· 7 years ago · Feb 25, 2019, 05:32 PM
1--------------------------------------------------------------
2--- Welcome to the eFa Configuration program ---
3--- https://www.efa-project.org ---
4--------------------------------------------------------------
5
6
7You are currently running eFa-4.0.0.
8
9Please choose an option:
10
110) Logout from ssh 9) MariaDB Recovery
121) Shell 10) Apache Settings
132) Reboot system 11) Virus Settings
143) Halt system 12) System Restore
154) IP Settings 13) Update Now
165) Tunables 14) Maintenance Mode
176) MailWatch Settings 15) Let's Encrypt
187) Mail Settings 16) DKIM and DMARC
198) Spam Settings 17) Webmin
20
21[eFa] : 1
22[shell_user@relay ~]$ su
23Password:
24su: Authentication failure
25[shell_user@relay ~]$ sudo
26usage: sudo -h | -K | -k | -V
27usage: sudo -v [-AknS] [-g group] [-h host] [-p prompt] [-u user]
28usage: sudo -l [-AknS] [-g group] [-h host] [-p prompt] [-U user] [-u user] [command]
29usage: sudo [-AbEHknPS] [-r role] [-t type] [-C num] [-g group] [-h host] [-p prompt] [-T timeout] [-u user] [VAR=value] [-i|-s] [<command>]
30usage: sudo -e [-AknS] [-r role] [-t type] [-C num] [-g group] [-h host] [-p prompt] [-T timeout] [-u user] file ...
31[shell_user@relay ~]$ sudo su
32[sudo] password for shell_user:
33[root@relay shell_user]# sudo tail -f /var/log/maillog
34Feb 25 17:29:36 relay MailScanner[8007]: Using locktype = flock
35Feb 25 17:29:39 relay postfix/smtp[7980]: 447S8G10TdzJfDk: to=<info@attcomputer.nl>, orig_to=<root@attcomputer.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=5, delays=0/0/0.02/5, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
36Feb 25 17:29:42 relay postfix/qmgr[7039]: 447S866m5vzJfDj: removed
37Feb 25 17:29:49 relay postfix/qmgr[7039]: 447S8G10TdzJfDk: removed
38Feb 25 17:30:48 relay postfix/smtpd[8241]: connect from mail-eopbgr40071.outbound.protection.outlook.com[40.107.4.71]
39Feb 25 17:30:48 relay postfix/smtpd[8241]: Anonymous TLS connection established from mail-eopbgr40071.outbound.protection.outlook.com[40.107.4.71]: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)
40Feb 25 17:30:49 relay sqlgrey: perf: spent 0s cleaning: from_awl (0) domain_awl (0) connect (0)
41Feb 25 17:30:49 relay sqlgrey: grey: new: 40.107.4(40.107.4.71), info@diolaageinde.nl -> martha@nicheconsultants.nl
42Feb 25 17:30:49 relay postfix/smtpd[8241]: NOQUEUE: reject: RCPT from mail-eopbgr40071.outbound.protection.outlook.com[40.107.4.71]: 451 4.7.1 <Martha@nicheconsultants.nl>: Recipient address rejected: Greylisted for 5 minutes; from=<info@diolaageinde.nl> to=<Martha@nicheconsultants.nl> proto=ESMTP helo=<EUR03-DB5-obe.outbound.protection.outlook.com>
43Feb 25 17:30:49 relay postfix/smtpd[8241]: disconnect from mail-eopbgr40071.outbound.protection.outlook.com[40.107.4.71] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
44Feb 25 17:32:38 relay postfix/smtpd[8502]: connect from mail-oln040092072057.outbound.protection.outlook.com[40.92.72.57]
45Feb 25 17:32:38 relay postfix/smtpd[8502]: Anonymous TLS connection established from mail-oln040092072057.outbound.protection.outlook.com[40.92.72.57]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
46Feb 25 17:32:38 relay sqlgrey: grey: domain awl match: updating 40.92.72(40.92.72.57), hotmail.com
47Feb 25 17:32:38 relay postfix/smtpd[8502]: 447SCp5Yh2zJfDH: client=mail-oln040092072057.outbound.protection.outlook.com[40.92.72.57]
48Feb 25 17:32:38 relay postfix/cleanup[8506]: 447SCp5Yh2zJfDH: message-id=<DB6PR0802MB237532441E5FCCA039441FE2F27A0@DB6PR0802MB2375.eurprd08.prod.outlook.com>
49Feb 25 17:32:38 relay opendkim[6573]: 447SCp5Yh2zJfDH: mail-oln040092072057.outbound.protection.outlook.com [40.92.72.57] not internal
50Feb 25 17:32:38 relay opendkim[6573]: 447SCp5Yh2zJfDH: not authenticated
51Feb 25 17:32:38 relay opendkim[6573]: 447SCp5Yh2zJfDH: DKIM verification successful
52Feb 25 17:32:40 relay postfix/cleanup[8506]: 447SCp5Yh2zJfDH: milter-discard: END-OF-MESSAGE from mail-oln040092072057.outbound.protection.outlook.com[40.92.72.57]: milter triggers DISCARD action; from=<julien.nl@hotmail.com> to=<hassan@attcomputer.com> proto=ESMTP helo=<EUR03-VE1-obe.outbound.protection.outlook.com>
53Feb 25 17:32:40 relay postfix/smtpd[8502]: disconnect from mail-oln040092072057.outbound.protection.outlook.com[40.92.72.57] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
54Feb 25 17:32:42 relay MailScanner[7847]: New Batch: Scanning 1 messages, 6028 bytes
55Feb 25 17:32:42 relay MailScanner[7847]: Virus and Content Scanning: Starting
56Feb 25 17:32:42 relay MailScanner[7847]: Spam Checks: Starting
57Feb 25 17:32:43 relay dccifd[7076]: continue not asking DCC 215 seconds after 5 failures
58Feb 25 17:32:47 relay postfix/smtpd[8502]: connect from unknown[5.160.92.186]
59Feb 25 17:32:48 relay postfix/smtpd[8502]: lost connection after CONNECT from unknown[5.160.92.186]
60Feb 25 17:32:48 relay postfix/smtpd[8502]: disconnect from unknown[5.160.92.186] commands=0/0
61Feb 25 17:32:53 relay MailScanner[7847]: Requeue: 447SCp5Yh2zJfDH to 447SD55zKkz14q0
62Feb 25 17:32:53 relay postfix/qmqpd[8524]: connect from localhost[127.0.0.1]
63Feb 25 17:32:53 relay postfix/qmqpd[8524]: 447SD5677pzJfDH: client=localhost[127.0.0.1]
64Feb 25 17:32:53 relay postfix/cleanup[8506]: 447SD5677pzJfDH: message-id=<DB6PR0802MB237532441E5FCCA039441FE2F27A0@DB6PR0802MB2375.eurprd08.prod.outlook.com>
65Feb 25 17:32:53 relay opendkim[6573]: 447SD5677pzJfDH: no signing table match for 'julien.nl@hotmail.com'
66Feb 25 17:32:53 relay opendkim[6573]: 447SD5677pzJfDH: DKIM verification successful
67Feb 25 17:32:53 relay postfix/qmqpd[8524]: disconnect from localhost[127.0.0.1]
68Feb 25 17:32:53 relay MailScanner[7847]: Uninfected: Delivered 1 messages
69Feb 25 17:32:53 relay MailScanner[7847]: Deleted 1 messages from processing-database
70Feb 25 17:32:53 relay postfix/qmgr[7039]: 447SD5677pzJfDH: from=<julien.nl@hotmail.com>, size=6439, nrcpt=1 (queue active)
71Feb 25 17:32:53 relay MailScanner[7847]: MailWatch: Logging message 447SCp5Yh2zJfDH to SQL
72Feb 25 17:32:58 relay postfix/smtp[8526]: 447SD5677pzJfDH: to=<hassan@attcomputer.com>, relay=192.168.4.5[192.168.4.5]:25, delay=5.1, delays=0.05/0.02/0.02/5, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
73Feb 25 17:33:02 relay postfix/scache[8010]: statistics: start interval Feb 25 17:29:27
74Feb 25 17:33:02 relay postfix/scache[8010]: statistics: domain lookup hits=0 miss=2 success=0%
75Feb 25 17:33:08 relay postfix/cleanup[8506]: 447SDN71XqzJfDj: message-id=<447SDN71XqzJfDj@relay.attcomputer.nl>
76Feb 25 17:33:08 relay postfix/bounce[8527]: 447SD5677pzJfDH: sender non-delivery notification: 447SDN71XqzJfDj
77Feb 25 17:33:08 relay postfix/qmgr[7039]: 447SD5677pzJfDH: removed
78Feb 25 17:33:08 relay postfix/qmgr[7039]: 447SDN71XqzJfDj: from=<>, size=8744, nrcpt=1 (queue active)
79Feb 25 17:33:11 relay postfix/smtp[8526]: 447SDN71XqzJfDj: to=<julien.nl@hotmail.com>, relay=hotmail-com.olc.protection.outlook.com[104.47.37.33]:25, delay=2.1, delays=0.01/0/1.2/0.83, dsn=2.6.0, status=sent (250 2.6.0 <447SDN71XqzJfDj@relay.attcomputer.nl> [InternalId=35394825543359, Hostname=CY1NAM02HT152.eop-nam02.prod.protection.outlook.com] 14341 bytes in 0.289, 48.356 KB/sec Queued mail for delivery -> 250 2.1.5)
80Feb 25 17:33:11 relay postfix/qmgr[7039]: 447SDN71XqzJfDj: removed
81Feb 25 17:33:32 relay postfix/smtpd[8502]: connect from mail-eopbgr130074.outbound.protection.outlook.com[40.107.13.74]
82Feb 25 17:33:32 relay postfix/smtpd[8502]: Anonymous TLS connection established from mail-eopbgr130074.outbound.protection.outlook.com[40.107.13.74]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
83Feb 25 17:33:33 relay sqlgrey: grey: new: 40.107.13(40.107.13.74), shaffner@satys.com -> ronald@dks-international.com
84Feb 25 17:33:33 relay postfix/smtpd[8502]: NOQUEUE: reject: RCPT from mail-eopbgr130074.outbound.protection.outlook.com[40.107.13.74]: 451 4.7.1 <Ronald@dks-international.com>: Recipient address rejected: Greylisted for 5 minutes; from=<shaffner@satys.com> to=<Ronald@dks-international.com> proto=ESMTP helo=<EUR01-HE1-obe.outbound.protection.outlook.com>
85Feb 25 17:33:33 relay sqlgrey: grey: new: 40.107.13(40.107.13.74), shaffner@satys.com -> marco@dks-international.com
86Feb 25 17:33:33 relay postfix/smtpd[8502]: NOQUEUE: reject: RCPT from mail-eopbgr130074.outbound.protection.outlook.com[40.107.13.74]: 451 4.7.1 <Marco@dks-international.com>: Recipient address rejected: Greylisted for 5 minutes; from=<shaffner@satys.com> to=<Marco@dks-international.com> proto=ESMTP helo=<EUR01-HE1-obe.outbound.protection.outlook.com>
87Feb 25 17:33:33 relay sqlgrey: grey: new: 40.107.13(40.107.13.74), shaffner@satys.com -> richard@dks-international.com
88Feb 25 17:33:33 relay postfix/smtpd[8502]: NOQUEUE: reject: RCPT from mail-eopbgr130074.outbound.protection.outlook.com[40.107.13.74]: 451 4.7.1 <Richard@dks-international.com>: Recipient address rejected: Greylisted for 5 minutes; from=<shaffner@satys.com> to=<Richard@dks-international.com> proto=ESMTP helo=<EUR01-HE1-obe.outbound.protection.outlook.com>
89Feb 25 17:33:33 relay postfix/smtpd[8502]: disconnect from mail-eopbgr130074.outbound.protection.outlook.com[40.107.13.74] ehlo=2 starttls=1 mail=1 rcpt=0/3 quit=1 commands=5/8
90Feb 25 17:34:35 relay postfix/smtpd[8502]: connect from mail54.atl231.mcsv.net[198.2.141.54]
91Feb 25 17:34:35 relay postfix/smtpd[8502]: Anonymous TLS connection established from mail54.atl231.mcsv.net[198.2.141.54]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
92Feb 25 17:34:35 relay sqlgrey: grey: new: 198.2.141(198.2.141.54), bounce-mc.us3_25678676.3330581-a.goes=agogroep.nl@mail54.atl231.mcsv.net -> a.goes@agogroep.nl
93Feb 25 17:34:35 relay postfix/smtpd[8502]: NOQUEUE: reject: RCPT from mail54.atl231.mcsv.net[198.2.141.54]: 451 4.7.1 <a.goes@agogroep.nl>: Recipient address rejected: Greylisted for 5 minutes; from=<bounce-mc.us3_25678676.3330581-a.goes=agogroep.nl@mail54.atl231.mcsv.net> to=<a.goes@agogroep.nl> proto=ESMTP helo=<mail54.atl231.mcsv.net>
94Feb 25 17:34:36 relay postfix/smtpd[8502]: disconnect from mail54.atl231.mcsv.net[198.2.141.54] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 rset=1 quit=1 commands=6/8
95Feb 25 17:36:46 relay postfix/smtpd[9046]: connect from unknown[119.28.19.225]
96Feb 25 17:36:48 relay postfix/smtpd[9046]: NOQUEUE: reject: RCPT from unknown[119.28.19.225]: 554 5.7.1 Service unavailable; Client host [119.28.19.225] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/119.28.19.225 / https://www.spamhaus.org/sbl/query/SBLCSS; from=<humorlesssolxequo@hotmail.com> to=<richard@dks-international.com> proto=SMTP helo=<hotmail.com>
97Feb 25 17:36:49 relay postfix/smtpd[9046]: lost connection after RCPT from unknown[119.28.19.225]
98Feb 25 17:36:49 relay postfix/smtpd[9046]: disconnect from unknown[119.28.19.225] helo=1 mail=1 rcpt=0/1 commands=2/3
99Feb 25 17:37:07 relay postfix/smtpd[9046]: connect from unknown[185.152.12.49]
100Feb 25 17:37:08 relay postfix/smtpd[9046]: NOQUEUE: reject: RCPT from unknown[185.152.12.49]: 554 5.7.1 Service unavailable; Client host [185.152.12.49] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/185.152.12.49 / https://www.spamhaus.org/sbl/query/SBLCSS; from=<CharlesYoung@3008.es> to=<gp-portal@remedialeducation.nl> proto=ESMTP helo=<3008.es>
101Feb 25 17:37:08 relay postfix/smtpd[9046]: lost connection after RCPT from unknown[185.152.12.49]
102Feb 25 17:37:08 relay postfix/smtpd[9046]: disconnect from unknown[185.152.12.49] ehlo=1 mail=1 rcpt=0/1 commands=2/3
103Feb 25 17:38:51 relay postfix/smtpd[9306]: connect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]
104Feb 25 17:38:52 relay sqlgrey: grey: new: 18.205.66.21(18.205.66.21), name@example.org -> hassan@attcomputer.com
105Feb 25 17:38:52 relay postfix/smtpd[9306]: NOQUEUE: reject: RCPT from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]: 451 4.7.1 <hassan@attcomputer.com>: Recipient address rejected: Greylisted for 5 minutes; from=<name@example.org> to=<hassan@attcomputer.com> proto=ESMTP helo=<mail.example.org>
106Feb 25 17:38:52 relay postfix/smtpd[9306]: disconnect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
107Feb 25 17:40:23 relay postfix/smtpd[9306]: connect from mail-eopbgr10121.outbound.protection.outlook.com[40.107.1.121]
108Feb 25 17:40:23 relay postfix/smtpd[9306]: Anonymous TLS connection established from mail-eopbgr10121.outbound.protection.outlook.com[40.107.1.121]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
109Feb 25 17:40:24 relay sqlgrey: grey: new: 40.107.1(40.107.1.121), michelle@new-wa.nl -> hassan@attcomputer.com
110Feb 25 17:40:24 relay postfix/smtpd[9306]: NOQUEUE: reject: RCPT from mail-eopbgr10121.outbound.protection.outlook.com[40.107.1.121]: 451 4.7.1 <hassan@attcomputer.com>: Recipient address rejected: Greylisted for 5 minutes; from=<Michelle@new-wa.nl> to=<hassan@attcomputer.com> proto=ESMTP helo=<EUR02-HE1-obe.outbound.protection.outlook.com>
111Feb 25 17:40:24 relay postfix/smtpd[9306]: disconnect from mail-eopbgr10121.outbound.protection.outlook.com[40.107.1.121] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
112Feb 25 17:40:48 relay postfix/anvil[8242]: statistics: max connection rate 1/60s for (smtp:40.107.4.71) at Feb 25 17:30:48
113Feb 25 17:40:48 relay postfix/anvil[8242]: statistics: max connection count 1 for (smtp:40.107.4.71) at Feb 25 17:30:48
114Feb 25 17:40:48 relay postfix/anvil[8242]: statistics: max cache size 3 at Feb 25 17:33:32
115Feb 25 17:41:51 relay postfix/smtpd[9306]: connect from gsa2.thai.wtf[54.39.146.178]
116Feb 25 17:41:51 relay postfix/smtpd[9306]: warning: non-SMTP command from gsa2.thai.wtf[54.39.146.178]: CONNECT 45.33.54.195:80 HTTP/1.0
117Feb 25 17:41:51 relay postfix/smtpd[9306]: disconnect from gsa2.thai.wtf[54.39.146.178] unknown=0/1 commands=0/1
118Feb 25 17:43:46 relay postfix/smtpd[9961]: connect from db3103k.ixlhosting.nl[5.61.250.141]
119Feb 25 17:43:46 relay postfix/smtpd[9961]: Anonymous TLS connection established from db3103k.ixlhosting.nl[5.61.250.141]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
120Feb 25 17:43:46 relay sqlgrey: grey: domain awl match: updating 5.61.250(5.61.250.141), nix-art.nl
121Feb 25 17:43:46 relay postfix/smtpd[9961]: 447SSf5GTqzJfDH: client=db3103k.ixlhosting.nl[5.61.250.141]
122Feb 25 17:43:46 relay postfix/cleanup[9965]: 447SSf5GTqzJfDH: message-id=<d2210edebda5ba182452297ee2e9e81c@c2eca9eea82fcb8a76fe1f543047de03dca48bdb9d61d2a196fb14e344d2a155>
123Feb 25 17:43:46 relay opendkim[6573]: 447SSf5GTqzJfDH: db3103k.ixlhosting.nl [5.61.250.141] not internal
124Feb 25 17:43:46 relay opendkim[6573]: 447SSf5GTqzJfDH: not authenticated
125Feb 25 17:43:46 relay opendkim[6573]: 447SSf5GTqzJfDH: DKIM verification successful
126Feb 25 17:43:48 relay postfix/cleanup[9965]: 447SSf5GTqzJfDH: milter-discard: END-OF-MESSAGE from db3103k.ixlhosting.nl[5.61.250.141]: milter triggers DISCARD action; from=<SRS0=zaHdAV=RA=facebookmail.com=notification@nix-art.nl> to=<martha@nicheconsultants.nl> proto=ESMTP helo=<db3103k.ixlhosting.nl>
127Feb 25 17:43:48 relay postfix/smtpd[9961]: disconnect from db3103k.ixlhosting.nl[5.61.250.141] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
128Feb 25 17:43:48 relay MailScanner[8007]: New Batch: Scanning 1 messages, 18727 bytes
129Feb 25 17:43:48 relay MailScanner[8007]: Virus and Content Scanning: Starting
130Feb 25 17:43:48 relay MailScanner[8007]: HTML Img tag found in message 447SSf5GTqzJfDH from srs0=zahdav=ra=facebookmail.com=notification@nix-art.nl
131Feb 25 17:43:48 relay MailScanner[8007]: Spam Checks: Starting
132Feb 25 17:43:48 relay MailScanner[8007]: Expired 8 records from the SpamAssassin cache
133Feb 25 17:43:49 relay dccifd[7076]: no working DCC servers dcc1.dcc-servers.net dcc2.dcc-servers.net dcc3.dcc-servers.net ... at 137.208.8.63 74.92.232.243
134Feb 25 17:43:59 relay MailScanner[8007]: Requeue: 447SSf5GTqzJfDH to 447SSv4nM1z14q2
135Feb 25 17:43:59 relay postfix/qmqpd[9981]: connect from localhost[127.0.0.1]
136Feb 25 17:43:59 relay postfix/qmqpd[9981]: 447SSv4sC3zJfDH: client=localhost[127.0.0.1]
137Feb 25 17:43:59 relay postfix/cleanup[9965]: 447SSv4sC3zJfDH: message-id=<d2210edebda5ba182452297ee2e9e81c@c2eca9eea82fcb8a76fe1f543047de03dca48bdb9d61d2a196fb14e344d2a155>
138Feb 25 17:43:59 relay opendkim[6573]: 447SSv4sC3zJfDH: no signing table match for 'notification@facebookmail.com'
139Feb 25 17:43:59 relay opendkim[6573]: 447SSv4sC3zJfDH: DKIM verification successful
140Feb 25 17:43:59 relay postfix/qmqpd[9981]: disconnect from localhost[127.0.0.1]
141Feb 25 17:43:59 relay postfix/qmgr[7039]: 447SSv4sC3zJfDH: from=<srs0=zahdav=ra=facebookmail.com=notification@nix-art.nl>, size=19172, nrcpt=1 (queue active)
142Feb 25 17:43:59 relay MailScanner[8007]: Uninfected: Delivered 1 messages
143Feb 25 17:43:59 relay MailScanner[8007]: Deleted 1 messages from processing-database
144Feb 25 17:43:59 relay MailScanner[8007]: MailWatch: Logging message 447SSf5GTqzJfDH to SQL
145Feb 25 17:44:04 relay postfix/smtp[9983]: 447SSv4sC3zJfDH: to=<martha@nicheconsultants.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=5.2, delays=0.05/0.02/0.02/5.2, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
146Feb 25 17:44:14 relay postfix/cleanup[9965]: 447STB6fbjzJfDj: message-id=<447STB6fbjzJfDj@relay.attcomputer.nl>
147Feb 25 17:44:14 relay postfix/qmgr[7039]: 447STB6fbjzJfDj: from=<>, size=21591, nrcpt=1 (queue active)
148Feb 25 17:44:14 relay postfix/bounce[10112]: 447SSv4sC3zJfDH: sender non-delivery notification: 447STB6fbjzJfDj
149Feb 25 17:44:14 relay postfix/qmgr[7039]: 447SSv4sC3zJfDH: removed
