· 7 years ago · Feb 25, 2019, 04:52 PM
1--------------------------------------------------------------
2--- Welcome to the eFa Configuration program ---
3--- https://www.efa-project.org ---
4--------------------------------------------------------------
5
6
7You are currently running eFa-4.0.0.
8
9Please choose an option:
10
110) Logout from ssh 9) MariaDB Recovery
121) Shell 10) Apache Settings
132) Reboot system 11) Virus Settings
143) Halt system 12) System Restore
154) IP Settings 13) Update Now
165) Tunables 14) Maintenance Mode
176) MailWatch Settings 15) Let's Encrypt
187) Mail Settings 16) DKIM and DMARC
198) Spam Settings 17) Webmin
20
21[eFa] : 1
22[shell_user@relay ~]$ su
23Password:
24su: Authentication failure
25[shell_user@relay ~]$ sudo
26usage: sudo -h | -K | -k | -V
27usage: sudo -v [-AknS] [-g group] [-h host] [-p prompt] [-u user]
28usage: sudo -l [-AknS] [-g group] [-h host] [-p prompt] [-U user] [-u user] [command]
29usage: sudo [-AbEHknPS] [-r role] [-t type] [-C num] [-g group] [-h host] [-p prompt] [-T timeout] [-u user] [VAR=value] [-i|-s] [<command>]
30usage: sudo -e [-AknS] [-r role] [-t type] [-C num] [-g group] [-h host] [-p prompt] [-T timeout] [-u user] file ...
31[shell_user@relay ~]$ sudo su
32[sudo] password for shell_user:
33[root@relay shell_user]# sudo tail -f /var/log/maillog
34Feb 25 17:29:36 relay MailScanner[8007]: Using locktype = flock
35Feb 25 17:29:39 relay postfix/smtp[7980]: 447S8G10TdzJfDk: to=<info@attcomputer.nl>, orig_to=<root@attcomputer.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=5, delays=0/0/0.02/5, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
36Feb 25 17:29:42 relay postfix/qmgr[7039]: 447S866m5vzJfDj: removed
37Feb 25 17:29:49 relay postfix/qmgr[7039]: 447S8G10TdzJfDk: removed
38Feb 25 17:30:48 relay postfix/smtpd[8241]: connect from mail-eopbgr40071.outbound.protection.outlook.com[40.107.4.71]
39Feb 25 17:30:48 relay postfix/smtpd[8241]: Anonymous TLS connection established from mail-eopbgr40071.outbound.protection.outlook.com[40.107.4.71]: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)
40Feb 25 17:30:49 relay sqlgrey: perf: spent 0s cleaning: from_awl (0) domain_awl (0) connect (0)
41Feb 25 17:30:49 relay sqlgrey: grey: new: 40.107.4(40.107.4.71), info@diolaageinde.nl -> martha@nicheconsultants.nl
42Feb 25 17:30:49 relay postfix/smtpd[8241]: NOQUEUE: reject: RCPT from mail-eopbgr40071.outbound.protection.outlook.com[40.107.4.71]: 451 4.7.1 <Martha@nicheconsultants.nl>: Recipient address rejected: Greylisted for 5 minutes; from=<info@diolaageinde.nl> to=<Martha@nicheconsultants.nl> proto=ESMTP helo=<EUR03-DB5-obe.outbound.protection.outlook.com>
43Feb 25 17:30:49 relay postfix/smtpd[8241]: disconnect from mail-eopbgr40071.outbound.protection.outlook.com[40.107.4.71] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
44Feb 25 17:32:38 relay postfix/smtpd[8502]: connect from mail-oln040092072057.outbound.protection.outlook.com[40.92.72.57]
45Feb 25 17:32:38 relay postfix/smtpd[8502]: Anonymous TLS connection established from mail-oln040092072057.outbound.protection.outlook.com[40.92.72.57]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
46Feb 25 17:32:38 relay sqlgrey: grey: domain awl match: updating 40.92.72(40.92.72.57), hotmail.com
47Feb 25 17:32:38 relay postfix/smtpd[8502]: 447SCp5Yh2zJfDH: client=mail-oln040092072057.outbound.protection.outlook.com[40.92.72.57]
48Feb 25 17:32:38 relay postfix/cleanup[8506]: 447SCp5Yh2zJfDH: message-id=<DB6PR0802MB237532441E5FCCA039441FE2F27A0@DB6PR0802MB2375.eurprd08.prod.outlook.com>
49Feb 25 17:32:38 relay opendkim[6573]: 447SCp5Yh2zJfDH: mail-oln040092072057.outbound.protection.outlook.com [40.92.72.57] not internal
50Feb 25 17:32:38 relay opendkim[6573]: 447SCp5Yh2zJfDH: not authenticated
51Feb 25 17:32:38 relay opendkim[6573]: 447SCp5Yh2zJfDH: DKIM verification successful
52Feb 25 17:32:40 relay postfix/cleanup[8506]: 447SCp5Yh2zJfDH: milter-discard: END-OF-MESSAGE from mail-oln040092072057.outbound.protection.outlook.com[40.92.72.57]: milter triggers DISCARD action; from=<julien.nl@hotmail.com> to=<hassan@attcomputer.com> proto=ESMTP helo=<EUR03-VE1-obe.outbound.protection.outlook.com>
