09:08.645 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - action 0 blocking on tags DKIMDOMAIN
1310Aug 23 12:09:08.646 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag SENDERDOMAIN is now ready, value: xrite.com
1311Aug 23 12:09:08.646 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag AUTHORDOMAIN is now ready, value: xrite.com
1312Aug 23 12:09:08.646 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag RELAYSTRUSTED is now ready, value:
1313Aug 23 12:09:08.646 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag RELAYSUNTRUSTED is now ready, value: [ ip=208.71.80.106 rdns=grexcap003.xrite.com helo=GREXCAP003.XRITE.com by=mail8.example.com ident= envfrom= intl=0 id=D168961803A auth= msa=0 ] [ ip=192.168.171.140 rdns=806946-VM166 helo=806946-VM166 by=GREXCAP003.XRITE.com ident= envfrom= intl=0 id=14.2.347.0 auth= msa=0 ]
1314Aug 23 12:09:08.646 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag RELAYSINTERNAL is now ready, value:
1315Aug 23 12:09:08.646 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag RELAYSEXTERNAL is now ready, value: [ ip=208.71.80.106 rdns=grexcap003.xrite.com helo=GREXCAP003.XRITE.com by=mail8.example.com ident= envfrom= intl=0 id=D168961803A auth= msa=0 ] [ ip=192.168.171.140 rdns=806946-VM166 helo=806946-VM166 by=GREXCAP003.XRITE.com ident= envfrom= intl=0 id=14.2.347.0 auth= msa=0 ]
1316Aug 23 12:09:08.647 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag LANGUAGES is now ready, value: <UNDEF>
1317Aug 23 12:09:08.647 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: message: ---- MIME PARSER START ----
1318Aug 23 12:09:08.647 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: message: parsing normal part
1319Aug 23 12:09:08.647 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: message: storing a body to memory
1320Aug 23 12:09:08.647 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: message: ---- MIME PARSER END ----
1321Aug 23 12:09:08.648 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: message: decoding quoted-printable
1322Aug 23 12:09:08.648 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: message: HTML::Parser utf8_mode on (assumed UTF-8 octets)
1323Aug 23 12:09:08.651 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag RELAYCOUNTRY is now ready, value: ARY:[US,**]
1324Aug 23 12:09:08.652 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag URIHOSTS is now ready, value: ARY:[my.xrite.com,example.com]
1325Aug 23 12:09:08.653 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag URIDOMAINS is now ready, value: ARY:[xrite.com,example.com]
1326Aug 23 12:09:08.653 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: considering host=my.xrite.com, domain=xrite.com
1327Aug 23 12:09:08.653 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/xrite.com.multi.surbl.org for DNSBL:xrite.com:multi.surbl.org
1328Aug 23 12:09:08.654 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1329Aug 23 12:09:08.654 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1330Aug 23 12:09:08.654 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: connect_sock, resolver: yes
1331Aug 23 12:09:08.654 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: 53959 configured local ports for DNS queries
1332Aug 23 12:09:08.655 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: LocalAddr: [::]:22126, name server: [::1]:53, module IO::Socket::IP
1333Aug 23 12:09:08.655 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: resolver socket rx buffer size is 42080 bytes, local port 22126
1334Aug 23 12:09:08.656 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 39318/IN/A/xrite.com.multi.surbl.org
1335Aug 23 12:09:08.657 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_MW_SURBL, URI-DNSBL, DNSBL:xrite.com:multi.surbl.org (timeout 15.0s, min 3.0s)
1336Aug 23 12:09:08.657 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_MW_SURBL lookup start
1337Aug 23 12:09:08.657 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/xrite.com.multi.uribl.com for DNSBL:xrite.com:multi.uribl.com
1338Aug 23 12:09:08.658 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1339Aug 23 12:09:08.658 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1340Aug 23 12:09:08.658 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 60723/IN/A/xrite.com.multi.uribl.com
1341Aug 23 12:09:08.659 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_RED, URI-DNSBL, DNSBL:xrite.com:multi.uribl.com (timeout 15.0s, min 3.0s)
1342Aug 23 12:09:08.659 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_RED lookup start
1343Aug 23 12:09:08.659 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 60723/IN/A/xrite.com.multi.uribl.com already underway, adding no.2 URIBL_BLACK
1344Aug 23 12:09:08.660 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_BLACK lookup start
1345Aug 23 12:09:08.660 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 39318/IN/A/xrite.com.multi.surbl.org already underway, adding no.2 SURBL_BLOCKED
1346Aug 23 12:09:08.660 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: SURBL_BLOCKED lookup start
1347Aug 23 12:09:08.660 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 60723/IN/A/xrite.com.multi.uribl.com already underway, adding no.3 URIBL_BLOCKED
1348Aug 23 12:09:08.661 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_BLOCKED lookup start
1349Aug 23 12:09:08.661 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 39318/IN/A/xrite.com.multi.surbl.org already underway, adding no.3 URIBL_PH_SURBL
1350Aug 23 12:09:08.661 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_PH_SURBL lookup start
1351Aug 23 12:09:08.661 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 39318/IN/A/xrite.com.multi.surbl.org already underway, adding no.4 URIBL_ABUSE_SURBL
1352Aug 23 12:09:08.662 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_ABUSE_SURBL lookup start
1353Aug 23 12:09:08.662 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 39318/IN/A/xrite.com.multi.surbl.org already underway, adding no.5 URIBL_CR_SURBL
1354Aug 23 12:09:08.662 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_CR_SURBL lookup start
1355Aug 23 12:09:08.662 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/xrite.com.dob.sibl.support-intelligence.net for DNSBL:xrite.com:dob.sibl.support-intelligence.net
1356Aug 23 12:09:08.663 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1357Aug 23 12:09:08.663 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1358Aug 23 12:09:08.664 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 47017/IN/A/xrite.com.dob.sibl.support-intelligence.net
1359Aug 23 12:09:08.664 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_RHS_DOB, URI-DNSBL, DNSBL:xrite.com:dob.sibl.support-intelligence.net (timeout 15.0s, min 3.0s)
1360Aug 23 12:09:08.664 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_RHS_DOB lookup start
1361Aug 23 12:09:08.664 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 60723/IN/A/xrite.com.multi.uribl.com already underway, adding no.4 URIBL_GREY
1362Aug 23 12:09:08.664 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_GREY lookup start
1363Aug 23 12:09:08.664 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 39318/IN/A/xrite.com.multi.surbl.org already underway, adding no.6 URIBL_WS_SURBL
1364Aug 23 12:09:08.665 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_WS_SURBL lookup start
1365Aug 23 12:09:08.665 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/xrite.com.dbl.spamhaus.org for DNSBL:xrite.com:dbl.spamhaus.org
1366Aug 23 12:09:08.665 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1367Aug 23 12:09:08.665 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1368Aug 23 12:09:08.665 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 36019/IN/A/xrite.com.dbl.spamhaus.org
1369Aug 23 12:09:08.666 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_DBL_SPAM, URI-DNSBL, DNSBL:xrite.com:dbl.spamhaus.org (timeout 15.0s, min 3.0s)
1370Aug 23 12:09:08.666 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_SPAM lookup start
1371Aug 23 12:09:08.666 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 36019/IN/A/xrite.com.dbl.spamhaus.org already underway, adding no.2 URIBL_DBL_PHISH
1372Aug 23 12:09:08.666 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_PHISH lookup start
1373Aug 23 12:09:08.666 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 36019/IN/A/xrite.com.dbl.spamhaus.org already underway, adding no.3 URIBL_DBL_ERROR
1374Aug 23 12:09:08.667 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_ERROR lookup start
1375Aug 23 12:09:08.667 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 36019/IN/A/xrite.com.dbl.spamhaus.org already underway, adding no.4 URIBL_DBL_ABUSE_MALW
1376Aug 23 12:09:08.667 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_ABUSE_MALW lookup start
1377Aug 23 12:09:08.667 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 36019/IN/A/xrite.com.dbl.spamhaus.org already underway, adding no.5 URIBL_DBL_MALWARE
1378Aug 23 12:09:08.667 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_MALWARE lookup start
1379Aug 23 12:09:08.667 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 36019/IN/A/xrite.com.dbl.spamhaus.org already underway, adding no.6 URIBL_DBL_ABUSE_SPAM
1380Aug 23 12:09:08.668 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_ABUSE_SPAM lookup start
1381Aug 23 12:09:08.668 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 36019/IN/A/xrite.com.dbl.spamhaus.org already underway, adding no.7 URIBL_DBL_ABUSE_BOTCC
1382Aug 23 12:09:08.668 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_ABUSE_BOTCC lookup start
1383Aug 23 12:09:08.668 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 36019/IN/A/xrite.com.dbl.spamhaus.org already underway, adding no.8 URIBL_DBL_ABUSE_REDIR
1384Aug 23 12:09:08.668 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_ABUSE_REDIR lookup start
1385Aug 23 12:09:08.668 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 36019/IN/A/xrite.com.dbl.spamhaus.org already underway, adding no.9 URIBL_DBL_ABUSE_PHISH
1386Aug 23 12:09:08.669 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_ABUSE_PHISH lookup start
1387Aug 23 12:09:08.669 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 36019/IN/A/xrite.com.dbl.spamhaus.org already underway, adding no.10 URIBL_DBL_BOTNETCC
1388Aug 23 12:09:08.669 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_BOTNETCC lookup start
1389Aug 23 12:09:08.669 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching NS/xrite.com for NS:xrite.com
1390Aug 23 12:09:08.670 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1391Aug 23 12:09:08.670 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1392Aug 23 12:09:08.670 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 38255/IN/NS/xrite.com
1393Aug 23 12:09:08.670 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URI-NS, NS:xrite.com (timeout 15.0s, min 3.0s)
1394Aug 23 12:09:08.670 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/my.xrite.com for A:my.xrite.com
1395Aug 23 12:09:08.671 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1396Aug 23 12:09:08.671 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1397Aug 23 12:09:08.671 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 12749/IN/A/my.xrite.com
1398Aug 23 12:09:08.672 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URI-A, A:my.xrite.com (timeout 15.0s, min 3.0s)
1399Aug 23 12:09:08.672 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_SBL_A lookup start
1400Aug 23 12:09:08.672 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: considering host=example.com, domain=example.com
1401Aug 23 12:09:08.672 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/example.com.multi.surbl.org for DNSBL:example.com:multi.surbl.org
1402Aug 23 12:09:08.672 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1403Aug 23 12:09:08.673 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1404Aug 23 12:09:08.673 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 28608/IN/A/example.com.multi.surbl.org
1405Aug 23 12:09:08.673 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_MW_SURBL, URI-DNSBL, DNSBL:example.com:multi.surbl.org (timeout 15.0s, min 3.0s)
1406Aug 23 12:09:08.673 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_MW_SURBL lookup start
1407Aug 23 12:09:08.674 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/example.com.multi.uribl.com for DNSBL:example.com:multi.uribl.com
1408Aug 23 12:09:08.674 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1409Aug 23 12:09:08.674 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1410Aug 23 12:09:08.674 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 2615/IN/A/example.com.multi.uribl.com
1411Aug 23 12:09:08.675 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_RED, URI-DNSBL, DNSBL:example.com:multi.uribl.com (timeout 15.0s, min 3.0s)
1412Aug 23 12:09:08.675 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_RED lookup start
1413Aug 23 12:09:08.675 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 2615/IN/A/example.com.multi.uribl.com already underway, adding no.2 URIBL_BLACK
1414Aug 23 12:09:08.675 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_BLACK lookup start
1415Aug 23 12:09:08.675 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 28608/IN/A/example.com.multi.surbl.org already underway, adding no.2 SURBL_BLOCKED
1416Aug 23 12:09:08.675 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: SURBL_BLOCKED lookup start
1417Aug 23 12:09:08.676 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 2615/IN/A/example.com.multi.uribl.com already underway, adding no.3 URIBL_BLOCKED
1418Aug 23 12:09:08.676 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_BLOCKED lookup start
1419Aug 23 12:09:08.676 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 28608/IN/A/example.com.multi.surbl.org already underway, adding no.3 URIBL_PH_SURBL
1420Aug 23 12:09:08.676 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_PH_SURBL lookup start
1421Aug 23 12:09:08.676 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 28608/IN/A/example.com.multi.surbl.org already underway, adding no.4 URIBL_ABUSE_SURBL
1422Aug 23 12:09:08.677 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_ABUSE_SURBL lookup start
1423Aug 23 12:09:08.677 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 28608/IN/A/example.com.multi.surbl.org already underway, adding no.5 URIBL_CR_SURBL
1424Aug 23 12:09:08.677 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_CR_SURBL lookup start
1425Aug 23 12:09:08.677 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/example.com.dob.sibl.support-intelligence.net for DNSBL:example.com:dob.sibl.support-intelligence.net
1426Aug 23 12:09:08.677 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1427Aug 23 12:09:08.678 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1428Aug 23 12:09:08.678 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 16399/IN/A/example.com.dob.sibl.support-intelligence.net
1429Aug 23 12:09:08.678 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_RHS_DOB, URI-DNSBL, DNSBL:example.com:dob.sibl.support-intelligence.net (timeout 15.0s, min 3.0s)
1430Aug 23 12:09:08.678 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_RHS_DOB lookup start
1431Aug 23 12:09:08.679 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 2615/IN/A/example.com.multi.uribl.com already underway, adding no.4 URIBL_GREY
1432Aug 23 12:09:08.679 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_GREY lookup start
1433Aug 23 12:09:08.679 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 28608/IN/A/example.com.multi.surbl.org already underway, adding no.6 URIBL_WS_SURBL
1434Aug 23 12:09:08.679 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_WS_SURBL lookup start
1435Aug 23 12:09:08.679 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/example.com.dbl.spamhaus.org for DNSBL:example.com:dbl.spamhaus.org
1436Aug 23 12:09:08.680 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1437Aug 23 12:09:08.680 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1438Aug 23 12:09:08.680 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 47807/IN/A/example.com.dbl.spamhaus.org
1439Aug 23 12:09:08.680 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_DBL_SPAM, URI-DNSBL, DNSBL:example.com:dbl.spamhaus.org (timeout 15.0s, min 3.0s)
1440Aug 23 12:09:08.680 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_SPAM lookup start
1441Aug 23 12:09:08.681 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 47807/IN/A/example.com.dbl.spamhaus.org already underway, adding no.2 URIBL_DBL_PHISH
1442Aug 23 12:09:08.681 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_PHISH lookup start
1443Aug 23 12:09:08.681 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 47807/IN/A/example.com.dbl.spamhaus.org already underway, adding no.3 URIBL_DBL_ERROR
1444Aug 23 12:09:08.682 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_ERROR lookup start
1445Aug 23 12:09:08.682 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 47807/IN/A/example.com.dbl.spamhaus.org already underway, adding no.4 URIBL_DBL_ABUSE_MALW
1446Aug 23 12:09:08.682 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_ABUSE_MALW lookup start
1447Aug 23 12:09:08.682 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 47807/IN/A/example.com.dbl.spamhaus.org already underway, adding no.5 URIBL_DBL_MALWARE
1448Aug 23 12:09:08.682 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_MALWARE lookup start
1449Aug 23 12:09:08.682 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 47807/IN/A/example.com.dbl.spamhaus.org already underway, adding no.6 URIBL_DBL_ABUSE_SPAM
1450Aug 23 12:09:08.682 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_ABUSE_SPAM lookup start
1451Aug 23 12:09:08.683 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 47807/IN/A/example.com.dbl.spamhaus.org already underway, adding no.7 URIBL_DBL_ABUSE_BOTCC
1452Aug 23 12:09:08.683 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_ABUSE_BOTCC lookup start
1453Aug 23 12:09:08.683 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 47807/IN/A/example.com.dbl.spamhaus.org already underway, adding no.8 URIBL_DBL_ABUSE_REDIR
1454Aug 23 12:09:08.683 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_ABUSE_REDIR lookup start
1455Aug 23 12:09:08.683 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 47807/IN/A/example.com.dbl.spamhaus.org already underway, adding no.9 URIBL_DBL_ABUSE_PHISH
1456Aug 23 12:09:08.683 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_ABUSE_PHISH lookup start
1457Aug 23 12:09:08.684 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: query 47807/IN/A/example.com.dbl.spamhaus.org already underway, adding no.10 URIBL_DBL_BOTNETCC
1458Aug 23 12:09:08.684 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_DBL_BOTNETCC lookup start
1459Aug 23 12:09:08.684 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching NS/example.com for NS:example.com
1460Aug 23 12:09:08.684 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1461Aug 23 12:09:08.685 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1462Aug 23 12:09:08.685 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 37894/IN/NS/example.com
1463Aug 23 12:09:08.685 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URI-NS, NS:example.com (timeout 15.0s, min 3.0s)
1464Aug 23 12:09:08.685 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/example.com for A:example.com
1465Aug 23 12:09:08.686 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1466Aug 23 12:09:08.686 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1467Aug 23 12:09:08.686 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 529/IN/A/example.com
1468Aug 23 12:09:08.686 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URI-A, A:example.com (timeout 15.0s, min 3.0s)
1469Aug 23 12:09:08.686 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: URIBL_SBL_A lookup start
1470Aug 23 12:09:08.687 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL bl.spamcop.net., set spamcop
1471Aug 23 12:09:08.688 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1472Aug 23 12:09:08.689 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: netset: trusted_networks lookup on 208.71.80.106, 2 networks, result: 0, 0.787 ms