150Feb 25 17:44:40 relay postfix/smtp[9983]: 447STB6fbjzJfDj: to=<srs0=zahdav=ra=facebookmail.com=notification@nix-art.nl>, relay=mail.nix-art.nl[5.61.250.141]:25, delay=25, delays=0.01/0/0.25/25, dsn=2.0.0, status=sent (250 OK id=1gyJMV-0001YJ-6n)
151Feb 25 17:44:40 relay postfix/qmgr[7039]: 447STB6fbjzJfDj: removed
152Feb 25 17:44:49 relay postfix/smtpd[9961]: connect from mail-yw1-f54.google.com[209.85.161.54]
153Feb 25 17:44:49 relay postfix/smtpd[9961]: Anonymous TLS connection established from mail-yw1-f54.google.com[209.85.161.54]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
154Feb 25 17:44:50 relay sqlgrey: grey: domain awl match: updating 209.85.161(209.85.161.54), gmail.com
155Feb 25 17:44:50 relay postfix/smtpd[9961]: 447STt2pfKzJfDH: client=mail-yw1-f54.google.com[209.85.161.54]
156Feb 25 17:44:50 relay postfix/cleanup[9965]: 447STt2pfKzJfDH: message-id=<CACg3fsa_LXkez1HvmhKPMQkVMRhqDrrf3vp=PX062Ynx3S5C8Q@mail.gmail.com>
157Feb 25 17:44:50 relay opendkim[6573]: 447STt2pfKzJfDH: mail-yw1-f54.google.com [209.85.161.54] not internal
158Feb 25 17:44:50 relay opendkim[6573]: 447STt2pfKzJfDH: not authenticated
159Feb 25 17:44:50 relay opendkim[6573]: 447STt2pfKzJfDH: DKIM verification successful
160Feb 25 17:44:51 relay MSMilter[10115]: MailWatch: Whitelist refresh time reached
161Feb 25 17:44:51 relay MSMilter[10115]: MailWatch: Starting up MailWatch SQL Whitelist
162Feb 25 17:44:51 relay MSMilter[10115]: MailWatch: Read 35 whitelist entries
163Feb 25 17:44:51 relay MSMilter[10115]: MailWatch: Blacklist refresh time reached
164Feb 25 17:44:51 relay MSMilter[10115]: MailWatch: Starting up MailWatch SQL Blacklist
165Feb 25 17:44:51 relay MSMilter[10115]: MailWatch: Read 0 blacklist entries
166Feb 25 17:44:51 relay postfix/cleanup[9965]: 447STt2pfKzJfDH: milter-discard: END-OF-MESSAGE from mail-yw1-f54.google.com[209.85.161.54]: milter triggers DISCARD action; from=<shawniverson@gmail.com> to=<info@attcomputer.nl> proto=ESMTP helo=<mail-yw1-f54.google.com>
167Feb 25 17:44:51 relay postfix/smtpd[9961]: disconnect from mail-yw1-f54.google.com[209.85.161.54] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
168Feb 25 17:44:53 relay MailScanner[8007]: New Batch: Scanning 1 messages, 2925 bytes
169Feb 25 17:44:53 relay MailScanner[8007]: Virus and Content Scanning: Starting
170Feb 25 17:44:53 relay MailScanner[8007]: Spam Checks: Starting
171Feb 25 17:44:53 relay MailScanner[8007]: MailWatch: Whitelist refresh time reached
172Feb 25 17:44:53 relay MailScanner[8007]: MailWatch: Starting up MailWatch SQL Whitelist
173Feb 25 17:44:53 relay MailScanner[8007]: MailWatch: Read 35 whitelist entries
174Feb 25 17:44:53 relay MailScanner[8007]: MailWatch: Blacklist refresh time reached
175Feb 25 17:44:53 relay MailScanner[8007]: MailWatch: Starting up MailWatch SQL Blacklist
176Feb 25 17:44:53 relay MailScanner[8007]: MailWatch: Read 0 blacklist entries
177Feb 25 17:44:54 relay dccifd[7076]: continue not asking DCC 447 seconds after 5 failures
178Feb 25 17:44:59 relay MailScanner[8007]: Requeue: 447STt2pfKzJfDH to 447SV36L2Kz14q4
179Feb 25 17:44:59 relay postfix/qmqpd[9981]: connect from localhost[127.0.0.1]
180Feb 25 17:44:59 relay postfix/qmqpd[9981]: 447SV36LnFzJfDH: client=localhost[127.0.0.1]
181Feb 25 17:44:59 relay postfix/cleanup[9965]: 447SV36LnFzJfDH: message-id=<CACg3fsa_LXkez1HvmhKPMQkVMRhqDrrf3vp=PX062Ynx3S5C8Q@mail.gmail.com>
182Feb 25 17:44:59 relay opendkim[6573]: 447SV36LnFzJfDH: no signing table match for 'shawniverson@gmail.com'
183Feb 25 17:44:59 relay opendkim[6573]: 447SV36LnFzJfDH: DKIM verification successful
184Feb 25 17:44:59 relay postfix/qmgr[7039]: 447SV36LnFzJfDH: from=<shawniverson@gmail.com>, size=3319, nrcpt=1 (queue active)
185Feb 25 17:44:59 relay postfix/qmqpd[9981]: disconnect from localhost[127.0.0.1]
186Feb 25 17:44:59 relay MailScanner[8007]: Uninfected: Delivered 1 messages
187Feb 25 17:44:59 relay MailScanner[8007]: Deleted 1 messages from processing-database
188Feb 25 17:44:59 relay MailScanner[8007]: MailWatch: Logging message 447STt2pfKzJfDH to SQL
189Feb 25 17:45:05 relay postfix/smtp[9983]: 447SV36LnFzJfDH: to=<info@attcomputer.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=5.2, delays=0.05/0/0.02/5.1, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
190Feb 25 17:45:10 relay postfix/smtpd[9961]: connect from asp6.mailinblack.com[78.153.245.119]
191Feb 25 17:45:10 relay postfix/smtpd[9961]: Anonymous TLS connection established from asp6.mailinblack.com[78.153.245.119]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
192Feb 25 17:45:10 relay sqlgrey: grey: domain awl match: updating 78.153.245(78.153.245.119), postforming.eu
193Feb 25 17:45:10 relay postfix/smtpd[9961]: 447SVG6hMHzJfDj: client=asp6.mailinblack.com[78.153.245.119]
194Feb 25 17:45:10 relay sqlgrey: grey: domain awl match: updating 78.153.245(78.153.245.119), postforming.eu
195Feb 25 17:45:11 relay postfix/cleanup[9965]: 447SVG6hMHzJfDj: message-id=<E4765E226EE7FB44A579CB84007E66B30244EB81DA@SRV-EXCH2010.POST.LOC>
196Feb 25 17:45:11 relay opendkim[6573]: 447SVG6hMHzJfDj: asp6.mailinblack.com [78.153.245.119] not internal
197Feb 25 17:45:11 relay opendkim[6573]: 447SVG6hMHzJfDj: not authenticated
198Feb 25 17:45:11 relay opendkim[6573]: 447SVG6hMHzJfDj: no signature data
199Feb 25 17:45:12 relay postfix/smtpd[10264]: connect from sender29116.picsrv.net[145.255.129.116]
200Feb 25 17:45:12 relay postfix/smtpd[10264]: Anonymous TLS connection established from sender29116.picsrv.net[145.255.129.116]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
201Feb 25 17:45:12 relay sqlgrey: grey: domain awl match: updating 145.255.129.116(145.255.129.116), feedback.ibood.com
202Feb 25 17:45:12 relay postfix/smtpd[10264]: 447SVJ2Y0mzJfDk: client=sender29116.picsrv.net[145.255.129.116]
203Feb 25 17:45:12 relay postfix/cleanup[10267]: 447SVJ2Y0mzJfDk: message-id=<8aa71044cd339ea4ef5509087012faad@feedback.ibood.com>
204Feb 25 17:45:12 relay opendkim[6573]: 447SVJ2Y0mzJfDk: sender29116.picsrv.net [145.255.129.116] not internal
205Feb 25 17:45:12 relay opendkim[6573]: 447SVJ2Y0mzJfDk: not authenticated
206Feb 25 17:45:12 relay opendkim[6573]: 447SVJ2Y0mzJfDk: message has signatures from copernica.com, mailer.ibood.com
207Feb 25 17:45:12 relay opendkim[6573]: 447SVJ2Y0mzJfDk: DKIM verification successful
208Feb 25 17:45:12 relay MSMilter[10263]: MailWatch: Whitelist refresh time reached
209Feb 25 17:45:12 relay MSMilter[10263]: MailWatch: Starting up MailWatch SQL Whitelist
210Feb 25 17:45:12 relay MSMilter[10263]: MailWatch: Read 35 whitelist entries
211Feb 25 17:45:12 relay MSMilter[10263]: MailWatch: Blacklist refresh time reached
212Feb 25 17:45:12 relay MSMilter[10263]: MailWatch: Starting up MailWatch SQL Blacklist
213Feb 25 17:45:12 relay MSMilter[10263]: MailWatch: Read 0 blacklist entries
214Feb 25 17:45:12 relay postfix/cleanup[9965]: 447SVG6hMHzJfDj: milter-discard: END-OF-MESSAGE from asp6.mailinblack.com[78.153.245.119]: milter triggers DISCARD action; from=<nathalie.babillot@postforming.eu> to=<ronald@dks-international.com> proto=ESMTP helo=<asp6.mailinblack.com>
215Feb 25 17:45:12 relay postfix/smtpd[9961]: disconnect from asp6.mailinblack.com[78.153.245.119] ehlo=2 starttls=1 mail=1 rcpt=2 data=1 quit=1 commands=8
216Feb 25 17:45:13 relay MSMilter[10266]: MailWatch: Whitelist refresh time reached
217Feb 25 17:45:13 relay MSMilter[10266]: MailWatch: Starting up MailWatch SQL Whitelist
218Feb 25 17:45:13 relay MSMilter[10266]: MailWatch: Read 35 whitelist entries
219Feb 25 17:45:13 relay MSMilter[10266]: MailWatch: Blacklist refresh time reached
220Feb 25 17:45:13 relay MSMilter[10266]: MailWatch: Starting up MailWatch SQL Blacklist
221Feb 25 17:45:13 relay MSMilter[10266]: MailWatch: Read 0 blacklist entries
222Feb 25 17:45:13 relay postfix/cleanup[10267]: 447SVJ2Y0mzJfDk: milter-discard: END-OF-MESSAGE from sender29116.picsrv.net[145.255.129.116]: milter triggers DISCARD action; from=<pom-babvejw2gshsq4s4@feedback.ibood.com> to=<marco@dks-international.com> proto=ESMTP helo=<sender29116.picsrv.net>
223Feb 25 17:45:13 relay MailScanner[7999]: New Batch: Scanning 1 messages, 235424 bytes
224Feb 25 17:45:13 relay MailScanner[7999]: Virus and Content Scanning: Starting
225Feb 25 17:45:14 relay MailScanner[7999]: HTML Img tag found in message 447SVG6hMHzJfDj from nathalie.babillot@postforming.eu
226Feb 25 17:45:14 relay MailScanner[7999]: Spam Checks: Starting
227Feb 25 17:45:14 relay MailScanner[7999]: Expired 4 records from the SpamAssassin cache
228Feb 25 17:45:14 relay MailScanner[7999]: MailWatch: Whitelist refresh time reached
229Feb 25 17:45:14 relay MailScanner[7999]: MailWatch: Starting up MailWatch SQL Whitelist
230Feb 25 17:45:14 relay MailScanner[7999]: MailWatch: Read 35 whitelist entries
231Feb 25 17:45:14 relay MailScanner[7999]: MailWatch: Blacklist refresh time reached
232Feb 25 17:45:14 relay MailScanner[7999]: MailWatch: Starting up MailWatch SQL Blacklist
233Feb 25 17:45:14 relay MailScanner[7999]: MailWatch: Read 0 blacklist entries
234Feb 25 17:45:14 relay dccifd[7076]: continue not asking DCC 427 seconds after 5 failures
235Feb 25 17:45:15 relay postfix/cleanup[9965]: 447SVM0tvszJfDj: message-id=<447SVM0tvszJfDj@relay.attcomputer.nl>
236Feb 25 17:45:15 relay postfix/bounce[10112]: 447SV36LnFzJfDH: sender non-delivery notification: 447SVM0tvszJfDj
237Feb 25 17:45:15 relay postfix/qmgr[7039]: 447SV36LnFzJfDH: removed
238Feb 25 17:45:15 relay postfix/qmgr[7039]: 447SVM0tvszJfDj: from=<>, size=5618, nrcpt=1 (queue active)
239Feb 25 17:45:15 relay postfix/smtpd[10264]: disconnect from sender29116.picsrv.net[145.255.129.116] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
240Feb 25 17:45:15 relay postfix/smtp[9983]: connect to gmail-smtp-in.l.google.com[2a00:1450:4013:c05::1a]:25: Network is unreachable
241Feb 25 17:45:16 relay postfix/smtp[9983]: 447SVM0tvszJfDj: to=<shawniverson@gmail.com>, relay=gmail-smtp-in.l.google.com[173.194.79.27]:25, delay=1.5, delays=0/0/0.38/1.2, dsn=5.7.1, status=bounced (host gmail-smtp-in.l.google.com[173.194.79.27] said: 550-5.7.1 Unauthenticated email from attcomputer.nl is not accepted due to 550-5.7.1 domain's DMARC policy. Please contact the administrator of 550-5.7.1 attcomputer.nl domain if this was a legitimate mail. Please visit 550-5.7.1 https://support.google.com/mail/answer/2451690 to learn about the 550 5.7.1 DMARC initiative. n21si225856eja.150 - gsmtp (in reply to end of DATA command))
242Feb 25 17:45:16 relay postfix/qmgr[7039]: 447SVM0tvszJfDj: removed
243Feb 25 17:45:17 relay MailScanner[7847]: New Batch: Found 2 messages waiting
244Feb 25 17:45:17 relay MailScanner[7847]: New Batch: Scanning 1 messages, 118721 bytes
245Feb 25 17:45:18 relay MailScanner[7847]: Virus and Content Scanning: Starting
246Feb 25 17:45:18 relay MailScanner[7847]: HTML Img tag found in message 447SVJ2Y0mzJfDk from pom-babvejw2gshsq4s4@feedback.ibood.com
247Feb 25 17:45:18 relay MailScanner[7847]: Spam Checks: Starting
248Feb 25 17:45:18 relay MailScanner[7847]: MailWatch: Whitelist refresh time reached
249Feb 25 17:45:18 relay MailScanner[7847]: MailWatch: Starting up MailWatch SQL Whitelist
250Feb 25 17:45:18 relay MailScanner[7847]: MailWatch: Read 35 whitelist entries
251Feb 25 17:45:18 relay MailScanner[7847]: MailWatch: Blacklist refresh time reached
252Feb 25 17:45:18 relay MailScanner[7847]: MailWatch: Starting up MailWatch SQL Blacklist
253Feb 25 17:45:18 relay MailScanner[7847]: MailWatch: Read 0 blacklist entries
254Feb 25 17:45:19 relay dccifd[7076]: continue not asking DCC 422 seconds after 5 failures
255Feb 25 17:45:24 relay MailScanner[7999]: Requeue: 447SVG6hMHzJfDj to 447SVX1hhmz14q6
256Feb 25 17:45:24 relay postfix/qmqpd[9981]: connect from localhost[127.0.0.1]
257Feb 25 17:45:24 relay postfix/qmqpd[9981]: 447SVX1jyTzJfDH: client=localhost[127.0.0.1]
258Feb 25 17:45:24 relay postfix/cleanup[10267]: 447SVX1jyTzJfDH: message-id=<E4765E226EE7FB44A579CB84007E66B30244EB81DA@SRV-EXCH2010.POST.LOC>
259Feb 25 17:45:24 relay opendkim[6573]: 447SVX1jyTzJfDH: no signing table match for 'nathalie.babillot@postforming.eu'
260Feb 25 17:45:24 relay opendkim[6573]: 447SVX1jyTzJfDH: no signature data
261Feb 25 17:45:24 relay postfix/qmqpd[9981]: disconnect from localhost[127.0.0.1]
262Feb 25 17:45:24 relay postfix/qmgr[7039]: 447SVX1jyTzJfDH: from=<nathalie.babillot@postforming.eu>, size=235683, nrcpt=2 (queue active)
263Feb 25 17:45:24 relay MailScanner[7999]: Uninfected: Delivered 1 messages
264Feb 25 17:45:24 relay MailScanner[7999]: Deleted 1 messages from processing-database
265Feb 25 17:45:24 relay MailScanner[7999]: MailWatch: Logging message 447SVG6hMHzJfDj to SQL
266Feb 25 17:45:24 relay postfix/smtp[9983]: 447SVX1jyTzJfDH: to=<richard@dks-international.com>, relay=92.64.151.192[92.64.151.192]:25, delay=0.41, delays=0.13/0/0.08/0.2, dsn=2.6.0, status=sent (250 2.6.0 <E4765E226EE7FB44A579CB84007E66B30244EB81DA@SRV-EXCH2010.POST.LOC> [InternalId=165167262335001, Hostname=EX-DKS.DKS.lan] Queued mail for delivery)
267Feb 25 17:45:24 relay postfix/smtp[10305]: 447SVX1jyTzJfDH: to=<ronald@dks-international.com>, relay=92.64.151.192[92.64.151.192]:25, delay=0.41, delays=0.13/0.02/0.08/0.18, dsn=2.6.0, status=sent (250 2.6.0 <E4765E226EE7FB44A579CB84007E66B30244EB81DA@SRV-EXCH2010.POST.LOC> [InternalId=165167262335002, Hostname=EX-DKS.DKS.lan] Queued mail for delivery)
268Feb 25 17:45:24 relay postfix/qmgr[7039]: 447SVX1jyTzJfDH: removed
269Feb 25 17:45:30 relay MailScanner[7847]: Content Checks: Detected and have disarmed web bug tags in HTML message in 447SVJ2Y0mzJfDk from pom-babvejw2gshsq4s4@feedback.ibood.com
270Feb 25 17:45:30 relay MailScanner[7847]: Requeue: 447SVJ2Y0mzJfDk to 447SVf4nyPz14q5
271Feb 25 17:45:30 relay postfix/qmqpd[9981]: connect from localhost[127.0.0.1]
272Feb 25 17:45:30 relay postfix/qmqpd[9981]: 447SVf4pgSzJfDH: client=localhost[127.0.0.1]
273Feb 25 17:45:30 relay postfix/cleanup[9965]: 447SVf4pgSzJfDH: message-id=<8aa71044cd339ea4ef5509087012faad@feedback.ibood.com>
274Feb 25 17:45:30 relay opendkim[6573]: 447SVf4pgSzJfDH: no signing table match for 'antwoord@mailer.ibood.com'
275Feb 25 17:45:30 relay opendkim[6573]: 447SVf4pgSzJfDH: message has signatures from copernica.com, mailer.ibood.com
276Feb 25 17:45:30 relay opendkim[6573]: 447SVf4pgSzJfDH: bad signature data
277Feb 25 17:45:30 relay postfix/qmqpd[9981]: disconnect from localhost[127.0.0.1]
278Feb 25 17:45:30 relay postfix/qmgr[7039]: 447SVf4pgSzJfDH: from=<pom-babvejw2gshsq4s4@feedback.ibood.com>, size=118505, nrcpt=1 (queue active)
279Feb 25 17:45:30 relay MailScanner[7847]: Uninfected: Delivered 1 messages
280Feb 25 17:45:30 relay MailScanner[7847]: Deleted 1 messages from processing-database
281Feb 25 17:45:30 relay MailScanner[7847]: MailWatch: Logging message 447SVJ2Y0mzJfDk to SQL
282Feb 25 17:45:31 relay postfix/smtp[9983]: 447SVf4pgSzJfDH: to=<marco@dks-international.com>, relay=92.64.151.192[92.64.151.192]:25, delay=0.38, delays=0.09/0/0.12/0.16, dsn=2.6.0, status=sent (250 2.6.0 <8aa71044cd339ea4ef5509087012faad@feedback.ibood.com> [InternalId=165167262335003, Hostname=EX-DKS.DKS.lan] Queued mail for delivery)
283Feb 25 17:45:31 relay postfix/qmgr[7039]: 447SVf4pgSzJfDH: removed
284Feb 25 17:46:09 relay postfix/smtpd[9961]: connect from mail-eopbgr140044.outbound.protection.outlook.com[40.107.14.44]
285Feb 25 17:46:10 relay postfix/smtpd[9961]: Anonymous TLS connection established from mail-eopbgr140044.outbound.protection.outlook.com[40.107.14.44]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
286Feb 25 17:46:10 relay sqlgrey: grey: new: 40.107.14(40.107.14.44), info@diolaageinde.nl -> martha@nicheconsultants.nl
287Feb 25 17:46:10 relay postfix/smtpd[9961]: NOQUEUE: reject: RCPT from mail-eopbgr140044.outbound.protection.outlook.com[40.107.14.44]: 451 4.7.1 <Martha@nicheconsultants.nl>: Recipient address rejected: Greylisted for 5 minutes; from=<info@diolaageinde.nl> to=<Martha@nicheconsultants.nl> proto=ESMTP helo=<EUR01-VE1-obe.outbound.protection.outlook.com>
288Feb 25 17:46:10 relay postfix/smtpd[9961]: disconnect from mail-eopbgr140044.outbound.protection.outlook.com[40.107.14.44] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
289Feb 25 17:47:51 relay postfix/smtpd[10703]: warning: hostname 176-196-198-154.goodline.info does not resolve to address 176.196.198.154: Name or service not known
290Feb 25 17:47:51 relay postfix/smtpd[10703]: connect from unknown[176.196.198.154]
291Feb 25 17:47:52 relay postfix/smtpd[10703]: NOQUEUE: reject: RCPT from unknown[176.196.198.154]: 554 5.7.1 Service unavailable; Client host [176.196.198.154] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/176.196.198.154 / https://www.spamhaus.org/sbl/query/SBLCSS; from=<DonThompson@goodline.info> to=<marco@dks-international.com> proto=ESMTP helo=<176-196-198-154.goodline.info>
292Feb 25 17:47:52 relay postfix/smtpd[10703]: lost connection after RCPT from unknown[176.196.198.154]
293Feb 25 17:47:52 relay postfix/smtpd[10703]: disconnect from unknown[176.196.198.154] ehlo=1 mail=1 rcpt=0/1 commands=2/3
294Feb 25 17:49:42 relay postfix/smtpd[11002]: connect from mail54.atl231.mcsv.net[198.2.141.54]
295Feb 25 17:49:43 relay postfix/smtpd[11002]: Anonymous TLS connection established from mail54.atl231.mcsv.net[198.2.141.54]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
296Feb 25 17:49:43 relay sqlgrey: grey: reconnect ok: 198.2.141(198.2.141.54), bounce-mc.us3_25678676.3330581-a.goes=agogroep.nl@mail54.atl231.mcsv.net -> a.goes@agogroep.nl (00:15:08)
297Feb 25 17:49:43 relay sqlgrey: grey: from awl: 198.2.141, bounce-mc.us3_#.#-RCPT@mail54.atl231.mcsv.net added
298Feb 25 17:49:43 relay postfix/smtpd[11002]: 447SbW4fyfzJfDH: client=mail54.atl231.mcsv.net[198.2.141.54]
299Feb 25 17:49:43 relay postfix/cleanup[11006]: 447SbW4fyfzJfDH: message-id=<19fcc56457de9e6926c2ced8f.c333bef094.20190225163336.bd4e0ee51d.c462b7fb@mail54.atl231.mcsv.net>