53Feb 25 17:32:40 relay postfix/smtpd[8502]: disconnect from mail-oln040092072057.outbound.protection.outlook.com[40.92.72.57] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
54Feb 25 17:32:42 relay MailScanner[7847]: New Batch: Scanning 1 messages, 6028 bytes
55Feb 25 17:32:42 relay MailScanner[7847]: Virus and Content Scanning: Starting
56Feb 25 17:32:42 relay MailScanner[7847]: Spam Checks: Starting
57Feb 25 17:32:43 relay dccifd[7076]: continue not asking DCC 215 seconds after 5 failures
58Feb 25 17:32:47 relay postfix/smtpd[8502]: connect from unknown[5.160.92.186]
59Feb 25 17:32:48 relay postfix/smtpd[8502]: lost connection after CONNECT from unknown[5.160.92.186]
60Feb 25 17:32:48 relay postfix/smtpd[8502]: disconnect from unknown[5.160.92.186] commands=0/0
61Feb 25 17:32:53 relay MailScanner[7847]: Requeue: 447SCp5Yh2zJfDH to 447SD55zKkz14q0
62Feb 25 17:32:53 relay postfix/qmqpd[8524]: connect from localhost[127.0.0.1]
63Feb 25 17:32:53 relay postfix/qmqpd[8524]: 447SD5677pzJfDH: client=localhost[127.0.0.1]
64Feb 25 17:32:53 relay postfix/cleanup[8506]: 447SD5677pzJfDH: message-id=<DB6PR0802MB237532441E5FCCA039441FE2F27A0@DB6PR0802MB2375.eurprd08.prod.outlook.com>
65Feb 25 17:32:53 relay opendkim[6573]: 447SD5677pzJfDH: no signing table match for 'julien.nl@hotmail.com'
66Feb 25 17:32:53 relay opendkim[6573]: 447SD5677pzJfDH: DKIM verification successful
67Feb 25 17:32:53 relay postfix/qmqpd[8524]: disconnect from localhost[127.0.0.1]
68Feb 25 17:32:53 relay MailScanner[7847]: Uninfected: Delivered 1 messages
69Feb 25 17:32:53 relay MailScanner[7847]: Deleted 1 messages from processing-database
70Feb 25 17:32:53 relay postfix/qmgr[7039]: 447SD5677pzJfDH: from=<julien.nl@hotmail.com>, size=6439, nrcpt=1 (queue active)
71Feb 25 17:32:53 relay MailScanner[7847]: MailWatch: Logging message 447SCp5Yh2zJfDH to SQL
72Feb 25 17:32:58 relay postfix/smtp[8526]: 447SD5677pzJfDH: to=<hassan@attcomputer.com>, relay=192.168.4.5[192.168.4.5]:25, delay=5.1, delays=0.05/0.02/0.02/5, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
73Feb 25 17:33:02 relay postfix/scache[8010]: statistics: start interval Feb 25 17:29:27
74Feb 25 17:33:02 relay postfix/scache[8010]: statistics: domain lookup hits=0 miss=2 success=0%
75Feb 25 17:33:08 relay postfix/cleanup[8506]: 447SDN71XqzJfDj: message-id=<447SDN71XqzJfDj@relay.attcomputer.nl>
76Feb 25 17:33:08 relay postfix/bounce[8527]: 447SD5677pzJfDH: sender non-delivery notification: 447SDN71XqzJfDj
77Feb 25 17:33:08 relay postfix/qmgr[7039]: 447SD5677pzJfDH: removed
78Feb 25 17:33:08 relay postfix/qmgr[7039]: 447SDN71XqzJfDj: from=<>, size=8744, nrcpt=1 (queue active)
79Feb 25 17:33:11 relay postfix/smtp[8526]: 447SDN71XqzJfDj: to=<julien.nl@hotmail.com>, relay=hotmail-com.olc.protection.outlook.com[104.47.37.33]:25, delay=2.1, delays=0.01/0/1.2/0.83, dsn=2.6.0, status=sent (250 2.6.0 <447SDN71XqzJfDj@relay.attcomputer.nl> [InternalId=35394825543359, Hostname=CY1NAM02HT152.eop-nam02.prod.protection.outlook.com] 14341 bytes in 0.289, 48.356 KB/sec Queued mail for delivery -> 250 2.1.5)
80Feb 25 17:33:11 relay postfix/qmgr[7039]: 447SDN71XqzJfDj: removed
81Feb 25 17:33:32 relay postfix/smtpd[8502]: connect from mail-eopbgr130074.outbound.protection.outlook.com[40.107.13.74]
82Feb 25 17:33:32 relay postfix/smtpd[8502]: Anonymous TLS connection established from mail-eopbgr130074.outbound.protection.outlook.com[40.107.13.74]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
83Feb 25 17:33:33 relay sqlgrey: grey: new: 40.107.13(40.107.13.74), shaffner@satys.com -> ronald@dks-international.com
84Feb 25 17:33:33 relay postfix/smtpd[8502]: NOQUEUE: reject: RCPT from mail-eopbgr130074.outbound.protection.outlook.com[40.107.13.74]: 451 4.7.1 <Ronald@dks-international.com>: Recipient address rejected: Greylisted for 5 minutes; from=<shaffner@satys.com> to=<Ronald@dks-international.com> proto=ESMTP helo=<EUR01-HE1-obe.outbound.protection.outlook.com>
85Feb 25 17:33:33 relay sqlgrey: grey: new: 40.107.13(40.107.13.74), shaffner@satys.com -> marco@dks-international.com
86Feb 25 17:33:33 relay postfix/smtpd[8502]: NOQUEUE: reject: RCPT from mail-eopbgr130074.outbound.protection.outlook.com[40.107.13.74]: 451 4.7.1 <Marco@dks-international.com>: Recipient address rejected: Greylisted for 5 minutes; from=<shaffner@satys.com> to=<Marco@dks-international.com> proto=ESMTP helo=<EUR01-HE1-obe.outbound.protection.outlook.com>
