missing spamassassin checks
Łukasz Michalski
lm at zork.pl
Mon Aug 24 13:29:33 CEST 2020
Hi,
Recently I started to recieve a lot of english spam - mostly at night (CEST timezone).
I turned on sa_debug and log level-5 in amavis and I tried to re-run spamassassin with -D on copy of received mail.
For most mails I see a difference in score. Here is an example:
Headers set by amavis:
X-Amavis-Alert: BAD HEADER SECTION, MIME error: error: part did not end with
expected boundary; ; error: unexpected end of parts before epilogue
X-Spam-Flag: NO
X-Spam-Score: 4.804
X-Spam-Level: ****
X-Spam-Status: No, score=4.804 tagged_above=-999 required=5.3
tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, LOTS_OF_MONEY=0.001,
MISSING_MIME_HB_SEP=0.001, RDNS_NONE=0.793, SPF_HELO_PASS=-0.001,
SPF_PASS=-0.001, T_MONEY_PERCENT=0.01, URIBL_BLACK=1.7, ZABOJCASPAMU_FROM_UNKNOWN=1.5]
Result of 'spamassassin -t -D < ~/spam5.txt 2>&1': (8 hours later, removed all headers added by amavis before scan).
Content analysis details: (17.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: freshwarm.cyou]
0.9 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[45.136.7.140 listed in bl.mailspike.net]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[45.136.7.140 listed in zen.spamhaus.org]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: freshwarm.cyou]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
4.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.5 ZABOJCASPAMU_FROM_UNKNOWN Received from unknown
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header
and body
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
lines
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 ZABOJCASPAMU_BAYES_HIGH Bayes high
0.0 T_MONEY_PERCENT X% of a lot of money for you
It seems that that sender was not listed Spamhaus DBL and SBL. This could be possible 8 hours earlier, so I checked amavisd log files for network related errors and did not find any.
But FROM_FMBLA_NEWDOM, RDNS_NONE are missing in X-Spam-Status too. To me it looks like all DNS related checks are failing or not executing correctly when run from amavisd.
I do not have child_timeout set, so it defaults to 8min.
I am using local nameserver (bind caching, no forwarders).
Anyone has a similar issue? What can be the cause?
[root at black ~]# pacman -Q |grep -E "amavis|spamassassin"
amavisd-new 2.12.0-3
spamassassin 3.4.4-3
I attached full log from amavis below.
Regards,
Łukasz
-- Logs begin at Sun 2019-06-30 18:47:10 CEST, end at Mon 2020-08-24 12:46:03 CEST. --
Aug 24 04:53:10 black amavis[1561530]: (1561530-08) Net::Server: 2020/08/24-04:53:10 CONNECT TCP Peer: "[127.0.0.1]:42476" Local: "[127.0.0.1]:10024"
Aug 24 04:53:10 black amavis[1561530]: idle_proc, hi : was idle, 1481749.2 ms, total idle 16216.712 s, busy 42.568 s
Aug 24 04:53:10 black amavis[1561530]: loaded base policy bank
Aug 24 04:53:10 black amavis[1561530]: lookup_ip_acl (inet_acl) arr.obj: key="127.0.0.1" matches "127.0.0.1", result=1
Aug 24 04:53:10 black amavis[1561530]: process_request: fileno sock=14, STDIN=0, STDOUT=1
Aug 24 04:53:10 black amavis[1561530]: get_deadline switch_to_my_time(new request) - deadline in 480.0 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: prolong_timer switch_to_my_time(new request): timer 288, was 0, deadline in 480.0 s
Aug 24 04:53:10 black amavis[1561530]: process_request: suggested_protocol="" on a TCP socket
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SMTP> 220 [127.0.0.1] ESMTP amavisd-new service ready
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) switch_to_client_time 480 s, smtp response sent
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) idle_proc, 4: was busy, 6.4 ms, total idle 16216.712 s, busy 42.575 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) smtp readline: read 20 bytes, new size: 20
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) idle_proc, 5: was idle, 1.4 ms, total idle 16216.714 s, busy 42.575 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SMTP< EHLO black.zork.pl\r\n
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline switch_to_my_time(rx SMTP EHLO) - deadline in 480.0 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer switch_to_my_time(rx SMTP EHLO): timer 288, was 480, deadline in 480.0 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP> 250-[127.0.0.1]
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP> 250-VRFY
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP> 250-PIPELINING
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP> 250-SIZE
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP> 250-ENHANCEDSTATUSCODES
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP> 250-8BITMIME
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP> 250-SMTPUTF8
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP> 250-DSN
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP> 250 XFORWARD NAME ADDR PORT PROTO HELO IDENT SOURCE
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) switch_to_client_time 480 s, smtp response sent
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) idle_proc, 6: was busy, 4.3 ms, total idle 16216.714 s, busy 42.579 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) smtp readline: read 122 bytes, new size: 122
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) idle_proc, 5: was idle, 0.7 ms, total idle 16216.715 s, busy 42.579 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP< MAIL FROM:<match at freshwarm.cyou> SIZE=14356 BODY=8BITMIME RET=HDRS\r\n
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline switch_to_my_time(rx SMTP MAIL) - deadline in 480.0 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer switch_to_my_time(rx SMTP MAIL): timer 288, was 480, deadline in 480.0 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) check_mail_begin_task: task_count=9
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup_ip_acl (client_ipaddr_policy) arr.obj: key="0.0.0.0", no match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [debug_sender] => undef, "match at freshwarm.cyou" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) mesage size set to a declared size 14356
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP> 250 2.1.0 Sender <match at freshwarm.cyou> OK
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) switch_to_client_time 480 s, smtp response sent
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) idle_proc, 6: was busy, 6.2 ms, total idle 16216.715 s, busy 42.585 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) idle_proc, 5: was idle, 0.4 ms, total idle 16216.715 s, busy 42.585 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP< RCPT TO:<zork at zork.pl> ORCPT=rfc822;lm at zork.pl\r\n
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline switch_to_my_time(rx SMTP RCPT) - deadline in 480.0 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer switch_to_my_time(rx SMTP RCPT): timer 288, was 480, deadline in 480.0 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup => undef, "zork at zork.pl", no lookup tables
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP> 250 2.1.5 Recipient <zork at zork.pl> OK
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) switch_to_client_time 480 s, smtp response sent
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) idle_proc, 6: was busy, 3.1 ms, total idle 16216.715 s, busy 42.588 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) idle_proc, 5: was idle, 0.3 ms, total idle 16216.715 s, busy 42.588 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP< DATA\r\n
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline switch_to_my_time(rx SMTP DATA) - deadline in 480.0 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer switch_to_my_time(rx SMTP DATA): timer 288, was 480, deadline in 480.0 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP [127.0.0.1]:10024 /var/spool/amavis/tmp/amavis-20200824T002210-1561530-7GmGOGvq: <match at freshwarm.cyou> -> <zork at zork.pl> SIZE=14356 BODY=8BITMIME RET=HDRS Received: from black.zork.pl ([127.0.0.1]) by localhost (black.zork.pl [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <zork at zork.pl>; Mon, 24 Aug 2020 04:53:10 +0200 (CEST)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP> 354 End data with <CR><LF>.<CR><LF>
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) switch_to_client_time 480 s, smtp response sent
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) switch_to_client_time 480 s, receiving data
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) smtp copy: read 14341 bytes into buffer, new size: 14341
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) smtp copy: 6 bytes still buffered at end
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline switch_to_my_time(rx data-end) - deadline in 480.0 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer switch_to_my_time(rx data-end): timer 288, was 480, deadline in 480.0 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ESMTP< .<CR><LF>
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) Actual message size 14332 B less than the declared 14356 B
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) smtp connection cache, dt: 1481.8, state: 0
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline get_body_digest - deadline in 480.0 s, set to 30.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline digest_pre - deadline in 480.0 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer digest_pre: timer 288, was 288, deadline in 480.0 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_body_digest: reading header section from memory
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_body_digest: feeding header section to DKIM verifier
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_body_digest: sending h/b separator to DKIM
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline digest_hdr - deadline in 480.0 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer digest_hdr: timer 288, was 288, deadline in 480.0 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_body_digest: reading mail body from memory, 0 DKIM signatures
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline digest_body - deadline in 480.0 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer digest_body: timer 288, was 288, deadline in 480.0 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_body_digest: message size 14332, header+sep 507, body 13825
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) body type (8bit-MIMEtransport): labeled 8BITMIME, good (h=0, b=1)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) body hash: a437ba2002a898303a408cb11de5ef9e
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ip_from_received: 45.136.7.140
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup_ip_acl (public_nets) arr.obj: key="127.0.0.1" matches "!127.0.0.0/8", result=0
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup_ip_acl (public_nets) arr.obj: key="45.136.7.140" matches "::ffff:0:0/96", result=1
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) trace: ESMTP://[127.0.0.1]:42476 < ESMTP://45.136.7.140
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) client IP address unknown, fetched from Received: 127.0.0.1
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) Original mail size: 14332; quota set to: 7166000 bytes (fmin=5, fmax=500, qmin=102400, qmax=524288000)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) Checking: xO3nU-4WJdBM [127.0.0.1] <match at freshwarm.cyou> -> <zork at zork.pl>
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) 2822.From: <match at freshwarm.cyou>
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup_acl(zork at zork.pl) matches key ".zork.pl", result=1
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [local_domains] => true, "zork at zork.pl" matches, result="1", matching_key=".zork.pl"
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [bypass_virus_checks] => undef, "zork at zork.pl" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [bypass_banned_checks] => undef, "zork at zork.pl" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [bypass_spam_checks] => undef, "zork at zork.pl" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) Extracting mime components from a string
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) Issued a new file name: p001
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) Issued a new file name: p002
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) WARN: MIME::Parser error: part did not end with expected boundary; ; error: unexpected end of parts before epilogue
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) mime_decode_preamble: 1 lines
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) Issued a new pseudo part: p003
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) p003 1 Content-Type: multipart/alternative
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) Charging 5059 bytes to remaining quota 7166000 (out of 7166000, (0%)) - by mime_decode
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) p001 1/1 Content-Type: text/plain, 7bit, size: 5059, SHA1 digest: a95ec86d2c20ea560fabf6893a66912b03d0de25