1473Aug 23 12:09:08.689 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1474Aug 23 12:09:08.689 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching TXT/106.80.71.208.bl.spamcop.net for dns:TXT:106.80.71.208.bl.spamcop.net
1475Aug 23 12:09:08.689 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1476Aug 23 12:09:08.690 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1477Aug 23 12:09:08.690 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 60635/IN/TXT/106.80.71.208.bl.spamcop.net
1478Aug 23 12:09:08.690 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: DNSBL-TXT, dns:TXT:106.80.71.208.bl.spamcop.net (timeout 15.0s, min 3.0s)
1479Aug 23 12:09:08.691 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
1480Aug 23 12:09:08.691 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1481Aug 23 12:09:08.691 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1482Aug 23 12:09:08.692 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/106.80.71.208.iadb.isipp.com for dns:A:106.80.71.208.iadb.isipp.com
1483Aug 23 12:09:08.692 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1484Aug 23 12:09:08.692 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1485Aug 23 12:09:08.692 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 52553/IN/A/106.80.71.208.iadb.isipp.com
1486Aug 23 12:09:08.693 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: DNSBL-A, dns:A:106.80.71.208.iadb.isipp.com (timeout 15.0s, min 3.0s)
1487Aug 23 12:09:08.693 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
1488Aug 23 12:09:08.693 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1489Aug 23 12:09:08.693 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: netset: trusted_networks cached lookup on 208.71.80.106, 2 networks, result: 0
1490Aug 23 12:09:08.693 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1491Aug 23 12:09:08.694 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/106.80.71.208.zen.spamhaus.org for dns:A:106.80.71.208.zen.spamhaus.org
1492Aug 23 12:09:08.694 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1493Aug 23 12:09:08.694 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1494Aug 23 12:09:08.695 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 43526/IN/A/106.80.71.208.zen.spamhaus.org
1495Aug 23 12:09:08.695 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: DNSBL-A, dns:A:106.80.71.208.zen.spamhaus.org (timeout 15.0s, min 3.0s)
1496Aug 23 12:09:08.695 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
1497Aug 23 12:09:08.695 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1498Aug 23 12:09:08.695 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: netset: trusted_networks cached lookup on 208.71.80.106, 2 networks, result: 0
1499Aug 23 12:09:08.695 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1500Aug 23 12:09:08.696 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/106.80.71.208.dnsbl.sorbs.net for dns:A:106.80.71.208.dnsbl.sorbs.net
1501Aug 23 12:09:08.696 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1502Aug 23 12:09:08.696 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1503Aug 23 12:09:08.697 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 13754/IN/A/106.80.71.208.dnsbl.sorbs.net
1504Aug 23 12:09:08.697 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: DNSBL-A, dns:A:106.80.71.208.dnsbl.sorbs.net (timeout 15.0s, min 3.0s)
1505Aug 23 12:09:08.697 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL bb.barracudacentral.org., set brbl-lastexternal
1506Aug 23 12:09:08.697 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1507Aug 23 12:09:08.697 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: netset: trusted_networks cached lookup on 208.71.80.106, 2 networks, result: 0
1508Aug 23 12:09:08.697 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1509Aug 23 12:09:08.698 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/106.80.71.208.bb.barracudacentral.org for dns:A:106.80.71.208.bb.barracudacentral.org
1510Aug 23 12:09:08.698 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1511Aug 23 12:09:08.698 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1512Aug 23 12:09:08.699 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 62170/IN/A/106.80.71.208.bb.barracudacentral.org
1513Aug 23 12:09:08.699 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: DNSBL-A, dns:A:106.80.71.208.bb.barracudacentral.org (timeout 15.0s, min 3.0s)
1514Aug 23 12:09:08.699 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL sa-accredit.habeas.com., set ssc-firsttrusted
1515Aug 23 12:09:08.699 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1516Aug 23 12:09:08.700 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1517Aug 23 12:09:08.700 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching TXT/106.80.71.208.sa-accredit.habeas.com for dns:TXT:106.80.71.208.sa-accredit.habeas.com
1518Aug 23 12:09:08.700 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1519Aug 23 12:09:08.700 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1520Aug 23 12:09:08.701 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 61128/IN/TXT/106.80.71.208.sa-accredit.habeas.com
1521Aug 23 12:09:08.701 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: DNSBL-TXT, dns:TXT:106.80.71.208.sa-accredit.habeas.com (timeout 15.0s, min 3.0s)
1522Aug 23 12:09:08.701 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
1523Aug 23 12:09:08.702 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1524Aug 23 12:09:08.702 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: netset: trusted_networks cached lookup on 208.71.80.106, 2 networks, result: 0
1525Aug 23 12:09:08.702 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1526Aug 23 12:09:08.702 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL zen.spamhaus.org., set zen
1527Aug 23 12:09:08.702 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1528Aug 23 12:09:08.703 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: netset: trusted_networks cached lookup on 208.71.80.106, 2 networks, result: 0
1529Aug 23 12:09:08.703 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1530Aug 23 12:09:08.703 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking A and MX for host xrite.com
1531Aug 23 12:09:08.703 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/xrite.com for dns:A:xrite.com
1532Aug 23 12:09:08.703 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1533Aug 23 12:09:08.703 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1534Aug 23 12:09:08.704 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 50214/IN/A/xrite.com
1535Aug 23 12:09:08.704 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: NO_DNS_FOR_FROM, DNSBL-A, dns:A:xrite.com (timeout 15.0s, min 3.0s)
1536Aug 23 12:09:08.704 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching MX/xrite.com for dns:MX:xrite.com
1537Aug 23 12:09:08.704 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1538Aug 23 12:09:08.705 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1539Aug 23 12:09:08.705 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 47712/IN/MX/xrite.com
1540Aug 23 12:09:08.705 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: NO_DNS_FOR_FROM, DNSBL-MX, dns:MX:xrite.com (timeout 15.0s, min 3.0s)
1541Aug 23 12:09:08.705 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL bl.score.senderscore.com., set rnbl-lastexternal
1542Aug 23 12:09:08.705 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1543Aug 23 12:09:08.706 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: netset: trusted_networks cached lookup on 208.71.80.106, 2 networks, result: 0
1544Aug 23 12:09:08.706 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1545Aug 23 12:09:08.706 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/106.80.71.208.bl.score.senderscore.com for dns:A:106.80.71.208.bl.score.senderscore.com
1546Aug 23 12:09:08.706 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1547Aug 23 12:09:08.707 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1548Aug 23 12:09:08.707 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 19126/IN/A/106.80.71.208.bl.score.senderscore.com
1549Aug 23 12:09:08.707 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: DNSBL-A, dns:A:106.80.71.208.bl.score.senderscore.com (timeout 15.0s, min 3.0s)
1550Aug 23 12:09:08.708 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL psbl.surriel.com., set psbl-lastexternal
1551Aug 23 12:09:08.708 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1552Aug 23 12:09:08.708 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: netset: trusted_networks cached lookup on 208.71.80.106, 2 networks, result: 0
1553Aug 23 12:09:08.708 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1554Aug 23 12:09:08.708 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/106.80.71.208.psbl.surriel.com for dns:A:106.80.71.208.psbl.surriel.com
1555Aug 23 12:09:08.709 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1556Aug 23 12:09:08.709 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1557Aug 23 12:09:08.709 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 24055/IN/A/106.80.71.208.psbl.surriel.com
1558Aug 23 12:09:08.709 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: DNSBL-A, dns:A:106.80.71.208.psbl.surriel.com (timeout 15.0s, min 3.0s)
1559Aug 23 12:09:08.710 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-lastexternal
1560Aug 23 12:09:08.710 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1561Aug 23 12:09:08.710 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: netset: trusted_networks cached lookup on 208.71.80.106, 2 networks, result: 0
1562Aug 23 12:09:08.710 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1563Aug 23 12:09:08.710 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL wl.mailspike.net., set mspikeg-firsttrusted
1564Aug 23 12:09:08.711 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1565Aug 23 12:09:08.711 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: netset: trusted_networks cached lookup on 208.71.80.106, 2 networks, result: 0
1566Aug 23 12:09:08.711 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1567Aug 23 12:09:08.711 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/106.80.71.208.wl.mailspike.net for dns:A:106.80.71.208.wl.mailspike.net
1568Aug 23 12:09:08.711 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1569Aug 23 12:09:08.711 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1570Aug 23 12:09:08.712 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 65178/IN/A/106.80.71.208.wl.mailspike.net
1571Aug 23 12:09:08.712 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: DNSBL-A, dns:A:106.80.71.208.wl.mailspike.net (timeout 15.0s, min 3.0s)
1572Aug 23 12:09:08.713 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL sa-trusted.bondedsender.org., set ssc-firsttrusted
1573Aug 23 12:09:08.713 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1574Aug 23 12:09:08.713 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1575Aug 23 12:09:08.713 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching TXT/106.80.71.208.sa-trusted.bondedsender.org for dns:TXT:106.80.71.208.sa-trusted.bondedsender.org
1576Aug 23 12:09:08.714 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1577Aug 23 12:09:08.714 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1578Aug 23 12:09:08.714 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 17072/IN/TXT/106.80.71.208.sa-trusted.bondedsender.org
1579Aug 23 12:09:08.714 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: DNSBL-TXT, dns:TXT:106.80.71.208.sa-trusted.bondedsender.org (timeout 15.0s, min 3.0s)
1580Aug 23 12:09:08.715 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL bl.mailspike.net., set mspikeb-lastexternal
1581Aug 23 12:09:08.715 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1582Aug 23 12:09:08.715 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: netset: trusted_networks cached lookup on 208.71.80.106, 2 networks, result: 0
1583Aug 23 12:09:08.715 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1584Aug 23 12:09:08.715 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/106.80.71.208.bl.mailspike.net for dns:A:106.80.71.208.bl.mailspike.net
1585Aug 23 12:09:08.716 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1586Aug 23 12:09:08.716 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1587Aug 23 12:09:08.716 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 30245/IN/A/106.80.71.208.bl.mailspike.net
1588Aug 23 12:09:08.716 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: DNSBL-A, dns:A:106.80.71.208.bl.mailspike.net (timeout 15.0s, min 3.0s)
1589Aug 23 12:09:08.717 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: checking RBL list.dnswl.org., set dnswl-firsttrusted
1590Aug 23 12:09:08.717 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: IPs found: full-external: 208.71.80.106, 192.168.171.140 untrusted: 208.71.80.106 originating:
1591Aug 23 12:09:08.717 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: only inspecting the following IPs: 208.71.80.106
1592Aug 23 12:09:08.717 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/106.80.71.208.list.dnswl.org for dns:A:106.80.71.208.list.dnswl.org
1593Aug 23 12:09:08.717 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1594Aug 23 12:09:08.717 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1595Aug 23 12:09:08.718 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 60985/IN/A/106.80.71.208.list.dnswl.org
1596Aug 23 12:09:08.718 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: DNSBL-A, dns:A:106.80.71.208.list.dnswl.org (timeout 15.0s, min 3.0s)
1597Aug 23 12:09:08.719 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: check_main, time limit in 299.907 s
1598Aug 23 12:09:08.719 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: running tests for priority: -1000
1599Aug 23 12:09:08.719 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 139 bytes from ::1
1600Aug 23 12:09:08.720 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 47017/IN/A/xrite.com.dob.sibl.support-intelligence.net: NXDOMAIN
1601Aug 23 12:09:08.720 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:dob.sibl.support-intelligence.net, rule URIBL_RHS_DOB
1602Aug 23 12:09:08.720 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RHS_DOB DNSBL:xrite.com:dob.sibl.support-intelligence.net
1603Aug 23 12:09:08.720 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 280 bytes from ::1
1604Aug 23 12:09:08.722 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 37894 is OK, 4 answer records
1605Aug 23 12:09:08.722 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key NS:example.com
1606Aug 23 12:09:08.722 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_ns_lookup NS:example.com
1607Aug 23 12:09:08.723 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: got(1) NS for example.com: example.com. 3600 IN NS ns2.example.com.
1608Aug 23 12:09:08.723 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/ns2.example.com for A:ns2.example.com
1609Aug 23 12:09:08.723 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1610Aug 23 12:09:08.723 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1611Aug 23 12:09:08.723 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 43659/IN/A/ns2.example.com
1612Aug 23 12:09:08.724 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URI-A, A:ns2.example.com (timeout 15.0s, min 3.0s)
1613Aug 23 12:09:08.724 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: got(2) NS for example.com: example.com. 3600 IN NS puck.nether.net.
1614Aug 23 12:09:08.724 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/puck.nether.net for A:puck.nether.net
1615Aug 23 12:09:08.724 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1616Aug 23 12:09:08.725 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1617Aug 23 12:09:08.725 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 12690/IN/A/puck.nether.net
1618Aug 23 12:09:08.725 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URI-A, A:puck.nether.net (timeout 15.0s, min 3.0s)
1619Aug 23 12:09:08.725 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: got(3) NS for example.com: example.com. 3600 IN NS dns3.actusa.net.
1620Aug 23 12:09:08.725 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/dns3.actusa.net for A:dns3.actusa.net
1621Aug 23 12:09:08.726 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1622Aug 23 12:09:08.726 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1623Aug 23 12:09:08.726 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 63173/IN/A/dns3.actusa.net
1624Aug 23 12:09:08.726 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URI-A, A:dns3.actusa.net (timeout 15.0s, min 3.0s)
1625Aug 23 12:09:08.727 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: got(4) NS for example.com: example.com. 3600 IN NS dns2.actusa.net.
1626Aug 23 12:09:08.727 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/dns2.actusa.net for A:dns2.actusa.net
1627Aug 23 12:09:08.727 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1628Aug 23 12:09:08.727 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1629Aug 23 12:09:08.728 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 5779/IN/A/dns2.actusa.net
1630Aug 23 12:09:08.728 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URI-A, A:dns2.actusa.net (timeout 15.0s, min 3.0s)
1631Aug 23 12:09:08.729 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 296 bytes from ::1
1632Aug 23 12:09:08.730 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 529 is OK, 1 answer records
1633Aug 23 12:09:08.730 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key A:example.com
1634Aug 23 12:09:08.730 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup A:example.com
1635Aug 23 12:09:08.731 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup got(1) A for example.com: example.com. 3600 IN A 204.109.60.130
1636Aug 23 12:09:08.731 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/130.60.109.204.sbl.spamhaus.org for DNSBL:130.60.109.204:sbl.spamhaus.org
1637Aug 23 12:09:08.731 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1638Aug 23 12:09:08.731 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1639Aug 23 12:09:08.732 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 32287/IN/A/130.60.109.204.sbl.spamhaus.org
1640Aug 23 12:09:08.732 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL_A, URI-DNSBL, DNSBL:130.60.109.204:sbl.spamhaus.org (timeout 15.0s, min 3.0s)
1641Aug 23 12:09:08.732 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/130.60.109.204.zen.spamhaus.org for DNSBL:130.60.109.204:zen.spamhaus.org
1642Aug 23 12:09:08.733 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1643Aug 23 12:09:08.733 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1644Aug 23 12:09:08.733 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 50604/IN/A/130.60.109.204.zen.spamhaus.org
1645Aug 23 12:09:08.733 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:130.60.109.204:zen.spamhaus.org (timeout 15.0s, min 3.0s)
1646Aug 23 12:09:08.734 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 145 bytes from ::1
1647Aug 23 12:09:08.734 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 16399/IN/A/example.com.dob.sibl.support-intelligence.net: NXDOMAIN
1648Aug 23 12:09:08.735 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:dob.sibl.support-intelligence.net, rule URIBL_RHS_DOB
1649Aug 23 12:09:08.735 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RHS_DOB DNSBL:example.com:dob.sibl.support-intelligence.net
1650Aug 23 12:09:08.735 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 123 bytes from ::1
1651Aug 23 12:09:08.736 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 43526/IN/A/106.80.71.208.zen.spamhaus.org: NXDOMAIN
1652Aug 23 12:09:08.736 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:A:106.80.71.208.zen.spamhaus.org
1653Aug 23 12:09:08.736 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 262 bytes from ::1
1654Aug 23 12:09:08.737 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 47712 is OK, 2 answer records
1655Aug 23 12:09:08.738 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:MX:xrite.com
1656Aug 23 12:09:08.738 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: hit <dns:xrite.com?type=MX> 10 mxa-001d2f01.gslb.pphosted.com.
1657Aug 23 12:09:08.738 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: hit <dns:xrite.com?type=MX> 10 mxb-001d2f01.gslb.pphosted.com.