87Feb 25 17:33:33 relay sqlgrey: grey: new: 40.107.13(40.107.13.74), shaffner@satys.com -> richard@dks-international.com
88Feb 25 17:33:33 relay postfix/smtpd[8502]: NOQUEUE: reject: RCPT from mail-eopbgr130074.outbound.protection.outlook.com[40.107.13.74]: 451 4.7.1 <Richard@dks-international.com>: Recipient address rejected: Greylisted for 5 minutes; from=<shaffner@satys.com> to=<Richard@dks-international.com> proto=ESMTP helo=<EUR01-HE1-obe.outbound.protection.outlook.com>
89Feb 25 17:33:33 relay postfix/smtpd[8502]: disconnect from mail-eopbgr130074.outbound.protection.outlook.com[40.107.13.74] ehlo=2 starttls=1 mail=1 rcpt=0/3 quit=1 commands=5/8
90Feb 25 17:34:35 relay postfix/smtpd[8502]: connect from mail54.atl231.mcsv.net[198.2.141.54]
91Feb 25 17:34:35 relay postfix/smtpd[8502]: Anonymous TLS connection established from mail54.atl231.mcsv.net[198.2.141.54]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
92Feb 25 17:34:35 relay sqlgrey: grey: new: 198.2.141(198.2.141.54), bounce-mc.us3_25678676.3330581-a.goes=agogroep.nl@mail54.atl231.mcsv.net -> a.goes@agogroep.nl
93Feb 25 17:34:35 relay postfix/smtpd[8502]: NOQUEUE: reject: RCPT from mail54.atl231.mcsv.net[198.2.141.54]: 451 4.7.1 <a.goes@agogroep.nl>: Recipient address rejected: Greylisted for 5 minutes; from=<bounce-mc.us3_25678676.3330581-a.goes=agogroep.nl@mail54.atl231.mcsv.net> to=<a.goes@agogroep.nl> proto=ESMTP helo=<mail54.atl231.mcsv.net>
94Feb 25 17:34:36 relay postfix/smtpd[8502]: disconnect from mail54.atl231.mcsv.net[198.2.141.54] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 rset=1 quit=1 commands=6/8
95Feb 25 17:36:46 relay postfix/smtpd[9046]: connect from unknown[119.28.19.225]
96Feb 25 17:36:48 relay postfix/smtpd[9046]: NOQUEUE: reject: RCPT from unknown[119.28.19.225]: 554 5.7.1 Service unavailable; Client host [119.28.19.225] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/119.28.19.225 / https://www.spamhaus.org/sbl/query/SBLCSS; from=<humorlesssolxequo@hotmail.com> to=<richard@dks-international.com> proto=SMTP helo=<hotmail.com>
97Feb 25 17:36:49 relay postfix/smtpd[9046]: lost connection after RCPT from unknown[119.28.19.225]
98Feb 25 17:36:49 relay postfix/smtpd[9046]: disconnect from unknown[119.28.19.225] helo=1 mail=1 rcpt=0/1 commands=2/3
99Feb 25 17:37:07 relay postfix/smtpd[9046]: connect from unknown[185.152.12.49]
100Feb 25 17:37:08 relay postfix/smtpd[9046]: NOQUEUE: reject: RCPT from unknown[185.152.12.49]: 554 5.7.1 Service unavailable; Client host [185.152.12.49] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/185.152.12.49 / https://www.spamhaus.org/sbl/query/SBLCSS; from=<CharlesYoung@3008.es> to=<gp-portal@remedialeducation.nl> proto=ESMTP helo=<3008.es>
101Feb 25 17:37:08 relay postfix/smtpd[9046]: lost connection after RCPT from unknown[185.152.12.49]
102Feb 25 17:37:08 relay postfix/smtpd[9046]: disconnect from unknown[185.152.12.49] ehlo=1 mail=1 rcpt=0/1 commands=2/3
103Feb 25 17:38:51 relay postfix/smtpd[9306]: connect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]
104Feb 25 17:38:52 relay sqlgrey: grey: new: 18.205.66.21(18.205.66.21), name@example.org -> hassan@attcomputer.com
105Feb 25 17:38:52 relay postfix/smtpd[9306]: NOQUEUE: reject: RCPT from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]: 451 4.7.1 <hassan@attcomputer.com>: Recipient address rejected: Greylisted for 5 minutes; from=<name@example.org> to=<hassan@attcomputer.com> proto=ESMTP helo=<mail.example.org>
106Feb 25 17:38:52 relay postfix/smtpd[9306]: disconnect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
107Feb 25 17:40:23 relay postfix/smtpd[9306]: connect from mail-eopbgr10121.outbound.protection.outlook.com[40.107.1.121]
108Feb 25 17:40:23 relay postfix/smtpd[9306]: Anonymous TLS connection established from mail-eopbgr10121.outbound.protection.outlook.com[40.107.1.121]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
109Feb 25 17:40:24 relay sqlgrey: grey: new: 40.107.1(40.107.1.121), michelle@new-wa.nl -> hassan@attcomputer.com