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) reparenting p001 from p000 to p003
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) Charging 8196 bytes to remaining quota 7160941 (out of 7166000, (0%)) - by mime_decode
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) p002 1/2 Content-Type: text/html, 7bit, size: 8196, SHA1 digest: fef17bd5b8cfe83fde2a5a3f2f6de77a549435d8
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) reparenting p002 from p000 to p003
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline mime_decode - deadline in 480.0 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer mime_decode: timer 288, was 288, deadline in 480.0 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline mime_decode-1 - deadline in 480.0 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer mime_decode-1: timer 288, was 288, deadline in 480.0 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) inspect_dsn: parts: multipart/alternative, text/plain, text/html
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) inspect_dsn: not a bounce
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline dsn_parse - deadline in 479.9 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer dsn_parse: timer 288, was 288, deadline in 479.9 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) decode_parts: level=1, #parts=3 : p001, p002, p003
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) running file(1) on 2 files, arglist size 24
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) run_command: [1600952] /usr/sbin/file p001 p002 </dev/null 2>&1
Aug 24 04:53:10 black amavis[1600952]: (1561530-09) open_on_specific_fd: target fd0 closing, to become < /dev/null
Aug 24 04:53:10 black amavis[1600952]: (1561530-09) open_on_specific_fd: target fd1 closing, to become (65) &=19
Aug 24 04:53:10 black amavis[1600952]: (1561530-09) open_on_specific_fd: target fd1 dup2 from fd19 (65) &=19
Aug 24 04:53:10 black amavis[1600952]: (1561530-09) open_on_specific_fd: source fd19 closed
Aug 24 04:53:10 black amavis[1600952]: (1561530-09) open_on_specific_fd: target fd2 closing, to become (65) &1
Aug 24 04:53:10 black amavis[1600952]: (1561530-09) open_on_specific_fd: target fd2 dup2 from fd1 (65) &1
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) result line from file(1): p001: UTF-8 Unicode text, with very long lines\n
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup_re("UTF-8 Unicode text, with very long lines") matches key "(?^i:^UTF.* Unicode text\\b)", result="txt"
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [map_full_type_to_short_type] => true, "UTF-8 Unicode text, with very long lines" matches, result="txt", matching_key="(?^i:^UTF.* Unicode text\\b)"
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) File-type of p001: UTF-8 Unicode text, with very long lines; (txt)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) result line from file(1): p002: HTML document, ISO-8859 text, with very long lines\n
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup_re("HTML document, ISO-8859 text, with very long lines") matches key "(?^i:\\btext\\b)", result="asc"
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [map_full_type_to_short_type] => true, "HTML document, ISO-8859 text, with very long lines" matches, result="asc", matching_key="(?^i:\\btext\\b)"
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) File-type of p002: HTML document, ISO-8859 text, with very long lines; (asc)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) decompose_part: p001 - atomic
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) decompose_part: p002 - atomic
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline parts_decode - deadline in 479.9 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer parts_decode: timer 288, was 288, deadline in 479.9 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [bypass_header_checks] => undef, "zork at zork.pl" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) check_header: 0, OK
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [bypass_header_checks] => undef, "zork at zork.pl" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) Checking for banned types and filenames
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup: (scalar) matches, result="DEFAULT"
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [banned_filename], 1 matches for "zork at zork.pl", results: "(constant:DEFAULT)"=>"DEFAULT"
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) collect banned table[0]: zork at zork.pl, tables: DEFAULT=>Amavis::Lookup::RE=ARRAY(0x5612ff37d958)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) starting banned checks - traversing message structure tree
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) check_for_banned (p003,p001) multipart/alternative | text/plain,.txt
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) doing banned check for zork at zork.pl on multipart/alternative | text/plain,.txt
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup_re(["multipart/alternative","text/plain",".txt"]), no matches
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [check_bann:zork at zork.pl] => undef, ["multipart/alternative","text/plain",".txt"] does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [banned_namepath_re] => undef, "P=p003\tL=1\tM=multipart/alternative\nP=p001\tL=1/1\tM=text/plain\tT=txt" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) p.path zork at zork.pl: "P=p003,L=1,M=multipart/alternative | P=p001,L=1/1,M=text/plain,T=txt"
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) check_for_banned (p003,p002) multipart/alternative | text/html,.asc
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) doing banned check for zork at zork.pl on multipart/alternative | text/html,.asc
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup_re(["multipart/alternative","text/html",".asc"]), no matches
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [check_bann:zork at zork.pl] => undef, ["multipart/alternative","text/html",".asc"] does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [banned_namepath_re] => undef, "P=p003\tL=1\tM=multipart/alternative\nP=p002\tL=1/2\tM=text/html\tT=asc" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) p.path zork at zork.pl: "P=p003,L=1,M=multipart/alternative | P=p002,L=1/2,M=text/html,T=asc"
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) banned check: any=0, all=N (1)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) Issued a new file name: p004
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) presenting full original message to scanners as /var/spool/amavis/tmp/amavis-20200824T002210-1561530-7GmGOGvq/parts/p004, MIME error: error: part did not end with expected boundary; ; error: unexpected end of parts before epilogue
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) Calling virus scanners, 3 files to scan in /var/spool/amavis/tmp/amavis-20200824T002210-1561530-7GmGOGvq/parts
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) invoking av-scanner ClamAV-clamd
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ask_daemon: proto=DFLT, spawn=0, (ClamAV-clamd) /run/clamav/clamd.ctl
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) run_av (ClamAV-clamd): query template(1,2): CONTSCAN {}\n
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline run_av_pre - deadline in 479.8 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer run_av_pre: timer 288, was 288, deadline in 479.8 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline run_av_scan - deadline in 479.8 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer run_av_scan: timer 288, was 288, deadline in 479.8 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) run_av Using (ClamAV-clamd): (code) CONTSCAN /var/spool/amavis/tmp/amavis-20200824T002210-1561530-7GmGOGvq/parts\n
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline ask_daemon_internal_connect_pre - deadline in 479.8 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline ask_daemon_internal_connect - deadline in 479.8 s, set to 10.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer ask_daemon_internal_connect: timer 10, was 288, deadline in 479.8 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ClamAV-clamd: Connecting to socket /run/clamav/clamd.ctl
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) new socket by IO::Socket::UNIX to /run/clamav/clamd.ctl, timeout set to 10
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) connected to /run/clamav/clamd.ctl successfully
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ClamAV-clamd: Sending CONTSCAN /var/spool/amavis/tmp/amavis-20200824T002210-1561530-7GmGOGvq/parts\n to socket /run/clamav/clamd.ctl
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) rw_loop: needline=0, flush=1, wr=1, timeout=10
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) rw_loop: sending 77 chars
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) rw_loop sent 77> CONTSCAN /var/spool/amavis/tmp/amavis-20200824T002210-1561530-7GmGOGvq/parts\n
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline ask_daemon_internal_scan - deadline in 479.8 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer ask_daemon_internal_scan: timer 288, was 10, deadline in 479.8 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) rw_loop: needline=0, flush=0, wr=0, timeout=287.985
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) rw_loop: receiving
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) rw_loop read 72 chars< /var/spool/amavis/tmp/amavis-20200824T002210-1561530-7GmGOGvq/parts: OK\n
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) rw_loop: needline=0, flush=0, wr=0, timeout=287.985
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) rw_loop: receiving
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) rw_loop read: got eof
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline ask_daemon_internal - deadline in 479.4 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer ask_daemon_internal: timer 288, was 288, deadline in 479.4 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline run_av_3 - deadline in 479.4 s, set to 288.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer run_av_3: timer 288, was 288, deadline in 479.4 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) run_av (ClamAV-clamd) result: /var/spool/amavis/tmp/amavis-20200824T002210-1561530-7GmGOGvq/parts: OK\n
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) run_av (ClamAV-clamd): CLEAN
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) run_av (ClamAV-clamd) result: clean
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) wbl: checking sender <match at freshwarm.cyou>
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [blacklist_recip<zork at zork.pl>] => undef, "zork at zork.pl" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [blacklist_sender<match at freshwarm.cyou>,blacklist_sender] => undef, "match at freshwarm.cyou" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [whitelist_recip<zork at zork.pl>] => undef, "zork at zork.pl" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [whitelist_sender<match at freshwarm.cyou>,whitelist_sender] => undef, "match at freshwarm.cyou" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) query_keys: cached zork at zork.pl
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup_hash(zork at zork.pl) matches keys: "."=>ARRAY(0x5612ff4e2920)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [score_recip<zork at zork.pl>,score_sender], 1 matches for "zork at zork.pl", results: "."=>[Amavis::Lookup::RE=ARRAY(0x5612ff4af520),{donotreply at sendmail.org=>"-3",clp-request at comp.nus.edu.sg=>"-3",surveys-errors at lists.nua.ie=>"-3",.example.net=>"1",owner-sendmail-announce at lists.sendmail.org=>"-3",owner-postfix-users at postfix.org=>"-3",noreply at freshmeat.net=>"-3",notification-return at lists.sophos.com=>"-3",amavis-user-admin at lists.sourceforge.net=>"-3",returns.groups.yahoo.com=>"-3",security-alerts at linuxsecurity.com=>"-3",owner-postfix-announce at postfix.org=>"-3",slashdot at slashdot.org=>"-3",ca+envelope at sendmail.org=>"-3",owner-technews at postel.acm.org=>"-3",ntbugtraq at listserv.ntbugtraq.com=>"-3",mailman-announce-admin at python.org=>"-3",yahoo-dev-null at yahoo-inc.com=>"-3",rt-users-admin at lists.fsck.com=>"-3",owner-textbreakingnews at cnnimail12.cnn.com=>"-5",owner-alert at iss.net=>"-3",clusternews at linuxnetworx.com=>"-3",amavis-user-bounces at lists.sourceforge.net=...
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) ...>"-3",securityfocus.com=>"-3",sender at example.net=>"3",ietf-123-owner at loki.ietf.org=>"-3",cvs-commits-list-admin at gnome.org=>"-3",spamassassin.apache.org=>"-3",emailnews at genomeweb.com=>"-5",lvs-users-admin at linuxvirtualserver.org=>"-3",sendmail-announce-request at lists.sendmail.org=>"-3",nobody at cert.org=>"-3",cert-advisory at us-cert.gov=>"-3"}]
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup_re("match at freshwarm.cyou"), no matches
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) query_keys: match at freshwarm.cyou, match@, freshwarm.cyou, .freshwarm.cyou, .cyou, .