1658Aug 23 12:09:08.739 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 280 bytes from ::1
1659Aug 23 12:09:08.740 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 43659 is OK, 1 answer records
1660Aug 23 12:09:08.740 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key A:ns2.example.com
1661Aug 23 12:09:08.740 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup A:ns2.example.com
1662Aug 23 12:09:08.741 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns2.example.com: ns2.example.com. 3600 IN A 192.168.244.137
1663Aug 23 12:09:08.741 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/137.244.73.192.sbl.spamhaus.org for DNSBL:137.244.73.192:sbl.spamhaus.org
1664Aug 23 12:09:08.741 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1665Aug 23 12:09:08.741 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1666Aug 23 12:09:08.742 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 21759/IN/A/137.244.73.192.sbl.spamhaus.org
1667Aug 23 12:09:08.742 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL_A, URI-DNSBL, DNSBL:137.244.73.192:sbl.spamhaus.org (timeout 15.0s, min 3.0s)
1668Aug 23 12:09:08.742 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/137.244.73.192.zen.spamhaus.org for DNSBL:137.244.73.192:zen.spamhaus.org
1669Aug 23 12:09:08.742 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1670Aug 23 12:09:08.743 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1671Aug 23 12:09:08.743 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 16913/IN/A/137.244.73.192.zen.spamhaus.org
1672Aug 23 12:09:08.743 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:137.244.73.192:zen.spamhaus.org (timeout 15.0s, min 3.0s)
1673Aug 23 12:09:08.743 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 191 bytes from ::1
1674Aug 23 12:09:08.744 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 12690 is OK, 1 answer records
1675Aug 23 12:09:08.744 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key A:puck.nether.net
1676Aug 23 12:09:08.744 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup A:puck.nether.net
1677Aug 23 12:09:08.745 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup got(1) A for puck.nether.net: puck.nether.net. 17224 IN A 204.42.254.5
1678Aug 23 12:09:08.745 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/5.254.42.204.sbl.spamhaus.org for DNSBL:5.254.42.204:sbl.spamhaus.org
1679Aug 23 12:09:08.745 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1680Aug 23 12:09:08.745 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1681Aug 23 12:09:08.746 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 13050/IN/A/5.254.42.204.sbl.spamhaus.org
1682Aug 23 12:09:08.746 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL_A, URI-DNSBL, DNSBL:5.254.42.204:sbl.spamhaus.org (timeout 15.0s, min 3.0s)
1683Aug 23 12:09:08.746 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/5.254.42.204.zen.spamhaus.org for DNSBL:5.254.42.204:zen.spamhaus.org
1684Aug 23 12:09:08.746 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1685Aug 23 12:09:08.747 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1686Aug 23 12:09:08.747 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 64756/IN/A/5.254.42.204.zen.spamhaus.org
1687Aug 23 12:09:08.747 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:5.254.42.204:zen.spamhaus.org (timeout 15.0s, min 3.0s)
1688Aug 23 12:09:08.747 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 124 bytes from ::1
1689Aug 23 12:09:08.748 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 50604/IN/A/130.60.109.204.zen.spamhaus.org: NXDOMAIN
1690Aug 23 12:09:08.749 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:130.60.109.204:zen.spamhaus.org, rule URIBL_SBL
1691Aug 23 12:09:08.749 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:130.60.109.204:zen.spamhaus.org
1692Aug 23 12:09:08.749 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 99 bytes from ::1
1693Aug 23 12:09:08.750 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 60723/IN/A/xrite.com.multi.uribl.com: NXDOMAIN
1694Aug 23 12:09:08.750 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:multi.uribl.com, rule URIBL_RED
1695Aug 23 12:09:08.750 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RED DNSBL:xrite.com:multi.uribl.com
1696Aug 23 12:09:08.750 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:multi.uribl.com, rule URIBL_BLACK
1697Aug 23 12:09:08.751 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLACK DNSBL:xrite.com:multi.uribl.com
1698Aug 23 12:09:08.751 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:multi.uribl.com, rule URIBL_BLOCKED
1699Aug 23 12:09:08.751 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLOCKED DNSBL:xrite.com:multi.uribl.com
1700Aug 23 12:09:08.751 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:multi.uribl.com, rule URIBL_GREY
1701Aug 23 12:09:08.751 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_GREY DNSBL:xrite.com:multi.uribl.com
1702Aug 23 12:09:08.752 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 124 bytes from ::1
1703Aug 23 12:09:08.752 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 16913/IN/A/137.244.73.192.zen.spamhaus.org: NXDOMAIN
1704Aug 23 12:09:08.753 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:137.244.73.192:zen.spamhaus.org, rule URIBL_SBL
1705Aug 23 12:09:08.753 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:137.244.73.192:zen.spamhaus.org
1706Aug 23 12:09:08.753 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 122 bytes from ::1
1707Aug 23 12:09:08.754 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 64756/IN/A/5.254.42.204.zen.spamhaus.org: NXDOMAIN
1708Aug 23 12:09:08.754 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:5.254.42.204:zen.spamhaus.org, rule URIBL_SBL
1709Aug 23 12:09:08.754 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:5.254.42.204:zen.spamhaus.org
1710Aug 23 12:09:08.754 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 105 bytes from ::1
1711Aug 23 12:09:08.755 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 2615/IN/A/example.com.multi.uribl.com: NXDOMAIN
1712Aug 23 12:09:08.755 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:multi.uribl.com, rule URIBL_RED
1713Aug 23 12:09:08.755 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RED DNSBL:example.com:multi.uribl.com
1714Aug 23 12:09:08.755 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:multi.uribl.com, rule URIBL_BLACK
1715Aug 23 12:09:08.755 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLACK DNSBL:example.com:multi.uribl.com
1716Aug 23 12:09:08.755 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:multi.uribl.com, rule URIBL_BLOCKED
1717Aug 23 12:09:08.756 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLOCKED DNSBL:example.com:multi.uribl.com
1718Aug 23 12:09:08.756 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:multi.uribl.com, rule URIBL_GREY
1719Aug 23 12:09:08.756 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_GREY DNSBL:example.com:multi.uribl.com
1720Aug 23 12:09:08.756 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: select found no responses ready (t.o.=0.0)
1721Aug 23 12:09:08.756 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.055 s: URIBL_RHS_DOB, URI-DNSBL, DNSBL:xrite.com:dob.sibl.support-intelligence.net
1722Aug 23 12:09:08.756 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.006 s: URIBL_SBL, URI-DNSBL, DNSBL:5.254.42.204:zen.spamhaus.org
1723Aug 23 12:09:08.756 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.018 s: URI-A, A:puck.nether.net
1724Aug 23 12:09:08.757 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.008 s: URIBL_SBL, URI-DNSBL, DNSBL:137.244.73.192:zen.spamhaus.org
1725Aug 23 12:09:08.757 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.031 s: NO_DNS_FOR_FROM, DNSBL-MX, dns:MX:xrite.com
1726Aug 23 12:09:08.757 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.040 s: DNSBL-A, dns:A:106.80.71.208.zen.spamhaus.org
1727Aug 23 12:09:08.757 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.014 s: URIBL_SBL, URI-DNSBL, DNSBL:130.60.109.204:zen.spamhaus.org
1728Aug 23 12:09:08.757 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.091 s: URIBL_RED, URI-DNSBL, DNSBL:xrite.com:multi.uribl.com
1729Aug 23 12:09:08.757 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.080 s: URIBL_RED, URI-DNSBL, DNSBL:example.com:multi.uribl.com
1730Aug 23 12:09:08.758 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.042 s: URI-A, A:example.com
1731Aug 23 12:09:08.758 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.015 s: URI-A, A:ns2.example.com
1732Aug 23 12:09:08.758 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.055 s: URIBL_RHS_DOB, URI-DNSBL, DNSBL:example.com:dob.sibl.support-intelligence.net
1733Aug 23 12:09:08.758 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.035 s: URI-NS, NS:example.com
1734Aug 23 12:09:08.758 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: queries completed: 13, started: 10
1735Aug 23 12:09:08.758 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: queries active: DNSBL-A=9 DNSBL-TXT=3 URI-A=3 URI-DNSBL=7 URI-NS=1 at Thu Aug 23 12:09:08 2018
1736Aug 23 12:09:08.759 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: harvested completed queries
1737Aug 23 12:09:08.759 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running head tests; score so far=0
1738Aug 23 12:09:08.760 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running head_eval tests; score so far=0
1739Aug 23 12:09:08.761 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: eval: all '*From' addrs: customerservice@xrite.com
1740Aug 23 12:09:08.761 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: eval: all '*To' addrs: user666@example.com user0@example.com
1741Aug 23 12:09:08.762 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running body tests; score so far=0
1742Aug 23 12:09:08.763 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running uri tests; score so far=0
1743Aug 23 12:09:08.763 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running rawbody tests; score so far=0
1744Aug 23 12:09:08.764 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running full tests; score so far=0
1745Aug 23 12:09:08.765 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running meta tests; score so far=0
1746Aug 23 12:09:08.765 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: running tests for priority: -950
1747Aug 23 12:09:08.765 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running head tests; score so far=0
1748Aug 23 12:09:08.766 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running head_eval tests; score so far=0
1749Aug 23 12:09:08.766 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running body tests; score so far=0
1750Aug 23 12:09:08.767 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running uri tests; score so far=0
1751Aug 23 12:09:08.767 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running rawbody tests; score so far=0
1752Aug 23 12:09:08.767 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running full tests; score so far=0
1753Aug 23 12:09:08.768 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running meta tests; score so far=0
1754Aug 23 12:09:08.768 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: running tests for priority: -900
1755Aug 23 12:09:08.768 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running head tests; score so far=0
1756Aug 23 12:09:08.769 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running head_eval tests; score so far=0
1757Aug 23 12:09:08.769 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running body tests; score so far=0
1758Aug 23 12:09:08.770 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running uri tests; score so far=0
1759Aug 23 12:09:08.770 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running rawbody tests; score so far=0
1760Aug 23 12:09:08.771 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running full tests; score so far=0
1761Aug 23 12:09:08.771 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running meta tests; score so far=0
1762Aug 23 12:09:08.771 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: running tests for priority: -400
1763Aug 23 12:09:08.772 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running head tests; score so far=0
1764Aug 23 12:09:08.772 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running body tests; score so far=0
1765Aug 23 12:09:08.772 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running uri tests; score so far=0
1766Aug 23 12:09:08.773 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running body_eval tests; score so far=0
1767Aug 23 12:09:08.773 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running rawbody tests; score so far=0
1768Aug 23 12:09:08.773 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running full tests; score so far=0
1769Aug 23 12:09:08.774 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running meta tests; score so far=0
1770Aug 23 12:09:08.774 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: running tests for priority: 0
1771Aug 23 12:09:08.774 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running head tests; score so far=0
1772Aug 23 12:09:08.775 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __CTE ======> got hit: "<YES>"
1773Aug 23 12:09:08.776 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __HAS_FROM ======> got hit: "<YES>"
1774Aug 23 12:09:08.777 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "<YES>"
1775Aug 23 12:09:08.778 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __MIME_VERSION ======> got hit: "<YES>"
1776Aug 23 12:09:08.779 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __CTYPE_HTML ======> got hit: "text/html"
1777Aug 23 12:09:08.779 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __CT ======> got hit: "<YES>"
1778Aug 23 12:09:08.779 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __CTYPE_CHARSET_QUOTED ======> got hit: "charset=""
1779Aug 23 12:09:08.780 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __HAS_MESSAGE_ID ======> got hit: "<YES>"
1780Aug 23 12:09:08.780 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: "<YES>"
1781Aug 23 12:09:08.782 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __LAST_UNTRUSTED_RELAY_NO_AUTH ======> got hit: "[ ip=208.71.80.106 rdns=grexcap003.xrite.com helo=GREXCAP003.XRITE.com by=mail8.example.com ident= envfrom= intl=0 id=D168961803A auth= "
1782Aug 23 12:09:08.782 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __MSGID_OK_HEX ======> got hit: "dab86839"
1783Aug 23 12:09:08.782 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __HAS_DATE ======> got hit: "<YES>"
1784Aug 23 12:09:08.783 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __DOS_RELAYED_EXT ======> got hit: "Received: from GREXCAP003.XRITE.com (grexcap003.xrite.com [208.71.80.106])
1785Aug 23 12:09:08.783 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: [...]
1786Aug 23 12:09:08.783 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: [...] by mail8.example.com (Postfix) with ESMTPS id D168961803A
1787Aug 23 12:09:08.783 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: [...]
1788Aug 23 12:09:08.784 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: [...] for <user666@example.com>; Thu, 23 Aug 2018 12:09:06 -0700 (PDT)
1789Aug 23 12:09:08.784 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: [...]