110Feb 25 17:40:24 relay postfix/smtpd[9306]: NOQUEUE: reject: RCPT from mail-eopbgr10121.outbound.protection.outlook.com[40.107.1.121]: 451 4.7.1 <hassan@attcomputer.com>: Recipient address rejected: Greylisted for 5 minutes; from=<Michelle@new-wa.nl> to=<hassan@attcomputer.com> proto=ESMTP helo=<EUR02-HE1-obe.outbound.protection.outlook.com>
111Feb 25 17:40:24 relay postfix/smtpd[9306]: disconnect from mail-eopbgr10121.outbound.protection.outlook.com[40.107.1.121] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
112Feb 25 17:40:48 relay postfix/anvil[8242]: statistics: max connection rate 1/60s for (smtp:40.107.4.71) at Feb 25 17:30:48
113Feb 25 17:40:48 relay postfix/anvil[8242]: statistics: max connection count 1 for (smtp:40.107.4.71) at Feb 25 17:30:48
114Feb 25 17:40:48 relay postfix/anvil[8242]: statistics: max cache size 3 at Feb 25 17:33:32
115Feb 25 17:41:51 relay postfix/smtpd[9306]: connect from gsa2.thai.wtf[54.39.146.178]
116Feb 25 17:41:51 relay postfix/smtpd[9306]: warning: non-SMTP command from gsa2.thai.wtf[54.39.146.178]: CONNECT 45.33.54.195:80 HTTP/1.0
117Feb 25 17:41:51 relay postfix/smtpd[9306]: disconnect from gsa2.thai.wtf[54.39.146.178] unknown=0/1 commands=0/1
118Feb 25 17:43:46 relay postfix/smtpd[9961]: connect from db3103k.ixlhosting.nl[5.61.250.141]
119Feb 25 17:43:46 relay postfix/smtpd[9961]: Anonymous TLS connection established from db3103k.ixlhosting.nl[5.61.250.141]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
120Feb 25 17:43:46 relay sqlgrey: grey: domain awl match: updating 5.61.250(5.61.250.141), nix-art.nl
121Feb 25 17:43:46 relay postfix/smtpd[9961]: 447SSf5GTqzJfDH: client=db3103k.ixlhosting.nl[5.61.250.141]
122Feb 25 17:43:46 relay postfix/cleanup[9965]: 447SSf5GTqzJfDH: message-id=<d2210edebda5ba182452297ee2e9e81c@c2eca9eea82fcb8a76fe1f543047de03dca48bdb9d61d2a196fb14e344d2a155>
123Feb 25 17:43:46 relay opendkim[6573]: 447SSf5GTqzJfDH: db3103k.ixlhosting.nl [5.61.250.141] not internal
124Feb 25 17:43:46 relay opendkim[6573]: 447SSf5GTqzJfDH: not authenticated
125Feb 25 17:43:46 relay opendkim[6573]: 447SSf5GTqzJfDH: DKIM verification successful
126Feb 25 17:43:48 relay postfix/cleanup[9965]: 447SSf5GTqzJfDH: milter-discard: END-OF-MESSAGE from db3103k.ixlhosting.nl[5.61.250.141]: milter triggers DISCARD action; from=<SRS0=zaHdAV=RA=facebookmail.com=notification@nix-art.nl> to=<martha@nicheconsultants.nl> proto=ESMTP helo=<db3103k.ixlhosting.nl>
127Feb 25 17:43:48 relay postfix/smtpd[9961]: disconnect from db3103k.ixlhosting.nl[5.61.250.141] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
128Feb 25 17:43:48 relay MailScanner[8007]: New Batch: Scanning 1 messages, 18727 bytes
129Feb 25 17:43:48 relay MailScanner[8007]: Virus and Content Scanning: Starting
130Feb 25 17:43:48 relay MailScanner[8007]: HTML Img tag found in message 447SSf5GTqzJfDH from srs0=zahdav=ra=facebookmail.com=notification@nix-art.nl
131Feb 25 17:43:48 relay MailScanner[8007]: Spam Checks: Starting
132Feb 25 17:43:48 relay MailScanner[8007]: Expired 8 records from the SpamAssassin cache
133Feb 25 17:43:49 relay dccifd[7076]: no working DCC servers dcc1.dcc-servers.net dcc2.dcc-servers.net dcc3.dcc-servers.net ... at 137.208.8.63 74.92.232.243
134Feb 25 17:43:59 relay MailScanner[8007]: Requeue: 447SSf5GTqzJfDH to 447SSv4nM1z14q2
135Feb 25 17:43:59 relay postfix/qmqpd[9981]: connect from localhost[127.0.0.1]
136Feb 25 17:43:59 relay postfix/qmqpd[9981]: 447SSv4sC3zJfDH: client=localhost[127.0.0.1]
137Feb 25 17:43:59 relay postfix/cleanup[9965]: 447SSv4sC3zJfDH: message-id=<d2210edebda5ba182452297ee2e9e81c@c2eca9eea82fcb8a76fe1f543047de03dca48bdb9d61d2a196fb14e344d2a155>
138Feb 25 17:43:59 relay opendkim[6573]: 447SSv4sC3zJfDH: no signing table match for 'notification@facebookmail.com'
139Feb 25 17:43:59 relay opendkim[6573]: 447SSv4sC3zJfDH: DKIM verification successful
140Feb 25 17:43:59 relay postfix/qmqpd[9981]: disconnect from localhost[127.0.0.1]
141Feb 25 17:43:59 relay postfix/qmgr[7039]: 447SSv4sC3zJfDH: from=<srs0=zahdav=ra=facebookmail.com=notification@nix-art.nl>, size=19172, nrcpt=1 (queue active)
142Feb 25 17:43:59 relay MailScanner[8007]: Uninfected: Delivered 1 messages
143Feb 25 17:43:59 relay MailScanner[8007]: Deleted 1 messages from processing-database