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup_hash(match at freshwarm.cyou), no matches
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) lookup [score_sender<match at freshwarm.cyou>] => undef, "match at freshwarm.cyou" does not match
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SpamControl: calling spam scanner SpamAssassin
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline spam_scan_sa_pre - deadline in 479.3 s, set to 476.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) prolong_timer spam_scan_sa_pre: timer 476, was 288, deadline in 479.3 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA user config: "", username: "amavis", 0, (0)zork at zork.pl
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) calling SA parse (0), SA vers 3.4.4, 3.004004, data as STRING_REF, recips_ind [0], user: "amavis"
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) get_deadline SA check - deadline in 479.3 s, set to 475.000 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) mimepart digest: a95ec86d2c20ea560fabf6893a66912b03d0de25:text/plain
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) mimepart digest: fef17bd5b8cfe83fde2a5a3f2f6de77a549435d8:text/html
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: config: time limit 300.0 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: main message type: multipart/alternative
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: Inserting blank line at top of body to ensure correct multipart MIME parsing
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) CALLING SA check (0)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: pms new, time limit in 299.994 s
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: netset: ditch cache on trusted_networks
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: using scoreset 3 in M:S:Pms
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: adding caller rule hits, 0 rules
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: config: trusted_networks are not configured; it is recommended that you configure trusted_networks manually
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: received-header: parsed as [ ip=45.136.7.140 rdns= helo=freshwarm.cyou by=black.zork.pl ident= envfrom= intl=0 id=3540414B187 auth= msa=0 ]
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: received-header: do not trust any hosts from here on
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: received-header: relay 45.136.7.140 trusted? no internal? no msa? no
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: metadata: X-Spam-Relays-Trusted:
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: metadata: X-Spam-Relays-Untrusted: [ ip=45.136.7.140 rdns= helo=freshwarm.cyou by=black.zork.pl ident= envfrom= intl=0 id=3540414B187 auth= msa=0 ]
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: metadata: X-Spam-Relays-Internal:
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: metadata: X-Spam-Relays-External: [ ip=45.136.7.140 rdns= helo=freshwarm.cyou by=black.zork.pl ident= envfrom= intl=0 id=3540414B187 auth= msa=0 ]
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag RELAYSUNTRUSTEDREVIP is now ready, value: 140.7.136.45
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag RELAYSEXTERNALREVIP is now ready, value: 140.7.136.45
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag SENDERDOMAIN is now ready, value: freshwarm.cyou
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag AUTHORDOMAIN is now ready, value: freshwarm.cyou
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag RELAYSTRUSTED is now ready, value:
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag RELAYSUNTRUSTED is now ready, value: [ ip=45.136.7.140 rdns= helo=freshwarm.cyou by=black.zork.pl ident= envfrom= intl=0 id=3540414B187 auth= msa=0 ]
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag RELAYSINTERNAL is now ready, value:
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag RELAYSEXTERNAL is now ready, value: [ ip=45.136.7.140 rdns= helo=freshwarm.cyou by=black.zork.pl ident= envfrom= intl=0 id=3540414B187 auth= msa=0 ]
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag LANGUAGES is now ready, value: <UNDEF>
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: ---- MIME PARSER START ----
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: parsing multipart, got boundary: ------------52339065831530910869174
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: found part of type text/plain, boundary: ------------52339065831530910869174
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: added part, type: text/plain
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: found part of type text/html, boundary: ------------52339065831530910869174
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: added part, type: text/html
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: parsing normal part
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: storing a body to memory
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: parsing normal part
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: storing a body to memory
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: ---- MIME PARSER END ----
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: decoding other encoding type (7bit), ignoring
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: decoding other encoding type (7bit), ignoring
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: 'normalize_charset' is off, encoding will likely be misinterpreted; declared charset: ISO-8859-1
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: message: HTML::Parser utf8_mode on (assumed UTF-8 octets)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uri: canonicalizing parsed uri: http://www.freshwarm.cyou/hfxrdr/bntpu756380jkdxm/-qg1UTy6CV4qsAmkzgmjy3k_UyBzbCEuwVqBpXnIcv0/AToDVm100G54QfFak0jPOkIs0eHMwmiZJ6tmtgPWfEQh67m8cBSWOu2o5eoqyxshZ-bqLHns0xJRf_Gu4M7Y5w
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uri: cleaned uri: http://www.freshwarm.cyou/hfxrdr/bntpu756380jkdxm/-qg1UTy6CV4qsAmkzgmjy3k_UyBzbCEuwVqBpXnIcv0/AToDVm100G54QfFak0jPOkIs0eHMwmiZJ6tmtgPWfEQh67m8cBSWOu2o5eoqyxshZ-bqLHns0xJRf_Gu4M7Y5w
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uri: added host: www.freshwarm.cyou domain: freshwarm.cyou
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uri: canonicalizing parsed uri: http://www.freshwarm.cyou/Ocihn/w5Y7M4uG_fRJx0snHLqb-Zhsxyqoe5o2uOWSBc8m76hQEfWPgtmt6JZimwMHe0sIkOPj0kaFfQ45G001mVDoTA.0vcInXpBqVwuECbzByU_k3yjmgzkmAsq4VC6yTU1gq
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uri: cleaned uri: http://www.freshwarm.cyou/Ocihn/w5Y7M4uG_fRJx0snHLqb-Zhsxyqoe5o2uOWSBc8m76hQEfWPgtmt6JZimwMHe0sIkOPj0kaFfQ45G001mVDoTA.0vcInXpBqVwuECbzByU_k3yjmgzkmAsq4VC6yTU1gq
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uri: added host: www.freshwarm.cyou domain: freshwarm.cyou
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uri: canonicalizing html uri: http://www.freshwarm.cyou/hfxrdr/bntpu756380jkdxm/-qg1UTy6CV4qsAmkzgmjy3k_UyBzbCEuwVqBpXnIcv0/AToDVm100G54QfFak0jPOkIs0eHMwmiZJ6tmtgPWfEQh67m8cBSWOu2o5eoqyxshZ-bqLHns0xJRf_Gu4M7Y5w
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uri: cleaned uri: http://www.freshwarm.cyou/hfxrdr/bntpu756380jkdxm/-qg1UTy6CV4qsAmkzgmjy3k_UyBzbCEuwVqBpXnIcv0/AToDVm100G54QfFak0jPOkIs0eHMwmiZJ6tmtgPWfEQh67m8cBSWOu2o5eoqyxshZ-bqLHns0xJRf_Gu4M7Y5w
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uri: added host: www.freshwarm.cyou domain: freshwarm.cyou
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uri: canonicalizing html uri: http://imgstore.host/tniueS30.jpg
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uri: cleaned uri: http://imgstore.host/tniueS30.jpg
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uri: added host: imgstore.host domain: imgstore.host
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag URIHOSTS is now ready, value: ARY:[imgstore.host,www.freshwarm.cyou]
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag URIDOMAINS is now ready, value: ARY:[freshwarm.cyou,imgstore.host]
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: considering host=www.freshwarm.cyou, domain=freshwarm.cyou
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/freshwarm.cyou.multi.surbl.org for DNSBL:freshwarm.cyou:multi.surbl.org
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 39132/IN/A/freshwarm.cyou.multi.surbl.org
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_CR_SURBL, URI-DNSBL, DNSBL:freshwarm.cyou:multi.surbl.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_CR_SURBL lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 39132/IN/A/freshwarm.cyou.multi.surbl.org already underway, adding no.2 URIBL_WS_SURBL
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_WS_SURBL lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/freshwarm.cyou.multi.uribl.com for DNSBL:freshwarm.cyou:multi.uribl.com
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 46382/IN/A/freshwarm.cyou.multi.uribl.com
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_BLACK, URI-DNSBL, DNSBL:freshwarm.cyou:multi.uribl.com (timeout 15.0s, min 3.0s)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_BLACK lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 39132/IN/A/freshwarm.cyou.multi.surbl.org already underway, adding no.3 URIBL_PH_SURBL
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_PH_SURBL lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 46382/IN/A/freshwarm.cyou.multi.uribl.com already underway, adding no.2 URIBL_GREY
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_GREY lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/freshwarm.cyou.dob.sibl.support-intelligence.net for DNSBL:freshwarm.cyou:dob.sibl.support-intelligence.net
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 28444/IN/A/freshwarm.cyou.dob.sibl.support-intelligence.net
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_RHS_DOB, URI-DNSBL, DNSBL:freshwarm.cyou:dob.sibl.support-intelligence.net (timeout 15.0s, min 3.0s)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_RHS_DOB lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 39132/IN/A/freshwarm.cyou.multi.surbl.org already underway, adding no.4 URIBL_MW_SURBL
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_MW_SURBL lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 39132/IN/A/freshwarm.cyou.multi.surbl.org already underway, adding no.5 SURBL_BLOCKED
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: SURBL_BLOCKED lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 46382/IN/A/freshwarm.cyou.multi.uribl.com already underway, adding no.3 URIBL_RED
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_RED lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 46382/IN/A/freshwarm.cyou.multi.uribl.com already underway, adding no.4 URIBL_BLOCKED
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_BLOCKED lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 39132/IN/A/freshwarm.cyou.multi.surbl.org already underway, adding no.6 URIBL_ABUSE_SURBL
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_ABUSE_SURBL lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/freshwarm.cyou.dbl.spamhaus.org for DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_DBL_ERROR, URI-DNSBL, DNSBL:freshwarm.cyou:dbl.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_ERROR lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org already underway, adding no.2 URIBL_DBL_BLOCKED_OPENDNS
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_BLOCKED_OPENDNS lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org already underway, adding no.3 URIBL_DBL_BLOCKED
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_BLOCKED lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org already underway, adding no.4 URIBL_DBL_MALWARE
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_MALWARE lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org already underway, adding no.5 URIBL_DBL_BOTNETCC
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_BOTNETCC lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org already underway, adding no.6 URIBL_DBL_ABUSE_MALW
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_ABUSE_MALW lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org already underway, adding no.7 URIBL_DBL_ABUSE_SPAM
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_ABUSE_SPAM lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org already underway, adding no.8 URIBL_DBL_SPAM
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_SPAM lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org already underway, adding no.9 URIBL_DBL_ABUSE_BOTCC
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_ABUSE_BOTCC lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org already underway, adding no.10 URIBL_DBL_ABUSE_PHISH
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_ABUSE_PHISH lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org already underway, adding no.11 URIBL_DBL_ABUSE_REDIR
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_ABUSE_REDIR lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org already underway, adding no.12 URIBL_DBL_PHISH
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_PHISH lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: launching NS/freshwarm.cyou for NS:freshwarm.cyou
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 35912/IN/NS/freshwarm.cyou
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URI-NS, NS:freshwarm.cyou (timeout 15.0s, min 3.0s)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/www.freshwarm.cyou for A:www.freshwarm.cyou
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 45127/IN/A/www.freshwarm.cyou
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URI-A, A:www.freshwarm.cyou (timeout 15.0s, min 3.0s)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_CSS_A lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_SBL_A lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: considering host=imgstore.host, domain=imgstore.host
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/imgstore.host.multi.surbl.org for DNSBL:imgstore.host:multi.surbl.org
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 52714/IN/A/imgstore.host.multi.surbl.org
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_CR_SURBL, URI-DNSBL, DNSBL:imgstore.host:multi.surbl.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_CR_SURBL lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 52714/IN/A/imgstore.host.multi.surbl.org already underway, adding no.2 URIBL_WS_SURBL
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_WS_SURBL lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/imgstore.host.multi.uribl.com for DNSBL:imgstore.host:multi.uribl.com
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 32684/IN/A/imgstore.host.multi.uribl.com
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_BLACK, URI-DNSBL, DNSBL:imgstore.host:multi.uribl.com (timeout 15.0s, min 3.0s)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_BLACK lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 52714/IN/A/imgstore.host.multi.surbl.org already underway, adding no.3 URIBL_PH_SURBL
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_PH_SURBL lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 32684/IN/A/imgstore.host.multi.uribl.com already underway, adding no.2 URIBL_GREY
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_GREY lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/imgstore.host.dob.sibl.support-intelligence.net for DNSBL:imgstore.host:dob.sibl.support-intelligence.net