1790Aug 23 12:09:08.784 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: [...] Received: "
1791Aug 23 12:09:08.784 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __SANE_MSGID ======> got hit: "<dab86839-9402-44d7-87ba-ae6bc31e7dc1@GREXCAP003.XRITE.com>
1792Aug 23 12:09:08.784 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: [...] "
1793Aug 23 12:09:08.785 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
1794Aug 23 12:09:08.785 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __HAS_TO ======> got hit: "<YES>"
1795Aug 23 12:09:08.786 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __MISSING_REF ======> got hit: "UNSET"
1796Aug 23 12:09:08.786 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __MISSING_REPLY ======> got hit: "UNSET"
1797Aug 23 12:09:08.787 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __DOS_RCVD_THU ======> got hit: " Thu, "
1798Aug 23 12:09:08.787 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __HAS_RCVD ======> got hit: "<YES>"
1799Aug 23 12:09:08.788 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __FROM_FULL_NAME ======> got hit: "X-R"
1800Aug 23 12:09:08.789 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran header rule __LAST_EXTERNAL_RELAY_NO_AUTH ======> got hit: "[ ip=208.71.80.106 rdns=grexcap003.xrite.com helo=GREXCAP003.XRITE.com by=mail8.example.com ident= envfrom= intl=0 id=D168961803A auth= "
1801Aug 23 12:09:08.790 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running head_eval tests; score so far=0
1802Aug 23 12:09:08.791 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: RULE (FREEMAIL_ENVFROM_END_DIGIT) check_freemail_header regex:\\d@
1803Aug 23 12:09:08.792 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: address from header EnvelopeFrom: customerservice@xrite.com
1804Aug 23 12:09:08.792 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: spf: checking to see if the message has a Received-SPF header that we can use
1805Aug 23 12:09:08.793 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: spf: checking HELO (helo=GREXCAP003.XRITE.com, ip=208.71.80.106)
1806Aug 23 12:09:08.796 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1807Aug 23 12:09:08.796 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1808Aug 23 12:09:08.797 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 58524/IN/TXT/grexcap003.xrite.com
1809Aug 23 12:09:08.797 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 66 bytes from ::1
1810Aug 23 12:09:08.798 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 62170/IN/A/106.80.71.208.bb.barracudacentral.org: NXDOMAIN
1811Aug 23 12:09:08.798 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:A:106.80.71.208.bb.barracudacentral.org
1812Aug 23 12:09:08.798 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 104 bytes from ::1
1813Aug 23 12:09:08.799 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 52553/IN/A/106.80.71.208.iadb.isipp.com: NXDOMAIN
1814Aug 23 12:09:08.799 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:A:106.80.71.208.iadb.isipp.com
1815Aug 23 12:09:08.799 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 364 bytes from ::1
1816Aug 23 12:09:08.801 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 60985 is OK, 1 answer records
1817Aug 23 12:09:08.802 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:A:106.80.71.208.list.dnswl.org
1818Aug 23 12:09:08.802 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: hit <dns:106.80.71.208.list.dnswl.org> 127.0.10.0
1819Aug 23 12:09:08.803 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 228 bytes from ::1
1820Aug 23 12:09:08.804 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 5779 is OK, 1 answer records
1821Aug 23 12:09:08.804 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key A:dns2.actusa.net
1822Aug 23 12:09:08.805 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup A:dns2.actusa.net
1823Aug 23 12:09:08.805 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup got(1) A for dns2.actusa.net: dns2.actusa.net. 28800 IN A 208.83.100.26
1824Aug 23 12:09:08.805 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/26.100.83.208.sbl.spamhaus.org for DNSBL:26.100.83.208:sbl.spamhaus.org
1825Aug 23 12:09:08.806 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1826Aug 23 12:09:08.806 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1827Aug 23 12:09:08.806 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 54090/IN/A/26.100.83.208.sbl.spamhaus.org
1828Aug 23 12:09:08.807 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL_A, URI-DNSBL, DNSBL:26.100.83.208:sbl.spamhaus.org (timeout 15.0s, min 3.0s)
1829Aug 23 12:09:08.807 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/26.100.83.208.zen.spamhaus.org for DNSBL:26.100.83.208:zen.spamhaus.org
1830Aug 23 12:09:08.807 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1831Aug 23 12:09:08.808 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1832Aug 23 12:09:08.808 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 31948/IN/A/26.100.83.208.zen.spamhaus.org
1833Aug 23 12:09:08.809 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:26.100.83.208:zen.spamhaus.org (timeout 15.0s, min 3.0s)
1834Aug 23 12:09:08.809 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 228 bytes from ::1
1835Aug 23 12:09:08.810 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 63173 is OK, 1 answer records
1836Aug 23 12:09:08.810 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key A:dns3.actusa.net
1837Aug 23 12:09:08.811 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup A:dns3.actusa.net
1838Aug 23 12:09:08.811 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup got(1) A for dns3.actusa.net: dns3.actusa.net. 28800 IN A 74.121.4.11
1839Aug 23 12:09:08.811 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/11.4.121.74.sbl.spamhaus.org for DNSBL:11.4.121.74:sbl.spamhaus.org
1840Aug 23 12:09:08.811 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1841Aug 23 12:09:08.812 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1842Aug 23 12:09:08.812 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 48448/IN/A/11.4.121.74.sbl.spamhaus.org
1843Aug 23 12:09:08.812 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL_A, URI-DNSBL, DNSBL:11.4.121.74:sbl.spamhaus.org (timeout 15.0s, min 3.0s)
1844Aug 23 12:09:08.813 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/11.4.121.74.zen.spamhaus.org for DNSBL:11.4.121.74:zen.spamhaus.org
1845Aug 23 12:09:08.813 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1846Aug 23 12:09:08.813 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1847Aug 23 12:09:08.814 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 6924/IN/A/11.4.121.74.zen.spamhaus.org
1848Aug 23 12:09:08.814 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:11.4.121.74:zen.spamhaus.org (timeout 15.0s, min 3.0s)
1849Aug 23 12:09:08.814 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 119 bytes from ::1
1850Aug 23 12:09:08.815 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 36019/IN/A/xrite.com.dbl.spamhaus.org: NXDOMAIN
1851Aug 23 12:09:08.815 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:dbl.spamhaus.org, rule URIBL_DBL_SPAM
1852Aug 23 12:09:08.815 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_SPAM DNSBL:xrite.com:dbl.spamhaus.org
1853Aug 23 12:09:08.815 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:dbl.spamhaus.org, rule URIBL_DBL_PHISH
1854Aug 23 12:09:08.815 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_PHISH DNSBL:xrite.com:dbl.spamhaus.org
1855Aug 23 12:09:08.815 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:dbl.spamhaus.org, rule URIBL_DBL_ERROR
1856Aug 23 12:09:08.815 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ERROR DNSBL:xrite.com:dbl.spamhaus.org
1857Aug 23 12:09:08.816 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_MALW
1858Aug 23 12:09:08.816 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_MALW DNSBL:xrite.com:dbl.spamhaus.org
1859Aug 23 12:09:08.816 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:dbl.spamhaus.org, rule URIBL_DBL_MALWARE
1860Aug 23 12:09:08.816 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_MALWARE DNSBL:xrite.com:dbl.spamhaus.org
1861Aug 23 12:09:08.816 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_SPAM
1862Aug 23 12:09:08.816 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_SPAM DNSBL:xrite.com:dbl.spamhaus.org
1863Aug 23 12:09:08.817 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_BOTCC
1864Aug 23 12:09:08.817 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_BOTCC DNSBL:xrite.com:dbl.spamhaus.org
1865Aug 23 12:09:08.817 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_REDIR
1866Aug 23 12:09:08.817 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_REDIR DNSBL:xrite.com:dbl.spamhaus.org
1867Aug 23 12:09:08.817 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_PHISH
1868Aug 23 12:09:08.818 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_PHISH DNSBL:xrite.com:dbl.spamhaus.org
1869Aug 23 12:09:08.818 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:dbl.spamhaus.org, rule URIBL_DBL_BOTNETCC
1870Aug 23 12:09:08.818 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_BOTNETCC DNSBL:xrite.com:dbl.spamhaus.org
1871Aug 23 12:09:08.818 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 123 bytes from ::1
1872Aug 23 12:09:08.819 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 31948/IN/A/26.100.83.208.zen.spamhaus.org: NXDOMAIN
1873Aug 23 12:09:08.819 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:26.100.83.208:zen.spamhaus.org, rule URIBL_SBL
1874Aug 23 12:09:08.819 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:26.100.83.208:zen.spamhaus.org
1875Aug 23 12:09:08.820 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 121 bytes from ::1
1876Aug 23 12:09:08.820 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 6924/IN/A/11.4.121.74.zen.spamhaus.org: NXDOMAIN
1877Aug 23 12:09:08.820 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:11.4.121.74:zen.spamhaus.org, rule URIBL_SBL
1878Aug 23 12:09:08.820 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:11.4.121.74:zen.spamhaus.org
1879Aug 23 12:09:08.825 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 121 bytes from ::1
1880Aug 23 12:09:08.826 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 48448/IN/A/11.4.121.74.sbl.spamhaus.org: NXDOMAIN
1881Aug 23 12:09:08.826 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:11.4.121.74:sbl.spamhaus.org, rule URIBL_SBL_A
1882Aug 23 12:09:08.827 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:11.4.121.74:sbl.spamhaus.org
1883Aug 23 12:09:08.827 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 108 bytes from ::1
1884Aug 23 12:09:08.827 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 24055/IN/A/106.80.71.208.psbl.surriel.com: NXDOMAIN
1885Aug 23 12:09:08.828 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:A:106.80.71.208.psbl.surriel.com
1886Aug 23 12:09:08.832 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 125 bytes from ::1
1887Aug 23 12:09:08.833 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 47807/IN/A/example.com.dbl.spamhaus.org: NXDOMAIN
1888Aug 23 12:09:08.833 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:dbl.spamhaus.org, rule URIBL_DBL_SPAM
1889Aug 23 12:09:08.833 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_SPAM DNSBL:example.com:dbl.spamhaus.org
1890Aug 23 12:09:08.833 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:dbl.spamhaus.org, rule URIBL_DBL_PHISH
1891Aug 23 12:09:08.833 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_PHISH DNSBL:example.com:dbl.spamhaus.org
1892Aug 23 12:09:08.834 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:dbl.spamhaus.org, rule URIBL_DBL_ERROR
1893Aug 23 12:09:08.834 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ERROR DNSBL:example.com:dbl.spamhaus.org
1894Aug 23 12:09:08.834 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_MALW
1895Aug 23 12:09:08.834 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_MALW DNSBL:example.com:dbl.spamhaus.org
1896Aug 23 12:09:08.834 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:dbl.spamhaus.org, rule URIBL_DBL_MALWARE
1897Aug 23 12:09:08.834 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_MALWARE DNSBL:example.com:dbl.spamhaus.org
1898Aug 23 12:09:08.835 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_SPAM
1899Aug 23 12:09:08.835 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_SPAM DNSBL:example.com:dbl.spamhaus.org
1900Aug 23 12:09:08.835 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_BOTCC
1901Aug 23 12:09:08.835 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_BOTCC DNSBL:example.com:dbl.spamhaus.org
1902Aug 23 12:09:08.835 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_REDIR
1903Aug 23 12:09:08.836 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_REDIR DNSBL:example.com:dbl.spamhaus.org
1904Aug 23 12:09:08.836 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_PHISH
1905Aug 23 12:09:08.836 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_PHISH DNSBL:example.com:dbl.spamhaus.org
1906Aug 23 12:09:08.836 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:dbl.spamhaus.org, rule URIBL_DBL_BOTNETCC
1907Aug 23 12:09:08.836 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_BOTNETCC DNSBL:example.com:dbl.spamhaus.org
1908Aug 23 12:09:08.859 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 190 bytes from ::1
1909Aug 23 12:09:08.860 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 38255 is OK, 4 answer records
1910Aug 23 12:09:08.860 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key NS:xrite.com
1911Aug 23 12:09:08.860 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_ns_lookup NS:xrite.com
1912Aug 23 12:09:08.860 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: got(1) NS for xrite.com: xrite.com. 172798 IN NS ns-1657.awsdns-15.co.uk.
1913Aug 23 12:09:08.861 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/ns-1657.awsdns-15.co.uk for A:ns-1657.awsdns-15.co.uk
1914Aug 23 12:09:08.861 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1915Aug 23 12:09:08.861 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1916Aug 23 12:09:08.862 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 403/IN/A/ns-1657.awsdns-15.co.uk
1917Aug 23 12:09:08.862 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URI-A, A:ns-1657.awsdns-15.co.uk (timeout 15.0s, min 3.0s)
1918Aug 23 12:09:08.862 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: got(2) NS for xrite.com: xrite.com. 172798 IN NS ns-87.awsdns-10.com.
1919Aug 23 12:09:08.862 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/ns-87.awsdns-10.com for A:ns-87.awsdns-10.com
1920Aug 23 12:09:08.863 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1921Aug 23 12:09:08.863 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1922Aug 23 12:09:08.863 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 16193/IN/A/ns-87.awsdns-10.com
1923Aug 23 12:09:08.863 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URI-A, A:ns-87.awsdns-10.com (timeout 15.0s, min 3.0s)
1924Aug 23 12:09:08.864 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: got(3) NS for xrite.com: xrite.com. 172798 IN NS ns-1352.awsdns-41.org.
1925Aug 23 12:09:08.864 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/ns-1352.awsdns-41.org for A:ns-1352.awsdns-41.org
1926Aug 23 12:09:08.864 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1927Aug 23 12:09:08.864 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1928Aug 23 12:09:08.865 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 50549/IN/A/ns-1352.awsdns-41.org
1929Aug 23 12:09:08.865 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URI-A, A:ns-1352.awsdns-41.org (timeout 15.0s, min 3.0s)
1930Aug 23 12:09:08.865 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: got(4) NS for xrite.com: xrite.com. 172798 IN NS ns-805.awsdns-36.net.
1931Aug 23 12:09:08.865 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/ns-805.awsdns-36.net for A:ns-805.awsdns-36.net
1932Aug 23 12:09:08.865 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1933Aug 23 12:09:08.865 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1934Aug 23 12:09:08.866 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 37971/IN/A/ns-805.awsdns-36.net
1935Aug 23 12:09:08.866 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URI-A, A:ns-805.awsdns-36.net (timeout 15.0s, min 3.0s)
1936Aug 23 12:09:08.873 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 65 bytes from ::1
1937Aug 23 12:09:08.874 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 61128/IN/TXT/106.80.71.208.sa-accredit.habeas.com: NXDOMAIN
1938Aug 23 12:09:08.874 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:TXT:106.80.71.208.sa-accredit.habeas.com
1939Aug 23 12:09:08.874 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 70 bytes from ::1
1940Aug 23 12:09:08.875 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 17072/IN/TXT/106.80.71.208.sa-trusted.bondedsender.org: NXDOMAIN
1941Aug 23 12:09:08.875 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:TXT:106.80.71.208.sa-trusted.bondedsender.org
1942Aug 23 12:09:08.878 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 124 bytes from ::1
1943Aug 23 12:09:08.879 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 32287/IN/A/130.60.109.204.sbl.spamhaus.org: NXDOMAIN
1944Aug 23 12:09:08.879 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:130.60.109.204:sbl.spamhaus.org, rule URIBL_SBL_A
1945Aug 23 12:09:08.879 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:130.60.109.204:sbl.spamhaus.org
1946Aug 23 12:09:08.880 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 206 bytes from ::1
1947Aug 23 12:09:08.881 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 50214 is OK, 1 answer records
1948Aug 23 12:09:08.881 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:A:xrite.com
1949Aug 23 12:09:08.882 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: hit <dns:xrite.com> 146.20.15.207
1950Aug 23 12:09:08.886 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 124 bytes from ::1
1951Aug 23 12:09:08.887 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 21759/IN/A/137.244.73.192.sbl.spamhaus.org: NXDOMAIN
1952Aug 23 12:09:08.887 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:137.244.73.192:sbl.spamhaus.org, rule URIBL_SBL_A
1953Aug 23 12:09:08.887 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:137.244.73.192:sbl.spamhaus.org
1954Aug 23 12:09:08.890 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 122 bytes from ::1
1955Aug 23 12:09:08.891 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 13050/IN/A/5.254.42.204.sbl.spamhaus.org: NXDOMAIN
1956Aug 23 12:09:08.891 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:5.254.42.204:sbl.spamhaus.org, rule URIBL_SBL_A
1957Aug 23 12:09:08.891 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:5.254.42.204:sbl.spamhaus.org
1958Aug 23 12:09:08.894 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 59 bytes from ::1
1959Aug 23 12:09:08.895 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 30245/IN/A/106.80.71.208.bl.mailspike.net: NXDOMAIN
1960Aug 23 12:09:08.895 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:A:106.80.71.208.bl.mailspike.net
1961Aug 23 12:09:08.900 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 59 bytes from ::1
1962Aug 23 12:09:08.901 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 65178/IN/A/106.80.71.208.wl.mailspike.net: NXDOMAIN
1963Aug 23 12:09:08.901 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:A:106.80.71.208.wl.mailspike.net
1964Aug 23 12:09:08.909 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 335 bytes from ::1
1965Aug 23 12:09:08.910 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 37971 is OK, 1 answer records
1966Aug 23 12:09:08.910 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key A:ns-805.awsdns-36.net
1967Aug 23 12:09:08.910 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup A:ns-805.awsdns-36.net
1968Aug 23 12:09:08.911 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns-805.awsdns-36.net: ns-805.awsdns-36.net. 172800 IN A 205.251.195.37
1969Aug 23 12:09:08.911 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/37.195.251.205.sbl.spamhaus.org for DNSBL:37.195.251.205:sbl.spamhaus.org
1970Aug 23 12:09:08.911 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1971Aug 23 12:09:08.912 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1972Aug 23 12:09:08.912 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 14796/IN/A/37.195.251.205.sbl.spamhaus.org
1973Aug 23 12:09:08.912 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL_A, URI-DNSBL, DNSBL:37.195.251.205:sbl.spamhaus.org (timeout 15.0s, min 3.0s)
1974Aug 23 12:09:08.913 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/37.195.251.205.zen.spamhaus.org for DNSBL:37.195.251.205:zen.spamhaus.org
1975Aug 23 12:09:08.913 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1976Aug 23 12:09:08.914 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1977Aug 23 12:09:08.914 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 14830/IN/A/37.195.251.205.zen.spamhaus.org
1978Aug 23 12:09:08.914 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:37.195.251.205:zen.spamhaus.org (timeout 15.0s, min 3.0s)
1979Aug 23 12:09:08.915 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 124 bytes from ::1
1980Aug 23 12:09:08.916 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 14796/IN/A/37.195.251.205.sbl.spamhaus.org: NXDOMAIN
1981Aug 23 12:09:08.917 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:37.195.251.205:sbl.spamhaus.org, rule URIBL_SBL_A
1982Aug 23 12:09:08.917 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:37.195.251.205:sbl.spamhaus.org
1983Aug 23 12:09:08.918 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 124 bytes from ::1
1984Aug 23 12:09:08.918 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 14830/IN/A/37.195.251.205.zen.spamhaus.org: NXDOMAIN
1985Aug 23 12:09:08.919 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:37.195.251.205:zen.spamhaus.org, rule URIBL_SBL
1986Aug 23 12:09:08.919 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:37.195.251.205:zen.spamhaus.org
1987Aug 23 12:09:08.919 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 249 bytes from ::1
1988Aug 23 12:09:08.922 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 12749 is OK, 2 answer records
1989Aug 23 12:09:08.922 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key A:my.xrite.com
1990Aug 23 12:09:08.922 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup A:my.xrite.com
1991Aug 23 12:09:08.922 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup got(1) A for my.xrite.com: my.xrite.com. 300 IN CNAME 806630-lbal3-legacy.rsash.xrite.com.