144Feb 25 17:43:59 relay MailScanner[8007]: MailWatch: Logging message 447SSf5GTqzJfDH to SQL
145Feb 25 17:44:04 relay postfix/smtp[9983]: 447SSv4sC3zJfDH: to=<martha@nicheconsultants.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=5.2, delays=0.05/0.02/0.02/5.2, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
146Feb 25 17:44:14 relay postfix/cleanup[9965]: 447STB6fbjzJfDj: message-id=<447STB6fbjzJfDj@relay.attcomputer.nl>
147Feb 25 17:44:14 relay postfix/qmgr[7039]: 447STB6fbjzJfDj: from=<>, size=21591, nrcpt=1 (queue active)
148Feb 25 17:44:14 relay postfix/bounce[10112]: 447SSv4sC3zJfDH: sender non-delivery notification: 447STB6fbjzJfDj
149Feb 25 17:44:14 relay postfix/qmgr[7039]: 447SSv4sC3zJfDH: removed
150Feb 25 17:44:40 relay postfix/smtp[9983]: 447STB6fbjzJfDj: to=<srs0=zahdav=ra=facebookmail.com=notification@nix-art.nl>, relay=mail.nix-art.nl[5.61.250.141]:25, delay=25, delays=0.01/0/0.25/25, dsn=2.0.0, status=sent (250 OK id=1gyJMV-0001YJ-6n)
151Feb 25 17:44:40 relay postfix/qmgr[7039]: 447STB6fbjzJfDj: removed
152Feb 25 17:44:49 relay postfix/smtpd[9961]: connect from mail-yw1-f54.google.com[209.85.161.54]
153Feb 25 17:44:49 relay postfix/smtpd[9961]: Anonymous TLS connection established from mail-yw1-f54.google.com[209.85.161.54]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
154Feb 25 17:44:50 relay sqlgrey: grey: domain awl match: updating 209.85.161(209.85.161.54), gmail.com
155Feb 25 17:44:50 relay postfix/smtpd[9961]: 447STt2pfKzJfDH: client=mail-yw1-f54.google.com[209.85.161.54]
156Feb 25 17:44:50 relay postfix/cleanup[9965]: 447STt2pfKzJfDH: message-id=<CACg3fsa_LXkez1HvmhKPMQkVMRhqDrrf3vp=PX062Ynx3S5C8Q@mail.gmail.com>
157Feb 25 17:44:50 relay opendkim[6573]: 447STt2pfKzJfDH: mail-yw1-f54.google.com [209.85.161.54] not internal
158Feb 25 17:44:50 relay opendkim[6573]: 447STt2pfKzJfDH: not authenticated
159Feb 25 17:44:50 relay opendkim[6573]: 447STt2pfKzJfDH: DKIM verification successful
160Feb 25 17:44:51 relay MSMilter[10115]: MailWatch: Whitelist refresh time reached
161Feb 25 17:44:51 relay MSMilter[10115]: MailWatch: Starting up MailWatch SQL Whitelist
162Feb 25 17:44:51 relay MSMilter[10115]: MailWatch: Read 35 whitelist entries
163Feb 25 17:44:51 relay MSMilter[10115]: MailWatch: Blacklist refresh time reached
164Feb 25 17:44:51 relay MSMilter[10115]: MailWatch: Starting up MailWatch SQL Blacklist
165Feb 25 17:44:51 relay MSMilter[10115]: MailWatch: Read 0 blacklist entries
166Feb 25 17:44:51 relay postfix/cleanup[9965]: 447STt2pfKzJfDH: milter-discard: END-OF-MESSAGE from mail-yw1-f54.google.com[209.85.161.54]: milter triggers DISCARD action; from=<shawniverson@gmail.com> to=<info@attcomputer.nl> proto=ESMTP helo=<mail-yw1-f54.google.com>
167Feb 25 17:44:51 relay postfix/smtpd[9961]: disconnect from mail-yw1-f54.google.com[209.85.161.54] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
168Feb 25 17:44:53 relay MailScanner[8007]: New Batch: Scanning 1 messages, 2925 bytes
169Feb 25 17:44:53 relay MailScanner[8007]: Virus and Content Scanning: Starting
170Feb 25 17:44:53 relay MailScanner[8007]: Spam Checks: Starting
171Feb 25 17:44:53 relay MailScanner[8007]: MailWatch: Whitelist refresh time reached
172Feb 25 17:44:53 relay MailScanner[8007]: MailWatch: Starting up MailWatch SQL Whitelist
173Feb 25 17:44:53 relay MailScanner[8007]: MailWatch: Read 35 whitelist entries
174Feb 25 17:44:53 relay MailScanner[8007]: MailWatch: Blacklist refresh time reached
175Feb 25 17:44:53 relay MailScanner[8007]: MailWatch: Starting up MailWatch SQL Blacklist
176Feb 25 17:44:53 relay MailScanner[8007]: MailWatch: Read 0 blacklist entries
177Feb 25 17:44:54 relay dccifd[7076]: continue not asking DCC 447 seconds after 5 failures
178Feb 25 17:44:59 relay MailScanner[8007]: Requeue: 447STt2pfKzJfDH to 447SV36L2Kz14q4
179Feb 25 17:44:59 relay postfix/qmqpd[9981]: connect from localhost[127.0.0.1]
180Feb 25 17:44:59 relay postfix/qmqpd[9981]: 447SV36LnFzJfDH: client=localhost[127.0.0.1]
181Feb 25 17:44:59 relay postfix/cleanup[9965]: 447SV36LnFzJfDH: message-id=<CACg3fsa_LXkez1HvmhKPMQkVMRhqDrrf3vp=PX062Ynx3S5C8Q@mail.gmail.com>
182Feb 25 17:44:59 relay opendkim[6573]: 447SV36LnFzJfDH: no signing table match for 'shawniverson@gmail.com'