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 13698/IN/A/imgstore.host.dob.sibl.support-intelligence.net
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_RHS_DOB, URI-DNSBL, DNSBL:imgstore.host:dob.sibl.support-intelligence.net (timeout 15.0s, min 3.0s)
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_RHS_DOB lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 52714/IN/A/imgstore.host.multi.surbl.org already underway, adding no.4 URIBL_MW_SURBL
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_MW_SURBL lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 52714/IN/A/imgstore.host.multi.surbl.org already underway, adding no.5 SURBL_BLOCKED
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: SURBL_BLOCKED lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 32684/IN/A/imgstore.host.multi.uribl.com already underway, adding no.3 URIBL_RED
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_RED lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 32684/IN/A/imgstore.host.multi.uribl.com already underway, adding no.4 URIBL_BLOCKED
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_BLOCKED lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: query 52714/IN/A/imgstore.host.multi.surbl.org already underway, adding no.6 URIBL_ABUSE_SURBL
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_ABUSE_SURBL lookup start
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/imgstore.host.dbl.spamhaus.org for DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:10 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 31094/IN/A/imgstore.host.dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_DBL_ERROR, URI-DNSBL, DNSBL:imgstore.host:dbl.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_ERROR lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 31094/IN/A/imgstore.host.dbl.spamhaus.org already underway, adding no.2 URIBL_DBL_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_BLOCKED_OPENDNS lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 31094/IN/A/imgstore.host.dbl.spamhaus.org already underway, adding no.3 URIBL_DBL_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_BLOCKED lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 31094/IN/A/imgstore.host.dbl.spamhaus.org already underway, adding no.4 URIBL_DBL_MALWARE
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_MALWARE lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 31094/IN/A/imgstore.host.dbl.spamhaus.org already underway, adding no.5 URIBL_DBL_BOTNETCC
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_BOTNETCC lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 31094/IN/A/imgstore.host.dbl.spamhaus.org already underway, adding no.6 URIBL_DBL_ABUSE_MALW
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_ABUSE_MALW lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 31094/IN/A/imgstore.host.dbl.spamhaus.org already underway, adding no.7 URIBL_DBL_ABUSE_SPAM
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_ABUSE_SPAM lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 31094/IN/A/imgstore.host.dbl.spamhaus.org already underway, adding no.8 URIBL_DBL_SPAM
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_SPAM lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 31094/IN/A/imgstore.host.dbl.spamhaus.org already underway, adding no.9 URIBL_DBL_ABUSE_BOTCC
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_ABUSE_BOTCC lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 31094/IN/A/imgstore.host.dbl.spamhaus.org already underway, adding no.10 URIBL_DBL_ABUSE_PHISH
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_ABUSE_PHISH lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 31094/IN/A/imgstore.host.dbl.spamhaus.org already underway, adding no.11 URIBL_DBL_ABUSE_REDIR
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_ABUSE_REDIR lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 31094/IN/A/imgstore.host.dbl.spamhaus.org already underway, adding no.12 URIBL_DBL_PHISH
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_DBL_PHISH lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching NS/imgstore.host for NS:imgstore.host
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 33993/IN/NS/imgstore.host
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URI-NS, NS:imgstore.host (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/imgstore.host for A:imgstore.host
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 42583/IN/A/imgstore.host
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URI-A, A:imgstore.host (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_CSS_A lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_SBL_A lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: askdns: depend on tags AUTHORDOMAIN, rules: __FROM_FMBLA_NEWDOM28, __FROM_FMBLA_NEWDOM14, __FROM_FMBLA_NDBLOCKED, __FROM_FMBLA_NEWDOM
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag AUTHORDOMAIN was ready, action 0 runnable immediately: CODE(0x561306b04618)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: askdns: preparing queries which depend on tags: AUTHORDOMAIN => freshwarm.cyou
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: askdns: query template _AUTHORDOMAIN_.fresh.fmb.la., type A, rules: __FROM_FMBLA_NEWDOM28, __FROM_FMBLA_NEWDOM14, __FROM_FMBLA_NDBLOCKED, __FROM_FMBLA_NEWDOM
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: askdns: expanded query freshwarm.cyou.fresh.fmb.la., dns key askdns:A:freshwarm.cyou.fresh.fmb.la.
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/freshwarm.cyou.fresh.fmb.la for askdns:A:freshwarm.cyou.fresh.fmb.la.
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 35369/IN/A/freshwarm.cyou.fresh.fmb.la
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: A, askdns:A:freshwarm.cyou.fresh.fmb.la. (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: askdns:A:freshwarm.cyou.fresh.fmb.la. lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: askdns: depend on tags SENDERDOMAIN, rules: __PDS_SPF_ONLYALL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag SENDERDOMAIN was ready, action 1 runnable immediately: CODE(0x561306490db0)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: askdns: preparing queries which depend on tags: SENDERDOMAIN => freshwarm.cyou
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: askdns: query template _SENDERDOMAIN_, type TXT, rules: __PDS_SPF_ONLYALL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: askdns: expanded query freshwarm.cyou, dns key askdns:TXT:freshwarm.cyou
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching TXT/freshwarm.cyou for askdns:TXT:freshwarm.cyou
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 21231/IN/TXT/freshwarm.cyou
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: TXT, askdns:TXT:freshwarm.cyou (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: askdns:TXT:freshwarm.cyou lookup start
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: askdns: depend on tags DKIMDOMAIN, rules: __DKIMWL_WL_HI, __DKIMWL_WL_MEDHI, __DKIMWL_BLOCKED, __DKIMWL_WL_MED, __DKIMWL_WL_BL, __DKIMWL_BULKMAIL, __DKIMWL_FREEMAIL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - action 2 blocking on tags DKIMDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL psbl.surriel.com., set psbl-lastexternal
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: netset: trusted_networks lookup on 45.136.7.140, 2 networks, result: 0, 1.026 ms
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/140.7.136.45.psbl.surriel.com for dns:A:140.7.136.45.psbl.surriel.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 60736/IN/A/140.7.136.45.psbl.surriel.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: DNSBL-A, dns:A:140.7.136.45.psbl.surriel.com (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL bl.score.senderscore.com., set rnbl-lastexternal
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: netset: trusted_networks cached lookup on 45.136.7.140, 2 networks, result: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/140.7.136.45.bl.score.senderscore.com for dns:A:140.7.136.45.bl.score.senderscore.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 16082/IN/A/140.7.136.45.bl.score.senderscore.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: DNSBL-A, dns:A:140.7.136.45.bl.score.senderscore.com (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL zen.spamhaus.org., set zen
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: netset: trusted_networks cached lookup on 45.136.7.140, 2 networks, result: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/140.7.136.45.zen.spamhaus.org for dns:A:140.7.136.45.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 32409/IN/A/140.7.136.45.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: DNSBL-A, dns:A:140.7.136.45.zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL sa-trusted.bondedsender.org., set ssc-firsttrusted
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching TXT/140.7.136.45.sa-trusted.bondedsender.org for dns:TXT:140.7.136.45.sa-trusted.bondedsender.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 62606/IN/TXT/140.7.136.45.sa-trusted.bondedsender.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: DNSBL-TXT, dns:TXT:140.7.136.45.sa-trusted.bondedsender.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL bl.mailspike.net., set mspikeb-lastexternal
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: netset: trusted_networks cached lookup on 45.136.7.140, 2 networks, result: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/140.7.136.45.bl.mailspike.net for dns:A:140.7.136.45.bl.mailspike.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 23902/IN/A/140.7.136.45.bl.mailspike.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: DNSBL-A, dns:A:140.7.136.45.bl.mailspike.net (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-lastexternal
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: netset: trusted_networks cached lookup on 45.136.7.140, 2 networks, result: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/140.7.136.45.dnsbl.sorbs.net for dns:A:140.7.136.45.dnsbl.sorbs.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 61156/IN/A/140.7.136.45.dnsbl.sorbs.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: DNSBL-A, dns:A:140.7.136.45.dnsbl.sorbs.net (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL bl.spamcop.net., set spamcop
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: netset: trusted_networks cached lookup on 45.136.7.140, 2 networks, result: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching TXT/140.7.136.45.bl.spamcop.net for dns:TXT:140.7.136.45.bl.spamcop.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 45843/IN/TXT/140.7.136.45.bl.spamcop.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: DNSBL-TXT, dns:TXT:140.7.136.45.bl.spamcop.net (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: netset: trusted_networks cached lookup on 45.136.7.140, 2 networks, result: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/140.7.136.45.iadb.isipp.com for dns:A:140.7.136.45.iadb.isipp.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 41892/IN/A/140.7.136.45.iadb.isipp.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: DNSBL-A, dns:A:140.7.136.45.iadb.isipp.com (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL sa-accredit.habeas.com., set ssc-firsttrusted
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching TXT/140.7.136.45.sa-accredit.habeas.com for dns:TXT:140.7.136.45.sa-accredit.habeas.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 23147/IN/TXT/140.7.136.45.sa-accredit.habeas.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: DNSBL-TXT, dns:TXT:140.7.136.45.sa-accredit.habeas.com (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL wl.mailspike.net., set mspikeg-firsttrusted
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: netset: trusted_networks cached lookup on 45.136.7.140, 2 networks, result: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/140.7.136.45.wl.mailspike.net for dns:A:140.7.136.45.wl.mailspike.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 35451/IN/A/140.7.136.45.wl.mailspike.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: DNSBL-A, dns:A:140.7.136.45.wl.mailspike.net (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL list.dnswl.org., set dnswl-firsttrusted
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/140.7.136.45.list.dnswl.org for dns:A:140.7.136.45.list.dnswl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 13426/IN/A/140.7.136.45.list.dnswl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: DNSBL-A, dns:A:140.7.136.45.list.dnswl.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: netset: trusted_networks cached lookup on 45.136.7.140, 2 networks, result: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: netset: trusted_networks cached lookup on 45.136.7.140, 2 networks, result: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: netset: trusted_networks cached lookup on 45.136.7.140, 2 networks, result: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: IPs found: full-external: 45.136.7.140 untrusted: 45.136.7.140 originating:
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: netset: trusted_networks cached lookup on 45.136.7.140, 2 networks, result: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: only inspecting the following IPs: 45.136.7.140
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: checking A and MX for host freshwarm.cyou
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/freshwarm.cyou for dns:A:freshwarm.cyou
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 41164/IN/A/freshwarm.cyou
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: NO_DNS_FOR_FROM, DNSBL-A, dns:A:freshwarm.cyou (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching MX/freshwarm.cyou for dns:MX:freshwarm.cyou
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 2400/IN/MX/freshwarm.cyou
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: NO_DNS_FOR_FROM, DNSBL-MX, dns:MX:freshwarm.cyou (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: check_main, time limit in 299.739 s
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: running tests for priority: -1000
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 200 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 13698/IN/A/imgstore.host.dob.sibl.support-intelligence.net: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dob.sibl.support-intelligence.net, rule URIBL_RHS_DOB
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RHS_DOB DNSBL:imgstore.host:dob.sibl.support-intelligence.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 98 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 33993 is OK, 2 answer records
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key NS:imgstore.host
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_ns_lookup NS:imgstore.host
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: got(1) NS for imgstore.host: imgstore.host. 120 IN NS clint.ns.cloudflare.com.
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/clint.ns.cloudflare.com for A:clint.ns.cloudflare.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 9326/IN/A/clint.ns.cloudflare.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URI-A, A:clint.ns.cloudflare.com (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: got(2) NS for imgstore.host: imgstore.host. 120 IN NS kiki.ns.cloudflare.com.