1992Aug 23 12:09:08.923 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup got(2) A for my.xrite.com: 806630-lbal3-legacy.rsash.xrite.com. 300 IN A 146.20.15.196
1993Aug 23 12:09:08.923 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/196.15.20.146.sbl.spamhaus.org for DNSBL:196.15.20.146:sbl.spamhaus.org
1994Aug 23 12:09:08.923 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
1995Aug 23 12:09:08.924 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
1996Aug 23 12:09:08.924 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 51734/IN/A/196.15.20.146.sbl.spamhaus.org
1997Aug 23 12:09:08.924 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL_A, URI-DNSBL, DNSBL:196.15.20.146:sbl.spamhaus.org (timeout 15.0s, min 3.0s)
1998Aug 23 12:09:08.925 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/196.15.20.146.zen.spamhaus.org for DNSBL:196.15.20.146:zen.spamhaus.org
1999Aug 23 12:09:08.925 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2000Aug 23 12:09:08.925 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2001Aug 23 12:09:08.926 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 24161/IN/A/196.15.20.146.zen.spamhaus.org
2002Aug 23 12:09:08.926 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:196.15.20.146:zen.spamhaus.org (timeout 15.0s, min 3.0s)
2003Aug 23 12:09:08.927 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 110 bytes from ::1
2004Aug 23 12:09:08.928 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 60635/IN/TXT/106.80.71.208.bl.spamcop.net: NXDOMAIN
2005Aug 23 12:09:08.928 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:TXT:106.80.71.208.bl.spamcop.net
2006Aug 23 12:09:08.928 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 123 bytes from ::1
2007Aug 23 12:09:08.929 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 51734/IN/A/196.15.20.146.sbl.spamhaus.org: NXDOMAIN
2008Aug 23 12:09:08.929 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:196.15.20.146:sbl.spamhaus.org, rule URIBL_SBL_A
2009Aug 23 12:09:08.929 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:196.15.20.146:sbl.spamhaus.org
2010Aug 23 12:09:08.929 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 123 bytes from ::1
2011Aug 23 12:09:08.930 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 24161/IN/A/196.15.20.146.zen.spamhaus.org: NXDOMAIN
2012Aug 23 12:09:08.930 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:196.15.20.146:zen.spamhaus.org, rule URIBL_SBL
2013Aug 23 12:09:08.930 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:196.15.20.146:zen.spamhaus.org
2014Aug 23 12:09:08.948 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 123 bytes from ::1
2015Aug 23 12:09:08.949 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 54090/IN/A/26.100.83.208.sbl.spamhaus.org: NXDOMAIN
2016Aug 23 12:09:08.949 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:26.100.83.208:sbl.spamhaus.org, rule URIBL_SBL_A
2017Aug 23 12:09:08.949 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:26.100.83.208:sbl.spamhaus.org
2018Aug 23 12:09:08.973 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 133 bytes from ::1
2019Aug 23 12:09:08.974 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 58524 is OK, 0 answer records
2020Aug 23 12:09:08.975 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: spf: query for /208.71.80.106/GREXCAP003.XRITE.com: result: none, comment: , text: No applicable sender policy available
2021Aug 23 12:09:08.976 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dkim: signatures provided by the caller, 0 signatures
2022Aug 23 12:09:08.976 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dkim: signature verification result: none
2023Aug 23 12:09:08.976 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dkim: adsp: performing lookup on _adsp._domainkey.xrite.com
2024Aug 23 12:09:09.009 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dkim: adsp result: U/unknown (dns: unknown), author domain 'xrite.com'
2025Aug 23 12:09:09.010 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: spf: already checked for Received-SPF headers, proceeding with DNS based checks
2026Aug 23 12:09:09.010 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: spf: checking EnvelopeFrom (helo=GREXCAP003.XRITE.com, ip=208.71.80.106, envfrom=customerservice@xrite.com)
2027Aug 23 12:09:09.011 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2028Aug 23 12:09:09.011 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2029Aug 23 12:09:09.012 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 31476/IN/TXT/xrite.com
2030Aug 23 12:09:09.012 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 129 bytes from ::1
2031Aug 23 12:09:09.013 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 19126/IN/A/106.80.71.208.bl.score.senderscore.com: NXDOMAIN
2032Aug 23 12:09:09.013 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:A:106.80.71.208.bl.score.senderscore.com
2033Aug 23 12:09:09.040 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 333 bytes from ::1
2034Aug 23 12:09:09.042 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 16193 is OK, 1 answer records
2035Aug 23 12:09:09.042 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key A:ns-87.awsdns-10.com
2036Aug 23 12:09:09.042 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup A:ns-87.awsdns-10.com
2037Aug 23 12:09:09.043 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns-87.awsdns-10.com: ns-87.awsdns-10.com. 172800 IN A 205.251.192.87
2038Aug 23 12:09:09.043 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/87.192.251.205.sbl.spamhaus.org for DNSBL:87.192.251.205:sbl.spamhaus.org
2039Aug 23 12:09:09.044 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2040Aug 23 12:09:09.044 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2041Aug 23 12:09:09.044 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 189/IN/A/87.192.251.205.sbl.spamhaus.org
2042Aug 23 12:09:09.045 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL_A, URI-DNSBL, DNSBL:87.192.251.205:sbl.spamhaus.org (timeout 15.0s, min 3.0s)
2043Aug 23 12:09:09.045 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/87.192.251.205.zen.spamhaus.org for DNSBL:87.192.251.205:zen.spamhaus.org
2044Aug 23 12:09:09.045 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2045Aug 23 12:09:09.045 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2046Aug 23 12:09:09.046 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 62407/IN/A/87.192.251.205.zen.spamhaus.org
2047Aug 23 12:09:09.046 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:87.192.251.205:zen.spamhaus.org (timeout 15.0s, min 3.0s)
2048Aug 23 12:09:09.046 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 527 bytes from ::1
2049Aug 23 12:09:09.047 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 31476 is OK, 4 answer records
2050Aug 23 12:09:09.047 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 336 bytes from ::1
2051Aug 23 12:09:09.048 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 50549 is OK, 1 answer records
2052Aug 23 12:09:09.048 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key A:ns-1352.awsdns-41.org
2053Aug 23 12:09:09.049 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup A:ns-1352.awsdns-41.org
2054Aug 23 12:09:09.049 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns-1352.awsdns-41.org: ns-1352.awsdns-41.org. 172800 IN A 205.251.197.72
2055Aug 23 12:09:09.049 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/72.197.251.205.sbl.spamhaus.org for DNSBL:72.197.251.205:sbl.spamhaus.org
2056Aug 23 12:09:09.050 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2057Aug 23 12:09:09.050 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2058Aug 23 12:09:09.050 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 42030/IN/A/72.197.251.205.sbl.spamhaus.org
2059Aug 23 12:09:09.050 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL_A, URI-DNSBL, DNSBL:72.197.251.205:sbl.spamhaus.org (timeout 15.0s, min 3.0s)
2060Aug 23 12:09:09.051 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/72.197.251.205.zen.spamhaus.org for DNSBL:72.197.251.205:zen.spamhaus.org
2061Aug 23 12:09:09.051 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2062Aug 23 12:09:09.051 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2063Aug 23 12:09:09.052 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 36213/IN/A/72.197.251.205.zen.spamhaus.org
2064Aug 23 12:09:09.052 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:72.197.251.205:zen.spamhaus.org (timeout 15.0s, min 3.0s)
2065Aug 23 12:09:09.052 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 124 bytes from ::1
2066Aug 23 12:09:09.053 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 189/IN/A/87.192.251.205.sbl.spamhaus.org: NXDOMAIN
2067Aug 23 12:09:09.053 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:87.192.251.205:sbl.spamhaus.org, rule URIBL_SBL_A
2068Aug 23 12:09:09.053 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:87.192.251.205:sbl.spamhaus.org
2069Aug 23 12:09:09.054 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 124 bytes from ::1
2070Aug 23 12:09:09.054 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 62407/IN/A/87.192.251.205.zen.spamhaus.org: NXDOMAIN
2071Aug 23 12:09:09.054 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:87.192.251.205:zen.spamhaus.org, rule URIBL_SBL
2072Aug 23 12:09:09.054 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:87.192.251.205:zen.spamhaus.org
2073Aug 23 12:09:09.055 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 124 bytes from ::1
2074Aug 23 12:09:09.056 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 42030/IN/A/72.197.251.205.sbl.spamhaus.org: NXDOMAIN
2075Aug 23 12:09:09.056 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:72.197.251.205:sbl.spamhaus.org, rule URIBL_SBL_A
2076Aug 23 12:09:09.056 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:72.197.251.205:sbl.spamhaus.org
2077Aug 23 12:09:09.056 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 124 bytes from ::1
2078Aug 23 12:09:09.057 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 36213/IN/A/72.197.251.205.zen.spamhaus.org: NXDOMAIN
2079Aug 23 12:09:09.057 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:72.197.251.205:zen.spamhaus.org, rule URIBL_SBL
2080Aug 23 12:09:09.057 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:72.197.251.205:zen.spamhaus.org
2081Aug 23 12:09:09.064 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2082Aug 23 12:09:09.065 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2083Aug 23 12:09:09.065 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 3755/IN/TXT/_spf.danahermail.com
2084Aug 23 12:09:09.129 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 338 bytes from ::1
2085Aug 23 12:09:09.131 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 403 is OK, 1 answer records
2086Aug 23 12:09:09.131 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key A:ns-1657.awsdns-15.co.uk
2087Aug 23 12:09:09.131 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup A:ns-1657.awsdns-15.co.uk
2088Aug 23 12:09:09.132 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns-1657.awsdns-15.co.uk: ns-1657.awsdns-15.co.uk. 172800 IN A 205.251.198.121
2089Aug 23 12:09:09.132 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/121.198.251.205.sbl.spamhaus.org for DNSBL:121.198.251.205:sbl.spamhaus.org
2090Aug 23 12:09:09.133 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2091Aug 23 12:09:09.133 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2092Aug 23 12:09:09.134 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 51508/IN/A/121.198.251.205.sbl.spamhaus.org
2093Aug 23 12:09:09.134 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL_A, URI-DNSBL, DNSBL:121.198.251.205:sbl.spamhaus.org (timeout 15.0s, min 3.0s)
2094Aug 23 12:09:09.134 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: launching A/121.198.251.205.zen.spamhaus.org for DNSBL:121.198.251.205:zen.spamhaus.org
2095Aug 23 12:09:09.135 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2096Aug 23 12:09:09.135 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2097Aug 23 12:09:09.135 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 17479/IN/A/121.198.251.205.zen.spamhaus.org
2098Aug 23 12:09:09.136 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:121.198.251.205:zen.spamhaus.org (timeout 15.0s, min 3.0s)
2099Aug 23 12:09:09.136 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 125 bytes from ::1
2100Aug 23 12:09:09.137 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 51508/IN/A/121.198.251.205.sbl.spamhaus.org: NXDOMAIN
2101Aug 23 12:09:09.137 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:121.198.251.205:sbl.spamhaus.org, rule URIBL_SBL_A
2102Aug 23 12:09:09.137 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:121.198.251.205:sbl.spamhaus.org
2103Aug 23 12:09:09.138 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 125 bytes from ::1
2104Aug 23 12:09:09.138 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 17479/IN/A/121.198.251.205.zen.spamhaus.org: NXDOMAIN
2105Aug 23 12:09:09.139 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:121.198.251.205:zen.spamhaus.org, rule URIBL_SBL
2106Aug 23 12:09:09.139 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:121.198.251.205:zen.spamhaus.org
2107Aug 23 12:09:09.256 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 403 bytes from ::1
2108Aug 23 12:09:09.257 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 3755 is OK, 1 answer records
2109Aug 23 12:09:09.260 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2110Aug 23 12:09:09.260 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2111Aug 23 12:09:09.260 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 787/IN/TXT/spf.protection.outlook.com
2112Aug 23 12:09:09.261 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 341 bytes from ::1
2113Aug 23 12:09:09.262 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 787 is OK, 1 answer records
2114Aug 23 12:09:09.267 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2115Aug 23 12:09:09.267 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2116Aug 23 12:09:09.267 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 7720/IN/TXT/spfa.protection.outlook.com
2117Aug 23 12:09:09.268 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 339 bytes from ::1
2118Aug 23 12:09:09.268 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 7720 is OK, 1 answer records
2119Aug 23 12:09:09.275 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2120Aug 23 12:09:09.275 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2121Aug 23 12:09:09.275 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 25938/IN/TXT/spfb.protection.outlook.com
2122Aug 23 12:09:09.276 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 345 bytes from ::1
2123Aug 23 12:09:09.276 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 25938 is OK, 1 answer records
2124Aug 23 12:09:09.282 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2125Aug 23 12:09:09.283 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2126Aug 23 12:09:09.283 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 22450/IN/TXT/spf-001d2f01.pphosted.com
2127Aug 23 12:09:09.293 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 419 bytes from ::1
2128Aug 23 12:09:09.294 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 22450 is OK, 1 answer records
2129Aug 23 12:09:09.299 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgsend, DNS servers: [::1]:53, [127.0.0.1]:53, [1.1.1.1]:53, [1.0.0.1]:53
2130Aug 23 12:09:09.300 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: attempt 1/4, trying connect/sendto to [::1]:53
2131Aug 23 12:09:09.300 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: providing a callback for id: 60708/IN/TXT/amazonses.com
2132Aug 23 12:09:09.301 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 410 bytes from ::1
2133Aug 23 12:09:09.302 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply 60708 is OK, 3 answer records
2134Aug 23 12:09:09.306 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: spf: query for customerservice@xrite.com/208.71.80.106/GREXCAP003.XRITE.com: result: pass, comment: , text: Mechanism 'ip4:208.71.80.106' matched
2135Aug 23 12:09:09.306 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule SPF_PASS ======> got hit (1)
2136Aug 23 12:09:09.309 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dkim: author customerservice@xrite.com, not in any dkim whitelist
2137Aug 23 12:09:09.310 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule __ENV_AND_HDR_FROM_MATCH ======> got hit (1)
2138Aug 23 12:09:09.311 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: RULE (FREEMAIL_REPLYTO_END_DIGIT) check_freemail_header regex:\\d@
2139Aug 23 12:09:09.311 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: header Reply-To not found from mail
2140Aug 23 12:09:09.311 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: spf: whitelist_from_spf: customerservice@xrite.com is not in user's WHITELIST_FROM_SPF
2141Aug 23 12:09:09.311 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: RULE (__freemail_reply) check_freemail_replyto
2142Aug 23 12:09:09.312 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: From address: customerservice@xrite.com
2143Aug 23 12:09:09.312 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: No Reply-To and From is not freemail, skipping check
2144Aug 23 12:09:09.312 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: eval: From 2nd level domain: xrite.com, EnvelopeFrom 2nd level domain: xrite.com
2145Aug 23 12:09:09.313 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: RULE (__smf_freemail_hdr_replyto) check_freemail_header
2146Aug 23 12:09:09.313 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: header Reply-To:addr not found from mail
2147Aug 23 12:09:09.313 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: RULE (__freemail_hdr_replyto) check_freemail_header
2148Aug 23 12:09:09.313 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: header Reply-To not found from mail
2149Aug 23 12:09:09.314 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: spf: def_whitelist_from_spf: customerservice@xrite.com is not in DEF_WHITELIST_FROM_SPF
2150Aug 23 12:09:09.314 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: RULE (FREEMAIL_FROM) check_freemail_from
2151Aug 23 12:09:09.314 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: all from-addresses: customerservice@xrite.com
2152Aug 23 12:09:09.315 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: RULE (__freemail_replyto) check_freemail_replyto
2153Aug 23 12:09:09.315 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: From address: customerservice@xrite.com
2154Aug 23 12:09:09.315 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: FreeMail: Reply-To is not freemail, skipping check
2155Aug 23 12:09:09.315 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: customerservice@xrite.com MATCHES relay grexcap003.xrite.com (xrite.com)
2156Aug 23 12:09:09.316 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule __RP_MATCHES_RCVD ======> got hit (1)
2157Aug 23 12:09:09.316 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: select found no responses ready (t.o.=0.0)
2158Aug 23 12:09:09.316 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.146 s: URIBL_SBL_A, URI-DNSBL, DNSBL:130.60.109.204:sbl.spamhaus.org
2159Aug 23 12:09:09.316 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.002 s: URIBL_SBL_A, URI-DNSBL, DNSBL:37.195.251.205:sbl.spamhaus.org
2160Aug 23 12:09:09.316 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.144 s: URIBL_SBL_A, URI-DNSBL, DNSBL:137.244.73.192:sbl.spamhaus.org
2161Aug 23 12:09:09.317 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.075 s: URI-A, A:dns2.actusa.net
2162Aug 23 12:09:09.317 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.083 s: URI-A, A:dns3.actusa.net
2163Aug 23 12:09:09.317 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.117 s: DNSBL-A, dns:A:106.80.71.208.psbl.surriel.com
2164Aug 23 12:09:09.317 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.148 s: URIBL_DBL_SPAM, URI-DNSBL, DNSBL:xrite.com:dbl.spamhaus.org
2165Aug 23 12:09:09.317 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.003 s: URIBL_SBL, URI-DNSBL, DNSBL:37.195.251.205:zen.spamhaus.org
2166Aug 23 12:09:09.318 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.004 s: URIBL_SBL_A, URI-DNSBL, DNSBL:196.15.20.146:sbl.spamhaus.org
2167Aug 23 12:09:09.318 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.188 s: URI-NS, NS:xrite.com
2168Aug 23 12:09:09.318 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.013 s: URIBL_SBL_A, URI-DNSBL, DNSBL:11.4.121.74:sbl.spamhaus.org
2169Aug 23 12:09:09.318 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.004 s: URIBL_SBL, URI-DNSBL, DNSBL:72.197.251.205:zen.spamhaus.org
2170Aug 23 12:09:09.318 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.188 s: DNSBL-A, dns:A:106.80.71.208.wl.mailspike.net
2171Aug 23 12:09:09.318 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.003 s: URIBL_SBL, URI-DNSBL, DNSBL:196.15.20.146:zen.spamhaus.org
2172Aug 23 12:09:09.318 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.081 s: DNSBL-A, dns:A:106.80.71.208.list.dnswl.org
2173Aug 23 12:09:09.319 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.176 s: URI-A, A:ns-87.awsdns-10.com