183Feb 25 17:44:59 relay opendkim[6573]: 447SV36LnFzJfDH: DKIM verification successful
184Feb 25 17:44:59 relay postfix/qmgr[7039]: 447SV36LnFzJfDH: from=<shawniverson@gmail.com>, size=3319, nrcpt=1 (queue active)
185Feb 25 17:44:59 relay postfix/qmqpd[9981]: disconnect from localhost[127.0.0.1]
186Feb 25 17:44:59 relay MailScanner[8007]: Uninfected: Delivered 1 messages
187Feb 25 17:44:59 relay MailScanner[8007]: Deleted 1 messages from processing-database
188Feb 25 17:44:59 relay MailScanner[8007]: MailWatch: Logging message 447STt2pfKzJfDH to SQL
189Feb 25 17:45:05 relay postfix/smtp[9983]: 447SV36LnFzJfDH: to=<info@attcomputer.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=5.2, delays=0.05/0/0.02/5.1, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
190Feb 25 17:45:10 relay postfix/smtpd[9961]: connect from asp6.mailinblack.com[78.153.245.119]
191Feb 25 17:45:10 relay postfix/smtpd[9961]: Anonymous TLS connection established from asp6.mailinblack.com[78.153.245.119]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
192Feb 25 17:45:10 relay sqlgrey: grey: domain awl match: updating 78.153.245(78.153.245.119), postforming.eu
193Feb 25 17:45:10 relay postfix/smtpd[9961]: 447SVG6hMHzJfDj: client=asp6.mailinblack.com[78.153.245.119]
194Feb 25 17:45:10 relay sqlgrey: grey: domain awl match: updating 78.153.245(78.153.245.119), postforming.eu
195Feb 25 17:45:11 relay postfix/cleanup[9965]: 447SVG6hMHzJfDj: message-id=<E4765E226EE7FB44A579CB84007E66B30244EB81DA@SRV-EXCH2010.POST.LOC>
196Feb 25 17:45:11 relay opendkim[6573]: 447SVG6hMHzJfDj: asp6.mailinblack.com [78.153.245.119] not internal
197Feb 25 17:45:11 relay opendkim[6573]: 447SVG6hMHzJfDj: not authenticated
198Feb 25 17:45:11 relay opendkim[6573]: 447SVG6hMHzJfDj: no signature data
199Feb 25 17:45:12 relay postfix/smtpd[10264]: connect from sender29116.picsrv.net[145.255.129.116]
200Feb 25 17:45:12 relay postfix/smtpd[10264]: Anonymous TLS connection established from sender29116.picsrv.net[145.255.129.116]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
201Feb 25 17:45:12 relay sqlgrey: grey: domain awl match: updating 145.255.129.116(145.255.129.116), feedback.ibood.com
202Feb 25 17:45:12 relay postfix/smtpd[10264]: 447SVJ2Y0mzJfDk: client=sender29116.picsrv.net[145.255.129.116]
203Feb 25 17:45:12 relay postfix/cleanup[10267]: 447SVJ2Y0mzJfDk: message-id=<8aa71044cd339ea4ef5509087012faad@feedback.ibood.com>
204Feb 25 17:45:12 relay opendkim[6573]: 447SVJ2Y0mzJfDk: sender29116.picsrv.net [145.255.129.116] not internal
205Feb 25 17:45:12 relay opendkim[6573]: 447SVJ2Y0mzJfDk: not authenticated
206Feb 25 17:45:12 relay opendkim[6573]: 447SVJ2Y0mzJfDk: message has signatures from copernica.com, mailer.ibood.com
207Feb 25 17:45:12 relay opendkim[6573]: 447SVJ2Y0mzJfDk: DKIM verification successful
208Feb 25 17:45:12 relay MSMilter[10263]: MailWatch: Whitelist refresh time reached
209Feb 25 17:45:12 relay MSMilter[10263]: MailWatch: Starting up MailWatch SQL Whitelist
210Feb 25 17:45:12 relay MSMilter[10263]: MailWatch: Read 35 whitelist entries
211Feb 25 17:45:12 relay MSMilter[10263]: MailWatch: Blacklist refresh time reached
212Feb 25 17:45:12 relay MSMilter[10263]: MailWatch: Starting up MailWatch SQL Blacklist
213Feb 25 17:45:12 relay MSMilter[10263]: MailWatch: Read 0 blacklist entries
214Feb 25 17:45:12 relay postfix/cleanup[9965]: 447SVG6hMHzJfDj: milter-discard: END-OF-MESSAGE from asp6.mailinblack.com[78.153.245.119]: milter triggers DISCARD action; from=<nathalie.babillot@postforming.eu> to=<ronald@dks-international.com> proto=ESMTP helo=<asp6.mailinblack.com>
215Feb 25 17:45:12 relay postfix/smtpd[9961]: disconnect from asp6.mailinblack.com[78.153.245.119] ehlo=2 starttls=1 mail=1 rcpt=2 data=1 quit=1 commands=8
216Feb 25 17:45:13 relay MSMilter[10266]: MailWatch: Whitelist refresh time reached
217Feb 25 17:45:13 relay MSMilter[10266]: MailWatch: Starting up MailWatch SQL Whitelist
218Feb 25 17:45:13 relay MSMilter[10266]: MailWatch: Read 35 whitelist entries
219Feb 25 17:45:13 relay MSMilter[10266]: MailWatch: Blacklist refresh time reached
220Feb 25 17:45:13 relay MSMilter[10266]: MailWatch: Starting up MailWatch SQL Blacklist
221Feb 25 17:45:13 relay MSMilter[10266]: MailWatch: Read 0 blacklist entries