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/kiki.ns.cloudflare.com for A:kiki.ns.cloudflare.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 61430/IN/A/kiki.ns.cloudflare.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URI-A, A:kiki.ns.cloudflare.com (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 140 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 41830/IN/A/freshwarm.cyou.dbl.spamhaus.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dbl.spamhaus.org, rule URIBL_DBL_ERROR
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ERROR DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dbl.spamhaus.org, rule URIBL_DBL_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_BLOCKED_OPENDNS DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dbl.spamhaus.org, rule URIBL_DBL_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_BLOCKED DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dbl.spamhaus.org, rule URIBL_DBL_MALWARE
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_MALWARE DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dbl.spamhaus.org, rule URIBL_DBL_BOTNETCC
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_BOTNETCC DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_MALW
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_MALW DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_SPAM
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_SPAM DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dbl.spamhaus.org, rule URIBL_DBL_SPAM
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_SPAM DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_BOTCC
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_BOTCC DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_PHISH
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_PHISH DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_REDIR
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_REDIR DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dbl.spamhaus.org, rule URIBL_DBL_PHISH
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_PHISH DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 90 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 42583 is OK, 3 answer records
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key A:imgstore.host
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup A:imgstore.host
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(1) A for imgstore.host: imgstore.host. 300 IN A 172.67.223.11
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/11.223.67.172.zen.spamhaus.org for DNSBL:11.223.67.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 62367/IN/A/11.223.67.172.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_CSS_A, URI-DNSBL, DNSBL:11.223.67.172:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 62367/IN/A/11.223.67.172.zen.spamhaus.org already underway, adding no.2 URIBL_SBL_A
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(2) A for imgstore.host: imgstore.host. 300 IN A 104.27.137.4
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/4.137.27.104.zen.spamhaus.org for DNSBL:4.137.27.104:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 32573/IN/A/4.137.27.104.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_CSS_A, URI-DNSBL, DNSBL:4.137.27.104:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 32573/IN/A/4.137.27.104.zen.spamhaus.org already underway, adding no.2 URIBL_SBL_A
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(3) A for imgstore.host: imgstore.host. 300 IN A 104.27.136.4
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/4.136.27.104.zen.spamhaus.org for DNSBL:4.136.27.104:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 3885/IN/A/4.136.27.104.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_CSS_A, URI-DNSBL, DNSBL:4.136.27.104:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 3885/IN/A/4.136.27.104.zen.spamhaus.org already underway, adding no.2 URIBL_SBL_A
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 139 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 31094/IN/A/imgstore.host.dbl.spamhaus.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dbl.spamhaus.org, rule URIBL_DBL_ERROR
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ERROR DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dbl.spamhaus.org, rule URIBL_DBL_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_BLOCKED_OPENDNS DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dbl.spamhaus.org, rule URIBL_DBL_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_BLOCKED DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dbl.spamhaus.org, rule URIBL_DBL_MALWARE
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_MALWARE DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dbl.spamhaus.org, rule URIBL_DBL_BOTNETCC
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_BOTNETCC DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_MALW
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_MALW DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_SPAM
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_SPAM DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dbl.spamhaus.org, rule URIBL_DBL_SPAM
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_SPAM DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_BOTCC
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_BOTCC DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_PHISH
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_PHISH DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_REDIR
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_REDIR DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:dbl.spamhaus.org, rule URIBL_DBL_PHISH
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_PHISH DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 127 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 13426/IN/A/140.7.136.45.list.dnswl.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:A:140.7.136.45.list.dnswl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: select found no responses ready (t.o.=0.0)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.197 s: URIBL_DBL_ERROR, URI-DNSBL, DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.135 s: URIBL_RHS_DOB, URI-DNSBL, DNSBL:imgstore.host:dob.sibl.support-intelligence.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.122 s: URI-NS, NS:imgstore.host
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.110 s: DNSBL-A, dns:A:140.7.136.45.list.dnswl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.194 s: URIBL_DBL_ERROR, URI-DNSBL, DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.154 s: URI-A, A:imgstore.host
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: queries completed: 6, started: 5
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: queries active: A=1 DNSBL-A=8 DNSBL-MX=1 DNSBL-TXT=3 TXT=1 URI-A=3 URI-DNSBL=8 URI-NS=1 at Mon Aug 24 04:53:11 2020
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: harvested completed queries
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running head tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running head_eval tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: eval: all '*From' addrs: match at freshwarm.cyou
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: eval: all '*To' addrs: lm at zork.pl zork at zork.pl
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 123 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 39132/IN/A/freshwarm.cyou.multi.surbl.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:multi.surbl.org, rule URIBL_CR_SURBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CR_SURBL DNSBL:freshwarm.cyou:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:multi.surbl.org, rule URIBL_WS_SURBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_WS_SURBL DNSBL:freshwarm.cyou:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:multi.surbl.org, rule URIBL_PH_SURBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_PH_SURBL DNSBL:freshwarm.cyou:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:multi.surbl.org, rule URIBL_MW_SURBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_MW_SURBL DNSBL:freshwarm.cyou:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:multi.surbl.org, rule SURBL_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup SURBL_BLOCKED DNSBL:freshwarm.cyou:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:multi.surbl.org, rule URIBL_ABUSE_SURBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ABUSE_SURBL DNSBL:freshwarm.cyou:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: select found no responses ready (t.o.=0.0)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.293 s: URIBL_CR_SURBL, URI-DNSBL, DNSBL:freshwarm.cyou:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: queries completed: 1, started: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: queries active: A=1 DNSBL-A=8 DNSBL-MX=1 DNSBL-TXT=3 TXT=1 URI-A=3 URI-DNSBL=7 URI-NS=1 at Mon Aug 24 04:53:11 2020
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: harvested completed queries
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running body tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running uri tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running rawbody tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running full tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running meta tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: running tests for priority: -950
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running head tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running head_eval tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running body tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running uri tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running rawbody tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running full tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running meta tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: running tests for priority: -900
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running head tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running head_eval tests; score so far=0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 100 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 9326 is OK, 3 answer records
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key A:clint.ns.cloudflare.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup A:clint.ns.cloudflare.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(1) A for clint.ns.cloudflare.com: clint.ns.cloudflare.com. 900 IN A 173.245.59.90
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/90.59.245.173.zen.spamhaus.org for DNSBL:90.59.245.173:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 51188/IN/A/90.59.245.173.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:90.59.245.173:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 51188/IN/A/90.59.245.173.zen.spamhaus.org already underway, adding no.2 URIBL_ZEN_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 51188/IN/A/90.59.245.173.zen.spamhaus.org already underway, adding no.3 URIBL_CSS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 51188/IN/A/90.59.245.173.zen.spamhaus.org already underway, adding no.4 URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(2) A for clint.ns.cloudflare.com: clint.ns.cloudflare.com. 900 IN A 172.64.33.90
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/90.33.64.172.zen.spamhaus.org for DNSBL:90.33.64.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 16084/IN/A/90.33.64.172.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:90.33.64.172:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 16084/IN/A/90.33.64.172.zen.spamhaus.org already underway, adding no.2 URIBL_ZEN_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 16084/IN/A/90.33.64.172.zen.spamhaus.org already underway, adding no.3 URIBL_CSS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 16084/IN/A/90.33.64.172.zen.spamhaus.org already underway, adding no.4 URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(3) A for clint.ns.cloudflare.com: clint.ns.cloudflare.com. 900 IN A 108.162.193.90
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/90.193.162.108.zen.spamhaus.org for DNSBL:90.193.162.108:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 32595/IN/A/90.193.162.108.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:90.193.162.108:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 32595/IN/A/90.193.162.108.zen.spamhaus.org already underway, adding no.2 URIBL_ZEN_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 32595/IN/A/90.193.162.108.zen.spamhaus.org already underway, adding no.3 URIBL_CSS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 32595/IN/A/90.193.162.108.zen.spamhaus.org already underway, adding no.4 URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 99 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 61430 is OK, 3 answer records
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key A:kiki.ns.cloudflare.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup A:kiki.ns.cloudflare.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(1) A for kiki.ns.cloudflare.com: kiki.ns.cloudflare.com. 900 IN A 108.162.192.180
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/180.192.162.108.zen.spamhaus.org for DNSBL:180.192.162.108:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 43512/IN/A/180.192.162.108.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:180.192.162.108:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 43512/IN/A/180.192.162.108.zen.spamhaus.org already underway, adding no.2 URIBL_ZEN_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 43512/IN/A/180.192.162.108.zen.spamhaus.org already underway, adding no.3 URIBL_CSS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 43512/IN/A/180.192.162.108.zen.spamhaus.org already underway, adding no.4 URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(2) A for kiki.ns.cloudflare.com: kiki.ns.cloudflare.com. 900 IN A 172.64.32.180
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/180.32.64.172.zen.spamhaus.org for DNSBL:180.32.64.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 48781/IN/A/180.32.64.172.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:180.32.64.172:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 48781/IN/A/180.32.64.172.zen.spamhaus.org already underway, adding no.2 URIBL_ZEN_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 48781/IN/A/180.32.64.172.zen.spamhaus.org already underway, adding no.3 URIBL_CSS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 48781/IN/A/180.32.64.172.zen.spamhaus.org already underway, adding no.4 URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(3) A for kiki.ns.cloudflare.com: kiki.ns.cloudflare.com. 900 IN A 173.245.58.180
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/180.58.245.173.zen.spamhaus.org for DNSBL:180.58.245.173:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 52428/IN/A/180.58.245.173.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:180.58.245.173:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 52428/IN/A/180.58.245.173.zen.spamhaus.org already underway, adding no.2 URIBL_ZEN_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 52428/IN/A/180.58.245.173.zen.spamhaus.org already underway, adding no.3 URIBL_CSS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: query 52428/IN/A/180.58.245.173.zen.spamhaus.org already underway, adding no.4 URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 119 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 35369/IN/A/freshwarm.cyou.fresh.fmb.la: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key askdns:A:freshwarm.cyou.fresh.fmb.la.