2174Aug 23 12:09:09.319 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.141 s: URIBL_SBL_A, URI-DNSBL, DNSBL:26.100.83.208:sbl.spamhaus.org
2175Aug 23 12:09:09.319 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.098 s: DNSBL-A, dns:A:106.80.71.208.bb.barracudacentral.org
2176Aug 23 12:09:09.319 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.006 s: URIBL_SBL, URI-DNSBL, DNSBL:11.4.121.74:zen.spamhaus.org
2177Aug 23 12:09:09.319 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.004 s: URIBL_SBL_A, URI-DNSBL, DNSBL:72.197.251.205:sbl.spamhaus.org
2178Aug 23 12:09:09.319 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.171 s: DNSBL-TXT, dns:TXT:106.80.71.208.sa-accredit.habeas.com
2179Aug 23 12:09:09.320 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.267 s: URI-A, A:ns-1657.awsdns-15.co.uk
2180Aug 23 12:09:09.320 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.002 s: URIBL_SBL, URI-DNSBL, DNSBL:121.198.251.205:zen.spamhaus.org
2181Aug 23 12:09:09.320 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.305 s: DNSBL-A, dns:A:106.80.71.208.bl.score.senderscore.com
2182Aug 23 12:09:09.320 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.247 s: URI-A, A:my.xrite.com
2183Aug 23 12:09:09.320 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.002 s: URIBL_SBL_A, URI-DNSBL, DNSBL:121.198.251.205:sbl.spamhaus.org
2184Aug 23 12:09:09.320 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.042 s: URI-A, A:ns-805.awsdns-36.net
2185Aug 23 12:09:09.321 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.008 s: URIBL_SBL, URI-DNSBL, DNSBL:87.192.251.205:zen.spamhaus.org
2186Aug 23 12:09:09.321 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.178 s: DNSBL-A, dns:A:106.80.71.208.bl.mailspike.net
2187Aug 23 12:09:09.321 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.144 s: URIBL_SBL_A, URI-DNSBL, DNSBL:5.254.42.204:sbl.spamhaus.org
2188Aug 23 12:09:09.321 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.160 s: DNSBL-TXT, dns:TXT:106.80.71.208.sa-trusted.bondedsender.org
2189Aug 23 12:09:09.321 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.176 s: NO_DNS_FOR_FROM, DNSBL-A, dns:A:xrite.com
2190Aug 23 12:09:09.321 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.151 s: URIBL_DBL_SPAM, URI-DNSBL, DNSBL:example.com:dbl.spamhaus.org
2191Aug 23 12:09:09.322 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.236 s: DNSBL-TXT, dns:TXT:106.80.71.208.bl.spamcop.net
2192Aug 23 12:09:09.322 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.010 s: URIBL_SBL, URI-DNSBL, DNSBL:26.100.83.208:zen.spamhaus.org
2193Aug 23 12:09:09.322 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.182 s: URI-A, A:ns-1352.awsdns-41.org
2194Aug 23 12:09:09.322 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.008 s: URIBL_SBL_A, URI-DNSBL, DNSBL:87.192.251.205:sbl.spamhaus.org
2195Aug 23 12:09:09.322 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 0.105 s: DNSBL-A, dns:A:106.80.71.208.iadb.isipp.com
2196Aug 23 12:09:09.323 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: queries completed: 38, started: 0
2197Aug 23 12:09:09.323 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: queries active: DNSBL-A=1 URI-DNSBL=2 at Thu Aug 23 12:09:09 2018
2198Aug 23 12:09:09.323 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: harvested completed queries
2199Aug 23 12:09:09.323 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running body tests; score so far=-0.0011
2200Aug 23 12:09:09.328 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran body rule __SINGLE_WORD_LINE ======> got hit: "Excellent,
2201Aug 23 12:09:09.329 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: [...] "
2202Aug 23 12:09:09.337 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran body rule __BODY_TEXT_LINE ======> got hit: "M"
2203Aug 23 12:09:09.338 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran body rule __BODY_TEXT_LINE ======> got hit: "E"
2204Aug 23 12:09:09.338 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran body rule __BODY_TEXT_LINE ======> got hit: "P"
2205Aug 23 12:09:09.338 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "M"
2206Aug 23 12:09:09.339 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran body rule __HAS_ANY_EMAIL ======> got hit: "m@example.c"
2207Aug 23 12:09:09.344 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran body rule __DOS_LINK ======> got hit: "link"
2208Aug 23 12:09:09.344 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running uri tests; score so far=-0.0011
2209Aug 23 12:09:09.345 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran uri rule __LOCAL_PP_NONPPURL ======> got hit: "https://my.xrite.com"
2210Aug 23 12:09:09.345 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran uri rule __DOS_HAS_ANY_URI ======> got hit: "u"
2211Aug 23 12:09:09.346 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran uri rule __URI_MAILTO ======> got hit: "mailto:"
2212Aug 23 12:09:09.346 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running body_eval tests; score so far=-0.0011
2213Aug 23 12:09:09.347 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: eval: body_length - 627 - check for min of 128
2214Aug 23 12:09:09.348 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: eval: body_length - 627 - check for min of 256
2215Aug 23 12:09:09.349 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule HTML_MESSAGE ======> got hit (1)
2216Aug 23 12:09:09.350 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule MIME_HTML_ONLY ======> got hit (1)
2217Aug 23 12:09:09.351 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule __ANY_TEXT_ATTACH ======> got hit (1)
2218Aug 23 12:09:09.351 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule __TAG_EXISTS_HTML ======> got hit (1)
2219Aug 23 12:09:09.352 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: eval: tvd_vertical_words value: 19 / min: 0 / max: 10 - value must be >= min and < max
2220Aug 23 12:09:09.353 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: eval: body_length - 627 - check for min of 1024
2221Aug 23 12:09:09.353 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule __KAM_BODY_LENGTH_LT_1024 ======> got hit (1)
2222Aug 23 12:09:09.353 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule __TAG_EXISTS_HEAD ======> got hit (1)
2223Aug 23 12:09:09.354 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule __ANY_TEXT_ATTACH_DOC ======> got hit (1)
2224Aug 23 12:09:09.354 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule __TAG_EXISTS_BODY ======> got hit (1)
2225Aug 23 12:09:09.355 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule __HTML_LENGTH_0000_1024 ======> got hit (1)
2226Aug 23 12:09:09.355 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: eval: body_length - 627 - check for min of 512
2227Aug 23 12:09:09.356 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule __MIME_HTML ======> got hit (1)
2228Aug 23 12:09:09.356 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running rawbody tests; score so far=1.1049
2229Aug 23 12:09:09.357 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running rawbody_eval tests; score so far=1.1049
2230Aug 23 12:09:09.358 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running full tests; score so far=1.1049
2231Aug 23 12:09:09.358 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules-all: running full rule __BASE64_MDAW
2232Aug 23 12:09:09.358 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules-all: running full rule NULL_IN_BODY
2233Aug 23 12:09:09.359 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running full_eval tests; score so far=1.1049
2234Aug 23 12:09:09.359 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dcc: dccifd is not available; no r/w socket at /usr/local/dcc/dccifd
2235Aug 23 12:09:09.359 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: entering helper-app run mode
2236Aug 23 12:09:09.360 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: util: secure_tmpfile created a temporary file /var/amavis/tmp/.spamassassin41214MtYmvDtmp
2237Aug 23 12:09:09.360 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: create_fulltext_tmpfile, written 1481 bytes to file /var/amavis/tmp/.spamassassin41214MtYmvDtmp
2238Aug 23 12:09:09.361 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dcc: opening pipe to /usr/local/bin/dccproc -C -x 0 -a 208.71.80.106 -w whiteclnt </var/amavis/tmp/.spamassassin41214MtYmvDtmp
2239Aug 23 12:09:09.370 mail8.example.com /usr/local/sbin/amavisd[41318]: (41214-06) SA dbg: util: setuid: ruid=110 euid=110
2240Aug 23 12:09:13.745 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: leaving helper-app run mode
2241Aug 23 12:09:13.746 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dcc: dccproc responded with 'X-DCC-sonic.net-Metrics: mail8.example.com 1117; Body=1 Fuz1=1 Fuz2=1'
2242Aug 23 12:09:13.747 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag DCCB is now ready, value: sonic.net
2243Aug 23 12:09:13.747 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag DCCR is now ready, value: mail8.example.com 1117; Body=1 Fuz1=1 Fuz2=1
2244Aug 23 12:09:13.747 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: pyzor: pyzor is available: /usr/local/bin/pyzor
2245Aug 23 12:09:13.748 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: entering helper-app run mode
2246Aug 23 12:09:13.748 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: pyzor: opening pipe: /usr/local/bin/pyzor check < /var/amavis/tmp/.spamassassin41214MtYmvDtmp
2247Aug 23 12:09:13.756 mail8.example.com /usr/local/sbin/amavisd[41319]: (41214-06) SA dbg: util: setuid: ruid=110 euid=110
2248Aug 23 12:09:14.040 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: pyzor: [41319] finished: exit 1
2249Aug 23 12:09:14.041 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: pyzor: got response: public.pyzor.org:24441 (200, 'OK') 0 0
2250Aug 23 12:09:14.041 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: leaving helper-app run mode
2251Aug 23 12:09:14.042 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag PYZOR is now ready, value: Reported 0 times.
2252Aug 23 12:09:14.043 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: ran eval rule __DKIM_DEPENDABLE ======> got hit (1)
2253Aug 23 12:09:14.044 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 103 bytes from ::1
2254Aug 23 12:09:14.046 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 39318/IN/A/xrite.com.multi.surbl.org: NXDOMAIN
2255Aug 23 12:09:14.046 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:multi.surbl.org, rule URIBL_MW_SURBL
2256Aug 23 12:09:14.046 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_MW_SURBL DNSBL:xrite.com:multi.surbl.org
2257Aug 23 12:09:14.046 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:multi.surbl.org, rule SURBL_BLOCKED
2258Aug 23 12:09:14.047 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup SURBL_BLOCKED DNSBL:xrite.com:multi.surbl.org
2259Aug 23 12:09:14.047 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:multi.surbl.org, rule URIBL_PH_SURBL
2260Aug 23 12:09:14.047 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_PH_SURBL DNSBL:xrite.com:multi.surbl.org
2261Aug 23 12:09:14.047 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:multi.surbl.org, rule URIBL_ABUSE_SURBL
2262Aug 23 12:09:14.047 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ABUSE_SURBL DNSBL:xrite.com:multi.surbl.org
2263Aug 23 12:09:14.048 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:multi.surbl.org, rule URIBL_CR_SURBL
2264Aug 23 12:09:14.048 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CR_SURBL DNSBL:xrite.com:multi.surbl.org
2265Aug 23 12:09:14.048 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:xrite.com:multi.surbl.org, rule URIBL_WS_SURBL
2266Aug 23 12:09:14.048 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_WS_SURBL DNSBL:xrite.com:multi.surbl.org
2267Aug 23 12:09:14.048 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 109 bytes from ::1
2268Aug 23 12:09:14.050 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 28608/IN/A/example.com.multi.surbl.org: NXDOMAIN
2269Aug 23 12:09:14.050 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:multi.surbl.org, rule URIBL_MW_SURBL
2270Aug 23 12:09:14.050 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_MW_SURBL DNSBL:example.com:multi.surbl.org
2271Aug 23 12:09:14.050 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:multi.surbl.org, rule SURBL_BLOCKED
2272Aug 23 12:09:14.051 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup SURBL_BLOCKED DNSBL:example.com:multi.surbl.org
2273Aug 23 12:09:14.051 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:multi.surbl.org, rule URIBL_PH_SURBL
2274Aug 23 12:09:14.051 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_PH_SURBL DNSBL:example.com:multi.surbl.org
2275Aug 23 12:09:14.051 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:multi.surbl.org, rule URIBL_ABUSE_SURBL
2276Aug 23 12:09:14.051 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ABUSE_SURBL DNSBL:example.com:multi.surbl.org
2277Aug 23 12:09:14.052 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:multi.surbl.org, rule URIBL_CR_SURBL
2278Aug 23 12:09:14.052 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CR_SURBL DNSBL:example.com:multi.surbl.org
2279Aug 23 12:09:14.052 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key DNSBL:example.com:multi.surbl.org, rule URIBL_WS_SURBL
2280Aug 23 12:09:14.052 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_WS_SURBL DNSBL:example.com:multi.surbl.org
2281Aug 23 12:09:14.053 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: bgread: received 114 bytes from ::1
2282Aug 23 12:09:14.054 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: dns reply to 13754/IN/A/106.80.71.208.dnsbl.sorbs.net: NXDOMAIN
2283Aug 23 12:09:14.054 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: calling callback on key dns:A:106.80.71.208.dnsbl.sorbs.net
2284Aug 23 12:09:14.054 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: select found no responses ready (t.o.=0.0)
2285Aug 23 12:09:14.054 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 5.356 s: DNSBL-A, dns:A:106.80.71.208.dnsbl.sorbs.net
2286Aug 23 12:09:14.055 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 5.387 s: URIBL_MW_SURBL, URI-DNSBL, DNSBL:xrite.com:multi.surbl.org
2287Aug 23 12:09:14.055 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: completed in 5.375 s: URIBL_MW_SURBL, URI-DNSBL, DNSBL:example.com:multi.surbl.org
2288Aug 23 12:09:14.055 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: harvested completed queries
2289Aug 23 12:09:14.056 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running meta tests; score so far=1.1049
2290Aug 23 12:09:14.056 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: running tests for priority: 500
2291Aug 23 12:09:14.056 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: dns: harvest_dnsbl_queries
2292Aug 23 12:09:14.057 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.002 . DNSBL:121.198.251.205:zen.spamhaus.org
2293Aug 23 12:09:14.057 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.002 . DNSBL:121.198.251.205:sbl.spamhaus.org
2294Aug 23 12:09:14.057 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.002 . DNSBL:37.195.251.205:sbl.spamhaus.org
2295Aug 23 12:09:14.057 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.003 . DNSBL:196.15.20.146:zen.spamhaus.org
2296Aug 23 12:09:14.057 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.003 . DNSBL:37.195.251.205:zen.spamhaus.org
2297Aug 23 12:09:14.058 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.004 . DNSBL:196.15.20.146:sbl.spamhaus.org
2298Aug 23 12:09:14.058 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.004 . DNSBL:72.197.251.205:zen.spamhaus.org
2299Aug 23 12:09:14.058 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.004 . DNSBL:72.197.251.205:sbl.spamhaus.org
2300Aug 23 12:09:14.058 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.006 . DNSBL:11.4.121.74:zen.spamhaus.org
2301Aug 23 12:09:14.058 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.006 . DNSBL:5.254.42.204:zen.spamhaus.org
2302Aug 23 12:09:14.058 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.008 . DNSBL:87.192.251.205:sbl.spamhaus.org
2303Aug 23 12:09:14.058 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.008 . DNSBL:87.192.251.205:zen.spamhaus.org
2304Aug 23 12:09:14.059 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.008 . DNSBL:137.244.73.192:zen.spamhaus.org
2305Aug 23 12:09:14.059 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.010 . DNSBL:26.100.83.208:zen.spamhaus.org
2306Aug 23 12:09:14.059 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.013 . DNSBL:11.4.121.74:sbl.spamhaus.org
2307Aug 23 12:09:14.059 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.014 . DNSBL:130.60.109.204:zen.spamhaus.org
2308Aug 23 12:09:14.059 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.015 . A:ns2.example.com
2309Aug 23 12:09:14.060 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.018 . A:puck.nether.net
2310Aug 23 12:09:14.060 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.031 . dns:MX:xrite.com
2311Aug 23 12:09:14.060 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.035 . NS:example.com
2312Aug 23 12:09:14.060 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.040 . dns:A:106.80.71.208.zen.spamhaus.org
2313Aug 23 12:09:14.060 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.042 . A:example.com
2314Aug 23 12:09:14.060 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.042 . A:ns-805.awsdns-36.net
2315Aug 23 12:09:14.060 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.055 . DNSBL:xrite.com:dob.sibl.support-intelligence.net
2316Aug 23 12:09:14.061 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.055 . DNSBL:example.com:dob.sibl.support-intelligence.net
2317Aug 23 12:09:14.061 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.075 . A:dns2.actusa.net
2318Aug 23 12:09:14.061 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.080 . DNSBL:example.com:multi.uribl.com
2319Aug 23 12:09:14.061 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.081 . dns:A:106.80.71.208.list.dnswl.org
2320Aug 23 12:09:14.061 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.083 . A:dns3.actusa.net
2321Aug 23 12:09:14.061 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.091 . DNSBL:xrite.com:multi.uribl.com
2322Aug 23 12:09:14.061 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.098 . dns:A:106.80.71.208.bb.barracudacentral.org
2323Aug 23 12:09:14.061 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.105 . dns:A:106.80.71.208.iadb.isipp.com
2324Aug 23 12:09:14.062 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.117 . dns:A:106.80.71.208.psbl.surriel.com
2325Aug 23 12:09:14.062 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.141 . DNSBL:26.100.83.208:sbl.spamhaus.org
2326Aug 23 12:09:14.062 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.144 . DNSBL:137.244.73.192:sbl.spamhaus.org
2327Aug 23 12:09:14.062 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.144 . DNSBL:5.254.42.204:sbl.spamhaus.org
2328Aug 23 12:09:14.062 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.146 . DNSBL:130.60.109.204:sbl.spamhaus.org
2329Aug 23 12:09:14.062 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.148 . DNSBL:xrite.com:dbl.spamhaus.org
2330Aug 23 12:09:14.062 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.151 . DNSBL:example.com:dbl.spamhaus.org
2331Aug 23 12:09:14.062 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.160 . dns:TXT:106.80.71.208.sa-trusted.bondedsender.org
2332Aug 23 12:09:14.063 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.171 . dns:TXT:106.80.71.208.sa-accredit.habeas.com
2333Aug 23 12:09:14.063 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.176 . dns:A:xrite.com
2334Aug 23 12:09:14.063 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.176 . A:ns-87.awsdns-10.com
2335Aug 23 12:09:14.064 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.178 . dns:A:106.80.71.208.bl.mailspike.net
2336Aug 23 12:09:14.064 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.182 . A:ns-1352.awsdns-41.org
2337Aug 23 12:09:14.064 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.188 . dns:A:106.80.71.208.wl.mailspike.net
2338Aug 23 12:09:14.064 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.188 . NS:xrite.com
2339Aug 23 12:09:14.064 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.236 . dns:TXT:106.80.71.208.bl.spamcop.net
2340Aug 23 12:09:14.064 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.247 . A:my.xrite.com
2341Aug 23 12:09:14.064 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.267 . A:ns-1657.awsdns-15.co.uk
2342Aug 23 12:09:14.064 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 0.305 . dns:A:106.80.71.208.bl.score.senderscore.com
2343Aug 23 12:09:14.065 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 5.356 . dns:A:106.80.71.208.dnsbl.sorbs.net
2344Aug 23 12:09:14.065 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 5.375 . DNSBL:example.com:multi.surbl.org
2345Aug 23 12:09:14.065 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: async: timing: 5.387 . DNSBL:xrite.com:multi.surbl.org
2346Aug 23 12:09:14.065 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag RBL is now ready, value: <dns:xrite.com?type=MX> [10 mxa-001d2f01.gslb.pphosted.com., 10 mxb-001d2f01.gslb.pphosted.com.]