300Feb 25 17:49:44 relay opendkim[6573]: 447SbW4fyfzJfDH: mail54.atl231.mcsv.net [198.2.141.54] not internal
301Feb 25 17:49:44 relay opendkim[6573]: 447SbW4fyfzJfDH: not authenticated
302Feb 25 17:49:44 relay opendkim[6573]: 447SbW4fyfzJfDH: DKIM verification successful
303Feb 25 17:49:45 relay MSMilter[11004]: MailWatch: Whitelist refresh time reached
304Feb 25 17:49:45 relay MSMilter[11004]: MailWatch: Starting up MailWatch SQL Whitelist
305Feb 25 17:49:45 relay MSMilter[11004]: MailWatch: Read 35 whitelist entries
306Feb 25 17:49:45 relay MSMilter[11004]: MailWatch: Blacklist refresh time reached
307Feb 25 17:49:45 relay MSMilter[11004]: MailWatch: Starting up MailWatch SQL Blacklist
308Feb 25 17:49:45 relay MSMilter[11004]: MailWatch: Read 0 blacklist entries
309Feb 25 17:49:45 relay postfix/cleanup[11006]: 447SbW4fyfzJfDH: milter-discard: END-OF-MESSAGE from mail54.atl231.mcsv.net[198.2.141.54]: milter triggers DISCARD action; from=<bounce-mc.us3_25678676.3330581-a.goes=agogroep.nl@mail54.atl231.mcsv.net> to=<a.goes@agogroep.nl> proto=ESMTP helo=<mail54.atl231.mcsv.net>
310Feb 25 17:49:45 relay postfix/smtpd[11002]: disconnect from mail54.atl231.mcsv.net[198.2.141.54] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
311Feb 25 17:49:47 relay MailScanner[8007]: New Batch: Scanning 1 messages, 111807 bytes
312Feb 25 17:49:48 relay MailScanner[8007]: Virus and Content Scanning: Starting
313Feb 25 17:49:48 relay MailScanner[8007]: HTML Img tag found in message 447SbW4fyfzJfDH from bounce-mc.us3_25678676.3330581-a.goes=agogroep.nl@mail54.atl231.mcsv.net
314Feb 25 17:49:48 relay MailScanner[8007]: Spam Checks: Starting
315Feb 25 17:49:48 relay dccifd[7076]: continue not asking DCC 153 seconds after 5 failures
316Feb 25 17:49:57 relay MailScanner[8007]: Content Checks: Detected and have disarmed web bug tags in HTML message in 447SbW4fyfzJfDH from bounce-mc.us3_25678676.3330581-a.goes=agogroep.nl@mail54.atl231.mcsv.net
317Feb 25 17:49:57 relay MailScanner[8007]: Requeue: 447SbW4fyfzJfDH to 447Sbn6Jrzz14q7
318Feb 25 17:49:57 relay postfix/qmqpd[11037]: connect from localhost[127.0.0.1]
319Feb 25 17:49:57 relay postfix/qmqpd[11037]: 447Sbn6N1szJfDH: client=localhost[127.0.0.1]
320Feb 25 17:49:57 relay postfix/cleanup[11006]: 447Sbn6N1szJfDH: message-id=<19fcc56457de9e6926c2ced8f.c333bef094.20190225163336.bd4e0ee51d.c462b7fb@mail54.atl231.mcsv.net>
321Feb 25 17:49:57 relay opendkim[6573]: 447Sbn6N1szJfDH: no signing table match for 'nieuwsbrief@zandri.nl'
322Feb 25 17:49:57 relay opendkim[6573]: 447Sbn6N1szJfDH: bad signature data
323Feb 25 17:49:57 relay postfix/qmgr[7039]: 447Sbn6N1szJfDH: from=<bounce-mc.us3_25678676.3330581-a.goes=agogroep.nl@mail54.atl231.mcsv.net>, size=109034, nrcpt=1 (queue active)
324Feb 25 17:49:57 relay postfix/qmqpd[11037]: disconnect from localhost[127.0.0.1]
325Feb 25 17:49:57 relay MailScanner[8007]: Uninfected: Delivered 1 messages
326Feb 25 17:49:57 relay MailScanner[8007]: Deleted 1 messages from processing-database
327Feb 25 17:49:57 relay MailScanner[8007]: MailWatch: Logging message 447SbW4fyfzJfDH to SQL
328Feb 25 17:50:03 relay postfix/smtp[11039]: 447Sbn6N1szJfDH: to=<a.goes@agogroep.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=5.1, delays=0.05/0.02/0.01/5, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
329Feb 25 17:50:13 relay postfix/cleanup[11006]: 447Sc500lYzJfDj: message-id=<447Sc500lYzJfDj@relay.attcomputer.nl>
330Feb 25 17:50:13 relay postfix/qmgr[7039]: 447Sc500lYzJfDj: from=<>, size=5466, nrcpt=1 (queue active)
331Feb 25 17:50:13 relay postfix/bounce[11179]: 447Sbn6N1szJfDH: sender non-delivery notification: 447Sc500lYzJfDj
332Feb 25 17:50:13 relay postfix/qmgr[7039]: 447Sbn6N1szJfDH: removed
333Feb 25 17:50:14 relay postfix/smtp[11039]: 447Sc500lYzJfDj: to=<bounce-mc.us3_25678676.3330581-a.goes=agogroep.nl@mail54.atl231.mcsv.net>, relay=mail.mail54.atl231.mcsv.net[198.2.141.54]:25, delay=1.1, delays=0.01/0/0.83/0.3, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 447Sc56PDsz2K2Vs3)
334Feb 25 17:50:14 relay postfix/qmgr[7039]: 447Sc500lYzJfDj: removed
335Feb 25 17:50:48 relay postfix/anvil[8242]: statistics: max connection rate 1/60s for (smtp:54.39.146.178) at Feb 25 17:41:51
336Feb 25 17:50:48 relay postfix/anvil[8242]: statistics: max connection count 1 for (smtp:54.39.146.178) at Feb 25 17:41:51
337Feb 25 17:50:48 relay postfix/anvil[8242]: statistics: max cache size 3 at Feb 25 17:45:12
338Feb 25 17:51:44 relay postfix/smtpd[11349]: connect from mail-eopbgr40085.outbound.protection.outlook.com[40.107.4.85]
339Feb 25 17:51:44 relay postfix/smtpd[11349]: Anonymous TLS connection established from mail-eopbgr40085.outbound.protection.outlook.com[40.107.4.85]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
340Feb 25 17:51:44 relay sqlgrey: grey: from awl match: updating 40.107.4(40.107.4.85), shaffner@satys.com(shaffner@satys.com)
341Feb 25 17:51:44 relay postfix/smtpd[11349]: 447Sdr2W25zJfDH: client=mail-eopbgr40085.outbound.protection.outlook.com[40.107.4.85]
342Feb 25 17:51:44 relay sqlgrey: grey: from awl match: updating 40.107.4(40.107.4.85), shaffner@satys.com(shaffner@satys.com)
343Feb 25 17:51:44 relay sqlgrey: grey: from awl match: updating 40.107.4(40.107.4.85), shaffner@satys.com(shaffner@satys.com)
344Feb 25 17:51:44 relay postfix/cleanup[11006]: 447Sdr2W25zJfDH: message-id=<VI1PR02MB5376320A9DB0FD424AF34049DA7A0@VI1PR02MB5376.eurprd02.prod.outlook.com>
345Feb 25 17:51:44 relay opendkim[6573]: 447Sdr2W25zJfDH: mail-eopbgr40085.outbound.protection.outlook.com [40.107.4.85] not internal
346Feb 25 17:51:44 relay opendkim[6573]: 447Sdr2W25zJfDH: not authenticated
347Feb 25 17:51:44 relay opendkim[6573]: 447Sdr2W25zJfDH: failed to parse authentication-results: header field
348Feb 25 17:51:44 relay opendkim[6573]: 447Sdr2W25zJfDH: DKIM verification successful
349Feb 25 17:51:46 relay MSMilter[11351]: MailWatch: Whitelist refresh time reached
350Feb 25 17:51:46 relay MSMilter[11351]: MailWatch: Starting up MailWatch SQL Whitelist
351Feb 25 17:51:46 relay MSMilter[11351]: MailWatch: Read 35 whitelist entries
352Feb 25 17:51:46 relay MSMilter[11351]: MailWatch: Blacklist refresh time reached
353Feb 25 17:51:46 relay MSMilter[11351]: MailWatch: Starting up MailWatch SQL Blacklist
354Feb 25 17:51:46 relay MSMilter[11351]: MailWatch: Read 0 blacklist entries
355Feb 25 17:51:46 relay postfix/cleanup[11006]: 447Sdr2W25zJfDH: milter-discard: END-OF-MESSAGE from mail-eopbgr40085.outbound.protection.outlook.com[40.107.4.85]: milter triggers DISCARD action; from=<shaffner@satys.com> to=<Richard@dks-international.com> proto=ESMTP helo=<EUR03-DB5-obe.outbound.protection.outlook.com>
356Feb 25 17:51:46 relay postfix/smtpd[11349]: disconnect from mail-eopbgr40085.outbound.protection.outlook.com[40.107.4.85] ehlo=2 starttls=1 mail=1 rcpt=3 data=1 quit=1 commands=9
357Feb 25 17:51:48 relay MailScanner[7999]: New Batch: Scanning 1 messages, 138109 bytes
358Feb 25 17:51:48 relay MailScanner[7999]: Virus and Content Scanning: Starting
359Feb 25 17:51:48 relay MailScanner[7999]: HTML Img tag found in message 447Sdr2W25zJfDH from shaffner@satys.com
360Feb 25 17:51:48 relay MailScanner[7999]: Spam Checks: Starting
361Feb 25 17:51:50 relay dccifd[7076]: continue not asking DCC 31 seconds after 5 failures
362Feb 25 17:51:59 relay MailScanner[7999]: Requeue: 447Sdr2W25zJfDH to 447Sf71X22z14q8
363Feb 25 17:51:59 relay postfix/qmqpd[11387]: connect from localhost[127.0.0.1]
364Feb 25 17:51:59 relay postfix/qmqpd[11387]: 447Sf71cqWzJfDH: client=localhost[127.0.0.1]
365Feb 25 17:51:59 relay postfix/cleanup[11006]: 447Sf71cqWzJfDH: message-id=<VI1PR02MB5376320A9DB0FD424AF34049DA7A0@VI1PR02MB5376.eurprd02.prod.outlook.com>
366Feb 25 17:51:59 relay opendkim[6573]: 447Sf71cqWzJfDH: no signing table match for 'shaffner@satys.com'
367Feb 25 17:51:59 relay opendkim[6573]: 447Sf71cqWzJfDH: failed to parse authentication-results: header field
368Feb 25 17:51:59 relay opendkim[6573]: 447Sf71cqWzJfDH: DKIM verification successful
369Feb 25 17:51:59 relay postfix/qmqpd[11387]: disconnect from localhost[127.0.0.1]
370Feb 25 17:51:59 relay postfix/qmgr[7039]: 447Sf71cqWzJfDH: from=<shaffner@satys.com>, size=138501, nrcpt=3 (queue active)
371Feb 25 17:51:59 relay MailScanner[7999]: Uninfected: Delivered 1 messages
372Feb 25 17:51:59 relay MailScanner[7999]: Deleted 1 messages from processing-database
373Feb 25 17:51:59 relay MailScanner[7999]: MailWatch: Logging message 447Sdr2W25zJfDH to SQL
374Feb 25 17:51:59 relay postfix/smtp[11391]: 447Sf71cqWzJfDH: to=<Ronald@dks-international.com>, relay=92.64.151.192[92.64.151.192]:25, delay=0.43, delays=0.1/0.04/0.12/0.16, dsn=2.6.0, status=sent (250 2.6.0 <VI1PR02MB5376320A9DB0FD424AF34049DA7A0@VI1PR02MB5376.eurprd02.prod.outlook.com> [InternalId=165167262335007, Hostname=EX-DKS.DKS.lan] Queued mail for delivery)
375Feb 25 17:51:59 relay postfix/smtp[11390]: 447Sf71cqWzJfDH: to=<Richard@dks-international.com>, relay=92.64.151.192[92.64.151.192]:25, delay=0.43, delays=0.1/0.03/0.13/0.16, dsn=2.6.0, status=sent (250 2.6.0 <VI1PR02MB5376320A9DB0FD424AF34049DA7A0@VI1PR02MB5376.eurprd02.prod.outlook.com> [InternalId=165167262335008, Hostname=EX-DKS.DKS.lan] Queued mail for delivery)
376Feb 25 17:51:59 relay postfix/smtp[11389]: 447Sf71cqWzJfDH: to=<Marco@dks-international.com>, relay=92.64.151.192[92.64.151.192]:25, delay=0.43, delays=0.1/0.02/0.12/0.18, dsn=2.6.0, status=sent (250 2.6.0 <VI1PR02MB5376320A9DB0FD424AF34049DA7A0@VI1PR02MB5376.eurprd02.prod.outlook.com> [InternalId=165167262335006, Hostname=EX-DKS.DKS.lan] Queued mail for delivery)
377Feb 25 17:51:59 relay postfix/qmgr[7039]: 447Sf71cqWzJfDH: removed
378Feb 25 17:52:12 relay postfix/smtpd[11349]: warning: hostname dedic1039.hidehost.net does not resolve to address 178.159.37.81: Name or service not known
379Feb 25 17:52:12 relay postfix/smtpd[11349]: connect from unknown[178.159.37.81]
380Feb 25 17:52:12 relay postfix/smtpd[11349]: warning: non-SMTP command from unknown[178.159.37.81]: CONNECT 45.33.54.195:80 HTTP/1.0
381Feb 25 17:52:12 relay postfix/smtpd[11349]: disconnect from unknown[178.159.37.81] unknown=0/1 commands=0/1
382Feb 25 17:52:13 relay postfix/smtpd[11349]: warning: hostname dedic1039.hidehost.net does not resolve to address 178.159.37.81: Name or service not known
383Feb 25 17:52:13 relay postfix/smtpd[11349]: connect from unknown[178.159.37.81]
384Feb 25 17:52:13 relay postfix/smtpd[11349]: lost connection after CONNECT from unknown[178.159.37.81]
385Feb 25 17:52:13 relay postfix/smtpd[11349]: disconnect from unknown[178.159.37.81] commands=0/0
386Feb 25 17:52:13 relay postfix/smtpd[11349]: warning: hostname dedic1039.hidehost.net does not resolve to address 178.159.37.81: Name or service not known
387Feb 25 17:52:13 relay postfix/smtpd[11349]: connect from unknown[178.159.37.81]
388Feb 25 17:52:13 relay postfix/smtpd[11349]: lost connection after CONNECT from unknown[178.159.37.81]
389Feb 25 17:52:13 relay postfix/smtpd[11349]: disconnect from unknown[178.159.37.81] commands=0/0
390Feb 25 17:52:13 relay postfix/smtpd[11349]: warning: hostname dedic1039.hidehost.net does not resolve to address 178.159.37.81: Name or service not known
391Feb 25 17:52:13 relay postfix/smtpd[11349]: connect from unknown[178.159.37.81]
392Feb 25 17:52:13 relay postfix/smtpd[11349]: warning: non-SMTP command from unknown[178.159.37.81]: GET http://proxyjudge.us/judge.php HTTP/1.0
393Feb 25 17:52:13 relay postfix/smtpd[11349]: disconnect from unknown[178.159.37.81] unknown=0/1 commands=0/1
394Feb 25 17:54:24 relay postfix/smtpd[11837]: connect from unknown[103.203.94.198]
395Feb 25 17:54:26 relay postfix/smtpd[11837]: NOQUEUE: reject: RCPT from unknown[103.203.94.198]: 554 5.7.1 Service unavailable; Client host [103.203.94.198] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.203.94.198 / https://www.spamhaus.org/sbl/query/SBLCSS; from=<DennisWilson@barbwired.fi> to=<smd78aeaaaaa@remedialeducation.nl> proto=ESMTP helo=<barbwired.fi>
396Feb 25 17:54:26 relay postfix/smtpd[11837]: lost connection after RCPT from unknown[103.203.94.198]
397Feb 25 17:54:26 relay postfix/smtpd[11837]: disconnect from unknown[103.203.94.198] ehlo=1 mail=1 rcpt=0/1 commands=2/3
398Feb 25 17:57:27 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
399Feb 25 17:57:27 relay postfix/smtpd[12269]: warning: non-SMTP command from ns317106.ip-37-187-133.eu[37.187.133.37]: CONNECT 213.180.204.62:443 HTTP/1.0
400Feb 25 17:57:27 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] unknown=0/1 commands=0/1
401Feb 25 17:57:27 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
402Feb 25 17:57:27 relay postfix/smtpd[12269]: lost connection after CONNECT from ns317106.ip-37-187-133.eu[37.187.133.37]
403Feb 25 17:57:27 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] commands=0/0
404Feb 25 17:57:27 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
405Feb 25 17:57:27 relay postfix/smtpd[12269]: lost connection after CONNECT from ns317106.ip-37-187-133.eu[37.187.133.37]
406Feb 25 17:57:27 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] commands=0/0
407Feb 25 17:57:27 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
408Feb 25 17:57:27 relay postfix/smtpd[12269]: warning: non-SMTP command from ns317106.ip-37-187-133.eu[37.187.133.37]: GET https://www.yandex.com/search/?text=103.248.30.39%3A8080 HTTP/1.0
409Feb 25 17:57:27 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] unknown=0/1 commands=0/1
410Feb 25 17:57:27 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
411Feb 25 17:57:27 relay postfix/smtpd[12269]: warning: non-SMTP command from ns317106.ip-37-187-133.eu[37.187.133.37]: CONNECT 212.82.100.137:80 HTTP/1.0
412Feb 25 17:57:27 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] unknown=0/1 commands=0/1
413Feb 25 17:57:27 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
414Feb 25 17:57:27 relay postfix/smtpd[12269]: lost connection after CONNECT from ns317106.ip-37-187-133.eu[37.187.133.37]
415Feb 25 17:57:27 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] commands=0/0
416Feb 25 17:57:27 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
417Feb 25 17:57:27 relay postfix/smtpd[12269]: warning: non-SMTP command from ns317106.ip-37-187-133.eu[37.187.133.37]: GET http://search.yahoo.com/search?p=103.248.30.39%3A8080 HTTP/1.0
418Feb 25 17:57:27 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] unknown=0/1 commands=0/1
419Feb 25 17:57:27 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
420Feb 25 17:57:27 relay postfix/smtpd[12269]: warning: non-SMTP command from ns317106.ip-37-187-133.eu[37.187.133.37]: CONNECT 204.79.197.200:443 HTTP/1.0
421Feb 25 17:57:27 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] unknown=0/1 commands=0/1
422Feb 25 17:57:27 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
423Feb 25 17:57:27 relay postfix/smtpd[12269]: lost connection after CONNECT from ns317106.ip-37-187-133.eu[37.187.133.37]
424Feb 25 17:57:27 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] commands=0/0
425Feb 25 17:57:27 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
426Feb 25 17:57:27 relay postfix/smtpd[12269]: warning: non-SMTP command from ns317106.ip-37-187-133.eu[37.187.133.37]: GET https://www.bing.com/search?q=103.248.30.39%3A8080 HTTP/1.0
427Feb 25 17:57:27 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] unknown=0/1 commands=0/1
428Feb 25 17:57:27 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
429Feb 25 17:57:28 relay postfix/smtpd[12269]: warning: non-SMTP command from ns317106.ip-37-187-133.eu[37.187.133.37]: CONNECT 206.214.211.166:80 HTTP/1.0
430Feb 25 17:57:28 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] unknown=0/1 commands=0/1
431Feb 25 17:57:28 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
432Feb 25 17:57:28 relay postfix/smtpd[12269]: lost connection after CONNECT from ns317106.ip-37-187-133.eu[37.187.133.37]
433Feb 25 17:57:28 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] commands=0/0
434Feb 25 17:57:28 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
435Feb 25 17:57:28 relay postfix/smtpd[12269]: warning: non-SMTP command from ns317106.ip-37-187-133.eu[37.187.133.37]: GET http://www.sbjudge2.com/ip4.php HTTP/1.0
436Feb 25 17:57:28 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] unknown=0/1 commands=0/1
437Feb 25 17:57:28 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
438Feb 25 17:57:28 relay postfix/smtpd[12269]: warning: non-SMTP command from ns317106.ip-37-187-133.eu[37.187.133.37]: CONNECT 45.33.54.195:80 HTTP/1.0
439Feb 25 17:57:28 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] unknown=0/1 commands=0/1
440Feb 25 17:57:28 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
441Feb 25 17:57:28 relay postfix/smtpd[12269]: lost connection after CONNECT from ns317106.ip-37-187-133.eu[37.187.133.37]
442Feb 25 17:57:28 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] commands=0/0
443Feb 25 17:57:28 relay postfix/smtpd[12269]: connect from ns317106.ip-37-187-133.eu[37.187.133.37]
444Feb 25 17:57:28 relay postfix/smtpd[12269]: warning: non-SMTP command from ns317106.ip-37-187-133.eu[37.187.133.37]: GET http://proxyjudge.us/judge.php HTTP/1.0
445Feb 25 17:57:28 relay postfix/smtpd[12269]: disconnect from ns317106.ip-37-187-133.eu[37.187.133.37] unknown=0/1 commands=0/1
446Feb 25 17:58:49 relay postfix/smtpd[12269]: connect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]
447Feb 25 17:58:49 relay postfix/smtpd[12429]: connect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]
448Feb 25 17:58:49 relay sqlgrey: grey: new: 18.205.66.21(18.205.66.21), name@example.org -> ronald@dks-international.com