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: askdns: answer received, rcode NXDOMAIN, query IN/A/freshwarm.cyou.fresh.fmb.la, answer has 0 records
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 138 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 32409/IN/A/140.7.136.45.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:A:140.7.136.45.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 58 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 23902/IN/A/140.7.136.45.bl.mailspike.net: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:A:140.7.136.45.bl.mailspike.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 122 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 52714/IN/A/imgstore.host.multi.surbl.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:multi.surbl.org, rule URIBL_CR_SURBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CR_SURBL DNSBL:imgstore.host:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:multi.surbl.org, rule URIBL_WS_SURBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_WS_SURBL DNSBL:imgstore.host:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:multi.surbl.org, rule URIBL_PH_SURBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_PH_SURBL DNSBL:imgstore.host:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:multi.surbl.org, rule URIBL_MW_SURBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_MW_SURBL DNSBL:imgstore.host:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:multi.surbl.org, rule SURBL_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup SURBL_BLOCKED DNSBL:imgstore.host:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:multi.surbl.org, rule URIBL_ABUSE_SURBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ABUSE_SURBL DNSBL:imgstore.host:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 155 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 16082/IN/A/140.7.136.45.bl.score.senderscore.com: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:A:140.7.136.45.bl.score.senderscore.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 75 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 46382 is OK, 1 answer records
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:multi.uribl.com, rule URIBL_BLACK
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLACK DNSBL:freshwarm.cyou:multi.uribl.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: freshwarm.cyou . multi.uribl.com -> 127.0.0.2, URIBL_BLACK, subtest:2
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: freshwarm.cyou . multi.uribl.com -> 127.0.0.2, URIBL_BLACK, 7f000002 & 00000002 match
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: domain "freshwarm.cyou" listed (URIBL_BLACK): 127.0.0.2
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: URIBL_BLACK lookup finished
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:multi.uribl.com, rule URIBL_GREY
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_GREY DNSBL:freshwarm.cyou:multi.uribl.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: freshwarm.cyou . multi.uribl.com -> 127.0.0.2, URIBL_GREY, subtest:4
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: freshwarm.cyou . multi.uribl.com -> 127.0.0.2, URIBL_GREY, 7f000002 & 00000004 no
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:multi.uribl.com, rule URIBL_RED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RED DNSBL:freshwarm.cyou:multi.uribl.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: freshwarm.cyou . multi.uribl.com -> 127.0.0.2, URIBL_RED, subtest:8
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: freshwarm.cyou . multi.uribl.com -> 127.0.0.2, URIBL_RED, 7f000002 & 00000008 no
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:multi.uribl.com, rule URIBL_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLOCKED DNSBL:freshwarm.cyou:multi.uribl.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: freshwarm.cyou . multi.uribl.com -> 127.0.0.2, URIBL_BLOCKED, subtest:1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: freshwarm.cyou . multi.uribl.com -> 127.0.0.2, URIBL_BLOCKED, 7f000002 & 00000001 no
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 201 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 28444/IN/A/freshwarm.cyou.dob.sibl.support-intelligence.net: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:freshwarm.cyou:dob.sibl.support-intelligence.net, rule URIBL_RHS_DOB
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RHS_DOB DNSBL:freshwarm.cyou:dob.sibl.support-intelligence.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 58 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 35451/IN/A/140.7.136.45.wl.mailspike.net: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:A:140.7.136.45.wl.mailspike.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 118 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 32684/IN/A/imgstore.host.multi.uribl.com: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:multi.uribl.com, rule URIBL_BLACK
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLACK DNSBL:imgstore.host:multi.uribl.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:multi.uribl.com, rule URIBL_GREY
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_GREY DNSBL:imgstore.host:multi.uribl.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:multi.uribl.com, rule URIBL_RED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RED DNSBL:imgstore.host:multi.uribl.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:imgstore.host:multi.uribl.com, rule URIBL_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLOCKED DNSBL:imgstore.host:multi.uribl.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 138 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 3885/IN/A/4.136.27.104.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:4.136.27.104:zen.spamhaus.org, rule URIBL_CSS_A
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS_A DNSBL:4.136.27.104:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:4.136.27.104:zen.spamhaus.org, rule URIBL_SBL_A
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:4.136.27.104:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 139 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 62367/IN/A/11.223.67.172.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:11.223.67.172:zen.spamhaus.org, rule URIBL_CSS_A
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS_A DNSBL:11.223.67.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:11.223.67.172:zen.spamhaus.org, rule URIBL_SBL_A
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:11.223.67.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 138 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 32573/IN/A/4.137.27.104.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:4.137.27.104:zen.spamhaus.org, rule URIBL_CSS_A
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS_A DNSBL:4.137.27.104:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:4.137.27.104:zen.spamhaus.org, rule URIBL_SBL_A
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:4.137.27.104:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 117 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 41892/IN/A/140.7.136.45.iadb.isipp.com: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:A:140.7.136.45.iadb.isipp.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 123 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 60736/IN/A/140.7.136.45.psbl.surriel.com: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:A:140.7.136.45.psbl.surriel.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 69 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 62606/IN/TXT/140.7.136.45.sa-trusted.bondedsender.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:TXT:140.7.136.45.sa-trusted.bondedsender.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 64 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 23147/IN/TXT/140.7.136.45.sa-accredit.habeas.com: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:TXT:140.7.136.45.sa-accredit.habeas.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 134 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 45843/IN/TXT/140.7.136.45.bl.spamcop.net: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:TXT:140.7.136.45.bl.spamcop.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: select found no responses ready (t.o.=0.0)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.626 s: DNSBL-A, dns:A:140.7.136.45.wl.mailspike.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.660 s: DNSBL-TXT, dns:TXT:140.7.136.45.sa-accredit.habeas.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.637 s: DNSBL-A, dns:A:140.7.136.45.zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.627 s: DNSBL-A, dns:A:140.7.136.45.bl.mailspike.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.556 s: URIBL_CSS_A, URI-DNSBL, DNSBL:11.223.67.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.709 s: URIBL_CR_SURBL, URI-DNSBL, DNSBL:imgstore.host:multi.surbl.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.678 s: DNSBL-TXT, dns:TXT:140.7.136.45.bl.spamcop.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.552 s: URIBL_CSS_A, URI-DNSBL, DNSBL:4.137.27.104:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.660 s: A, askdns:A:freshwarm.cyou.fresh.fmb.la.
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.692 s: DNSBL-TXT, dns:TXT:140.7.136.45.sa-trusted.bondedsender.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.736 s: URIBL_BLACK, URI-DNSBL, DNSBL:imgstore.host:multi.uribl.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.497 s: URI-A, A:clint.ns.cloudflare.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.539 s: URIBL_CSS_A, URI-DNSBL, DNSBL:4.136.27.104:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.707 s: DNSBL-A, dns:A:140.7.136.45.psbl.surriel.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.659 s: DNSBL-A, dns:A:140.7.136.45.iadb.isipp.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.762 s: URIBL_BLACK, URI-DNSBL, DNSBL:freshwarm.cyou:multi.uribl.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.512 s: URI-A, A:kiki.ns.cloudflare.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.657 s: DNSBL-A, dns:A:140.7.136.45.bl.score.senderscore.com
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.770 s: URIBL_RHS_DOB, URI-DNSBL, DNSBL:freshwarm.cyou:dob.sibl.support-intelligence.net
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: queries completed: 19, started: 6
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: queries active: DNSBL-A=2 DNSBL-MX=1 TXT=1 URI-A=1 URI-DNSBL=6 URI-NS=1 at Mon Aug 24 04:53:11 2020
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: harvested completed queries
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running body tests; score so far=1.7
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: select found no responses ready (t.o.=0.0)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: queries completed: 0, started: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: queries active: DNSBL-A=2 DNSBL-MX=1 TXT=1 URI-A=1 URI-DNSBL=6 URI-NS=1 at Mon Aug 24 04:53:11 2020
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running uri tests; score so far=1.7
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running rawbody tests; score so far=1.7
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running full tests; score so far=1.7
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running meta tests; score so far=1.7
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: running tests for priority: -90
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running head tests; score so far=1.7
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running body tests; score so far=1.7
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running uri tests; score so far=1.7
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running body_eval tests; score so far=1.7
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: bayes: tie-ing to DB file R/O /var/lib/spamassassin/bayes_toks
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: bayes: tie-ing to DB file R/O /var/lib/spamassassin/bayes_seen
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: bayes: found bayes db version 3
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: bayes: DB journal sync: last sync: 1598218879
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: bayes: corpus size: nspam = 1120, nham = 25392
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: bayes: tokenized body: 962 tokens
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: bayes: tokenized uri: 34 tokens
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: bayes: tokenized invisible: 0 tokens
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: bayes: tokenized header: 53 tokens
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: bayes: score = 0.500001291954565
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: bayes: DB journal sync: last sync: 1598218879
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: bayes: untie-ing
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag BAYESTCHAMMY is now ready, value: 36
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag BAYESTCSPAMMY is now ready, value: 114
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag BAYESTCLEARNED is now ready, value: 547
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag BAYESTC is now ready, value: 624
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag HAMMYTOKENS is now ready, value: CODE(0x561306491800)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag SPAMMYTOKENS is now ready, value: CODE(0x561306aa7fc0)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag TOKENSUMMARY is now ready, value: CODE(0x561302755b90)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule BAYES_50 ======> got hit (1)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 140 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 52428/IN/A/180.58.245.173.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:180.58.245.173:zen.spamhaus.org, rule URIBL_SBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:180.58.245.173:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:180.58.245.173:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED DNSBL:180.58.245.173:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:180.58.245.173:zen.spamhaus.org, rule URIBL_CSS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS DNSBL:180.58.245.173:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:180.58.245.173:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED_OPENDNS DNSBL:180.58.245.173:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 139 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 51188/IN/A/90.59.245.173.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:90.59.245.173:zen.spamhaus.org, rule URIBL_SBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:90.59.245.173:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:90.59.245.173:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED DNSBL:90.59.245.173:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:90.59.245.173:zen.spamhaus.org, rule URIBL_CSS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS DNSBL:90.59.245.173:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:90.59.245.173:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED_OPENDNS DNSBL:90.59.245.173:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 138 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 16084/IN/A/90.33.64.172.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:90.33.64.172:zen.spamhaus.org, rule URIBL_SBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:90.33.64.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:90.33.64.172:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED DNSBL:90.33.64.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:90.33.64.172:zen.spamhaus.org, rule URIBL_CSS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS DNSBL:90.33.64.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:90.33.64.172:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED_OPENDNS DNSBL:90.33.64.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 139 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 48781/IN/A/180.32.64.172.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:180.32.64.172:zen.spamhaus.org, rule URIBL_SBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:180.32.64.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:180.32.64.172:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED DNSBL:180.32.64.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:180.32.64.172:zen.spamhaus.org, rule URIBL_CSS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS DNSBL:180.32.64.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:180.32.64.172:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED_OPENDNS DNSBL:180.32.64.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 140 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 32595/IN/A/90.193.162.108.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:90.193.162.108:zen.spamhaus.org, rule URIBL_SBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:90.193.162.108:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:90.193.162.108:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED DNSBL:90.193.162.108:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:90.193.162.108:zen.spamhaus.org, rule URIBL_CSS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS DNSBL:90.193.162.108:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:90.193.162.108:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED_OPENDNS DNSBL:90.193.162.108:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 141 bytes from 127.0.0.1
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 43512/IN/A/180.192.162.108.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:180.192.162.108:zen.spamhaus.org, rule URIBL_SBL
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:180.192.162.108:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:180.192.162.108:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED DNSBL:180.192.162.108:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:180.192.162.108:zen.spamhaus.org, rule URIBL_CSS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS DNSBL:180.192.162.108:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:180.192.162.108:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED_OPENDNS DNSBL:180.192.162.108:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: select found no responses ready (t.o.=0.0)
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.318 s: URIBL_SBL, URI-DNSBL, DNSBL:180.192.162.108:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.284 s: URIBL_SBL, URI-DNSBL, DNSBL:180.58.245.173:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.322 s: URIBL_SBL, URI-DNSBL, DNSBL:90.193.162.108:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.320 s: URIBL_SBL, URI-DNSBL, DNSBL:90.59.245.173:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.304 s: URIBL_SBL, URI-DNSBL, DNSBL:180.32.64.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.319 s: URIBL_SBL, URI-DNSBL, DNSBL:90.33.64.172:zen.spamhaus.org
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: queries completed: 6, started: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: async: queries active: DNSBL-A=2 DNSBL-MX=1 TXT=1 URI-A=1 URI-NS=1 at Mon Aug 24 04:53:11 2020
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: dns: harvested completed queries
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running rawbody tests; score so far=2.5
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running full tests; score so far=2.5
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running meta tests; score so far=2.5
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: check: running tests for priority: 0
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: running head tests; score so far=2.5
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit: "@freshwarm.cyou>"
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __HAS_MESSAGE_ID ======> got hit: "<YES>"
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __HAS_RCVD ======> got hit: "<YES>"
Aug 24 04:53:11 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __DOS_RCVD_MON ======> got hit: " Mon, "
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule ZABOJCASPAMU_FROM_UNKNOWN ======> got hit: "from freshwarm.cyou (unknown ["
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __HAS_DATE ======> got hit: "<YES>"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __MISSING_REPLY ======> got hit: "UNSET"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __MIME_VERSION ======> got hit: "<YES>"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __MISSING_REF ======> got hit: "UNSET"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __FROM_FULL_NAME ======> got hit: "Wood.P"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __HAS_FROM ======> got hit: "<YES>"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __ZABOJCASPAMU_SA_20160728_1 ======> got hit: "W"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __SANE_MSGID ======> got hit: "<zUpYETG0BustuLALz7_FiPSLJjsSo6Eqfa_25y_ZFDw._tbxozaitj0XqutqAEWMwA at freshwarm.cyou>
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: [...] "
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __SUBJ_NOT_SHORT ======> got hit: "Weekend DIY Proj"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "<YES>"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __LAST_UNTRUSTED_RELAY_NO_AUTH ======> got hit: "[ ip=45.136.7.140 rdns= helo=freshwarm.cyou by=black.zork.pl ident= envfrom= intl=0 id=3540414B187 auth= "
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __DOS_SINGLE_EXT_RELAY ======> got hit: "[ ip=45.136.7.140 rdns= helo=freshwarm.cyou by=black.zork.pl ident= envfrom= intl=0 id=3540414B187 auth= msa=0 ]"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __RDNS_NONE ======> got hit: "[ ip=45.136.7.140 rdns= "
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __LAST_EXTERNAL_RELAY_NO_AUTH ======> got hit: "[ ip=45.136.7.140 rdns= helo=freshwarm.cyou by=black.zork.pl ident= envfrom= intl=0 id=3540414B187 auth= "
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __HAS_TO ======> got hit: "<YES>"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __CTYPE_MULTIPART_ANY ======> got hit: "multipart/alternative"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __CTYPE_MULTIPART_ALT ======> got hit: "multipart/alternative"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __CT ======> got hit: "<YES>"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __CTYPE_HAS_BOUNDARY ======> got hit: "boundary"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: "<YES>"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: running head_eval tests; score so far=4
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dkim: signatures provided by the caller, 0 signatures
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dkim: signature verification result: none
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dkim: author match at freshwarm.cyou, not in any dkim whitelist
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: spf: checking to see if the message has a Received-SPF header that we can use
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: spf: checking HELO (helo=freshwarm.cyou, ip=45.136.7.140)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 11624/IN/TXT/freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 77 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 2400 is OK, 1 answer records
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:MX:freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: hit <dns:freshwarm.cyou?type=MX> 10 aspmx.l.google.com.