222Feb 25 17:45:13 relay postfix/cleanup[10267]: 447SVJ2Y0mzJfDk: milter-discard: END-OF-MESSAGE from sender29116.picsrv.net[145.255.129.116]: milter triggers DISCARD action; from=<pom-babvejw2gshsq4s4@feedback.ibood.com> to=<marco@dks-international.com> proto=ESMTP helo=<sender29116.picsrv.net>
223Feb 25 17:45:13 relay MailScanner[7999]: New Batch: Scanning 1 messages, 235424 bytes
224Feb 25 17:45:13 relay MailScanner[7999]: Virus and Content Scanning: Starting
225Feb 25 17:45:14 relay MailScanner[7999]: HTML Img tag found in message 447SVG6hMHzJfDj from nathalie.babillot@postforming.eu
226Feb 25 17:45:14 relay MailScanner[7999]: Spam Checks: Starting
227Feb 25 17:45:14 relay MailScanner[7999]: Expired 4 records from the SpamAssassin cache
228Feb 25 17:45:14 relay MailScanner[7999]: MailWatch: Whitelist refresh time reached
229Feb 25 17:45:14 relay MailScanner[7999]: MailWatch: Starting up MailWatch SQL Whitelist
230Feb 25 17:45:14 relay MailScanner[7999]: MailWatch: Read 35 whitelist entries
231Feb 25 17:45:14 relay MailScanner[7999]: MailWatch: Blacklist refresh time reached
232Feb 25 17:45:14 relay MailScanner[7999]: MailWatch: Starting up MailWatch SQL Blacklist
233Feb 25 17:45:14 relay MailScanner[7999]: MailWatch: Read 0 blacklist entries
234Feb 25 17:45:14 relay dccifd[7076]: continue not asking DCC 427 seconds after 5 failures
235Feb 25 17:45:15 relay postfix/cleanup[9965]: 447SVM0tvszJfDj: message-id=<447SVM0tvszJfDj@relay.attcomputer.nl>
236Feb 25 17:45:15 relay postfix/bounce[10112]: 447SV36LnFzJfDH: sender non-delivery notification: 447SVM0tvszJfDj
237Feb 25 17:45:15 relay postfix/qmgr[7039]: 447SV36LnFzJfDH: removed
238Feb 25 17:45:15 relay postfix/qmgr[7039]: 447SVM0tvszJfDj: from=<>, size=5618, nrcpt=1 (queue active)
239Feb 25 17:45:15 relay postfix/smtpd[10264]: disconnect from sender29116.picsrv.net[145.255.129.116] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
240Feb 25 17:45:15 relay postfix/smtp[9983]: connect to gmail-smtp-in.l.google.com[2a00:1450:4013:c05::1a]:25: Network is unreachable
241Feb 25 17:45:16 relay postfix/smtp[9983]: 447SVM0tvszJfDj: to=<shawniverson@gmail.com>, relay=gmail-smtp-in.l.google.com[173.194.79.27]:25, delay=1.5, delays=0/0/0.38/1.2, dsn=5.7.1, status=bounced (host gmail-smtp-in.l.google.com[173.194.79.27] said: 550-5.7.1 Unauthenticated email from attcomputer.nl is not accepted due to 550-5.7.1 domain's DMARC policy. Please contact the administrator of 550-5.7.1 attcomputer.nl domain if this was a legitimate mail. Please visit 550-5.7.1 https://support.google.com/mail/answer/2451690 to learn about the 550 5.7.1 DMARC initiative. n21si225856eja.150 - gsmtp (in reply to end of DATA command))
242Feb 25 17:45:16 relay postfix/qmgr[7039]: 447SVM0tvszJfDj: removed
243Feb 25 17:45:17 relay MailScanner[7847]: New Batch: Found 2 messages waiting
244Feb 25 17:45:17 relay MailScanner[7847]: New Batch: Scanning 1 messages, 118721 bytes
245Feb 25 17:45:18 relay MailScanner[7847]: Virus and Content Scanning: Starting
246Feb 25 17:45:18 relay MailScanner[7847]: HTML Img tag found in message 447SVJ2Y0mzJfDk from pom-babvejw2gshsq4s4@feedback.ibood.com
247Feb 25 17:45:18 relay MailScanner[7847]: Spam Checks: Starting
248Feb 25 17:45:18 relay MailScanner[7847]: MailWatch: Whitelist refresh time reached
249Feb 25 17:45:18 relay MailScanner[7847]: MailWatch: Starting up MailWatch SQL Whitelist
250Feb 25 17:45:18 relay MailScanner[7847]: MailWatch: Read 35 whitelist entries
251Feb 25 17:45:18 relay MailScanner[7847]: MailWatch: Blacklist refresh time reached
252Feb 25 17:45:18 relay MailScanner[7847]: MailWatch: Starting up MailWatch SQL Blacklist
253Feb 25 17:45:18 relay MailScanner[7847]: MailWatch: Read 0 blacklist entries
254Feb 25 17:45:19 relay dccifd[7076]: continue not asking DCC 422 seconds after 5 failures
255Feb 25 17:45:24 relay MailScanner[7999]: Requeue: 447SVG6hMHzJfDj to 447SVX1hhmz14q6
256Feb 25 17:45:24 relay postfix/qmqpd[9981]: connect from localhost[127.0.0.1]
257Feb 25 17:45:24 relay postfix/qmqpd[9981]: 447SVX1jyTzJfDH: client=localhost[127.0.0.1]
258Feb 25 17:45:24 relay postfix/cleanup[10267]: 447SVX1jyTzJfDH: message-id=<E4765E226EE7FB44A579CB84007E66B30244EB81DA@SRV-EXCH2010.POST.LOC>