449Feb 25 17:58:49 relay postfix/smtpd[12269]: NOQUEUE: reject: RCPT from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]: 451 4.7.1 <Ronald@dks-international.com>: Recipient address rejected: Greylisted for 5 minutes; from=<name@example.org> to=<Ronald@dks-international.com> proto=ESMTP helo=<mail.example.org>
450Feb 25 17:58:49 relay sqlgrey: grey: new: 18.205.66.21(18.205.66.21), name@example.org -> marco@dks-international.com
451Feb 25 17:58:49 relay postfix/smtpd[12429]: NOQUEUE: reject: RCPT from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]: 451 4.7.1 <Marco@dks-international.com>: Recipient address rejected: Greylisted for 5 minutes; from=<name@example.org> to=<Marco@dks-international.com> proto=ESMTP helo=<mail.example.org>
452Feb 25 17:58:49 relay postfix/smtpd[12269]: disconnect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
453Feb 25 17:58:49 relay postfix/smtpd[12429]: disconnect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
454Feb 25 17:58:50 relay postfix/smtpd[12269]: connect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]
455Feb 25 17:58:50 relay sqlgrey: grey: new: 18.205.66.21(18.205.66.21), name@example.org -> richard@dks-international.com
456Feb 25 17:58:50 relay postfix/smtpd[12269]: NOQUEUE: reject: RCPT from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]: 451 4.7.1 <Richard@dks-international.com>: Recipient address rejected: Greylisted for 5 minutes; from=<name@example.org> to=<Richard@dks-international.com> proto=ESMTP helo=<mail.example.org>
457Feb 25 17:58:50 relay postfix/smtpd[12269]: disconnect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
458Feb 25 17:58:59 relay postfix/smtpd[12429]: connect from unknown[185.199.224.5]
459Feb 25 17:58:59 relay postfix/smtpd[12429]: warning: non-SMTP command from unknown[185.199.224.5]: CONNECT 45.33.54.195:80 HTTP/1.0
460Feb 25 17:58:59 relay postfix/smtpd[12429]: disconnect from unknown[185.199.224.5] unknown=0/1 commands=0/1
461Feb 25 17:59:03 relay postfix/smtpd[12269]: connect from unknown[23.229.64.254]
462Feb 25 17:59:03 relay postfix/smtpd[12269]: warning: non-SMTP command from unknown[23.229.64.254]: CONNECT 45.33.54.195:80 HTTP/1.0
463Feb 25 17:59:03 relay postfix/smtpd[12269]: disconnect from unknown[23.229.64.254] unknown=0/1 commands=0/1
464Feb 25 17:59:03 relay postfix/smtpd[12429]: connect from unknown[23.229.64.254]
465Feb 25 17:59:04 relay postfix/smtpd[12429]: lost connection after CONNECT from unknown[23.229.64.254]
466Feb 25 17:59:04 relay postfix/smtpd[12429]: disconnect from unknown[23.229.64.254] commands=0/0
467Feb 25 17:59:04 relay postfix/smtpd[12269]: connect from unknown[23.229.64.254]
468Feb 25 17:59:04 relay postfix/smtpd[12269]: lost connection after CONNECT from unknown[23.229.64.254]
469Feb 25 17:59:04 relay postfix/smtpd[12269]: disconnect from unknown[23.229.64.254] commands=0/0
470Feb 25 17:59:04 relay postfix/smtpd[12429]: connect from unknown[23.229.64.254]
471Feb 25 17:59:04 relay postfix/smtpd[12429]: warning: non-SMTP command from unknown[23.229.64.254]: GET http://proxyjudge.us/judge.php HTTP/1.0
472Feb 25 17:59:04 relay postfix/smtpd[12429]: disconnect from unknown[23.229.64.254] unknown=0/1 commands=0/1
473Feb 25 17:59:04 relay postfix/smtpd[12269]: connect from unknown[23.229.64.254]
474Feb 25 17:59:04 relay postfix/smtpd[12269]: warning: non-SMTP command from unknown[23.229.64.254]: CONNECT 173.243.115.131:80 HTTP/1.0
475Feb 25 17:59:04 relay postfix/smtpd[12269]: disconnect from unknown[23.229.64.254] unknown=0/1 commands=0/1
476Feb 25 17:59:04 relay postfix/smtpd[12429]: connect from unknown[23.229.64.254]
477Feb 25 17:59:05 relay postfix/smtpd[12429]: lost connection after CONNECT from unknown[23.229.64.254]
478Feb 25 17:59:05 relay postfix/smtpd[12429]: disconnect from unknown[23.229.64.254] commands=0/0
479Feb 25 17:59:05 relay postfix/smtpd[12269]: connect from unknown[23.229.64.254]
480Feb 25 17:59:05 relay postfix/smtpd[12269]: warning: non-SMTP command from unknown[23.229.64.254]: GET http://www.sbjudge4.com/ip4.php HTTP/1.0
481Feb 25 17:59:05 relay postfix/smtpd[12269]: disconnect from unknown[23.229.64.254] unknown=0/1 commands=0/1
482Feb 25 18:00:08 relay postfix/smtpd[12429]: warning: hostname vs8.blueskies.nl does not resolve to address 84.22.110.136
483Feb 25 18:00:08 relay postfix/smtpd[12429]: connect from unknown[84.22.110.136]
484Feb 25 18:00:09 relay sqlgrey: grey: from awl match: updating 84.22.110.136(84.22.110.136), noreply@amtgarageforum.nl(noreply@amtgarageforum.nl)
485Feb 25 18:00:09 relay postfix/smtpd[12429]: 447SqY3XDhzJfDH: client=unknown[84.22.110.136]
486Feb 25 18:00:09 relay postfix/cleanup[12725]: 447SqY3XDhzJfDH: message-id=<>
487Feb 25 18:00:09 relay opendkim[6573]: 447SqY3XDhzJfDH: [84.22.110.136] [84.22.110.136] not internal
488Feb 25 18:00:09 relay opendkim[6573]: 447SqY3XDhzJfDH: not authenticated
489Feb 25 18:00:09 relay opendkim[6573]: 447SqY3XDhzJfDH: no signature data
490Feb 25 18:00:09 relay MSMilter[12724]: MailWatch: Whitelist refresh time reached
491Feb 25 18:00:09 relay MSMilter[12724]: MailWatch: Starting up MailWatch SQL Whitelist
492Feb 25 18:00:09 relay MSMilter[12724]: MailWatch: Read 35 whitelist entries
493Feb 25 18:00:09 relay MSMilter[12724]: MailWatch: Blacklist refresh time reached
494Feb 25 18:00:09 relay MSMilter[12724]: MailWatch: Starting up MailWatch SQL Blacklist
495Feb 25 18:00:09 relay MSMilter[12724]: MailWatch: Read 0 blacklist entries
496Feb 25 18:00:10 relay postfix/cleanup[12725]: 447SqY3XDhzJfDH: milter-discard: END-OF-MESSAGE from unknown[84.22.110.136]: milter triggers DISCARD action; from=<noreply@amtgarageforum.nl> to=<info@autobedrijfadejong.nl> proto=ESMTP helo=<vs8.blueskies.nl>
497Feb 25 18:00:10 relay postfix/smtpd[12429]: disconnect from unknown[84.22.110.136] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
498Feb 25 18:00:11 relay MailScanner[7999]: New Batch: Scanning 1 messages, 6330 bytes
499Feb 25 18:00:11 relay MailScanner[7999]: Virus and Content Scanning: Starting
500Feb 25 18:00:11 relay MailScanner[7999]: HTML Img tag found in message 447SqY3XDhzJfDH from noreply@amtgarageforum.nl
501Feb 25 18:00:11 relay MailScanner[7999]: Spam Checks: Starting
502Feb 25 18:00:11 relay MailScanner[7999]: Expired 3 records from the SpamAssassin cache
503Feb 25 18:00:15 relay dccifd[7076]: no working DCC servers dcc1.dcc-servers.net dcc2.dcc-servers.net dcc3.dcc-servers.net ... at 137.208.8.63 74.92.232.243
504Feb 25 18:00:17 relay dccifd[7076]: no working DCC servers dcc1.dcc-servers.net dcc2.dcc-servers.net dcc3.dcc-servers.net ... at 137.208.8.63 74.92.232.243
505Feb 25 18:00:25 relay MailScanner[7999]: Requeue: 447SqY3XDhzJfDH to 447Sqs0Grlz14q9
506Feb 25 18:00:25 relay postfix/qmqpd[12741]: connect from localhost[127.0.0.1]
507Feb 25 18:00:25 relay postfix/qmqpd[12741]: 447Sqs0LDkzJfDH: client=localhost[127.0.0.1]
508Feb 25 18:00:25 relay postfix/cleanup[12725]: 447Sqs0LDkzJfDH: message-id=<447Sqs0LDkzJfDH@relay.attcomputer.nl>
509Feb 25 18:00:25 relay opendkim[6573]: 447Sqs0LDkzJfDH: no signing table match for 'noreply@amtgarageforum.nl'
510Feb 25 18:00:25 relay opendkim[6573]: 447Sqs0LDkzJfDH: no signature data
511Feb 25 18:00:25 relay postfix/qmqpd[12741]: disconnect from localhost[127.0.0.1]
512Feb 25 18:00:25 relay MailScanner[7999]: Uninfected: Delivered 1 messages
513Feb 25 18:00:25 relay postfix/qmgr[7039]: 447Sqs0LDkzJfDH: from=<noreply@amtgarageforum.nl>, size=6742, nrcpt=1 (queue active)
514Feb 25 18:00:25 relay MailScanner[7999]: Deleted 1 messages from processing-database
515Feb 25 18:00:25 relay MailScanner[7999]: MailWatch: Logging message 447SqY3XDhzJfDH to SQL
516Feb 25 18:00:25 relay postfix/smtp[12743]: 447Sqs0LDkzJfDH: to=<info@autobedrijfadejong.nl>, relay=31.177.38.148[31.177.38.148]:25, delay=0.41, delays=0.05/0.01/0.17/0.18, dsn=2.6.0, status=sent (250 2.6.0 <447Sqs0LDkzJfDH@relay.attcomputer.nl> [InternalId=104281805946881, Hostname=ex.dejong.lan] Queued mail for delivery)
517Feb 25 18:00:25 relay postfix/qmgr[7039]: 447Sqs0LDkzJfDH: removed
518Feb 25 18:00:47 relay postfix/smtpd[12429]: connect from ahlp1640.aholddelhaize.com[141.93.18.92]
519Feb 25 18:00:47 relay postfix/smtpd[12429]: Anonymous TLS connection established from ahlp1640.aholddelhaize.com[141.93.18.92]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
520Feb 25 18:00:47 relay sqlgrey: grey: from awl match: updating 141.93.18(141.93.18.92), noreply@ah.nl(noreply@ah.nl)
521Feb 25 18:00:47 relay postfix/smtpd[12429]: 447SrH5rH0zJfDH: client=ahlp1640.aholddelhaize.com[141.93.18.92]
522Feb 25 18:00:47 relay postfix/cleanup[12725]: 447SrH5rH0zJfDH: message-id=<20190225170047.36D2F60053@ahlp1640.aholddelhaize.com>
523Feb 25 18:00:47 relay opendkim[6573]: 447SrH5rH0zJfDH: ahlp1640.aholddelhaize.com [141.93.18.92] not internal
524Feb 25 18:00:47 relay opendkim[6573]: 447SrH5rH0zJfDH: not authenticated
525Feb 25 18:00:48 relay opendkim[6573]: 447SrH5rH0zJfDH: no signature data
526Feb 25 18:00:48 relay MSMilter[12745]: MailWatch: Whitelist refresh time reached
527Feb 25 18:00:48 relay MSMilter[12745]: MailWatch: Starting up MailWatch SQL Whitelist
528Feb 25 18:00:48 relay MSMilter[12745]: MailWatch: Read 35 whitelist entries
529Feb 25 18:00:48 relay MSMilter[12745]: MailWatch: Blacklist refresh time reached
530Feb 25 18:00:48 relay MSMilter[12745]: MailWatch: Starting up MailWatch SQL Blacklist
531Feb 25 18:00:48 relay MSMilter[12745]: MailWatch: Read 0 blacklist entries
532Feb 25 18:00:48 relay postfix/anvil[8242]: statistics: max connection rate 16/60s for (smtp:37.187.133.37) at Feb 25 17:57:28
533Feb 25 18:00:48 relay postfix/anvil[8242]: statistics: max connection count 2 for (smtp:18.205.66.21) at Feb 25 17:58:49
534Feb 25 18:00:48 relay postfix/anvil[8242]: statistics: max cache size 3 at Feb 25 17:59:03
535Feb 25 18:00:48 relay postfix/cleanup[12725]: 447SrH5rH0zJfDH: milter-discard: END-OF-MESSAGE from ahlp1640.aholddelhaize.com[141.93.18.92]: milter triggers DISCARD action; from=<noreply@ah.nl> to=<r.goes@agogroep.nl> proto=ESMTP helo=<ahlp1640.aholddelhaize.com>
536Feb 25 18:00:48 relay postfix/smtpd[12429]: disconnect from ahlp1640.aholddelhaize.com[141.93.18.92] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
537Feb 25 18:00:49 relay MailScanner[7999]: New Batch: Scanning 1 messages, 346572 bytes
538Feb 25 18:00:49 relay MailScanner[7999]: Virus and Content Scanning: Starting
539Feb 25 18:00:49 relay MailScanner[7999]: HTML Img tag found in message 447SrH5rH0zJfDH from noreply@ah.nl
540Feb 25 18:00:49 relay MailScanner[7999]: Spam Checks: Starting
541Feb 25 18:00:49 relay MailScanner[7999]: MailWatch: Whitelist refresh time reached
542Feb 25 18:00:49 relay MailScanner[7999]: MailWatch: Starting up MailWatch SQL Whitelist
543Feb 25 18:00:49 relay MailScanner[7999]: MailWatch: Read 35 whitelist entries
544Feb 25 18:00:49 relay MailScanner[7999]: MailWatch: Blacklist refresh time reached
545Feb 25 18:00:49 relay MailScanner[7999]: MailWatch: Starting up MailWatch SQL Blacklist
546Feb 25 18:00:49 relay MailScanner[7999]: MailWatch: Read 0 blacklist entries
547Feb 25 18:00:50 relay dccifd[7076]: continue not asking DCC 477 seconds after 5 failures
548Feb 25 18:00:59 relay MailScanner[7999]: Requeue: 447SrH5rH0zJfDH to 447SrW3n4gz14qB
549Feb 25 18:00:59 relay postfix/qmqpd[12741]: connect from localhost[127.0.0.1]
550Feb 25 18:00:59 relay postfix/qmqpd[12741]: 447SrW3pF3zJfDH: client=localhost[127.0.0.1]
551Feb 25 18:00:59 relay postfix/cleanup[12725]: 447SrW3pF3zJfDH: message-id=<20190225170047.36D2F60053@ahlp1640.aholddelhaize.com>
552Feb 25 18:00:59 relay opendkim[6573]: 447SrW3pF3zJfDH: no signing table match for 'noreply@ah.nl'
553Feb 25 18:00:59 relay opendkim[6573]: 447SrW3pF3zJfDH: no signature data
554Feb 25 18:00:59 relay postfix/qmqpd[12741]: disconnect from localhost[127.0.0.1]
555Feb 25 18:00:59 relay postfix/qmgr[7039]: 447SrW3pF3zJfDH: from=<noreply@ah.nl>, size=347952, nrcpt=1 (queue active)
556Feb 25 18:00:59 relay MailScanner[7999]: Uninfected: Delivered 1 messages
557Feb 25 18:00:59 relay MailScanner[7999]: Deleted 1 messages from processing-database
558Feb 25 18:00:59 relay MailScanner[7999]: MailWatch: Logging message 447SrH5rH0zJfDH to SQL
559Feb 25 18:01:07 relay postfix/smtp[12743]: 447SrW3pF3zJfDH: to=<r.goes@agogroep.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=8.4, delays=0.22/0/0.01/8.2, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
560Feb 25 18:01:17 relay postfix/cleanup[12725]: 447Srs6cqrzJfDj: message-id=<447Srs6cqrzJfDj@relay.attcomputer.nl>
561Feb 25 18:01:17 relay postfix/bounce[12903]: 447SrW3pF3zJfDH: sender non-delivery notification: 447Srs6cqrzJfDj
562Feb 25 18:01:17 relay postfix/qmgr[7039]: 447SrW3pF3zJfDH: removed
563Feb 25 18:01:17 relay postfix/qmgr[7039]: 447Srs6cqrzJfDj: from=<>, size=3781, nrcpt=1 (queue active)
564Feb 25 18:01:22 relay postfix/smtp[12743]: 447Srs6cqrzJfDj: to=<noreply@ah.nl>, relay=mxb-00259c01.gslb.pphosted.com[148.163.158.24]:25, delay=4.9, delays=0.01/0/3.7/1.2, dsn=2.0.0, status=sent (250 2.0.0 2qvm77837m-1 Message accepted for delivery)
565Feb 25 18:01:22 relay postfix/qmgr[7039]: 447Srs6cqrzJfDj: removed
566Feb 25 18:03:14 relay postfix/smtpd[13158]: connect from mail-eopbgr60089.outbound.protection.outlook.com[40.107.6.89]
567Feb 25 18:03:14 relay postfix/smtpd[13158]: Anonymous TLS connection established from mail-eopbgr60089.outbound.protection.outlook.com[40.107.6.89]: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)
568Feb 25 18:03:14 relay sqlgrey: perf: spent 0s cleaning: from_awl (0) domain_awl (0) connect (0)
569Feb 25 18:03:14 relay sqlgrey: grey: new: 40.107.6(40.107.6.89), info@diolaageinde.nl -> martha@nicheconsultants.nl
570Feb 25 18:03:14 relay postfix/smtpd[13158]: NOQUEUE: reject: RCPT from mail-eopbgr60089.outbound.protection.outlook.com[40.107.6.89]: 451 4.7.1 <Martha@nicheconsultants.nl>: Recipient address rejected: Greylisted for 5 minutes; from=<info@diolaageinde.nl> to=<Martha@nicheconsultants.nl> proto=ESMTP helo=<EUR04-DB3-obe.outbound.protection.outlook.com>
571Feb 25 18:03:14 relay postfix/smtpd[13158]: disconnect from mail-eopbgr60089.outbound.protection.outlook.com[40.107.6.89] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
572Feb 25 18:03:25 relay postfix/smtpd[13158]: warning: hostname adsl.viettel.vn does not resolve to address 115.73.232.18: Name or service not known
573Feb 25 18:03:25 relay postfix/smtpd[13158]: connect from unknown[115.73.232.18]
574Feb 25 18:03:25 relay postfix/smtpd[13158]: warning: non-SMTP command from unknown[115.73.232.18]: CONNECT 45.33.54.195:80 HTTP/1.0
575Feb 25 18:03:25 relay postfix/smtpd[13158]: disconnect from unknown[115.73.232.18] unknown=0/1 commands=0/1
576Feb 25 18:03:25 relay postfix/smtpd[13158]: warning: hostname adsl.viettel.vn does not resolve to address 115.73.232.18: Name or service not known
577Feb 25 18:03:25 relay postfix/smtpd[13158]: connect from unknown[115.73.232.18]
578Feb 25 18:03:26 relay postfix/smtpd[13158]: lost connection after CONNECT from unknown[115.73.232.18]
579Feb 25 18:03:26 relay postfix/smtpd[13158]: disconnect from unknown[115.73.232.18] commands=0/0
580Feb 25 18:03:26 relay postfix/smtpd[13158]: warning: hostname adsl.viettel.vn does not resolve to address 115.73.232.18: Name or service not known
581Feb 25 18:03:26 relay postfix/smtpd[13158]: connect from unknown[115.73.232.18]
582Feb 25 18:03:26 relay postfix/smtpd[13158]: lost connection after CONNECT from unknown[115.73.232.18]
583Feb 25 18:03:26 relay postfix/smtpd[13158]: disconnect from unknown[115.73.232.18] commands=0/0
584Feb 25 18:03:27 relay postfix/smtpd[13158]: warning: hostname adsl.viettel.vn does not resolve to address 115.73.232.18: Name or service not known
585Feb 25 18:03:27 relay postfix/smtpd[13158]: connect from unknown[115.73.232.18]
586Feb 25 18:03:27 relay postfix/smtpd[13158]: warning: non-SMTP command from unknown[115.73.232.18]: GET http://proxyjudge.us/judge.php HTTP/1.0
587Feb 25 18:03:27 relay postfix/smtpd[13158]: disconnect from unknown[115.73.232.18] unknown=0/1 commands=0/1
588Feb 25 18:03:50 relay postfix/smtpd[13158]: warning: hostname mx-cust-2.hilf.nl does not resolve to address 31.177.33.155
589Feb 25 18:03:50 relay postfix/smtpd[13158]: connect from unknown[31.177.33.155]
590Feb 25 18:03:50 relay sqlgrey: grey: from awl match: updating 31.177.33.155(31.177.33.155), backup@pandhuisbreda.nl(backup@pandhuisbreda.nl)
591Feb 25 18:03:50 relay postfix/smtpd[13158]: 447Svp40R4zJfDH: client=unknown[31.177.33.155]
592Feb 25 18:03:50 relay postfix/cleanup[13172]: 447Svp40R4zJfDH: message-id=<>
593Feb 25 18:03:50 relay opendkim[6573]: 447Svp40R4zJfDH: [31.177.33.155] [31.177.33.155] not internal
594Feb 25 18:03:50 relay opendkim[6573]: 447Svp40R4zJfDH: not authenticated
595Feb 25 18:03:50 relay opendkim[6573]: 447Svp40R4zJfDH: no signature data
596Feb 25 18:03:50 relay MSMilter[13171]: MailWatch: Whitelist refresh time reached
597Feb 25 18:03:50 relay MSMilter[13171]: MailWatch: Starting up MailWatch SQL Whitelist
598Feb 25 18:03:50 relay MSMilter[13171]: MailWatch: Read 35 whitelist entries
599Feb 25 18:03:50 relay MSMilter[13171]: MailWatch: Blacklist refresh time reached
600Feb 25 18:03:50 relay MSMilter[13171]: MailWatch: Starting up MailWatch SQL Blacklist
601Feb 25 18:03:50 relay MSMilter[13171]: MailWatch: Read 0 blacklist entries
602Feb 25 18:03:51 relay postfix/cleanup[13172]: 447Svp40R4zJfDH: milter-discard: END-OF-MESSAGE from unknown[31.177.33.155]: milter triggers DISCARD action; from=<backup@pandhuisbreda.nl> to=<info@attcomputer.nl> proto=ESMTP helo=<mx-cust-1.hilf.nl>
603Feb 25 18:03:51 relay postfix/smtpd[13158]: disconnect from unknown[31.177.33.155] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