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 59 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 41164 is OK, 1 answer records
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:A:freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: hit <dns:freshwarm.cyou> 45.136.7.140
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 76 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 21231 is OK, 1 answer records
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key askdns:TXT:freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: askdns: answer received, rcode NOERROR, query IN/TXT/freshwarm.cyou, answer has 1 records
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 95 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 45127 is OK, 3 answer records
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key A:www.freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup A:www.freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(1) A for www.freshwarm.cyou: www.freshwarm.cyou. 300 IN A 172.67.200.181
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/181.200.67.172.zen.spamhaus.org for DNSBL:181.200.67.172:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 30181/IN/A/181.200.67.172.zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_CSS_A, URI-DNSBL, DNSBL:181.200.67.172:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 30181/IN/A/181.200.67.172.zen.spamhaus.org already underway, adding no.2 URIBL_SBL_A
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(2) A for www.freshwarm.cyou: www.freshwarm.cyou. 300 IN A 104.27.156.103
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/103.156.27.104.zen.spamhaus.org for DNSBL:103.156.27.104:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 58205/IN/A/103.156.27.104.zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_CSS_A, URI-DNSBL, DNSBL:103.156.27.104:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 58205/IN/A/103.156.27.104.zen.spamhaus.org already underway, adding no.2 URIBL_SBL_A
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(3) A for www.freshwarm.cyou: www.freshwarm.cyou. 300 IN A 104.27.157.103
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/103.157.27.104.zen.spamhaus.org for DNSBL:103.157.27.104:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 18056/IN/A/103.157.27.104.zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_CSS_A, URI-DNSBL, DNSBL:103.157.27.104:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 18056/IN/A/103.157.27.104.zen.spamhaus.org already underway, adding no.2 URIBL_SBL_A
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 99 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 35912 is OK, 2 answer records
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key NS:freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_ns_lookup NS:freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: got(1) NS for freshwarm.cyou: freshwarm.cyou. 3599 IN NS rory.ns.cloudflare.com.
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/rory.ns.cloudflare.com for A:rory.ns.cloudflare.com
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 15972/IN/A/rory.ns.cloudflare.com
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URI-A, A:rory.ns.cloudflare.com (timeout 15.0s, min 3.0s)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: got(2) NS for freshwarm.cyou: freshwarm.cyou. 3599 IN NS jewel.ns.cloudflare.com.
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/jewel.ns.cloudflare.com for A:jewel.ns.cloudflare.com
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 30980/IN/A/jewel.ns.cloudflare.com
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URI-A, A:jewel.ns.cloudflare.com (timeout 15.0s, min 3.0s)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 76 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 11624 is OK, 1 answer records
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 12940/IN/A/freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 59 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 12940 is OK, 1 answer records
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: spf: query for /45.136.7.140/freshwarm.cyou: result: pass, comment: , text: Mechanism 'a' matched
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule SPF_HELO_PASS ======> got hit (1)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: RULE (__FREEMAIL_DISPTO) check_freemail_header
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: header Disposition-Notification-To not found from mail
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: spf: already checked for Received-SPF headers, proceeding with DNS based checks
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: spf: checking EnvelopeFrom (helo=freshwarm.cyou, ip=45.136.7.140, envfrom=match at freshwarm.cyou)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 45464/IN/TXT/freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 76 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 45464 is OK, 1 answer records
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 1894/IN/A/freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 59 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 1894 is OK, 1 answer records
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: spf: query for match at freshwarm.cyou/45.136.7.140/freshwarm.cyou: result: pass, comment: , text: Mechanism 'a' matched
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: RULE (FREEMAIL_FROM) check_freemail_from
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: all from-addresses: match at freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: check_uri_host_listed: (PDS_CASHSHORTENER) 2xs.io, 7r6.com, acitoate.com, aclabink.com, activeation.com, activeterium.com, adflyforum.com, adflymail.com, adfoc.us, adult.xyz, agileurbia.com, atomcurve.com, ay.gy, battleate.com, biastonu.com, bitigee.com, briskrange.com, brisktopia.com, caat.site, casualient.com, cleft.xyz, clesolea.com, cobs.xyz, code404.biz, coginator.com, cogismith.com, covelign.com, cowner.net, cpmlink.net, crefranek.com, cutpaid.com, dares.xyz, dashsphere.com, dataurbia.com, deciomm.com, ducolomal.com, east-jones.com, ecleneue.com, ellevolaw.com, endroudo.com, eunsetee.com, fainbory.com, fasttory.com, fawright.com, fc.lc, flyserve.co, greponozy.com, gsurl.in, gsurl.me, gurl.ly, gurl.pw, homoluath.com, hopigrarn.com, infopade.com, j.gs, kaitect.com, kializer.com, kibuilder.com, kimechanic.com, kudoflow.com, kutpay.com, legeerook.com, libittarc.com, linkjaunt.com, locinealy.com, maetrimal.com, metastead.com, mitly.us...
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) ..., mmoity.com, mondoagram.com, neswery.com, nimbleinity.com, ocest.site, olnew.xyz, onisedeo.com, optitopt.com, pc.cd, picocurl.com, pladollmo.com, preofery.com, prereheus.com, q.gs, quainator.com, quamiller.com, queuecosm.bid, raboninco.com, rapidteria.com, rapidtory.com, sapolatsu.com, scapognel.com, shortearn.eu, shrinkhere.xyz, simizer.com, skamaker.com, skamason.com, sluppend.com, spiin.xyz, sprysphere.com, streamvoyage.com, swarife.com, swiftation.com, swifttopia.com, techigo.com, threadsphere.bid, tinyical.com, tonancos.com, trendlouds.com, triabicia.com, turboagram.com, twineer.com, twiriock.com, userlab66.com, vaugette.com, velocicosm.com, velociterium.com, viahold.com, vializer.com, viwright.com, waar.site, whareotiv.com, wirecellar.com, x19.biz, x19network.com, yabuilder.com, yamechanic.com, yoalizer.com, yobuilder.com, yogaf.xyz, yoineer.com, yoitect.com, zipansion.com, zipteria.com, zipvale.com
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: check_uri_host_listed: (PDS_URISHORTENER) 0rz.tw, 1l2.us, 1link.in, 1u.ro, 1url.com, 2.gp, 2.ly, 2big.at, 2chap.it, 2pl.us, 2su.de, 2tu.us, 2ze.us, 3.ly, 301.to, 301url.com, 307.to, 4ms.me, 4sq.com, 4url.cc, 6url.com, 7.ly, 9mp.com, a.gd, a.gg, a.nf, a2a.me, a2n.eu, aa.cx, abbr.com, abcurl.net, abe5.com, access.im, ad.vu, adf.ly, adjix.com, afx.cc, all.fuseurl.com, alturl.com, amishdatacenter.com, amishprincess.com, amzn.com, amzn.to, ar.gy, arm.in, arst.ch, asso.in, atu.ca, aurls.info, awe.sm, ayl.lv, azc.cc, azqq.com, b23.ru, b2l.me, b65.com, b65.us, back.ly, bacn.me, bcool.bz, beam.to, bgl.me, binged.it, bit.do, bit.ly, bitly.com, bizj.us, bkite.com, blippr.com, bloat.me, blu.cc, bmwforum.co, bon.no, bravo.ly, bsa.ly, bt.io, budurl.com, buff.ly, buk.me, burnurl.com, c-o.in, c.shamekh.ws, canadianlumberjacks.club, canadianlumberjacks.online, canurl.com, catsnthing.com, catsnthings.fun, cc.uz, cd4.me, chilp.it, chopd.it, chpt.me, chs....