2347Aug 23 12:09:14.066 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: [...] <dns:xrite.com> [146.20.15.207]
2348Aug 23 12:09:14.066 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: [...] <dns:106.80.71.208.list.dnswl.org> [127.0.10.0]
2349Aug 23 12:09:14.066 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running head tests; score so far=1.1049
2350Aug 23 12:09:14.067 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running body tests; score so far=1.1049
2351Aug 23 12:09:14.067 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running uri tests; score so far=1.1049
2352Aug 23 12:09:14.068 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running body_eval tests; score so far=1.1049
2353Aug 23 12:09:14.068 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running rawbody tests; score so far=1.1049
2354Aug 23 12:09:14.068 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running full tests; score so far=1.1049
2355Aug 23 12:09:14.069 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: rules: running meta tests; score so far=1.1049
2356Aug 23 12:09:14.073 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: plugin: Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x81000efa8) implements 'autolearn_discriminator', priority 0
2357Aug 23 12:09:14.074 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: learn: auto-learn: currently using scoreset 1
2358Aug 23 12:09:14.074 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: learn: auto-learn: not considered head or body scores: -0.0001
2359Aug 23 12:09:14.074 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: learn: auto-learn: adding body_only points 0.001
2360Aug 23 12:09:14.075 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: learn: auto-learn: adding body_only points 1.105
2361Aug 23 12:09:14.075 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: learn: auto-learn: message score: 1.1049, computed score for autolearn: 1.106
2362Aug 23 12:09:14.075 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: learn: auto-learn? ham=0.1, spam=12, body-points=1.106, head-points=0, learned-points=0
2363Aug 23 12:09:14.075 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: learn: auto-learn? no: inside auto-learn thresholds, not considered ham or spam
2364Aug 23 12:09:14.076 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: is spam? score=1.105 required=5
2365Aug 23 12:09:14.076 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tests=HTML_MESSAGE,MIME_HTML_ONLY,RCVD_IN_DNSWL_NONE,SPF_PASS
2366Aug 23 12:09:14.076 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: subtests=__ANY_TEXT_ATTACH,__ANY_TEXT_ATTACH_DOC,__BODY_TEXT_LINE,__BODY_TEXT_LINE,__BODY_TEXT_LINE,__CT,__CTE,__CTYPE_CHARSET_QUOTED,__CTYPE_HTML,__DKIM_DEPENDABLE,__DOS_HAS_ANY_URI,__DOS_LINK,__DOS_RCVD_THU,__DOS_RELAYED_EXT,__ENV_AND_HDR_FROM_MATCH,__FROM_FULL_NAME,__HAS_ANY_EMAIL,__HAS_ANY_URI,__HAS_DATE,__HAS_FROM,__HAS_MESSAGE_ID,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HAS_TO,__HAS_URI,__HTML_LENGTH_0000_1024,__KAM_BODY_LENGTH_LT_1024,__LAST_EXTERNAL_RELAY_NO_AUTH,__LAST_UNTRUSTED_RELAY_NO_AUTH,__LCL__ENV_AND_HDR_FROM_MATCH,__LCL__KAM_BODY_LENGTH_LT_1024,__LOCAL_PP_NONPPURL,__MIME_HTML,__MIME_VERSION,__MISSING_REF,__MISSING_REPLY,__MSGID_OK_HEX,__NONEMPTY_BODY,__NOT_SPOOFED,__RCVD_IN_DNSWL,__RP_MATCHES_RCVD,__SANE_MSGID,__SINGLE_WORD_LINE,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TOCC_EXISTS,__URI_MAILTO
2367Aug 23 12:09:14.077 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: timing: total 5447 ms - parse: 2.3 (0.0%), extract_message_metadata: 53 (1.0%), get_uri_detail_list: 0.86 (0.0%), tests_pri_-1000: 46 (0.8%), tests_pri_-950: 3.0 (0.1%), tests_pri_-900: 3.1 (0.1%), tests_pri_-400: 2.8 (0.1%), tests_pri_0: 5282 (97.0%), check_spf: 479 (8.8%), poll_dns_idle: 316 (5.8%), check_dkim_adsp: 33 (0.6%), check_dcc: 4388 (80.6%), check_pyzor: 295 (5.4%), tests_pri_500: 16 (0.3%)
2368Aug 23 12:09:14.077 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) DONE SA check (0)
2369Aug 23 12:09:14.081 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SA dbg: check: tagrun - tag DKIMDOMAIN is still blocking action 0
2370Aug 23 12:09:14.084 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline spam_scan_sa - deadline in 474.5 s, set to 285.000 s
2371Aug 23 12:09:14.085 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer spam_scan_sa: timer 285, was 471, deadline in 474.5 s
2372Aug 23 12:09:14.085 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) spam_scan: score=1.105 autolearn=no autolearn_force=no tests=[HTML_MESSAGE=0.001,MIME_HTML_ONLY=1.105,RCVD_IN_DNSWL_NONE=-0.0001,SPF_PASS=-0.001] recips=0
2373Aug 23 12:09:14.085 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline spam_scan - deadline in 474.5 s, set to 285.000 s
2374Aug 23 12:09:14.086 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer spam_scan: timer 285, was 285, deadline in 474.5 s
2375Aug 23 12:09:14.086 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup: (scalar) matches, result="1"
2376Aug 23 12:09:14.086 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [local_domains] => true,  "customerservice@xrite.com" matches, result="1", matching_key="(constant:1)"
2377Aug 23 12:09:14.086 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) query_keys: cached customerservice@xrite.com
2378Aug 23 12:09:14.087 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql sel_policy "customerservice@xrite.com", query args: [customerservice@xrite.com,-3], [customerservice,-3], [@xrite.com,-3], [@.xrite.com,-3], [@.com,-3], [@.,-3]
2379Aug 23 12:09:14.087 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql select: SELECT users.*, policy.*, users.id FROM users LEFT JOIN policy ON users.policy_id=policy.id WHERE users.email IN (?,?,?,?,?,?) ORDER BY users.priority DESC
2380Aug 23 12:09:14.087 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql begin, nontransaction
2381Aug 23 12:09:14.087 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql: executing clause (6 args): SELECT users.*, policy.*, users.id FROM users LEFT JOIN policy ON users.policy_id=policy.id WHERE users.email IN (?,?,?,?,?,?) ORDER BY users.priority DESC
2382Aug 23 12:09:14.089 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql: "customerservice@xrite.com" matches catchall, local=>undef
2383Aug 23 12:09:14.090 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql(customerservice@xrite.com) matches, result=(id=>"2", priority=>"0", policy_id=>"3", email=>"@.", fullname=>-, id=>"2", policy_name=>"@.", virus_lover=>"N", spam_lover=>"N", unchecked_lover=>-, banned_files_lover=>"N", bad_header_lover=>"N", bypass_virus_checks=>"N", bypass_spam_checks=>"N", bypass_banned_checks=>"N", bypass_header_checks=>"N", virus_quarantine_to=>"", spam_quarantine_to=>"", banned_quarantine_to=>"", unchecked_quarantine_to=>-, bad_header_quarantine_to=>"", clean_quarantine_to=>-, archive_quarantine_to=>-, spam_tag_level=>"0", spam_tag2_level=>"0", spam_tag3_level=>"0", spam_kill_level=>"0", spam_dsn_cutoff_level=>-, spam_quarantine_cutoff_level=>-, addr_extension_virus=>-, addr_extension_spam=>-, addr_extension_banned=>-, addr_extension_bad_header=>-, warnvirusrecip=>-, warnbannedrecip=>-, warnbadhrecip=>-, newvirus_admin=>-, virus_admin=>-, banned_admin=>-, bad_header_admin=>-, spam_admin=>-, spam_subject_tag=>-, spam_subject_tag2=>-, spam_subject_tag3=>-, message_size_limit=>-, banned_rulenames=>-, disclaimer_options=>-, forward_method=>-, sa_userconf=>-, sa_username=>-, id=>"2", local=>-)
2384Aug 23 12:09:14.090 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(local) rec=0, "customerservice@xrite.com" result: undef
2385Aug 23 12:09:14.090 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup: (scalar) matches, result="1"
2386Aug 23 12:09:14.090 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [local_domains] => true,  "customerservice@xrite.com" matches, result="1", matching_key="(constant:1)"
2387Aug 23 12:09:14.090 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) penpals: local sender from outside, ignored: customerservice@xrite.com
2388Aug 23 12:09:14.090 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag_level) rec=0, "user0@example.com" result: undef
2389Aug 23 12:09:14.091 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag_level) rec=1, "user0@example.com" result: "0"
2390Aug 23 12:09:14.091 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_tag_level] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
2391Aug 23 12:09:14.091 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag2_level) rec=0, "user0@example.com" result: undef
2392Aug 23 12:09:14.091 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag2_level) rec=1, "user0@example.com" result: "0"
2393Aug 23 12:09:14.091 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_tag2_level] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
2394Aug 23 12:09:14.091 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag3_level) rec=0, "user0@example.com" result: undef
2395Aug 23 12:09:14.091 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag3_level) rec=1, "user0@example.com" result: "0"
2396Aug 23 12:09:14.092 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_tag3_level] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
2397Aug 23 12:09:14.092 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_kill_level) rec=0, "user0@example.com" result: undef
2398Aug 23 12:09:14.092 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_kill_level) rec=1, "user0@example.com" result: "0"
2399Aug 23 12:09:14.092 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_kill_level] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
2400Aug 23 12:09:14.092 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(message_size_limit) rec=0, "user0@example.com" result: undef
2401Aug 23 12:09:14.092 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(message_size_limit) rec=1, "user0@example.com" result: undef
2402Aug 23 12:09:14.092 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [message_size_limit] => undef, "user0@example.com" does not match
2403Aug 23 12:09:14.093 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) final_destiny (ccat=6) is PASS, recip user0@example.com
2404Aug 23 12:09:14.093 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) final_destiny (ccat=5) is PASS, recip user0@example.com
2405Aug 23 12:09:14.093 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) final_destiny (ccat=0) is PASS, recip user0@example.com
2406Aug 23 12:09:14.093 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) final_destiny PASS, recip user0@example.com
2407Aug 23 12:09:14.093 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) do_notify_and_quar: ccat=Spam (6,0) ("6":Spam, "5,1":Spammy3, "5":Spammy, "1,1":CleanTag, "1":Clean, "0":CatchAll) ccat_block=(), qar_mth=
2408Aug 23 12:09:14.093 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_quarantine_to) rec=0, "user0@example.com" result: undef
2409Aug 23 12:09:14.094 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_quarantine_to) rec=1, "user0@example.com" result: ""
2410Aug 23 12:09:14.094 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_quarantine_to] => false, "user0@example.com" matches, result="", matching_key="/cached/"
2411Aug 23 12:09:14.094 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) do_notify_and_quarantine: not quarantining, q_to off
2412Aug 23 12:09:14.094 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_admin) rec=0, "user0@example.com" result: undef
2413Aug 23 12:09:14.094 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_admin) rec=1, "user0@example.com" result: undef
2414Aug 23 12:09:14.094 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_admin] => undef, "user0@example.com" does not match
2415Aug 23 12:09:14.094 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_quarantine_bysender_to] => undef, "customerservice@xrite.com" does not match
2416Aug 23 12:09:14.095 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) skip admin notification, no administrators
2417Aug 23 12:09:14.095 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) do_notify_and_quarantine - done
2418Aug 23 12:09:14.095 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(forward_method) rec=0, "user0@example.com" result: undef
2419Aug 23 12:09:14.095 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(forward_method) rec=1, "user0@example.com" result: undef
2420Aug 23 12:09:14.095 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup: (opaque) matches, result="smtp:[127.0.0.1]:10025"
2421Aug 23 12:09:14.095 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [forward_method] => true,  "user0@example.com" matches, result="smtp:[127.0.0.1]:10025", matching_key="(opaque:smtp:[127.0.0.1]:10025)"
2422Aug 23 12:09:14.095 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) delivery method is 1, recips: user0@example.com
2423Aug 23 12:09:14.096 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag_level) rec=0, "user0@example.com" result: undef
2424Aug 23 12:09:14.096 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag_level) rec=1, "user0@example.com" result: "0"
2425Aug 23 12:09:14.097 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_tag_level] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
2426Aug 23 12:09:14.097 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag2_level) rec=0, "user0@example.com" result: undef
2427Aug 23 12:09:14.097 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag2_level) rec=1, "user0@example.com" result: "0"
2428Aug 23 12:09:14.097 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_tag2_level] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
2429Aug 23 12:09:14.097 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_subject_tag3) rec=0, "user0@example.com" result: undef
2430Aug 23 12:09:14.097 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_subject_tag3) rec=1, "user0@example.com" result: undef
2431Aug 23 12:09:14.097 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_subject_tag3] => undef, "user0@example.com" does not match
2432Aug 23 12:09:14.098 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_subject_tag2) rec=0, "user0@example.com" result: undef
2433Aug 23 12:09:14.098 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_subject_tag2) rec=1, "user0@example.com" result: undef
2434Aug 23 12:09:14.098 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup: (scalar) matches, result="***Spam*** "
2435Aug 23 12:09:14.098 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_subject_tag2] => true,  "user0@example.com" matches, result="***Spam*** ", matching_key="(constant:***Spam*** )"
2436Aug 23 12:09:14.098 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) headers CLUSTERING: NEW CLUSTER <user0@example.com>: score=1.105, tag=1, tag2=1, local=1, bl=, s=***Spam*** , mangle=
2437Aug 23 12:09:14.098 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header encoded (all-ASCII): X-Virus-Scanned: amavisd-new at mail8.example.com
2438Aug 23 12:09:14.099 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header: X-Virus-Scanned: amavisd-new at mail8.example.com\n
2439Aug 23 12:09:14.099 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header encoded (all-ASCII): X-Spam-Flag: YES
2440Aug 23 12:09:14.099 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header: X-Spam-Flag: YES\n
2441Aug 23 12:09:14.099 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header encoded (all-ASCII): X-Spam-Score: 1.105
2442Aug 23 12:09:14.099 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header: X-Spam-Score: 1.105\n
2443Aug 23 12:09:14.099 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header encoded (all-ASCII): X-Spam-Level: *
2444Aug 23 12:09:14.100 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header: X-Spam-Level: *\n
2445Aug 23 12:09:14.100 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header encoded (all-ASCII): X-Spam-Status: Yes,\n score=1.105\n tagged_above=0\n required=0\n tests=[HTML_MESSAGE=0.001,\n MIME_HTML_ONLY=1.105,\n RCVD_IN_DNSWL_NONE=-0.0001,\n SPF_PASS=-0.001]\n autolearn=no autolearn_force=no
2446Aug 23 12:09:14.100 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header: X-Spam-Status: Yes, score=1.105 tagged_above=0 required=0\n\ttests=[HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.105,\n\tRCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001]\n\tautolearn=no autolearn_force=no\n
2447Aug 23 12:09:14.100 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) fwd: scanner provided a header field X-Spam-Checker-Version, inhibited by %allowed_added_header_fields
2448Aug 23 12:09:14.101 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) fwd: scanner provided a header field X-Spam-Flag, but we preferred our own
2449Aug 23 12:09:14.101 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) fwd: scanner provided a header field X-Spam-Level, but we preferred our own
2450Aug 23 12:09:14.101 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) fwd: scanner provided a header field X-Spam-Status, but we preferred our own
2451Aug 23 12:09:14.101 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) fwd: scanner provided a header field X-Spam-Report, inhibited by %allowed_added_header_fields