604Feb 25 18:03:51 relay MailScanner[8007]: New Batch: Scanning 1 messages, 17593 bytes
605Feb 25 18:03:52 relay MailScanner[8007]: Virus and Content Scanning: Starting
606Feb 25 18:03:52 relay postfix/qmgr[7039]: 447Fq71YxVzJgLh: from=<>, size=3604, nrcpt=1 (queue active)
607Feb 25 18:03:52 relay MailScanner[8007]: Spam Checks: Starting
608Feb 25 18:03:52 relay MailScanner[8007]: Expired 1 records from the SpamAssassin cache
609Feb 25 18:03:52 relay MailScanner[8007]: MailWatch: Whitelist refresh time reached
610Feb 25 18:03:52 relay MailScanner[8007]: MailWatch: Starting up MailWatch SQL Whitelist
611Feb 25 18:03:52 relay MailScanner[8007]: MailWatch: Read 35 whitelist entries
612Feb 25 18:03:52 relay MailScanner[8007]: MailWatch: Blacklist refresh time reached
613Feb 25 18:03:52 relay MailScanner[8007]: MailWatch: Starting up MailWatch SQL Blacklist
614Feb 25 18:03:52 relay MailScanner[8007]: MailWatch: Read 0 blacklist entries
615Feb 25 18:03:52 relay postfix/smtp[13181]: connect to bigboss.manitu.net[217.11.48.2]:25: Connection refused
616Feb 25 18:03:52 relay postfix/smtp[13181]: 447Fq71YxVzJgLh: to=<www-data@bigboss.manitu.net>, relay=none, delay=29989, delays=29989/0.02/0.13/0, dsn=4.4.1, status=deferred (connect to bigboss.manitu.net[217.11.48.2]:25: Connection refused)
617Feb 25 18:03:52 relay dccifd[7076]: continue not asking DCC 295 seconds after 5 failures
618Feb 25 18:04:01 relay MailScanner[8007]: Requeue: 447Svp40R4zJfDH to 447Sw14WD6z14qD
619Feb 25 18:04:01 relay postfix/qmqpd[13313]: connect from localhost[127.0.0.1]
620Feb 25 18:04:01 relay postfix/qmqpd[13313]: 447Sw14brVzJfDH: client=localhost[127.0.0.1]
621Feb 25 18:04:01 relay postfix/cleanup[13172]: 447Sw14brVzJfDH: message-id=<447Sw14brVzJfDH@relay.attcomputer.nl>
622Feb 25 18:04:01 relay opendkim[6573]: 447Sw14brVzJfDH: no signing table match for 'backup@pandhuisbreda.nl'
623Feb 25 18:04:01 relay opendkim[6573]: 447Sw14brVzJfDH: no signature data
624Feb 25 18:04:01 relay postfix/qmqpd[13313]: disconnect from localhost[127.0.0.1]
625Feb 25 18:04:01 relay MailScanner[8007]: Uninfected: Delivered 1 messages
626Feb 25 18:04:01 relay postfix/qmgr[7039]: 447Sw14brVzJfDH: from=<backup@pandhuisbreda.nl>, size=18054, nrcpt=1 (queue active)
627Feb 25 18:04:01 relay MailScanner[8007]: Deleted 1 messages from processing-database
628Feb 25 18:04:01 relay MailScanner[8007]: MailWatch: Logging message 447Svp40R4zJfDH to SQL
629Feb 25 18:04:06 relay postfix/smtp[13181]: 447Sw14brVzJfDH: to=<info@attcomputer.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=5.1, delays=0.05/0/0.02/5, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
630Feb 25 18:04:16 relay postfix/cleanup[13172]: 447SwJ5G5hzJfDj: message-id=<447SwJ5G5hzJfDj@relay.attcomputer.nl>
631Feb 25 18:04:16 relay postfix/bounce[13315]: 447Sw14brVzJfDH: sender non-delivery notification: 447SwJ5G5hzJfDj
632Feb 25 18:04:16 relay postfix/qmgr[7039]: 447Sw14brVzJfDH: removed
633Feb 25 18:04:16 relay postfix/qmgr[7039]: 447SwJ5G5hzJfDj: from=<>, size=20356, nrcpt=1 (queue active)
634Feb 25 18:04:25 relay postfix/smtp[13181]: 447SwJ5G5hzJfDj: to=<backup@pandhuisbreda.nl>, relay=mailfilter1.mijndomein.nl[188.93.148.249]:25, delay=8.8, delays=0.01/0/0.09/8.7, dsn=2.0.0, status=sent (250 OK id=1gyJft-00082J-8y)
635Feb 25 18:04:25 relay postfix/qmgr[7039]: 447SwJ5G5hzJfDj: removed
636Feb 25 18:07:08 relay postfix/smtpd[13740]: warning: hostname cht203187.coowo.com does not resolve to address 203.74.203.187: Name or service not known
637Feb 25 18:07:08 relay postfix/smtpd[13740]: connect from unknown[203.74.203.187]
638Feb 25 18:07:09 relay postfix/smtpd[13740]: Anonymous TLS connection established from unknown[203.74.203.187]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
639Feb 25 18:07:10 relay sqlgrey: grey: new: 203.74.203.187(203.74.203.187), eims@sf-express.com -> info@dks-international.com
640Feb 25 18:07:10 relay postfix/smtpd[13740]: NOQUEUE: reject: RCPT from unknown[203.74.203.187]: 451 4.7.1 <info@dks-international.com>: Recipient address rejected: Greylisted for 5 minutes; from=<eims@sf-express.com> to=<info@dks-international.com> proto=ESMTP helo=<magiplanet.com>
641Feb 25 18:07:11 relay postfix/smtpd[13740]: disconnect from unknown[203.74.203.187] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 rset=1 quit=1 commands=6/8
642Feb 25 18:07:35 relay postfix/smtpd[13740]: warning: hostname mx-cust-2.hilf.nl does not resolve to address 31.177.33.155
643Feb 25 18:07:35 relay postfix/smtpd[13740]: connect from unknown[31.177.33.155]
644Feb 25 18:07:36 relay sqlgrey: grey: from awl match: updating 31.177.33.155(31.177.33.155), backup@pandhuisbreda.nl(backup@pandhuisbreda.nl)
645Feb 25 18:07:36 relay postfix/smtpd[13740]: 447T080mCBzJfDH: client=unknown[31.177.33.155]
646Feb 25 18:07:36 relay postfix/cleanup[13746]: 447T080mCBzJfDH: message-id=<>
647Feb 25 18:07:36 relay opendkim[6573]: 447T080mCBzJfDH: [31.177.33.155] [31.177.33.155] not internal
648Feb 25 18:07:36 relay opendkim[6573]: 447T080mCBzJfDH: not authenticated
649Feb 25 18:07:36 relay opendkim[6573]: 447T080mCBzJfDH: no signature data
650Feb 25 18:07:36 relay MSMilter[13745]: MailWatch: Whitelist refresh time reached
651Feb 25 18:07:36 relay MSMilter[13745]: MailWatch: Starting up MailWatch SQL Whitelist
652Feb 25 18:07:36 relay MSMilter[13745]: MailWatch: Read 35 whitelist entries
653Feb 25 18:07:36 relay MSMilter[13745]: MailWatch: Blacklist refresh time reached
654Feb 25 18:07:36 relay MSMilter[13745]: MailWatch: Starting up MailWatch SQL Blacklist
655Feb 25 18:07:36 relay MSMilter[13745]: MailWatch: Read 0 blacklist entries
656Feb 25 18:07:36 relay postfix/cleanup[13746]: 447T080mCBzJfDH: milter-discard: END-OF-MESSAGE from unknown[31.177.33.155]: milter triggers DISCARD action; from=<backup@pandhuisbreda.nl> to=<info@attcomputer.nl> proto=ESMTP helo=<mx-cust-1.hilf.nl>
657Feb 25 18:07:36 relay postfix/smtpd[13740]: disconnect from unknown[31.177.33.155] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
658Feb 25 18:07:36 relay MailScanner[7847]: New Batch: Scanning 1 messages, 17588 bytes
659Feb 25 18:07:36 relay MailScanner[7847]: Virus and Content Scanning: Starting
660Feb 25 18:07:36 relay MailScanner[7847]: Spam Checks: Starting
661Feb 25 18:07:36 relay MailScanner[7847]: MailWatch: Whitelist refresh time reached
662Feb 25 18:07:36 relay MailScanner[7847]: MailWatch: Starting up MailWatch SQL Whitelist
663Feb 25 18:07:36 relay MailScanner[7847]: MailWatch: Read 35 whitelist entries
664Feb 25 18:07:36 relay MailScanner[7847]: MailWatch: Blacklist refresh time reached
665Feb 25 18:07:36 relay MailScanner[7847]: MailWatch: Starting up MailWatch SQL Blacklist
666Feb 25 18:07:36 relay MailScanner[7847]: MailWatch: Read 0 blacklist entries
667Feb 25 18:07:37 relay dccifd[7076]: continue not asking DCC 70 seconds after 5 failures
668Feb 25 18:07:37 relay postfix/smtpd[13740]: warning: hostname host237-150-38-89.static.arubacloud.fr does not resolve to address 89.38.150.237: Name or service not known
669Feb 25 18:07:37 relay postfix/smtpd[13740]: connect from unknown[89.38.150.237]
670Feb 25 18:07:38 relay sqlgrey: grey: new: 89.38.150.237(89.38.150.237), wetransfer@connect.com -> info@dks-international.com
671Feb 25 18:07:38 relay postfix/smtpd[13740]: NOQUEUE: reject: RCPT from unknown[89.38.150.237]: 451 4.7.1 <info@dks-international.com>: Recipient address rejected: Greylisted for 5 minutes; from=<wetransfer@connect.com> to=<info@dks-international.com> proto=ESMTP helo=<mail.besafas.ml>
672Feb 25 18:07:38 relay postfix/smtpd[13740]: disconnect from unknown[89.38.150.237] ehlo=1 mail=1 rcpt=0/1 data=0/1 rset=1 quit=1 commands=4/6
673Feb 25 18:07:46 relay MailScanner[7847]: Requeue: 447T080mCBzJfDH to 447T0L1BY9z14qB
674Feb 25 18:07:46 relay postfix/qmqpd[13760]: connect from localhost[127.0.0.1]
675Feb 25 18:07:46 relay postfix/qmqpd[13760]: 447T0L1FgYzJfDH: client=localhost[127.0.0.1]
676Feb 25 18:07:46 relay postfix/cleanup[13746]: 447T0L1FgYzJfDH: message-id=<447T0L1FgYzJfDH@relay.attcomputer.nl>
677Feb 25 18:07:46 relay opendkim[6573]: 447T0L1FgYzJfDH: no signing table match for 'backup@pandhuisbreda.nl'
678Feb 25 18:07:46 relay opendkim[6573]: 447T0L1FgYzJfDH: no signature data
679Feb 25 18:07:46 relay postfix/qmqpd[13760]: disconnect from localhost[127.0.0.1]
680Feb 25 18:07:46 relay MailScanner[7847]: Uninfected: Delivered 1 messages
681Feb 25 18:07:46 relay postfix/qmgr[7039]: 447T0L1FgYzJfDH: from=<backup@pandhuisbreda.nl>, size=18049, nrcpt=1 (queue active)
682Feb 25 18:07:46 relay MailScanner[7847]: Deleted 1 messages from processing-database
683Feb 25 18:07:46 relay MailScanner[7847]: MailWatch: Logging message 447T080mCBzJfDH to SQL
684Feb 25 18:07:51 relay postfix/smtp[13762]: 447T0L1FgYzJfDH: to=<info@attcomputer.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=5.2, delays=0.04/0.01/0.02/5.1, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
685Feb 25 18:08:01 relay postfix/cleanup[13746]: 447T0d2GCVzJfDj: message-id=<447T0d2GCVzJfDj@relay.attcomputer.nl>
686Feb 25 18:08:01 relay postfix/qmgr[7039]: 447T0d2GCVzJfDj: from=<>, size=20351, nrcpt=1 (queue active)
687Feb 25 18:08:01 relay postfix/bounce[13763]: 447T0L1FgYzJfDH: sender non-delivery notification: 447T0d2GCVzJfDj
688Feb 25 18:08:01 relay postfix/qmgr[7039]: 447T0L1FgYzJfDH: removed
689Feb 25 18:08:01 relay postfix/smtp[13762]: connect to mailfilter1.mijndomein.nl[2a00:4e40:1:1::9:3]:25: Network is unreachable
690Feb 25 18:08:03 relay postfix/smtp[13762]: 447T0d2GCVzJfDj: to=<backup@pandhuisbreda.nl>, relay=mailfilter1.mijndomein.nl[188.93.148.251]:25, delay=2.6, delays=0.01/0/0.14/2.4, dsn=2.0.0, status=sent (250 OK id=1gyJjV-00057H-Nv)
691Feb 25 18:08:03 relay postfix/qmgr[7039]: 447T0d2GCVzJfDj: removed
692Feb 25 18:10:29 relay postfix/smtpd[14155]: warning: hostname mx-cust-1.hilf.nl does not resolve to address 31.177.33.55
693Feb 25 18:10:29 relay postfix/smtpd[14155]: connect from unknown[31.177.33.55]
694Feb 25 18:10:29 relay sqlgrey: grey: from awl match: updating 31.177.33.55(31.177.33.55), backup@pandhuisbreda.nl(backup@pandhuisbreda.nl)
695Feb 25 18:10:29 relay postfix/smtpd[14155]: 447T3T6MjTzJfDH: client=unknown[31.177.33.55]
696Feb 25 18:10:29 relay postfix/cleanup[14159]: 447T3T6MjTzJfDH: message-id=<>
697Feb 25 18:10:29 relay opendkim[6573]: 447T3T6MjTzJfDH: [31.177.33.55] [31.177.33.55] not internal
698Feb 25 18:10:29 relay opendkim[6573]: 447T3T6MjTzJfDH: not authenticated
699Feb 25 18:10:29 relay opendkim[6573]: 447T3T6MjTzJfDH: no signature data
700Feb 25 18:10:30 relay MSMilter[14157]: MailWatch: Whitelist refresh time reached
701Feb 25 18:10:30 relay MSMilter[14157]: MailWatch: Starting up MailWatch SQL Whitelist
702Feb 25 18:10:30 relay MSMilter[14157]: MailWatch: Read 35 whitelist entries
703Feb 25 18:10:30 relay MSMilter[14157]: MailWatch: Blacklist refresh time reached
704Feb 25 18:10:30 relay MSMilter[14157]: MailWatch: Starting up MailWatch SQL Blacklist
705Feb 25 18:10:30 relay MSMilter[14157]: MailWatch: Read 0 blacklist entries
706Feb 25 18:10:30 relay postfix/cleanup[14159]: 447T3T6MjTzJfDH: milter-discard: END-OF-MESSAGE from unknown[31.177.33.55]: milter triggers DISCARD action; from=<backup@pandhuisbreda.nl> to=<info@attcomputer.nl> proto=ESMTP helo=<mx-cust-1.hilf.nl>
707Feb 25 18:10:30 relay postfix/smtpd[14155]: disconnect from unknown[31.177.33.55] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
708Feb 25 18:10:31 relay MailScanner[8007]: New Batch: Scanning 1 messages, 15560 bytes
709Feb 25 18:10:31 relay MailScanner[8007]: Virus and Content Scanning: Starting
710Feb 25 18:10:31 relay MailScanner[8007]: Spam Checks: Starting
711Feb 25 18:10:36 relay dccifd[7076]: no working DCC servers dcc1.dcc-servers.net dcc2.dcc-servers.net dcc3.dcc-servers.net ... at 137.208.8.63 74.92.232.243
712Feb 25 18:10:45 relay MailScanner[8007]: Requeue: 447T3T6MjTzJfDH to 447T3n1r79z14qL
713Feb 25 18:10:45 relay postfix/qmqpd[14171]: connect from localhost[127.0.0.1]
714Feb 25 18:10:45 relay postfix/qmqpd[14171]: 447T3n1wdtzJfDH: client=localhost[127.0.0.1]
715Feb 25 18:10:45 relay postfix/cleanup[14159]: 447T3n1wdtzJfDH: message-id=<447T3n1wdtzJfDH@relay.attcomputer.nl>
716Feb 25 18:10:45 relay opendkim[6573]: 447T3n1wdtzJfDH: no signing table match for 'backup@pandhuisbreda.nl'
717Feb 25 18:10:45 relay opendkim[6573]: 447T3n1wdtzJfDH: no signature data
718Feb 25 18:10:45 relay postfix/qmqpd[14171]: disconnect from localhost[127.0.0.1]
719Feb 25 18:10:45 relay MailScanner[8007]: Uninfected: Delivered 1 messages
720Feb 25 18:10:45 relay postfix/qmgr[7039]: 447T3n1wdtzJfDH: from=<backup@pandhuisbreda.nl>, size=16021, nrcpt=1 (queue active)
721Feb 25 18:10:45 relay MailScanner[8007]: Deleted 1 messages from processing-database
722Feb 25 18:10:45 relay MailScanner[8007]: MailWatch: Logging message 447T3T6MjTzJfDH to SQL
723Feb 25 18:10:48 relay postfix/anvil[8242]: statistics: max connection rate 4/60s for (smtp:115.73.232.18) at Feb 25 18:03:27
724Feb 25 18:10:48 relay postfix/anvil[8242]: statistics: max connection count 1 for (smtp:40.107.6.89) at Feb 25 18:03:14
725Feb 25 18:10:48 relay postfix/anvil[8242]: statistics: max cache size 3 at Feb 25 18:03:50
726Feb 25 18:10:57 relay postfix/smtpd[14155]: connect from mout.gmx.com[74.208.4.200]
727Feb 25 18:10:58 relay postfix/smtpd[14155]: Anonymous TLS connection established from mout.gmx.com[74.208.4.200]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
728Feb 25 18:10:58 relay sqlgrey: grey: from awl match: updating 74.208.4(74.208.4.200), backdoor@linuxmail.org(backdoor@linuxmail.org)
729Feb 25 18:10:58 relay postfix/smtpd[14155]: 447T424Hc8zJfDj: client=mout.gmx.com[74.208.4.200]
730Feb 25 18:10:58 relay postfix/cleanup[14159]: 447T424Hc8zJfDj: message-id=<trinity-5d335de2-e941-4377-8d66-abb208b46df9-1551114654583@msvc-mesg-gmxus007>
731Feb 25 18:10:58 relay opendkim[6573]: 447T424Hc8zJfDj: mout.gmx.com [74.208.4.200] not internal
732Feb 25 18:10:58 relay opendkim[6573]: 447T424Hc8zJfDj: not authenticated
733Feb 25 18:10:59 relay opendkim[6573]: 447T424Hc8zJfDj: DKIM verification successful
734Feb 25 18:10:59 relay MSMilter[14176]: MailWatch: Whitelist refresh time reached
735Feb 25 18:10:59 relay MSMilter[14176]: MailWatch: Starting up MailWatch SQL Whitelist
736Feb 25 18:10:59 relay MSMilter[14176]: MailWatch: Read 35 whitelist entries
737Feb 25 18:10:59 relay MSMilter[14176]: MailWatch: Blacklist refresh time reached
738Feb 25 18:10:59 relay MSMilter[14176]: MailWatch: Starting up MailWatch SQL Blacklist
739Feb 25 18:10:59 relay MSMilter[14176]: MailWatch: Read 0 blacklist entries
740Feb 25 18:10:59 relay postfix/cleanup[14159]: 447T424Hc8zJfDj: milter-discard: END-OF-MESSAGE from mout.gmx.com[74.208.4.200]: milter triggers DISCARD action; from=<backdoor@linuxmail.org> to=<hassan@attcomputer.com> proto=ESMTP helo=<mout.gmx.com>
741Feb 25 18:11:00 relay postfix/smtpd[14155]: disconnect from mout.gmx.com[74.208.4.200] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
742Feb 25 18:11:00 relay postfix/smtp[14173]: 447T3n1wdtzJfDH: to=<info@attcomputer.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=15, delays=0.05/0.01/0.02/15, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
743Feb 25 18:11:02 relay MailScanner[7984]: New Batch: Scanning 1 messages, 2788 bytes
744Feb 25 18:11:02 relay MailScanner[7984]: Virus and Content Scanning: Starting
745Feb 25 18:11:02 relay MailScanner[7984]: Spam Checks: Starting
746Feb 25 18:11:02 relay MailScanner[7984]: MailWatch: Whitelist refresh time reached
747Feb 25 18:11:02 relay MailScanner[7984]: MailWatch: Starting up MailWatch SQL Whitelist
748Feb 25 18:11:02 relay MailScanner[7984]: MailWatch: Read 35 whitelist entries
749Feb 25 18:11:02 relay MailScanner[7984]: MailWatch: Blacklist refresh time reached
750Feb 25 18:11:02 relay MailScanner[7984]: MailWatch: Starting up MailWatch SQL Blacklist
751Feb 25 18:11:02 relay MailScanner[7984]: MailWatch: Read 0 blacklist entries
752Feb 25 18:11:02 relay dccifd[7076]: continue not asking DCC 486 seconds after 5 failures
753Feb 25 18:11:10 relay postfix/cleanup[14159]: 447T4G087TzJfDj: message-id=<447T4G087TzJfDj@relay.attcomputer.nl>
754Feb 25 18:11:10 relay postfix/bounce[14177]: 447T3n1wdtzJfDH: sender non-delivery notification: 447T4G087TzJfDj
755Feb 25 18:11:10 relay postfix/qmgr[7039]: 447T3n1wdtzJfDH: removed
756Feb 25 18:11:10 relay postfix/qmgr[7039]: 447T4G087TzJfDj: from=<>, size=18323, nrcpt=1 (queue active)
757Feb 25 18:11:12 relay MailScanner[7984]: Requeue: 447T424Hc8zJfDj to 447T4J0fgTz14qB
758Feb 25 18:11:12 relay postfix/qmqpd[14171]: connect from localhost[127.0.0.1]
759Feb 25 18:11:12 relay postfix/qmqpd[14171]: 447T4J0gC9zJfDH: client=localhost[127.0.0.1]
760Feb 25 18:11:12 relay postfix/cleanup[14159]: 447T4J0gC9zJfDH: message-id=<trinity-5d335de2-e941-4377-8d66-abb208b46df9-1551114654583@msvc-mesg-gmxus007>
761Feb 25 18:11:12 relay opendkim[6573]: 447T4J0gC9zJfDH: no signing table match for 'backdoor@linuxmail.org'
762Feb 25 18:11:12 relay opendkim[6573]: 447T4J0gC9zJfDH: DKIM verification successful
763Feb 25 18:11:12 relay postfix/qmqpd[14171]: disconnect from localhost[127.0.0.1]
764Feb 25 18:11:12 relay postfix/qmgr[7039]: 447T4J0gC9zJfDH: from=<backdoor@linuxmail.org>, size=3176, nrcpt=1 (queue active)
765Feb 25 18:11:12 relay MailScanner[7984]: Uninfected: Delivered 1 messages
766Feb 25 18:11:12 relay MailScanner[7984]: Deleted 1 messages from processing-database
767Feb 25 18:11:12 relay MailScanner[7984]: MailWatch: Logging message 447T424Hc8zJfDj to SQL
768Feb 25 18:11:12 relay postfix/smtp[14173]: 447T4G087TzJfDj: to=<backup@pandhuisbreda.nl>, relay=mailfilter1.mijndomein.nl[188.93.148.243]:25, delay=2.9, delays=0.01/0/0.36/2.5, dsn=2.0.0, status=sent (250 OK id=1gyJmU-00078O-RR)