259Feb 25 17:45:24 relay opendkim[6573]: 447SVX1jyTzJfDH: no signing table match for 'nathalie.babillot@postforming.eu'
260Feb 25 17:45:24 relay opendkim[6573]: 447SVX1jyTzJfDH: no signature data
261Feb 25 17:45:24 relay postfix/qmqpd[9981]: disconnect from localhost[127.0.0.1]
262Feb 25 17:45:24 relay postfix/qmgr[7039]: 447SVX1jyTzJfDH: from=<nathalie.babillot@postforming.eu>, size=235683, nrcpt=2 (queue active)
263Feb 25 17:45:24 relay MailScanner[7999]: Uninfected: Delivered 1 messages
264Feb 25 17:45:24 relay MailScanner[7999]: Deleted 1 messages from processing-database
265Feb 25 17:45:24 relay MailScanner[7999]: MailWatch: Logging message 447SVG6hMHzJfDj to SQL
266Feb 25 17:45:24 relay postfix/smtp[9983]: 447SVX1jyTzJfDH: to=<richard@dks-international.com>, relay=92.64.151.192[92.64.151.192]:25, delay=0.41, delays=0.13/0/0.08/0.2, dsn=2.6.0, status=sent (250 2.6.0 <E4765E226EE7FB44A579CB84007E66B30244EB81DA@SRV-EXCH2010.POST.LOC> [InternalId=165167262335001, Hostname=EX-DKS.DKS.lan] Queued mail for delivery)
267Feb 25 17:45:24 relay postfix/smtp[10305]: 447SVX1jyTzJfDH: to=<ronald@dks-international.com>, relay=92.64.151.192[92.64.151.192]:25, delay=0.41, delays=0.13/0.02/0.08/0.18, dsn=2.6.0, status=sent (250 2.6.0 <E4765E226EE7FB44A579CB84007E66B30244EB81DA@SRV-EXCH2010.POST.LOC> [InternalId=165167262335002, Hostname=EX-DKS.DKS.lan] Queued mail for delivery)
268Feb 25 17:45:24 relay postfix/qmgr[7039]: 447SVX1jyTzJfDH: removed
269Feb 25 17:45:30 relay MailScanner[7847]: Content Checks: Detected and have disarmed web bug tags in HTML message in 447SVJ2Y0mzJfDk from pom-babvejw2gshsq4s4@feedback.ibood.com
270Feb 25 17:45:30 relay MailScanner[7847]: Requeue: 447SVJ2Y0mzJfDk to 447SVf4nyPz14q5
271Feb 25 17:45:30 relay postfix/qmqpd[9981]: connect from localhost[127.0.0.1]
272Feb 25 17:45:30 relay postfix/qmqpd[9981]: 447SVf4pgSzJfDH: client=localhost[127.0.0.1]
273Feb 25 17:45:30 relay postfix/cleanup[9965]: 447SVf4pgSzJfDH: message-id=<8aa71044cd339ea4ef5509087012faad@feedback.ibood.com>
274Feb 25 17:45:30 relay opendkim[6573]: 447SVf4pgSzJfDH: no signing table match for 'antwoord@mailer.ibood.com'
275Feb 25 17:45:30 relay opendkim[6573]: 447SVf4pgSzJfDH: message has signatures from copernica.com, mailer.ibood.com
276Feb 25 17:45:30 relay opendkim[6573]: 447SVf4pgSzJfDH: bad signature data
277Feb 25 17:45:30 relay postfix/qmqpd[9981]: disconnect from localhost[127.0.0.1]
278Feb 25 17:45:30 relay postfix/qmgr[7039]: 447SVf4pgSzJfDH: from=<pom-babvejw2gshsq4s4@feedback.ibood.com>, size=118505, nrcpt=1 (queue active)
279Feb 25 17:45:30 relay MailScanner[7847]: Uninfected: Delivered 1 messages
280Feb 25 17:45:30 relay MailScanner[7847]: Deleted 1 messages from processing-database
281Feb 25 17:45:30 relay MailScanner[7847]: MailWatch: Logging message 447SVJ2Y0mzJfDk to SQL
282Feb 25 17:45:31 relay postfix/smtp[9983]: 447SVf4pgSzJfDH: to=<marco@dks-international.com>, relay=92.64.151.192[92.64.151.192]:25, delay=0.38, delays=0.09/0/0.12/0.16, dsn=2.6.0, status=sent (250 2.6.0 <8aa71044cd339ea4ef5509087012faad@feedback.ibood.com> [InternalId=165167262335003, Hostname=EX-DKS.DKS.lan] Queued mail for delivery)
283Feb 25 17:45:31 relay postfix/qmgr[7039]: 447SVf4pgSzJfDH: removed
284Feb 25 17:46:09 relay postfix/smtpd[9961]: connect from mail-eopbgr140044.outbound.protection.outlook.com[40.107.14.44]
285Feb 25 17:46:10 relay postfix/smtpd[9961]: Anonymous TLS connection established from mail-eopbgr140044.outbound.protection.outlook.com[40.107.14.44]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
286Feb 25 17:46:10 relay sqlgrey: grey: new: 40.107.14(40.107.14.44), info@diolaageinde.nl -> martha@nicheconsultants.nl
287Feb 25 17:46:10 relay postfix/smtpd[9961]: NOQUEUE: reject: RCPT from mail-eopbgr140044.outbound.protection.outlook.com[40.107.14.44]: 451 4.7.1 <Martha@nicheconsultants.nl>: Recipient address rejected: Greylisted for 5 minutes; from=<info@diolaageinde.nl> to=<Martha@nicheconsultants.nl> proto=ESMTP helo=<EUR01-VE1-obe.outbound.protection.outlook.com>
288Feb 25 17:46:10 relay postfix/smtpd[9961]: disconnect from mail-eopbgr140044.outbound.protection.outlook.com[40.107.14.44] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6