2452Aug 23 12:09:14.102 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header encoded (all-ASCII): Received: from mail8.example.com ([127.0.0.1])\n by mail8.example.com (mail8.example.com [127.0.0.1]) (amavisd-new, port 10024)\n with ESMTP\n id M3N941Q6NbKl\n for <user0@example.com>;\n Thu, 23 Aug 2018 12:09:08 -0700 (PDT)
2453Aug 23 12:09:14.102 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header: Received: from mail8.example.com ([127.0.0.1])\n\tby mail8.example.com (mail8.example.com [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id M3N941Q6NbKl for <user0@example.com>;\n\tThu, 23 Aug 2018 12:09:08 -0700 (PDT)\n
2454Aug 23 12:09:14.102 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) headers CLUSTERING: done all 1 recips in one go
2455Aug 23 12:09:14.102 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) spam-tag, <customerservice@xrite.com> -> <user0@example.com>, Yes, score=1.105 tagged_above=0 required=0 tests=[HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.105, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
2456Aug 23 12:09:14.103 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) about to connect to smtp:[127.0.0.1]:10025, M3N941Q6NbKl FWD from <customerservice@xrite.com> -> <user0@example.com>
2457Aug 23 12:09:14.103 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline fwd_init - deadline in 474.4 s, set to 475.000 s
2458Aug 23 12:09:14.103 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp session reuse (smtp:[127.0.0.1]:10025), 4 transactions so far
2459Aug 23 12:09:14.103 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) establish_or_refresh, state: ehlo
2460Aug 23 12:09:14.103 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp cmd> NOOP
2461Aug 23 12:09:14.104 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: needline=0, flush=1, wr=1, timeout=15
2462Aug 23 12:09:14.104 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: sending 6 chars
2463Aug 23 12:09:14.104 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop sent 6> NOOP\r\n
2464Aug 23 12:09:14.104 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: needline=1, flush=0, wr=0, timeout=15
2465Aug 23 12:09:14.104 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: receiving
2466Aug 23 12:09:14.104 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop read 14 chars< 250 2.0.0 Ok\r\n
2467Aug 23 12:09:14.105 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp resp to NOOP (idle 63.6 s): 250 2.0.0 Ok
2468Aug 23 12:09:14.105 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) Remote host presents itself as: mail8.example.com, handles DSN, PIPELINING, 8BITMIME, SMTPUTF8
2469Aug 23 12:09:14.105 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) AUTH not needed, user='', MTA offers ''
2470Aug 23 12:09:14.105 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp cmd> MAIL FROM:<customerservice@xrite.com> BODY=7BIT
2471Aug 23 12:09:14.106 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) orcpt_encode rfc822, user666@example.com, encode_for_smtp
2472Aug 23 12:09:14.106 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp cmd> RCPT TO:<user0@example.com> ORCPT=rfc822;user666@example.com
2473Aug 23 12:09:14.106 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp cmd> DATA
2474Aug 23 12:09:14.106 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: needline=0, flush=1, wr=1, timeout=120
2475Aug 23 12:09:14.106 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: sending 134 chars
2476Aug 23 12:09:14.106 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop sent 134> MAIL FROM:<customerservice@xrite.com> BODY=7BIT\r\nRCPT TO:<user0@example.com> ORCPT=rfc822;user666@example.com\r\nDATA\r\n
2477Aug 23 12:09:14.107 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: needline=1, flush=0, wr=0, timeout=300
2478Aug 23 12:09:14.822 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: receiving
2479Aug 23 12:09:14.822 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop read 65 chars< 250 2.1.0 Ok\r\n250 2.1.5 Ok\r\n354 End data with <CR><LF>.<CR><LF>\r\n
2480Aug 23 12:09:14.823 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp resp to MAIL (pip): 250 2.1.0 Ok
2481Aug 23 12:09:14.823 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp resp to RCPT (pip) (<user0@example.com>): 250 2.1.5 Ok
2482Aug 23 12:09:14.823 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp resp to DATA: 354 End data with <CR><LF>.<CR><LF>
2483Aug 23 12:09:14.823 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) write_header: 1, Amavis::Out::SMTP::Protocol=HASH(0x8120d4a68)
2484Aug 23 12:09:14.824 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header encoded (utf8:Y) (all-ASCII): Subject:  ***Spam*** My X-Rite Registration Verification
2485Aug 23 12:09:14.824 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) header: Subject: ***Spam*** My X-Rite Registration Verification\n
2486Aug 23 12:09:14.824 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp connection_cache disabled, sending QUIT
2487Aug 23 12:09:14.824 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp cmd> QUIT
2488Aug 23 12:09:14.825 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: needline=0, flush=1, wr=1, timeout=474.279
2489Aug 23 12:09:14.825 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: sending 1939 chars
2490Aug 23 12:09:14.825 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop sent 1939> X-Virus-Scanned: amavisd-new at mail8.example.com\r\nX-Spam-Flag: YES\r\nX-Spam-Score: 1.105\r\nX-Spam-Level: *\r\nX-Spam-Status: Yes, score=1.105 tagged_above=0 required=0\r\n\ttests=[HTML_MESSAGE=0.001, MI [...]
2491Aug 23 12:09:14.825 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: needline=1, flush=0, wr=0, timeout=474.279
2492Aug 23 12:09:14.827 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop: receiving
2493Aug 23 12:09:14.827 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rw_loop read 52 chars< 250 2.0.0 Ok: queued as C888961803B\r\n221 2.0.0 Bye\r\n
2494Aug 23 12:09:14.827 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) smtp resp to data-dot (<user0@example.com>): 250 2.0.0 Ok: queued as C888961803B, dt: 1.8 ms
2495Aug 23 12:09:14.827 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) Amavis::Out::SMTP::Session close, disconnecting
2496Aug 23 12:09:14.828 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline fwd-end-chkpnt - deadline in 473.7 s, set to 285.000 s
2497Aug 23 12:09:14.828 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer fwd-end-chkpnt: timer 285, was 0, deadline in 473.7 s
2498Aug 23 12:09:14.828 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) M3N941Q6NbKl FWD from <customerservice@xrite.com> -> <user0@example.com>, BODY=7BIT 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as C888961803B
2499Aug 23 12:09:14.829 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline forwarding - deadline in 473.7 s, set to 285.000 s
2500Aug 23 12:09:14.829 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer forwarding: timer 285, was 285, deadline in 473.7 s
2501Aug 23 12:09:14.829 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) DSN: sender NOT credible, SA: 1.105, <customerservice@xrite.com>
2502Aug 23 12:09:14.829 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup: (scalar) matches, result="10"
2503Aug 23 12:09:14.829 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_dsn_cutoff_level_bysender] => true,  "customerservice@xrite.com" matches, result="10", matching_key="(constant:10)"
2504Aug 23 12:09:14.830 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) dsn: from MTA 250 NonBlocking:Spam <customerservice@xrite.com> -> <user0@example.com>: on_succ=0, on_dly=1, on_fail=1, never=0, warn_sender=, DSN_passed_on=1, destiny=1, mta_resp: "250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as C888961803B"
2505Aug 23 12:09:14.830 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) DSN: SUCC from MTA 250 NonBlocking:Spam, no DSN requested: <customerservice@xrite.com> -> <user0@example.com>
2506Aug 23 12:09:14.830 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) delivery_status_notification: notif 0 bytes, suppressed: no
2507Aug 23 12:09:14.830 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) one_response_for_all, per_recip_capable: N, suppressed: N
2508Aug 23 12:09:14.830 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) one_response_for_all <customerservice@xrite.com>: success, r=0,b=0,d=0, ndn_needed=0, '250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as C888961803B'
2509Aug 23 12:09:14.831 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) notif=N, suppressed=0, ndn_needed=0, exit=0, 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as C888961803B
2510Aug 23 12:09:14.831 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline delivery-notification - deadline in 473.7 s, set to 285.000 s
2511Aug 23 12:09:14.831 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer delivery-notification: timer 285, was 285, deadline in 473.7 s
2512Aug 23 12:09:14.831 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) status counters: InMsgsStatus{Relayed,RelayedTagged,RelayedTaggedInbound}
2513Aug 23 12:09:14.831 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline snmp-counters - deadline in 473.7 s, set to 285.000 s
2514Aug 23 12:09:14.832 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer snmp-counters: timer 285, was 285, deadline in 473.7 s
2515Aug 23 12:09:14.832 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) orcpt_encode rfc822, user666@example.com, smtputf8
2516Aug 23 12:09:14.836 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) oldest_public_ip_addr_from_received: 208.71.80.106
2517Aug 23 12:09:14.839 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) Passed SPAM {RelayedTaggedInbound}, [208.71.80.106]:61722 [208.71.80.106] <customerservice@xrite.com> -> <user0@example.com>, Queue-ID: D168961803A, Message-ID: <dab86839-9402-44d7-87ba-ae6bc31e7dc1@grexcap003.xrite.com>, mail_id: M3N941Q6NbKl, Hits: 1.105, size: 1376, queued_as: C888961803B, 6405 ms, Tests: [HTML_MESSAGE=0.001,MIME_HTML_ONLY=1.105,RCVD_IN_DNSWL_NONE=-0.0001,SPF_PASS=-0.001]
2518Aug 23 12:09:14.839 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag_level) rec=0, "user0@example.com" result: undef
2519Aug 23 12:09:14.839 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag_level) rec=1, "user0@example.com" result: "0"
2520Aug 23 12:09:14.840 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_tag_level] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
2521Aug 23 12:09:14.840 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag2_level) rec=0, "user0@example.com" result: undef
2522Aug 23 12:09:14.840 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_tag2_level) rec=1, "user0@example.com" result: "0"
2523Aug 23 12:09:14.840 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_tag2_level] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
2524Aug 23 12:09:14.840 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_kill_level) rec=0, "user0@example.com" result: undef
2525Aug 23 12:09:14.840 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup_sql_field(spam_kill_level) rec=1, "user0@example.com" result: "0"
2526Aug 23 12:09:14.840 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) lookup [spam_kill_level] => false, "user0@example.com" matches, result="0", matching_key="/cached/"
2527Aug 23 12:09:14.842 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) Passed SPAM, <customerservice@xrite.com> -> <user0@example.com>, Hits: 1.105, tag=0, tag2=0, kill=0, queued_as: C888961803B, L/Y/Y/Y
2528Aug 23 12:09:14.842 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline main_log_entry - deadline in 473.7 s, set to 285.000 s
2529Aug 23 12:09:14.842 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer main_log_entry: timer 285, was 285, deadline in 473.7 s
2530Aug 23 12:09:14.842 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql begin transaction
2531Aug 23 12:09:14.843 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql: executing clause (12 args): INSERT INTO msgrcpt (partition_tag, mail_id, rseqnum, rid, is_local, content, ds, rs, bl, wl, bspam_level, smtp_resp) VALUES (?,?,?,?,?,?,?,?,?,?,?,?)
2532Aug 23 12:09:14.844 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) save_info_final M3N941Q6NbKl, orig=N, chks=VSHB, cont.ty=S, q.type= , q.to=, dsn=N, score=1.105, Message-ID: <dab86839-9402-44d7-87ba-ae6bc31e7dc1@GREXCAP003.XRITE.com>, From: 'X-Rite Customer Service <customerservice@xrite.com>', Subject: 'My X-Rite Registration Verification'
2533Aug 23 12:09:14.844 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql: executing clause (12 args): UPDATE msgs SET content=?, quar_type=?, quar_loc=?, dsn_sent=?, spam_level=?, message_id=?, from_addr=?, subject=?, client_addr=?, originating=? WHERE partition_tag=? AND mail_id=?
2534Aug 23 12:09:14.846 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sql commit
2535Aug 23 12:09:14.847 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) TIMING-SA total 5454 ms - parse: 2.3 (0.0%), extract_message_metadata: 53 (1.0%), get_uri_detail_list: 0.86 (0.0%), tests_pri_-1000: 46 (0.8%), tests_pri_-950: 3.0 (0.1%), tests_pri_-900: 3.1 (0.1%), tests_pri_-400: 2.8 (0.1%), tests_pri_0: 5282 (96.8%), check_spf: 479 (8.8%), poll_dns_idle: 316 (5.8%), check_dkim_adsp: 33 (0.6%), check_dcc: 4388 (80.4%), check_pyzor: 295 (5.4%), tests_pri_500: 16 (0.3%), get_report: 0.69 (0.0%)
2536Aug 23 12:09:14.847 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline check done - deadline in 473.7 s, set to 285.000 s
2537Aug 23 12:09:14.848 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer check done: timer 285, was 285, deadline in 473.7 s
2538Aug 23 12:09:14.848 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) sending SMTP response: "250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as C888961803B"
2539Aug 23 12:09:14.848 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as C888961803B
2540Aug 23 12:09:14.848 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) switch_to_client_time 480 s, smtp response sent
2541Aug 23 12:09:14.848 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) TempDir::strip: /var/amavis/tmp/amavis-20180823T120807-41214-bHq1cmm0
2542Aug 23 12:09:14.849 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) rmdir_recursively: /var/amavis/tmp/amavis-20180823T120807-41214-bHq1cmm0/parts, excl=1
2543Aug 23 12:09:14.850 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) size: 1376, TIMING [total 6417 ms] - SMTP greeting: 2.3 (0%)0, SMTP EHLO: 2.8 (0%)0, SMTP pre-MAIL: 3.1 (0%)0, SMTP MAIL: 1.3 (0%)0, lookup_sql: 4.1 (0%)0, SMTP pre-DATA-flush: 2.3 (0%)0, SMTP DATA: 89 (1%)2, check_init: 0.4 (0%)2, digest_hdr: 1.5 (0%)2, digest_body_dkim: 1.3 (0%)2, collect_info: 2.9 (0%)2, gen_mail_id: 12 (0%)2, mime_decode: 9 (0%)2, get-file-type1: 30 (0%)3, parts_decode: 0.4 (0%)3, check_header: 2.0 (0%)3, AV-scan-1: 14 (0%)3, lookup_sql: 3.8 (0%)3, lookup_sql: 2.7 (0%)3, spam-wb-list: 3.3 (0%)3, SA msg read: 1.1 (0%)3, SA parse: 5 (0%)3, SA check: 5449 (85%)88, lookup_sql: 12 (0%)88, decide_mail_destiny: 3.4 (0%)88, notif-quar: 1.4 (0%)88, fwd-connect: 11 (0%)88, fwd-mail-pip: 718 (11%)100, fwd-rcpt-pip: 0.4 (0%)100, fwd-data-chkpnt: 0.1 (0%)100, write-header: 0.9 (0%)100, fwd-data-contents: 0.1 (0%)100, fwd-end-chkpnt: 4.3 (0%)100, prepare-dsn: 2.0 (0%)100, report: 3.0 (0%)100, main_log_entry: 8 (0%)100, sql-update: 5.0 (0%)100, SMTP pre-response: 0.7 (0%)100, SMTP response: 0.4 (0%)100, unlink-1-files: 0.9 (0%)100, rundown: 1.0 (0%)100
2544Aug 23 12:09:14.851 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 6: was busy, 6402.8 ms, total idle 58.969 s, busy 8.545 s
2545Aug 23 12:09:14.851 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, 5: was idle, 0.2 ms, total idle 58.970 s, busy 8.545 s
2546Aug 23 12:09:14.851 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP< QUIT\r\n
2547Aug 23 12:09:14.852 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) get_deadline switch_to_my_time(rx SMTP QUIT) - deadline in 480.0 s, set to 288.000 s
2548Aug 23 12:09:14.852 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) prolong_timer switch_to_my_time(rx SMTP QUIT): timer 288, was 480, deadline in 480.0 s
2549Aug 23 12:09:14.852 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) ESMTP> 221 2.0.0 [127.0.0.1] amavisd-new closing transmission channel
2550Aug 23 12:09:14.853 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) switch_to_client_time 480 s, smtp response sent
2551Aug 23 12:09:14.853 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) SMTP session over, timer stopped
2552Aug 23 12:09:14.854 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) exiting process_request
2553Aug 23 12:09:14.854 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) idle_proc, bye: was busy, 2.9 ms, total idle 58.970 s, busy 8.548 s
2554Aug 23 12:09:14.854 mail8.example.com /usr/local/sbin/amavisd[41214]: (41214-06) load: 13 %, total idle 58.970 s, busy 8.548 s
2555
2556********************
2557
2558END OUTPUT of amavisd/spamassassin debug log for this email
2559
2560********************