769Feb 25 18:11:12 relay postfix/qmgr[7039]: 447T4G087TzJfDj: removed
770Feb 25 18:11:16 relay postfix/smtpd[14155]: connect from lb2-smtp-cloud8.xs4all.net[194.109.24.25]
771Feb 25 18:11:16 relay postfix/smtpd[14155]: Anonymous TLS connection established from lb2-smtp-cloud8.xs4all.net[194.109.24.25]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
772Feb 25 18:11:17 relay postfix/smtp[14317]: 447T4J0gC9zJfDH: to=<hassan@attcomputer.com>, relay=192.168.4.5[192.168.4.5]:25, delay=5.1, delays=0.05/0.02/0.02/5, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
773Feb 25 18:11:17 relay sqlgrey: grey: from awl match: updating 194.109.24(194.109.24.25), mail@interieurarchitecten.info(mail@interieurarchitecten.info)
774Feb 25 18:11:17 relay postfix/smtpd[14155]: 447T4P1dFXzJfDj: client=lb2-smtp-cloud8.xs4all.net[194.109.24.25]
775Feb 25 18:11:17 relay postfix/cleanup[14159]: 447T4P1dFXzJfDj: message-id=<49FB9F47593B27459C2605185AB1A360CB4C3706@FVDNSVRSBS01.fvdnbv.local>
776Feb 25 18:11:17 relay opendkim[6573]: 447T4P1dFXzJfDj: lb2-smtp-cloud8.xs4all.net [194.109.24.25] not internal
777Feb 25 18:11:17 relay opendkim[6573]: 447T4P1dFXzJfDj: not authenticated
778Feb 25 18:11:17 relay opendkim[6573]: 447T4P1dFXzJfDj: no signature data
779Feb 25 18:11:18 relay MSMilter[14319]: MailWatch: Whitelist refresh time reached
780Feb 25 18:11:18 relay MSMilter[14319]: MailWatch: Starting up MailWatch SQL Whitelist
781Feb 25 18:11:18 relay MSMilter[14319]: MailWatch: Read 35 whitelist entries
782Feb 25 18:11:18 relay MSMilter[14319]: MailWatch: Blacklist refresh time reached
783Feb 25 18:11:18 relay MSMilter[14319]: MailWatch: Starting up MailWatch SQL Blacklist
784Feb 25 18:11:18 relay MSMilter[14319]: MailWatch: Read 0 blacklist entries
785Feb 25 18:11:18 relay postfix/cleanup[14159]: 447T4P1dFXzJfDj: milter-discard: END-OF-MESSAGE from lb2-smtp-cloud8.xs4all.net[194.109.24.25]: milter triggers DISCARD action; from=<mail@interieurarchitecten.info> to=<schmidt@premium-panels.com> proto=ESMTP helo=<lb2-smtp-cloud8.xs4all.net>
786Feb 25 18:11:27 relay postfix/cleanup[14159]: 447T4b1MXYzJfDj: message-id=<447T4b1MXYzJfDj@relay.attcomputer.nl>
787Feb 25 18:11:27 relay postfix/qmgr[7039]: 447T4b1MXYzJfDj: from=<>, size=5484, nrcpt=1 (queue active)
788Feb 25 18:11:27 relay postfix/bounce[14177]: 447T4J0gC9zJfDH: sender non-delivery notification: 447T4b1MXYzJfDj
789Feb 25 18:11:27 relay postfix/qmgr[7039]: 447T4J0gC9zJfDH: removed
790Feb 25 18:11:29 relay postfix/smtp[14173]: 447T4b1MXYzJfDj: to=<backdoor@linuxmail.org>, relay=mx01.gmx.com[74.208.5.27]:25, delay=2.5, delays=0/0/1.3/1.2, dsn=2.0.0, status=sent (250 Requested mail action okay, completed: id=0MS4Ym-1gaiN82QKw-00TFIT)
791Feb 25 18:11:29 relay postfix/qmgr[7039]: 447T4b1MXYzJfDj: removed
792Feb 25 18:11:48 relay postfix/smtpd[14155]: disconnect from lb2-smtp-cloud8.xs4all.net[194.109.24.25] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
793Feb 25 18:11:51 relay MailScanner[8007]: New Batch: Scanning 1 messages, 2812 bytes
794Feb 25 18:11:51 relay MailScanner[8007]: Virus and Content Scanning: Starting
795Feb 25 18:11:51 relay MailScanner[8007]: Spam Checks: Starting
796Feb 25 18:11:51 relay dccifd[7076]: continue not asking DCC 437 seconds after 5 failures
797Feb 25 18:12:01 relay MailScanner[8007]: Requeue: 447T4P1dFXzJfDj to 447T5F0fL4z14qT
798Feb 25 18:12:01 relay postfix/qmqpd[14171]: connect from localhost[127.0.0.1]
799Feb 25 18:12:01 relay postfix/qmqpd[14171]: 447T5F0fvZzJfDH: client=localhost[127.0.0.1]
800Feb 25 18:12:01 relay postfix/cleanup[14159]: 447T5F0fvZzJfDH: message-id=<49FB9F47593B27459C2605185AB1A360CB4C3706@FVDNSVRSBS01.fvdnbv.local>
801Feb 25 18:12:01 relay opendkim[6573]: 447T5F0fvZzJfDH: no signing table match for 'mail@interieurarchitecten.info'
802Feb 25 18:12:01 relay opendkim[6573]: 447T5F0fvZzJfDH: no signature data
803Feb 25 18:12:01 relay postfix/qmgr[7039]: 447T5F0fvZzJfDH: from=<mail@interieurarchitecten.info>, size=3187, nrcpt=1 (queue active)
804Feb 25 18:12:01 relay postfix/qmqpd[14171]: disconnect from localhost[127.0.0.1]
805Feb 25 18:12:01 relay MailScanner[8007]: Uninfected: Delivered 1 messages
806Feb 25 18:12:01 relay MailScanner[8007]: Deleted 1 messages from processing-database
807Feb 25 18:12:01 relay MailScanner[8007]: MailWatch: Logging message 447T4P1dFXzJfDj to SQL
808Feb 25 18:12:01 relay postfix/smtp[14317]: 447T5F0fvZzJfDH: to=<schmidt@premium-panels.com>, relay=92.64.151.192[92.64.151.192]:25, delay=0.31, delays=0.05/0/0.13/0.13, dsn=2.6.0, status=sent (250 2.6.0 <49FB9F47593B27459C2605185AB1A360CB4C3706@FVDNSVRSBS01.fvdnbv.local> [InternalId=165171557302280, Hostname=EX-DKS.DKS.lan] Queued mail for delivery)
809Feb 25 18:12:01 relay postfix/qmgr[7039]: 447T5F0fvZzJfDH: removed
810Feb 25 18:13:53 relay postfix/smtpd[14587]: warning: hostname 212-129-38-73.rev.poneytelecom.eu does not resolve to address 212.129.38.73: Name or service not known
811Feb 25 18:13:53 relay postfix/smtpd[14587]: connect from unknown[212.129.38.73]
812Feb 25 18:13:53 relay postfix/smtpd[14587]: warning: non-SMTP command from unknown[212.129.38.73]: CONNECT 45.33.54.195:80 HTTP/1.0
813Feb 25 18:13:53 relay postfix/smtpd[14587]: disconnect from unknown[212.129.38.73] unknown=0/1 commands=0/1
814Feb 25 18:13:53 relay postfix/smtpd[14587]: warning: hostname 212-129-38-73.rev.poneytelecom.eu does not resolve to address 212.129.38.73: Name or service not known
815Feb 25 18:13:53 relay postfix/smtpd[14587]: connect from unknown[212.129.38.73]
816Feb 25 18:13:53 relay postfix/smtpd[14587]: lost connection after CONNECT from unknown[212.129.38.73]
817Feb 25 18:13:53 relay postfix/smtpd[14587]: disconnect from unknown[212.129.38.73] commands=0/0
818Feb 25 18:13:53 relay postfix/smtpd[14587]: warning: hostname 212-129-38-73.rev.poneytelecom.eu does not resolve to address 212.129.38.73: Name or service not known
819Feb 25 18:13:53 relay postfix/smtpd[14587]: connect from unknown[212.129.38.73]
820Feb 25 18:13:53 relay postfix/smtpd[14587]: lost connection after CONNECT from unknown[212.129.38.73]
821Feb 25 18:13:53 relay postfix/smtpd[14587]: disconnect from unknown[212.129.38.73] commands=0/0
822Feb 25 18:13:53 relay postfix/smtpd[14587]: warning: hostname 212-129-38-73.rev.poneytelecom.eu does not resolve to address 212.129.38.73: Name or service not known
823Feb 25 18:13:53 relay postfix/smtpd[14587]: connect from unknown[212.129.38.73]
824Feb 25 18:13:53 relay postfix/smtpd[14587]: warning: non-SMTP command from unknown[212.129.38.73]: GET http://azenv.net/ HTTP/1.0
825Feb 25 18:13:53 relay postfix/smtpd[14587]: disconnect from unknown[212.129.38.73] unknown=0/1 commands=0/1
826Feb 25 18:13:53 relay postfix/smtpd[14587]: warning: hostname 212-129-38-73.rev.poneytelecom.eu does not resolve to address 212.129.38.73: Name or service not known
827Feb 25 18:13:53 relay postfix/smtpd[14587]: connect from unknown[212.129.38.73]
828Feb 25 18:13:53 relay postfix/smtpd[14587]: warning: non-SMTP command from unknown[212.129.38.73]: CONNECT 45.33.54.195:80 HTTP/1.0
829Feb 25 18:13:53 relay postfix/smtpd[14587]: disconnect from unknown[212.129.38.73] unknown=0/1 commands=0/1
830Feb 25 18:13:54 relay postfix/smtpd[14587]: warning: hostname 212-129-38-73.rev.poneytelecom.eu does not resolve to address 212.129.38.73: Name or service not known
831Feb 25 18:13:54 relay postfix/smtpd[14587]: connect from unknown[212.129.38.73]
832Feb 25 18:13:54 relay postfix/smtpd[14587]: lost connection after CONNECT from unknown[212.129.38.73]
833Feb 25 18:13:54 relay postfix/smtpd[14587]: disconnect from unknown[212.129.38.73] commands=0/0
834Feb 25 18:13:54 relay postfix/smtpd[14587]: warning: hostname 212-129-38-73.rev.poneytelecom.eu does not resolve to address 212.129.38.73: Name or service not known
835Feb 25 18:13:54 relay postfix/smtpd[14587]: connect from unknown[212.129.38.73]
836Feb 25 18:13:54 relay postfix/smtpd[14587]: warning: non-SMTP command from unknown[212.129.38.73]: GET http://proxyjudge.us/judge.php HTTP/1.0
837Feb 25 18:13:54 relay postfix/smtpd[14587]: disconnect from unknown[212.129.38.73] unknown=0/1 commands=0/1
838Feb 25 18:14:12 relay postfix/smtpd[14587]: connect from mail-eopbgr20072.outbound.protection.outlook.com[40.107.2.72]
839Feb 25 18:14:13 relay postfix/smtpd[14587]: Anonymous TLS connection established from mail-eopbgr20072.outbound.protection.outlook.com[40.107.2.72]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
840Feb 25 18:14:13 relay sqlgrey: grey: reconnect ok: 40.107.2(40.107.2.72), andre@hdnoord.nl -> info@dks-international.com (01:32:35)
841Feb 25 18:14:13 relay sqlgrey: grey: from awl: 40.107.2, andre@hdnoord.nl added
842Feb 25 18:14:13 relay postfix/smtpd[14587]: 447T7n22QZzJfDH: client=mail-eopbgr20072.outbound.protection.outlook.com[40.107.2.72]
843Feb 25 18:14:13 relay postfix/cleanup[14732]: 447T7n22QZzJfDH: message-id=<fbd0e9b7938d4f21b3b11fcabfc86663@hdnoord.nl>
844Feb 25 18:14:13 relay opendkim[6573]: 447T7n22QZzJfDH: mail-eopbgr20072.outbound.protection.outlook.com [40.107.2.72] not internal
845Feb 25 18:14:13 relay opendkim[6573]: 447T7n22QZzJfDH: not authenticated
846Feb 25 18:14:13 relay opendkim[6573]: 447T7n22QZzJfDH: failed to parse Authentication-Results: header field
847Feb 25 18:14:13 relay opendkim[6573]: 447T7n22QZzJfDH: no signature data
848Feb 25 18:14:15 relay MSMilter[14730]: MailWatch: Whitelist refresh time reached
849Feb 25 18:14:15 relay MSMilter[14730]: MailWatch: Starting up MailWatch SQL Whitelist
850Feb 25 18:14:15 relay MSMilter[14730]: MailWatch: Read 35 whitelist entries
851Feb 25 18:14:15 relay MSMilter[14730]: MailWatch: Blacklist refresh time reached
852Feb 25 18:14:15 relay MSMilter[14730]: MailWatch: Starting up MailWatch SQL Blacklist
853Feb 25 18:14:15 relay MSMilter[14730]: MailWatch: Read 0 blacklist entries
854Feb 25 18:14:15 relay postfix/cleanup[14732]: 447T7n22QZzJfDH: milter-discard: END-OF-MESSAGE from mail-eopbgr20072.outbound.protection.outlook.com[40.107.2.72]: milter triggers DISCARD action; from=<andre@hdnoord.nl> to=<info@dks-international.com> proto=ESMTP helo=<EUR02-VE1-obe.outbound.protection.outlook.com>
855Feb 25 18:14:15 relay postfix/smtpd[14587]: disconnect from mail-eopbgr20072.outbound.protection.outlook.com[40.107.2.72] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
856Feb 25 18:14:16 relay MailScanner[7847]: New Batch: Scanning 1 messages, 203016 bytes
857Feb 25 18:14:16 relay MailScanner[7847]: Virus and Content Scanning: Starting
858Feb 25 18:14:16 relay MailScanner[7847]: HTML Img tag found in message 447T7n22QZzJfDH from andre@hdnoord.nl
859Feb 25 18:14:16 relay MailScanner[7847]: Spam Checks: Starting
860Feb 25 18:14:18 relay dccifd[7076]: continue not asking DCC 290 seconds after 5 failures
861Feb 25 18:14:27 relay MailScanner[7847]: Requeue: 447T7n22QZzJfDH to 447T834rZvz14qW
862Feb 25 18:14:27 relay postfix/qmqpd[14757]: connect from localhost[127.0.0.1]
863Feb 25 18:14:27 relay postfix/qmqpd[14757]: 447T834vkSzJfDH: client=localhost[127.0.0.1]
864Feb 25 18:14:27 relay postfix/cleanup[14732]: 447T834vkSzJfDH: message-id=<fbd0e9b7938d4f21b3b11fcabfc86663@hdnoord.nl>
865Feb 25 18:14:27 relay opendkim[6573]: 447T834vkSzJfDH: no signing table match for 'andre@hdnoord.nl'
866Feb 25 18:14:27 relay opendkim[6573]: 447T834vkSzJfDH: failed to parse Authentication-Results: header field
867Feb 25 18:14:27 relay opendkim[6573]: 447T834vkSzJfDH: no signature data
868Feb 25 18:14:27 relay postfix/qmqpd[14757]: disconnect from localhost[127.0.0.1]
869Feb 25 18:14:27 relay postfix/qmgr[7039]: 447T834vkSzJfDH: from=<andre@hdnoord.nl>, size=203461, nrcpt=1 (queue active)
870Feb 25 18:14:27 relay MailScanner[7847]: Uninfected: Delivered 1 messages
871Feb 25 18:14:27 relay MailScanner[7847]: Deleted 1 messages from processing-database
872Feb 25 18:14:27 relay MailScanner[7847]: MailWatch: Logging message 447T7n22QZzJfDH to SQL
873Feb 25 18:14:28 relay postfix/smtp[14759]: 447T834vkSzJfDH: to=<info@dks-international.com>, relay=92.64.151.192[92.64.151.192]:25, delay=0.45, delays=0.13/0.01/0.13/0.18, dsn=2.6.0, status=sent (250 2.6.0 <fbd0e9b7938d4f21b3b11fcabfc86663@hdnoord.nl> [InternalId=165171557302285, Hostname=EX-DKS.DKS.lan] Queued mail for delivery)
874Feb 25 18:14:28 relay postfix/qmgr[7039]: 447T834vkSzJfDH: removed
875Feb 25 18:15:04 relay postfix/smtpd[14587]: warning: hostname 195-154-61-142.rev.poneytelecom.eu does not resolve to address 195.154.61.142: Name or service not known
876Feb 25 18:15:04 relay postfix/smtpd[14587]: connect from unknown[195.154.61.142]
877Feb 25 18:15:04 relay postfix/smtpd[14587]: warning: non-SMTP command from unknown[195.154.61.142]: CONNECT 45.33.54.195:80 HTTP/1.0
878Feb 25 18:15:04 relay postfix/smtpd[14587]: disconnect from unknown[195.154.61.142] unknown=0/1 commands=0/1
879Feb 25 18:15:04 relay postfix/smtpd[14587]: warning: hostname 195-154-61-142.rev.poneytelecom.eu does not resolve to address 195.154.61.142: Name or service not known
880Feb 25 18:15:04 relay postfix/smtpd[14587]: connect from unknown[195.154.61.142]
881Feb 25 18:15:04 relay postfix/smtpd[14587]: lost connection after CONNECT from unknown[195.154.61.142]
882Feb 25 18:15:04 relay postfix/smtpd[14587]: disconnect from unknown[195.154.61.142] commands=0/0
883Feb 25 18:15:04 relay postfix/smtpd[14587]: warning: hostname 195-154-61-142.rev.poneytelecom.eu does not resolve to address 195.154.61.142: Name or service not known
884Feb 25 18:15:04 relay postfix/smtpd[14587]: connect from unknown[195.154.61.142]
885Feb 25 18:15:04 relay postfix/smtpd[14587]: lost connection after CONNECT from unknown[195.154.61.142]
886Feb 25 18:15:04 relay postfix/smtpd[14587]: disconnect from unknown[195.154.61.142] commands=0/0
887Feb 25 18:15:04 relay postfix/smtpd[14587]: warning: hostname 195-154-61-142.rev.poneytelecom.eu does not resolve to address 195.154.61.142: Name or service not known
888Feb 25 18:15:04 relay postfix/smtpd[14587]: connect from unknown[195.154.61.142]
889Feb 25 18:15:04 relay postfix/smtpd[14587]: warning: non-SMTP command from unknown[195.154.61.142]: GET http://proxyjudge.us/judge.php HTTP/1.0
890Feb 25 18:15:04 relay postfix/smtpd[14587]: disconnect from unknown[195.154.61.142] unknown=0/1 commands=0/1
891Feb 25 18:15:20 relay postfix/smtpd[14587]: connect from mailserver.service.icscards.nl[81.175.104.136]
892Feb 25 18:15:21 relay postfix/smtpd[14587]: Anonymous TLS connection established from mailserver.service.icscards.nl[81.175.104.136]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
893Feb 25 18:15:21 relay sqlgrey: grey: from awl match: updating 81.175.104(81.175.104.136), bounce@service.icscards.nl(bounce@service.icscards.nl)
894Feb 25 18:15:21 relay postfix/smtpd[14587]: 447T955yKmzJfDH: client=mailserver.service.icscards.nl[81.175.104.136]
895Feb 25 18:15:21 relay postfix/cleanup[14732]: 447T955yKmzJfDH: message-id=<rm536f049898ce953c685d2756fd59ade220190225061520@service.icscards.nl>
896Feb 25 18:15:21 relay opendkim[6573]: 447T955yKmzJfDH: mailserver.service.icscards.nl [81.175.104.136] not internal
897Feb 25 18:15:21 relay opendkim[6573]: 447T955yKmzJfDH: not authenticated
898Feb 25 18:15:21 relay opendkim[6573]: 447T955yKmzJfDH: DKIM verification successful
899Feb 25 18:15:22 relay MSMilter[14901]: MailWatch: Whitelist refresh time reached
900Feb 25 18:15:22 relay MSMilter[14901]: MailWatch: Starting up MailWatch SQL Whitelist
901Feb 25 18:15:22 relay MSMilter[14901]: MailWatch: Read 35 whitelist entries
902Feb 25 18:15:22 relay MSMilter[14901]: MailWatch: Blacklist refresh time reached
903Feb 25 18:15:22 relay MSMilter[14901]: MailWatch: Starting up MailWatch SQL Blacklist
904Feb 25 18:15:22 relay MSMilter[14901]: MailWatch: Read 0 blacklist entries
905Feb 25 18:15:22 relay postfix/cleanup[14732]: 447T955yKmzJfDH: milter-discard: END-OF-MESSAGE from mailserver.service.icscards.nl[81.175.104.136]: milter triggers DISCARD action; from=<bounce@service.icscards.nl> to=<hattouf@attcomputer.nl> proto=ESMTP helo=<mailserver.service.icscards.nl>
906Feb 25 18:15:22 relay postfix/smtpd[14587]: disconnect from mailserver.service.icscards.nl[81.175.104.136] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
907Feb 25 18:15:23 relay MailScanner[7999]: New Batch: Scanning 1 messages, 9629 bytes
908Feb 25 18:15:23 relay MailScanner[7999]: Virus and Content Scanning: Starting
909Feb 25 18:15:23 relay MailScanner[7999]: HTML Img tag found in message 447T955yKmzJfDH from bounce@service.icscards.nl
910Feb 25 18:15:23 relay MailScanner[7999]: Spam Checks: Starting
911Feb 25 18:15:23 relay MailScanner[7999]: Expired 2 records from the SpamAssassin cache
912Feb 25 18:15:24 relay dccifd[7076]: continue not asking DCC 224 seconds after 5 failures
913Feb 25 18:15:33 relay MailScanner[7999]: Requeue: 447T955yKmzJfDH to 447T9K313pz14qZ
914Feb 25 18:15:33 relay postfix/qmqpd[14757]: connect from localhost[127.0.0.1]
915Feb 25 18:15:33 relay postfix/qmqpd[14757]: 447T9K31v7zJfDH: client=localhost[127.0.0.1]
916Feb 25 18:15:33 relay postfix/cleanup[14732]: 447T9K31v7zJfDH: message-id=<rm536f049898ce953c685d2756fd59ade220190225061520@service.icscards.nl>
917Feb 25 18:15:33 relay opendkim[6573]: 447T9K31v7zJfDH: no signing table match for 'noreply@service.icscards.nl'
918Feb 25 18:15:33 relay opendkim[6573]: 447T9K31v7zJfDH: DKIM verification successful
919Feb 25 18:15:33 relay postfix/qmqpd[14757]: disconnect from localhost[127.0.0.1]
920Feb 25 18:15:33 relay postfix/qmgr[7039]: 447T9K31v7zJfDH: from=<bounce@service.icscards.nl>, size=10046, nrcpt=1 (queue active)
921Feb 25 18:15:33 relay MailScanner[7999]: Uninfected: Delivered 1 messages
922Feb 25 18:15:33 relay MailScanner[7999]: Deleted 1 messages from processing-database
923Feb 25 18:15:33 relay MailScanner[7999]: MailWatch: Logging message 447T955yKmzJfDH to SQL
924Feb 25 18:15:38 relay postfix/smtp[14759]: 447T9K31v7zJfDH: to=<hattouf@attcomputer.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=5.1, delays=0.05/0/0.02/5, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
925Feb 25 18:15:48 relay postfix/cleanup[14732]: 447T9c3gMtzJfDj: message-id=<447T9c3gMtzJfDj@relay.attcomputer.nl>
926Feb 25 18:15:48 relay postfix/qmgr[7039]: 447T9c3gMtzJfDj: from=<>, size=12366, nrcpt=1 (queue active)
927Feb 25 18:15:48 relay postfix/bounce[14915]: 447T9K31v7zJfDH: sender non-delivery notification: 447T9c3gMtzJfDj
928Feb 25 18:15:48 relay postfix/qmgr[7039]: 447T9K31v7zJfDH: removed
929Feb 25 18:15:48 relay postfix/smtp[14759]: 447T9c3gMtzJfDj: to=<bounce@service.icscards.nl>, relay=mailserver.service.icscards.nl[81.175.104.136]:25, delay=0.16, delays=0.01/0/0.12/0.03, dsn=2.6.0, status=sent (250 2.6.0 message received)
930Feb 25 18:15:48 relay postfix/qmgr[7039]: 447T9c3gMtzJfDj: removed
931Feb 25 18:16:22 relay postfix/smtpd[14587]: connect from unknown[81.17.81.34]
932Feb 25 18:16:23 relay postfix/smtpd[14587]: NOQUEUE: reject: RCPT from unknown[81.17.81.34]: 554 5.7.1 Service unavailable; Client host [81.17.81.34] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/81.17.81.34; from=<GaryRobinson@desi-gn.fr> to=<skclcyex3pqeaaaaa@remedialeducation.nl> proto=ESMTP helo=<desi-gn.fr>
933Feb 25 18:16:23 relay postfix/smtpd[14587]: NOQUEUE: reject: RCPT from unknown[81.17.81.34]: 554 5.7.1 Service unavailable; Client host [81.17.81.34] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/81.17.81.34; from=<GaryRobinson@desi-gn.fr> to=<smd78aeaaaaa@remedialeducation.nl> proto=ESMTP helo=<desi-gn.fr>
934Feb 25 18:16:23 relay postfix/smtpd[14587]: lost connection after RCPT from unknown[81.17.81.34]
935Feb 25 18:16:23 relay postfix/smtpd[14587]: disconnect from unknown[81.17.81.34] ehlo=1 mail=1 rcpt=0/2 commands=2/4
936Feb 25 18:16:51 relay postfix/smtpd[14587]: connect from unknown[121.157.50.191]
937Feb 25 18:16:51 relay postfix/smtpd[14587]: warning: non-SMTP command from unknown[121.157.50.191]: CONNECT 45.33.54.195:80 HTTP/1.0
938Feb 25 18:16:51 relay postfix/smtpd[14587]: disconnect from unknown[121.157.50.191] unknown=0/1 commands=0/1
939Feb 25 18:16:52 relay postfix/smtpd[14587]: connect from unknown[121.157.50.191]
940Feb 25 18:16:52 relay postfix/smtpd[14587]: lost connection after CONNECT from unknown[121.157.50.191]
941Feb 25 18:16:52 relay postfix/smtpd[14587]: disconnect from unknown[121.157.50.191] commands=0/0
942Feb 25 18:16:52 relay postfix/smtpd[14587]: connect from unknown[121.157.50.191]
943Feb 25 18:16:53 relay postfix/smtpd[14587]: lost connection after CONNECT from unknown[121.157.50.191]
944Feb 25 18:16:53 relay postfix/smtpd[14587]: disconnect from unknown[121.157.50.191] commands=0/0
945Feb 25 18:16:53 relay postfix/smtpd[14587]: connect from unknown[121.157.50.191]
946Feb 25 18:16:53 relay postfix/smtpd[14587]: warning: non-SMTP command from unknown[121.157.50.191]: GET http://proxyjudge.us/judge.php HTTP/1.0
947Feb 25 18:16:53 relay postfix/smtpd[14587]: disconnect from unknown[121.157.50.191] unknown=0/1 commands=0/1
948Feb 25 18:18:53 relay postfix/smtpd[15307]: connect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]
949Feb 25 18:18:53 relay postfix/smtpd[15308]: connect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]
950Feb 25 18:18:53 relay sqlgrey: grey: new: 18.205.66.21(18.205.66.21), name@example.org -> schmidt@premium-panels.com
951Feb 25 18:18:53 relay postfix/smtpd[15307]: NOQUEUE: reject: RCPT from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]: 451 4.7.1 <schmidt@premium-panels.com>: Recipient address rejected: Greylisted for 5 minutes; from=<name@example.org> to=<schmidt@premium-panels.com> proto=ESMTP helo=<mail.example.org>
952Feb 25 18:18:53 relay sqlgrey: grey: throttling: 18.205.66.21(18.205.66.21), name@example.org -> info@dks-international.com
953Feb 25 18:18:53 relay postfix/smtpd[15308]: NOQUEUE: reject: RCPT from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21]: 451 4.7.1 <info@dks-international.com>: Recipient address rejected: Throttling too many connections from new source - Try again later.; from=<name@example.org> to=<info@dks-international.com> proto=ESMTP helo=<mail.example.org>
954Feb 25 18:18:53 relay postfix/smtpd[15307]: disconnect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
955Feb 25 18:18:53 relay postfix/smtpd[15308]: disconnect from ec2-18-205-66-21.compute-1.amazonaws.com[18.205.66.21] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
956Feb 25 18:19:16 relay postfix/smtpd[15307]: connect from maila-cd.linkedin.com[108.174.6.132]
957Feb 25 18:19:16 relay postfix/smtpd[15307]: Anonymous TLS connection established from maila-cd.linkedin.com[108.174.6.132]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
958Feb 25 18:19:17 relay sqlgrey: grey: domain awl match: updating 108.174.6(108.174.6.132), bounce.linkedin.com
959Feb 25 18:19:17 relay postfix/smtpd[15307]: 447TFd2SDPzJfDH: client=maila-cd.linkedin.com[108.174.6.132]
960Feb 25 18:19:17 relay postfix/cleanup[15443]: 447TFd2SDPzJfDH: message-id=<1455910041.1511936.1551115147441.JavaMail.app@lor1-app15770.prod.linkedin.com>
961Feb 25 18:19:17 relay opendkim[6573]: 447TFd2SDPzJfDH: maila-cd.linkedin.com [108.174.6.132] not internal
962Feb 25 18:19:17 relay opendkim[6573]: 447TFd2SDPzJfDH: not authenticated
963Feb 25 18:19:18 relay opendkim[6573]: 447TFd2SDPzJfDH: message has signatures from linkedin.com, maila.linkedin.com
964Feb 25 18:19:18 relay opendkim[6573]: 447TFd2SDPzJfDH: DKIM verification successful
965Feb 25 18:19:18 relay MSMilter[15442]: MailWatch: Whitelist refresh time reached
966Feb 25 18:19:18 relay MSMilter[15442]: MailWatch: Starting up MailWatch SQL Whitelist
967Feb 25 18:19:18 relay MSMilter[15442]: MailWatch: Read 35 whitelist entries
968Feb 25 18:19:18 relay MSMilter[15442]: MailWatch: Blacklist refresh time reached
969Feb 25 18:19:18 relay MSMilter[15442]: MailWatch: Starting up MailWatch SQL Blacklist
970Feb 25 18:19:18 relay MSMilter[15442]: MailWatch: Read 0 blacklist entries
971Feb 25 18:19:18 relay postfix/cleanup[15443]: 447TFd2SDPzJfDH: milter-discard: END-OF-MESSAGE from maila-cd.linkedin.com[108.174.6.132]: milter triggers DISCARD action; from=<s-2tl8q9wmoprq6am8x912ttd5xmkqcllu9p1ftkv09p2xqkufunwupeg2@bounce.linkedin.com> to=<richard@dks-international.com> proto=ESMTP helo=<maila-cd.linkedin.com>
972Feb 25 18:19:21 relay postfix/smtpd[15308]: connect from static.30.32.216.95.clients.your-server.de[95.216.32.30]
973Feb 25 18:19:22 relay postfix/smtpd[15308]: warning: non-SMTP command from static.30.32.216.95.clients.your-server.de[95.216.32.30]: CONNECT 45.33.54.195:80 HTTP/1.0
974Feb 25 18:19:22 relay postfix/smtpd[15308]: disconnect from static.30.32.216.95.clients.your-server.de[95.216.32.30] unknown=0/1 commands=0/1
975Feb 25 18:19:22 relay postfix/smtpd[15308]: connect from static.30.32.216.95.clients.your-server.de[95.216.32.30]
976Feb 25 18:19:22 relay postfix/smtpd[15308]: lost connection after CONNECT from static.30.32.216.95.clients.your-server.de[95.216.32.30]
977Feb 25 18:19:22 relay postfix/smtpd[15308]: disconnect from static.30.32.216.95.clients.your-server.de[95.216.32.30] commands=0/0
978Feb 25 18:19:22 relay postfix/smtpd[15308]: connect from static.30.32.216.95.clients.your-server.de[95.216.32.30]
979Feb 25 18:19:22 relay postfix/smtpd[15308]: lost connection after CONNECT from static.30.32.216.95.clients.your-server.de[95.216.32.30]
980Feb 25 18:19:22 relay postfix/smtpd[15308]: disconnect from static.30.32.216.95.clients.your-server.de[95.216.32.30] commands=0/0
981Feb 25 18:19:22 relay postfix/smtpd[15308]: connect from static.30.32.216.95.clients.your-server.de[95.216.32.30]
982Feb 25 18:19:22 relay postfix/smtpd[15308]: warning: non-SMTP command from static.30.32.216.95.clients.your-server.de[95.216.32.30]: GET http://proxyjudge.us/judge.php HTTP/1.0
983Feb 25 18:19:22 relay postfix/smtpd[15308]: disconnect from static.30.32.216.95.clients.your-server.de[95.216.32.30] unknown=0/1 commands=0/1
984Feb 25 18:19:23 relay postfix/smtpd[15307]: disconnect from maila-cd.linkedin.com[108.174.6.132] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
985Feb 25 18:19:24 relay MailScanner[7984]: New Batch: Scanning 1 messages, 35194 bytes
986Feb 25 18:19:24 relay MailScanner[7984]: Virus and Content Scanning: Starting
987Feb 25 18:19:24 relay MailScanner[7984]: HTML Img tag found in message 447TFd2SDPzJfDH from s-2tl8q9wmoprq6am8x912ttd5xmkqcllu9p1ftkv09p2xqkufunwupeg2@bounce.linkedin.com
988Feb 25 18:19:24 relay MailScanner[7984]: Spam Checks: Starting
989Feb 25 18:19:29 relay dccifd[7076]: no working DCC servers dcc1.dcc-servers.net dcc2.dcc-servers.net dcc3.dcc-servers.net ... at 137.208.8.63 74.92.232.243
990Feb 25 18:19:38 relay MailScanner[7984]: Requeue: 447TFd2SDPzJfDH to 447TG250Vxz14qd
991Feb 25 18:19:38 relay postfix/qmqpd[15467]: connect from localhost[127.0.0.1]
992Feb 25 18:19:38 relay postfix/qmqpd[15467]: 447TG254HQzJfDH: client=localhost[127.0.0.1]
993Feb 25 18:19:38 relay postfix/cleanup[15443]: 447TG254HQzJfDH: message-id=<1455910041.1511936.1551115147441.JavaMail.app@lor1-app15770.prod.linkedin.com>
994Feb 25 18:19:38 relay opendkim[6573]: 447TG254HQzJfDH: no signing table match for 'invitations@linkedin.com'
995Feb 25 18:19:38 relay opendkim[6573]: 447TG254HQzJfDH: message has signatures from linkedin.com, maila.linkedin.com
996Feb 25 18:19:38 relay opendkim[6573]: 447TG254HQzJfDH: DKIM verification successful
997Feb 25 18:19:38 relay postfix/qmqpd[15467]: disconnect from localhost[127.0.0.1]
998Feb 25 18:19:38 relay postfix/qmgr[7039]: 447TG254HQzJfDH: from=<s-2tl8q9wmoprq6am8x912ttd5xmkqcllu9p1ftkv09p2xqkufunwupeg2@bounce.linkedin.com>, size=35576, nrcpt=1 (queue active)
999Feb 25 18:19:38 relay MailScanner[7984]: Uninfected: Delivered 1 messages
1000Feb 25 18:19:38 relay MailScanner[7984]: Deleted 1 messages from processing-database
1001Feb 25 18:19:38 relay MailScanner[7984]: MailWatch: Logging message 447TFd2SDPzJfDH to SQL
1002Feb 25 18:19:39 relay postfix/smtp[15469]: 447TG254HQzJfDH: to=<richard@dks-international.com>, relay=92.64.151.192[92.64.151.192]:25, delay=0.32, delays=0.05/0.02/0.13/0.13, dsn=2.6.0, status=sent (250 2.6.0 <1455910041.1511936.1551115147441.JavaMail.app@lor1-app15770.prod.linkedin.com> [InternalId=165171557302288, Hostname=EX-DKS.DKS.lan] Queued mail for delivery)
1003Feb 25 18:19:39 relay postfix/qmgr[7039]: 447TG254HQzJfDH: removed
1004Feb 25 18:20:48 relay postfix/anvil[8242]: statistics: max connection rate 7/60s for (smtp:212.129.38.73) at Feb 25 18:13:54
1005Feb 25 18:20:48 relay postfix/anvil[8242]: statistics: max connection count 2 for (smtp:18.205.66.21) at Feb 25 18:18:53
1006Feb 25 18:20:48 relay postfix/anvil[8242]: statistics: max cache size 3 at Feb 25 18:11:16
1007Feb 25 18:21:39 relay postfix/smtpd[15735]: warning: hostname 45.76.62.41.vultr.com does not resolve to address 45.76.62.41: Name or service not known
1008Feb 25 18:21:39 relay postfix/smtpd[15735]: connect from unknown[45.76.62.41]
1009Feb 25 18:21:39 relay postfix/smtpd[15735]: warning: non-SMTP command from unknown[45.76.62.41]: CONNECT 45.33.54.195:80 HTTP/1.0
1010Feb 25 18:21:39 relay postfix/smtpd[15735]: disconnect from unknown[45.76.62.41] unknown=0/1 commands=0/1
1011Feb 25 18:21:39 relay postfix/smtpd[15735]: warning: hostname 45.76.62.41.vultr.com does not resolve to address 45.76.62.41: Name or service not known
1012Feb 25 18:21:39 relay postfix/smtpd[15735]: connect from unknown[45.76.62.41]
1013Feb 25 18:21:39 relay postfix/smtpd[15735]: lost connection after CONNECT from unknown[45.76.62.41]
1014Feb 25 18:21:39 relay postfix/smtpd[15735]: disconnect from unknown[45.76.62.41] commands=0/0
1015Feb 25 18:21:39 relay postfix/smtpd[15735]: warning: hostname 45.76.62.41.vultr.com does not resolve to address 45.76.62.41: Name or service not known
1016Feb 25 18:21:39 relay postfix/smtpd[15735]: connect from unknown[45.76.62.41]
1017Feb 25 18:21:40 relay postfix/smtpd[15735]: lost connection after CONNECT from unknown[45.76.62.41]
1018Feb 25 18:21:40 relay postfix/smtpd[15735]: disconnect from unknown[45.76.62.41] commands=0/0
1019Feb 25 18:21:40 relay postfix/smtpd[15735]: warning: hostname 45.76.62.41.vultr.com does not resolve to address 45.76.62.41: Name or service not known
1020Feb 25 18:21:40 relay postfix/smtpd[15735]: connect from unknown[45.76.62.41]
1021Feb 25 18:21:40 relay postfix/smtpd[15735]: warning: non-SMTP command from unknown[45.76.62.41]: GET http://proxyjudge.us/judge.php HTTP/1.0
1022Feb 25 18:21:40 relay postfix/smtpd[15735]: disconnect from unknown[45.76.62.41] unknown=0/1 commands=0/1
1023Feb 25 18:21:44 relay postfix/smtpd[15735]: connect from unknown[37.49.227.49]
1024Feb 25 18:21:44 relay postfix/smtpd[15735]: disconnect from unknown[37.49.227.49] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
1025Feb 25 18:22:38 relay postfix/smtpd[15735]: connect from 118.120-54-92.telenet.ru[92.54.120.118]
1026Feb 25 18:22:57 relay postfix/smtpd[15735]: NOQUEUE: reject: RCPT from 118.120-54-92.telenet.ru[92.54.120.118]: 554 5.7.1 Service unavailable; Client host [92.54.120.118] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/92.54.120.118; from=<JamesBrown@telenet.ru> to=<efk47qeaaaaa@remedialeducation.nl> proto=ESMTP helo=<118.120-54-92.telenet.ru>
1027Feb 25 18:23:02 relay postfix/smtpd[15735]: NOQUEUE: reject: RCPT from 118.120-54-92.telenet.ru[92.54.120.118]: 554 5.7.1 Service unavailable; Client host [92.54.120.118] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/92.54.120.118; from=<JamesBrown@telenet.ru> to=<eantwinsiah@remedialeducation.nl> proto=ESMTP helo=<118.120-54-92.telenet.ru>
1028Feb 25 18:23:08 relay postfix/smtpd[15735]: NOQUEUE: reject: RCPT from 118.120-54-92.telenet.ru[92.54.120.118]: 554 5.7.1 Service unavailable; Client host [92.54.120.118] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/92.54.120.118; from=<JamesBrown@telenet.ru> to=<e7ikexaeaaaaa@remedialeducation.nl> proto=ESMTP helo=<118.120-54-92.telenet.ru>
1029Feb 25 18:23:13 relay postfix/smtpd[15735]: NOQUEUE: reject: RCPT from 118.120-54-92.telenet.ru[92.54.120.118]: 554 5.7.1 Service unavailable; Client host [92.54.120.118] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/92.54.120.118; from=<JamesBrown@telenet.ru> to=<eivnyq9qeaaaaa@remedialeducation.nl> proto=ESMTP helo=<118.120-54-92.telenet.ru>
1030Feb 25 18:23:18 relay postfix/smtpd[15735]: lost connection after RCPT from 118.120-54-92.telenet.ru[92.54.120.118]
1031Feb 25 18:23:18 relay postfix/smtpd[15735]: disconnect from 118.120-54-92.telenet.ru[92.54.120.118] ehlo=1 mail=1 rcpt=0/4 commands=2/6
1032Feb 25 18:25:01 relay postfix/smtpd[16214]: warning: hostname host237-150-38-89.static.arubacloud.fr does not resolve to address 89.38.150.237: Name or service not known
1033Feb 25 18:25:01 relay postfix/smtpd[16214]: connect from unknown[89.38.150.237]
1034Feb 25 18:25:01 relay sqlgrey: grey: reconnect ok: 89.38.150.237(89.38.150.237), admin@modernel.cf -> info@dks-international.com (01:11:18)
1035Feb 25 18:25:01 relay sqlgrey: grey: from awl: 89.38.150.237, admin@modernel.cf added
1036Feb 25 18:25:01 relay postfix/smtpd[16214]: 447TNF4LxQzJfDH: client=unknown[89.38.150.237]
1037Feb 25 18:25:01 relay postfix/cleanup[16265]: 447TNF4LxQzJfDH: message-id=<20190225075520.0D343E1F8A88E259@modernel.cf>
1038Feb 25 18:25:01 relay opendkim[6573]: 447TNF4LxQzJfDH: [89.38.150.237] [89.38.150.237] not internal
1039Feb 25 18:25:01 relay opendkim[6573]: 447TNF4LxQzJfDH: not authenticated
1040Feb 25 18:25:01 relay opendkim[6573]: 447TNF4LxQzJfDH: no signature data
1041Feb 25 18:25:02 relay MSMilter[16231]: MailWatch: Whitelist refresh time reached
1042Feb 25 18:25:02 relay MSMilter[16231]: MailWatch: Starting up MailWatch SQL Whitelist
1043Feb 25 18:25:02 relay MSMilter[16231]: MailWatch: Read 35 whitelist entries
1044Feb 25 18:25:02 relay MSMilter[16231]: MailWatch: Blacklist refresh time reached
1045Feb 25 18:25:02 relay MSMilter[16231]: MailWatch: Starting up MailWatch SQL Blacklist
1046Feb 25 18:25:02 relay MSMilter[16231]: MailWatch: Read 0 blacklist entries
1047Feb 25 18:25:02 relay postfix/cleanup[16265]: 447TNF4LxQzJfDH: milter-discard: END-OF-MESSAGE from unknown[89.38.150.237]: milter triggers DISCARD action; from=<admin@modernel.cf> to=<info@dks-international.com> proto=ESMTP helo=<mail.besafas.ml>
1048Feb 25 18:25:02 relay postfix/smtpd[16214]: disconnect from unknown[89.38.150.237] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
1049Feb 25 18:25:02 relay MailScanner[7984]: New Batch: Scanning 1 messages, 12130 bytes
1050Feb 25 18:25:02 relay MailScanner[7984]: Virus and Content Scanning: Starting
1051Feb 25 18:25:02 relay MailScanner[7984]: HTML Img tag found in message 447TNF4LxQzJfDH from admin@modernel.cf
1052Feb 25 18:25:02 relay MailScanner[7984]: Spam Checks: Starting
1053Feb 25 18:25:02 relay MailScanner[7984]: Expired 4 records from the SpamAssassin cache
1054Feb 25 18:25:03 relay dccifd[7076]: continue not asking DCC 178 seconds after 5 failures
1055Feb 25 18:25:12 relay MailScanner[7984]: Message 447TNF4LxQzJfDH from 89.38.150.237 (admin@modernel.cf) to dks-international.com is spam, SpamAssassin (not cached, score=4.667, required 4, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.10, RCVD_IN_RP_RNBL 1.28, SPF_NEUTRAL 0.65, SUBJ_ALL_CAPS 1.62)
1056Feb 25 18:25:12 relay MailScanner[7984]: Spam Checks: Found 1 spam messages
1057Feb 25 18:25:12 relay MailScanner[7984]: Spam Actions: message 447TNF4LxQzJfDH actions are store
1058Feb 25 18:25:12 relay MailScanner[7984]: Deleted 1 messages from processing-database
1059Feb 25 18:25:12 relay MailScanner[7984]: MailWatch: Logging message 447TNF4LxQzJfDH to SQL
1060Feb 25 18:25:39 relay postfix/smtpd[16214]: connect from unknown[188.165.89.119]
1061Feb 25 18:25:40 relay postfix/smtpd[16214]: warning: non-SMTP command from unknown[188.165.89.119]: CONNECT 45.33.54.195:80 HTTP/1.0
1062Feb 25 18:25:40 relay postfix/smtpd[16214]: disconnect from unknown[188.165.89.119] unknown=0/1 commands=0/1
1063Feb 25 18:25:40 relay postfix/smtpd[16214]: connect from unknown[188.165.89.119]
1064Feb 25 18:25:40 relay postfix/smtpd[16214]: lost connection after CONNECT from unknown[188.165.89.119]
1065Feb 25 18:25:40 relay postfix/smtpd[16214]: disconnect from unknown[188.165.89.119] commands=0/0
1066Feb 25 18:25:40 relay postfix/smtpd[16214]: connect from unknown[188.165.89.119]
1067Feb 25 18:25:40 relay postfix/smtpd[16214]: lost connection after CONNECT from unknown[188.165.89.119]
1068Feb 25 18:25:40 relay postfix/smtpd[16214]: disconnect from unknown[188.165.89.119] commands=0/0
1069Feb 25 18:25:40 relay postfix/smtpd[16214]: connect from unknown[188.165.89.119]
1070Feb 25 18:25:40 relay postfix/smtpd[16214]: warning: non-SMTP command from unknown[188.165.89.119]: GET http://proxyjudge.us/judge.php HTTP/1.0
1071Feb 25 18:25:40 relay postfix/smtpd[16214]: disconnect from unknown[188.165.89.119] unknown=0/1 commands=0/1
1072Feb 25 18:25:57 relay postfix/smtpd[16214]: connect from cm2.capgeminioutsourcing.nl[192.113.204.147]
1073Feb 25 18:25:57 relay postfix/smtpd[16214]: Anonymous TLS connection established from cm2.capgeminioutsourcing.nl[192.113.204.147]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
1074Feb 25 18:25:58 relay sqlgrey: grey: domain awl match: updating 192.113.204(192.113.204.147), kadaster.nl
1075Feb 25 18:25:58 relay postfix/smtpd[16214]: 447TPL40GNzJfDH: client=cm2.capgeminioutsourcing.nl[192.113.204.147]
1076Feb 25 18:25:58 relay postfix/cleanup[16265]: 447TPL40GNzJfDH: message-id=<5C742524.00059E.02097@csu262.cs.kadaster.nl>
1077Feb 25 18:25:58 relay opendkim[6573]: 447TPL40GNzJfDH: cm2.capgeminioutsourcing.nl [192.113.204.147] not internal
1078Feb 25 18:25:58 relay opendkim[6573]: 447TPL40GNzJfDH: not authenticated
1079Feb 25 18:25:58 relay opendkim[6573]: 447TPL40GNzJfDH: DKIM verification successful
1080Feb 25 18:25:59 relay MSMilter[16290]: MailWatch: Whitelist refresh time reached
1081Feb 25 18:25:59 relay MSMilter[16290]: MailWatch: Starting up MailWatch SQL Whitelist
1082Feb 25 18:25:59 relay MSMilter[16290]: MailWatch: Read 35 whitelist entries
1083Feb 25 18:25:59 relay MSMilter[16290]: MailWatch: Blacklist refresh time reached
1084Feb 25 18:25:59 relay MSMilter[16290]: MailWatch: Starting up MailWatch SQL Blacklist
1085Feb 25 18:25:59 relay MSMilter[16290]: MailWatch: Read 0 blacklist entries
1086Feb 25 18:25:59 relay postfix/cleanup[16265]: 447TPL40GNzJfDH: milter-discard: END-OF-MESSAGE from cm2.capgeminioutsourcing.nl[192.113.204.147]: milter triggers DISCARD action; from=<prvs=952e8fabd=kcc@kadaster.nl> to=<a.goes@agogroep.nl> proto=ESMTP helo=<cleanmail4.capgeminioutsourcing.nl>
1087Feb 25 18:26:04 relay postfix/smtpd[16214]: disconnect from cm2.capgeminioutsourcing.nl[192.113.204.147] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
1088Feb 25 18:26:06 relay MailScanner[7984]: New Batch: Scanning 1 messages, 58292 bytes
1089Feb 25 18:26:06 relay MailScanner[7984]: Virus and Content Scanning: Starting
1090Feb 25 18:26:06 relay MailScanner[7984]: Spam Checks: Starting
1091Feb 25 18:26:06 relay MailScanner[7984]: MailWatch: Whitelist refresh time reached
1092Feb 25 18:26:06 relay MailScanner[7984]: MailWatch: Starting up MailWatch SQL Whitelist
1093Feb 25 18:26:06 relay MailScanner[7984]: MailWatch: Read 35 whitelist entries
1094Feb 25 18:26:06 relay MailScanner[7984]: MailWatch: Blacklist refresh time reached
1095Feb 25 18:26:06 relay MailScanner[7984]: MailWatch: Starting up MailWatch SQL Blacklist
1096Feb 25 18:26:06 relay MailScanner[7984]: MailWatch: Read 0 blacklist entries
1097Feb 25 18:26:07 relay dccifd[7076]: continue not asking DCC 114 seconds after 5 failures
1098Feb 25 18:26:16 relay MailScanner[7984]: Requeue: 447TPL40GNzJfDH to 447TPh65vmz14qh
1099Feb 25 18:26:16 relay postfix/qmqpd[16433]: connect from localhost[127.0.0.1]
1100Feb 25 18:26:16 relay postfix/qmqpd[16433]: 447TPh6BjVzJfDH: client=localhost[127.0.0.1]
1101Feb 25 18:26:16 relay postfix/cleanup[16265]: 447TPh6BjVzJfDH: message-id=<5C742524.00059E.02097@csu262.cs.kadaster.nl>
1102Feb 25 18:26:16 relay opendkim[6573]: 447TPh6BjVzJfDH: no signing table match for 'kcc@kadaster.nl'
1103Feb 25 18:26:16 relay opendkim[6573]: 447TPh6BjVzJfDH: DKIM verification successful
1104Feb 25 18:26:16 relay postfix/qmqpd[16433]: disconnect from localhost[127.0.0.1]
1105Feb 25 18:26:16 relay MailScanner[7984]: Uninfected: Delivered 1 messages
1106Feb 25 18:26:16 relay postfix/qmgr[7039]: 447TPh6BjVzJfDH: from=<prvs=952e8fabd=kcc@kadaster.nl>, size=58677, nrcpt=1 (queue active)
1107Feb 25 18:26:16 relay MailScanner[7984]: Deleted 1 messages from processing-database
1108Feb 25 18:26:16 relay MailScanner[7984]: MailWatch: Logging message 447TPL40GNzJfDH to SQL
1109Feb 25 18:26:30 relay postfix/smtp[16435]: 447TPh6BjVzJfDH: to=<a.goes@agogroep.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=14, delays=0.05/0.02/0.02/14, dsn=5.7.107, status=bounced (host 192.168.4.5[192.168.4.5] said: 550 5.7.107 Your IP address is listed by Spamhaus Zen. You can delete it on page http://www.spamhaus.org/lookup/ (in reply to RCPT TO command))
1110Feb 25 18:26:40 relay postfix/cleanup[16265]: 447TQ86S6JzJfDj: message-id=<447TQ86S6JzJfDj@relay.attcomputer.nl>
1111Feb 25 18:26:40 relay postfix/bounce[16436]: 447TPh6BjVzJfDH: sender non-delivery notification: 447TQ86S6JzJfDj
1112Feb 25 18:26:40 relay postfix/qmgr[7039]: 447TPh6BjVzJfDH: removed
1113Feb 25 18:26:40 relay postfix/qmgr[7039]: 447TQ86S6JzJfDj: from=<>, size=4382, nrcpt=1 (queue active)
1114Feb 25 18:26:43 relay postfix/smtp[16435]: 447TQ86S6JzJfDj: to=<prvs=952e8fabd=kcc@kadaster.nl>, relay=cleanmail4.capgeminioutsourcing.nl[192.113.204.147]:25, delay=2.3, delays=0.01/0/2.2/0.11, dsn=2.0.0, status=sent (250 ok: Message 12987582 accepted)
1115Feb 25 18:26:43 relay postfix/qmgr[7039]: 447TQ86S6JzJfDj: removed
1116Feb 25 18:27:23 relay postfix/smtpd[16214]: connect from 34.red-83-48-54.staticip.rima-tde.net[83.48.54.34]
1117Feb 25 18:27:23 relay postfix/smtpd[16214]: warning: non-SMTP command from 34.red-83-48-54.staticip.rima-tde.net[83.48.54.34]: CONNECT 45.33.54.195:80 HTTP/1.0
1118Feb 25 18:27:23 relay postfix/smtpd[16214]: disconnect from 34.red-83-48-54.staticip.rima-tde.net[83.48.54.34] unknown=0/1 commands=0/1
1119Feb 25 18:27:23 relay postfix/smtpd[16214]: connect from 34.red-83-48-54.staticip.rima-tde.net[83.48.54.34]
1120Feb 25 18:27:23 relay postfix/smtpd[16214]: lost connection after CONNECT from 34.red-83-48-54.staticip.rima-tde.net[83.48.54.34]
1121Feb 25 18:27:23 relay postfix/smtpd[16214]: disconnect from 34.red-83-48-54.staticip.rima-tde.net[83.48.54.34] commands=0/0
1122Feb 25 18:27:23 relay postfix/smtpd[16214]: connect from 34.red-83-48-54.staticip.rima-tde.net[83.48.54.34]
1123Feb 25 18:27:23 relay postfix/smtpd[16214]: lost connection after CONNECT from 34.red-83-48-54.staticip.rima-tde.net[83.48.54.34]
1124Feb 25 18:27:23 relay postfix/smtpd[16214]: disconnect from 34.red-83-48-54.staticip.rima-tde.net[83.48.54.34] commands=0/0
1125Feb 25 18:27:23 relay postfix/smtpd[16214]: connect from 34.red-83-48-54.staticip.rima-tde.net[83.48.54.34]
1126Feb 25 18:27:23 relay postfix/smtpd[16214]: warning: non-SMTP command from 34.red-83-48-54.staticip.rima-tde.net[83.48.54.34]: GET http://proxyjudge.us/judge.php HTTP/1.0
1127Feb 25 18:27:23 relay postfix/smtpd[16214]: disconnect from 34.red-83-48-54.staticip.rima-tde.net[83.48.54.34] unknown=0/1 commands=0/1
1128Feb 25 18:27:36 relay postfix/smtpd[16214]: connect from mail13.suw15.mcsv.net[198.2.182.13]
1129Feb 25 18:27:36 relay sqlgrey: grey: from awl match: updating 198.2.182(198.2.182.13), bounce-mc.us10_#.#-RCPT@mail13.suw15.mcsv.net(bounce-mc.us10_38563773.1650681-info=ngpc.nl@mail13.suw15.mcsv.net)
1130Feb 25 18:27:36 relay postfix/smtpd[16214]: 447TRD42SRzJfDH: client=mail13.suw15.mcsv.net[198.2.182.13]
1131Feb 25 18:27:36 relay postfix/cleanup[16265]: 447TRD42SRzJfDH: message-id=<97125fd588286db2b1ae937fd.b3c26868af.20190225172725.49b82b2a31.da8732b5@mail13.suw15.mcsv.net>
1132Feb 25 18:27:36 relay opendkim[6573]: 447TRD42SRzJfDH: mail13.suw15.mcsv.net [198.2.182.13] not internal
1133Feb 25 18:27:36 relay opendkim[6573]: 447TRD42SRzJfDH: not authenticated
1134Feb 25 18:27:36 relay opendkim[6573]: 447TRD42SRzJfDH: DKIM verification successful
1135Feb 25 18:27:37 relay MSMilter[16573]: MailWatch: Whitelist refresh time reached
1136Feb 25 18:27:37 relay MSMilter[16573]: MailWatch: Starting up MailWatch SQL Whitelist
1137Feb 25 18:27:37 relay MSMilter[16573]: MailWatch: Read 35 whitelist entries
1138Feb 25 18:27:37 relay MSMilter[16573]: MailWatch: Blacklist refresh time reached
1139Feb 25 18:27:37 relay MSMilter[16573]: MailWatch: Starting up MailWatch SQL Blacklist
1140Feb 25 18:27:37 relay MSMilter[16573]: MailWatch: Read 0 blacklist entries
1141Feb 25 18:27:38 relay postfix/cleanup[16265]: 447TRD42SRzJfDH: milter-discard: END-OF-MESSAGE from mail13.suw15.mcsv.net[198.2.182.13]: milter triggers DISCARD action; from=<bounce-mc.us10_38563773.1650681-info=ngpc.nl@mail13.suw15.mcsv.net> to=<info@ngpc.nl> proto=ESMTP helo=<mail13.suw15.mcsv.net>
1142Feb 25 18:27:38 relay postfix/smtpd[16214]: disconnect from mail13.suw15.mcsv.net[198.2.182.13] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
1143Feb 25 18:27:39 relay MailScanner[7999]: New Batch: Scanning 1 messages, 89230 bytes
1144Feb 25 18:27:39 relay MailScanner[7999]: Virus and Content Scanning: Starting
1145Feb 25 18:27:39 relay postfix/smtpd[16214]: connect from unknown[41.160.225.174]
1146Feb 25 18:27:39 relay MailScanner[7999]: HTML Img tag found in message 447TRD42SRzJfDH from bounce-mc.us10_38563773.1650681-info=ngpc.nl@mail13.suw15.mcsv.net
1147Feb 25 18:27:39 relay MailScanner[7999]: Spam Checks: Starting
1148Feb 25 18:27:39 relay MailScanner[7999]: MailWatch: Whitelist refresh time reached
1149Feb 25 18:27:39 relay MailScanner[7999]: MailWatch: Starting up MailWatch SQL Whitelist
1150Feb 25 18:27:39 relay MailScanner[7999]: MailWatch: Read 35 whitelist entries
1151Feb 25 18:27:39 relay MailScanner[7999]: MailWatch: Blacklist refresh time reached
1152Feb 25 18:27:39 relay MailScanner[7999]: MailWatch: Starting up MailWatch SQL Blacklist
1153Feb 25 18:27:39 relay MailScanner[7999]: MailWatch: Read 0 blacklist entries
1154Feb 25 18:27:40 relay dccifd[7076]: continue not asking DCC 21 seconds after 5 failures
1155Feb 25 18:27:40 relay postfix/smtpd[16589]: connect from mail-oln040092071033.outbound.protection.outlook.com[40.92.71.33]
1156Feb 25 18:27:40 relay postfix/smtpd[16589]: Anonymous TLS connection established from mail-oln040092071033.outbound.protection.outlook.com[40.92.71.33]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
1157Feb 25 18:27:41 relay postfix/smtpd[16214]: NOQUEUE: reject: RCPT from unknown[41.160.225.174]: 554 5.7.1 Service unavailable; Client host [41.160.225.174] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/41.160.225.174 / https://www.spamhaus.org/sbl/query/SBLCSS; from=<EdwardWalker@infinito-cycling.com> to=<info@eurosalad.nl> proto=ESMTP helo=<infinito-cycling.com>
1158Feb 25 18:27:41 relay sqlgrey: grey: domain awl match: updating 40.92.71(40.92.71.33), hotmail.com
1159Feb 25 18:27:41 relay postfix/smtpd[16589]: 447TRK1V0VzJfDH: client=mail-oln040092071033.outbound.protection.outlook.com[40.92.71.33]
1160Feb 25 18:27:41 relay postfix/cleanup[16265]: 447TRK1V0VzJfDH: message-id=<DB6PR0802MB237551A81E52FD437952260BF27A0@DB6PR0802MB2375.eurprd08.prod.outlook.com>
1161Feb 25 18:27:41 relay opendkim[6573]: 447TRK1V0VzJfDH: mail-oln040092071033.outbound.protection.outlook.com [40.92.71.33] not internal
1162Feb 25 18:27:41 relay opendkim[6573]: 447TRK1V0VzJfDH: not authenticated
1163Feb 25 18:27:41 relay postfix/smtpd[16214]: lost connection after RCPT from unknown[41.160.225.174]
1164Feb 25 18:27:41 relay postfix/smtpd[16214]: disconnect from unknown[41.160.225.174] ehlo=1 mail=1 rcpt=0/1 commands=2/3
1165Feb 25 18:27:41 relay opendkim[6573]: 447TRK1V0VzJfDH: DKIM verification successful
1166Feb 25 18:27:43 relay MSMilter[16591]: MailWatch: Whitelist refresh time reached
1167Feb 25 18:27:43 relay MSMilter[16591]: MailWatch: Starting up MailWatch SQL Whitelist
1168Feb 25 18:27:43 relay MSMilter[16591]: MailWatch: Read 35 whitelist entries
1169Feb 25 18:27:43 relay MSMilter[16591]: MailWatch: Blacklist refresh time reached
1170Feb 25 18:27:43 relay MSMilter[16591]: MailWatch: Starting up MailWatch SQL Blacklist
1171Feb 25 18:27:43 relay MSMilter[16591]: MailWatch: Read 0 blacklist entries
1172Feb 25 18:27:43 relay postfix/cleanup[16265]: 447TRK1V0VzJfDH: milter-discard: END-OF-MESSAGE from mail-oln040092071033.outbound.protection.outlook.com[40.92.71.33]: milter triggers DISCARD action; from=<julien.nl@hotmail.com> to=<hassan@attcomputer.com> proto=ESMTP helo=<EUR03-DB5-obe.outbound.protection.outlook.com>
1173Feb 25 18:27:43 relay postfix/smtpd[16589]: disconnect from mail-oln040092071033.outbound.protection.outlook.com[40.92.71.33] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
1174Feb 25 18:27:45 relay MailScanner[7847]: New Batch: Found 2 messages waiting
1175Feb 25 18:27:45 relay MailScanner[7847]: New Batch: Scanning 1 messages, 7072 bytes
1176Feb 25 18:27:45 relay MailScanner[7847]: Virus and Content Scanning: Starting
1177Feb 25 18:27:46 relay MailScanner[7847]: Spam Checks: Starting
1178Feb 25 18:27:46 relay MailScanner[7847]: MailWatch: Whitelist refresh time reached
1179Feb 25 18:27:46 relay MailScanner[7847]: MailWatch: Starting up MailWatch SQL Whitelist
1180Feb 25 18:27:46 relay MailScanner[7847]: MailWatch: Read 35 whitelist entries
1181Feb 25 18:27:46 relay MailScanner[7847]: MailWatch: Blacklist refresh time reached
1182Feb 25 18:27:46 relay MailScanner[7847]: MailWatch: Starting up MailWatch SQL Blacklist
1183Feb 25 18:27:46 relay MailScanner[7847]: MailWatch: Read 0 blacklist entries
1184Feb 25 18:27:46 relay dccifd[7076]: continue not asking DCC 15 seconds after 5 failures
1185Feb 25 18:27:49 relay MailScanner[7999]: Content Checks: Detected and have disarmed web bug tags in HTML message in 447TRD42SRzJfDH from bounce-mc.us10_38563773.1650681-info=ngpc.nl@mail13.suw15.mcsv.net
1186Feb 25 18:27:49 relay MailScanner[7999]: Requeue: 447TRD42SRzJfDH to 447TRT3XM6z14qn
1187Feb 25 18:27:49 relay postfix/qmqpd[16433]: connect from localhost[127.0.0.1]
1188Feb 25 18:27:49 relay postfix/qmqpd[16433]: 447TRT3YGZzJfDH: client=localhost[127.0.0.1]
1189Feb 25 18:27:49 relay postfix/cleanup[16265]: 447TRT3YGZzJfDH: message-id=<97125fd588286db2b1ae937fd.b3c26868af.20190225172725.49b82b2a31.da8732b5@mail13.suw15.mcsv.net>
1190Feb 25 18:27:49 relay opendkim[6573]: 447TRT3YGZzJfDH: no signing table match for 'sales@digitekbv.com'
1191Feb 25 18:27:49 relay opendkim[6573]: 447TRT3YGZzJfDH: bad signature data
1192Feb 25 18:27:49 relay postfix/qmgr[7039]: 447TRT3YGZzJfDH: from=<bounce-mc.us10_38563773.1650681-info=ngpc.nl@mail13.suw15.mcsv.net>, size=86602, nrcpt=1 (queue active)
1193Feb 25 18:27:49 relay postfix/qmqpd[16433]: disconnect from localhost[127.0.0.1]
1194Feb 25 18:27:49 relay MailScanner[7999]: Uninfected: Delivered 1 messages
1195Feb 25 18:27:49 relay MailScanner[7999]: Deleted 1 messages from processing-database
1196Feb 25 18:27:49 relay MailScanner[7999]: MailWatch: Logging message 447TRD42SRzJfDH to SQL
1197Feb 25 18:27:49 relay postfix/smtp[16435]: 447TRT3YGZzJfDH: to=<info@ngpc.nl>, relay=192.168.4.5[192.168.4.5]:25, delay=0.48, delays=0.05/0/0.02/0.42, dsn=2.6.0, status=sent (250 2.6.0 <97125fd588286db2b1ae937fd.b3c26868af.20190225172725.49b82b2a31.da8732b5@mail13.suw15.mcsv.net> [InternalId=57582626537473, Hostname=EX02.attcomputer.lan] 88142 bytes in 0.224, 382.681 KB/sec Queued mail for delivery)
1198Feb 25 18:27:49 relay postfix/qmgr[7039]: 447TRT3YGZzJfDH: removed
1199Feb 25 18:27:55 relay MailScanner[7847]: Requeue: 447TRK1V0VzJfDH to 447TRb5Xv7z14qn
1200Feb 25 18:27:55 relay postfix/qmqpd[16433]: connect from localhost[127.0.0.1]
1201Feb 25 18:27:55 relay postfix/qmqpd[16433]: 447TRb5YF1zJfDH: client=localhost[127.0.0.1]
1202Feb 25 18:27:55 relay postfix/cleanup[16265]: 447TRb5YF1zJfDH: message-id=<DB6PR0802MB237551A81E52FD437952260BF27A0@DB6PR0802MB2375.eurprd08.prod.outlook.com>
1203Feb 25 18:27:55 relay opendkim[6573]: 447TRb5YF1zJfDH: no signing table match for 'julien.nl@hotmail.com'
1204Feb 25 18:27:55 relay opendkim[6573]: 447TRb5YF1zJfDH: DKIM verification successful
1205Feb 25 18:27:55 relay postfix/qmgr[7039]: 447TRb5YF1zJfDH: from=<julien.nl@hotmail.com>, size=7484, nrcpt=1 (queue active)
1206Feb 25 18:27:55 relay postfix/qmqpd[16433]: disconnect from localhost[127.0.0.1]
1207Feb 25 18:27:55 relay MailScanner[7847]: Uninfected: Delivered 1 messages
1208Feb 25 18:27:55 relay MailScanner[7847]: Deleted 1 messages from processing-database
1209Feb 25 18:27:55 relay MailScanner[7847]: MailWatch: Logging message 447TRK1V0VzJfDH to SQL
1210Feb 25 18:27:55 relay postfix/smtp[16435]: 447TRb5YF1zJfDH: to=<hassan@attcomputer.com>, relay=192.168.4.5[192.168.4.5]:25, delay=0.2, delays=0.05/0/0.01/0.13, dsn=2.6.0, status=sent (250 2.6.0 <DB6PR0802MB237551A81E52FD437952260BF27A0@DB6PR0802MB2375.eurprd08.prod.outlook.com> [InternalId=57582626537474, Hostname=EX02.attcomputer.lan] 8903 bytes in 0.103, 83.650 KB/sec Queued mail for delivery)
1211Feb 25 18:27:55 relay postfix/qmgr[7039]: 447TRb5YF1zJfDH: removed