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) ...mx, chzb.gr, cl.lk, cl.ly, clck.ru, cli.gs, cliccami.info, clickthru.ca, clipurl.us, clk.my, cloaky.de, clop.in, clp.ly, coge.la, cokeurl.com, conta.cc, cort.as, cot.ag, crabrave.pw, crks.me, crum.pl, ctvr.us, curio.us, curiouscat.club, cuthut.com, cutt.us, cuturl.com, cuturls.com, cutwin.biz, dai.ly, db.tt, dealspl.us, decenturl.com, df9.net, dfl8.me, digbig.com, digg.com, digipills.com, digs.by, disq.us, disçordapp.com, dld.bz, dlvr.it, dn.vc, do.my, doi.org, doiop.com, dopen.us, dr.tl, drudge.tw, durl.me, durl.us, dvlr.it, dwarfurl.com, easyuri.com, easyurl.net, eca.sh, eclurl.com, eepurl.com, eezurl.com, erq.io, eweri.com, ewerl.com, ezurl.eu, fa.by, faceto.us, fav.me, fb.me, fbshare.me, ff.im, fff.to, fhurl.com, fire.to, firsturl.de, firsturl.net, flic.kr, flingk.com, flq.us, fly2.ws, fn.tc, fon.gs, formspring.me, fortnight.space, fortnitechat.site, foxyurl.com, freak.to, freegiftcards.co, fur.ly, fuseurl.com, fuzzy.to, fwd4.me, fwdurl.net, ...
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) ...fwib.net, g.ro.lt, g8l.us, get-shorty.com, get-url.com, get.sh, geturl.us, gg.gg, gi.vc, gizmo.do, gkurl.us, gl.am, go.9nl.com, go.ign.com, go.to, go.usa.gov, go2.me, gog.li, golmao.com, goo.gl, good.ly, goshrink.com, gplinks.in, gplus.to, grabify.link, gri.ms, gurl.es, hao.jp, heg.tc, hellotxt.com, hex.io, hiderefer.com, hmm.ph, hop.im, hopclicks.com, hotredirect.com, hotshorturl.com, href.in, hsblinks.com, ht.ly, htxt.it, hub.am, huff.to, hugeurl.com, hulu.com, hurl.it, hurl.me, hurl.no, hurl.ws, icanhaz.com, icio.us, idek.net, ikr.me, ilix.in, inx.lv, ir.pe, irt.me, is.gd, iscool.net, it2.in, ito.mx, its.my, itsy.it, ix.lt, j.mp, j2j.de, jdem.cz, jijr.com, joinmy.site, just.as, k.vu, k6.kz, ketkp.in, kisa.ch, kissa.be, kl.am, klck.me, ko.tc, kore.us, korta.nu, kots.nu, krunchd.com, krz.ch, ktzr.us, kxk.me, l.hh.de, l.pr, l9k.net, lat.ms, liip.to, liltext.com, lin.cr, lin.io, linkbee.com, linkbun.ch, linkee.com, linkgap.com, linkslice.com, linxf...
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) ...ix.de, liteurl.net, liurl.cn, livesi.de, lix.in, lk.ht, ln-s.net, ln-s.ru, lnk.by, lnk.cm, lnk.gd, lnk.in, lnk.ly, lnk.ms, lnk.sk, lnkd.in, lnkurl.com, lol.tc, loopt.us, lost.in, lru.jp, lt.tl, lu.to, lurl.no, m2.tc, macte.ch, mash.to, mavrev.com, mcaf.ee, memurl.com, merky.de, metamark.net, migre.me, min2.me, minecräft.com, minilien.com, minilink.org, miniurl.com, minurl.fr, mke.me, mmo.tc, moby.to, moourl.com, mrte.ch, msg.sg, murl.kz, mv2.me, myloc.me, mysp.in, myurl.in, myurl.si, n.pr, nanoref.com, nanourl.se, nbc.co, nblo.gs, nbx.ch, ncane.com, ndurl.com, ne1.net, netnet.me, netshortcut.com, ni.to, nig.gr, nm.ly, nn.nf, not.my, notlong.com, nsfw.in, nutshellurl.com, nxy.in, nyti.ms, o-x.fr, o.ly, oboeyasui.com, oc1.us, offur.com, ofl.me, om.ly, omf.gd, omoikane.net, on.cnn.com, on.mktw.net, onecent.us, onforb.es, onion.com, onsaas.info, ooqx.com, oreil.ly, orz.se, ouo.io, ow.ly, owl.li, oxyz.info, p.ly, p8g.tw, packetlivesmatter.club, packet...
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) ...livesmatter.online, parv.us, paulding.net, pduda.mobi, peaurl.com, pendek.in, pep.si, pic.gd, piko.me, ping.fm, piurl.com, pli.gs, plumurl.com, plurl.me, pnt.me, politi.co, poll.fm, pop.ly, poprl.com, post.ly, posted.at, poweredbydialup.club, poweredbydialup.online, poweredbydialup.org, poweredbysecurity.online, poweredbysecurity.org, pp.gg, profile.to, pt2.me, ptiturl.com, pub.vitrue.com, puke.it, pvp.tc, pysper.com, qik.li, qlnk.net, qoiob.com, qqc.co, qr.cx, qte.me, qu.tc, quickurl.co.uk, qurl.com, qurlyq.com, quu.nu, qux.in, qy.fi, r.im, rb.gy, rb6.me, rde.me, read.bi, readthis.ca, reallytinyurl.com, redir.ec, redirects.ca, redirx.com, relyt.us, retwt.me, ri.ms, rickroll.it, rivva.de, riz.gd, rly.cc, rnk.me, rsmonkey.com, rt.nu, ru.ly, rubyurl.com, rurl.org, rww.tw, s.apache.org, s.gnoss.us, s3nt.com, s4c.in, s7y.us, safe.mn, safelinks.ru, sai.ly, sameurl.com, sdut.us, sed.cx, sfu.ca, shadyurl.com, shar.es, shim.net, shink.de, shorl.com, short...
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) ....ie, short.to, shorten.ws, shortenurl.com, shorterlink.com, shortio.com, shortlinks.co.uk, shortly.nl, shortn.me, shortna.me, shortr.me, shorturl.com, shortz.me, shoturl.us, shout.to, show.my, shredu, shredurl.com, shrinkify.com, shrinkr.com, shrinkster.com, shrinkurl.us, shrt.fr, shrt.st, shrt.ws, shrten.com, shrtl.com, shrtn.com, shrtnd.com, shrunkin.com, shurl.net, shw.me, simurl.com, simurl.net, simurl.org, simurl.us, sitelutions.com, siteo.us, sl.ly, slate.me, slidesha.re, slki.ru, smallr.com, smallr.net, smarturl.it, smfu.in, smsh.me, smurl.com, smurl.name, sn.im, sn.vc, snadr.it, snipie.com, snipr.com, snipurl.com, snkr.me, snurl.com, song.ly, soo.gd, sp2.ro, spedr.com, spottyfly.com, sqze.it, srnk.net, sro.tc, srs.li, starturl.com, stickurl.com, stopify.co, stpmvt.com, sturly.com, su.pr, surl.co.uk, surl.hu, surl.it, t.cn, t.co, t.lh.com, t.ly, ta.gd, takemyfile.com, tbd.ly, tcrn.ch, tek.link, tgr.me, tgr.ph, th8.us, thecow.me, thrdl.es, t...
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) ...ighturl.com, timesurl.at, tini.us, tiniuri.com, tiny.cc, tiny.ly, tiny.pl, tinyarro.ws, tinylink.com, tinylink.in, tinypl.us, tinysong.com, tinytw.it, tinyuri.ca, tinyurl.com, tk., tl.gd, tllg.net, tmi.me, tncr.ws, tnij.org, tnw.to, tny.com, to., to.je, to.ly, to.vg, togoto.us, totc.us, toysr.us, tpm.ly, tr.im, tr.my, tra.kz, traceurl.com, trackurl.it, trcb.me, trg.li, trib.al, trick.ly, trii.us, trim.li, trumpink.lt, trunc.it, truncurl.com, tsort.us, tubeurl.com, turo.us, tw0.us, tw1.us, tw2.us, tw5.us, tw6.us, tw8.us, tw9.us, twa.lk, tweet.me, tweetburner.com, tweetl.com, twhub.com, twi.gy, twip.us, twirl.at, twit.ac, twitclicks.com, twitterurl.net, twitterurl.org, twitthis.com, twittu.ms, twiturl.de, twitzap.com, twixar.me, twlv.net, twtr.us, twurl.cc, twurl.nl, u.mavrev.com, u.nu, u.to, u76.org, ub0.cc, uiop.me, ulimit.com, ulu.lu, um.lk, unfaker.it, updating.me, ur.ly, ur1.ca, urizy.com, url.ag, url.az, url.co.uk, url.go.it, url.ie, url.inc-x...
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) ....eu, url.lotpatrol.com, url360.me, url4.eu, urlao.com, urlbee.com, urlborg.com, urlbrief.com, urlcorta.es, urlcover.com, urlcut.com, urlcutter.com, urlenco.de, urlg.info, urlhawk.com, urli.nl, urlin.it, urlkiss.com, urloo.com, urlpire.com, urls.im, urlshorteningservicefortwitter.com, urltea.com, urlu.ms, urlvi.b, urlvi.be, urlx.ie, urlz.at, urlzen.com, urlzs.com, usat.ly, use.my, uservoice.com, ustre.am, utfg.sk, vado.it, vb.ly, vdirect.com, vgn.am, vi.ly, viigo.im, virl.com, vl.am, vm.lc, voizle.com, vtc.es, w0r.me, w33.us, w34.us, w3t.org, w55.de, wa9.la, wapo.st, wapurl.co.uk, webalias.com, welcome.to, wh.gov, widg.me, wipi.es, wkrg.com, woo.ly, wow.link, wp.me, x.co, x.hypem.com, x.se, x.vu, xeeurl.com, xil.in, xlurl.de, xn--1ci.ws, xn--3fi.ws, xn--5gi.ws, xn--9gi.ws, xn--bih.ws, xn--cwg.ws, xn--egi.ws, xn--fwg.ws, xn--hgi.ws, xn--l3h.ws, xn--odi.ws, xn--ogi.ws, xn--rei.ws, xn--vgi.ws, xn--vi8hiv.ws, xr.com, xrl.in, xrl.us, xrt.me, xurl.es, xu...
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) ...rl.jp, xxsurl.de, xzb.cc, y.ahoo.it, yatuc.com, ye-s.com, ye.pe, yep.it, yfrog.com, yhoo.it, yiyd.com, yko.io, yourtube.site, youshouldclick.us, youtu.be, youtubeshort.pro, youtubeshort.watch, yuarel.com, yyv.co, z.pe, z0p.de, zapt.in, zi.ma, zi.me, zi.mu, zi.pe, zip.li, zipmyurl.com, zite.to, zootit.com, zud.me, zurl.ws, zz.gd, zzang.kr
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: check_uri_host_listed: (SUSP_URI_NTLD) bid, buzz, click, date, faith, fit, fun, gdn, icu, life, online, ooo, pro, review, site, space, stream, top, work, world, xyz
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dkim: adsp: performing lookup on _adsp._domainkey.freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dkim: adsp result: U/unknown (dns: unknown), author domain 'freshwarm.cyou'
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: RULE (FREEMAIL_ENVFROM_END_DIGIT) check_freemail_header regex:\\d@
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: addresses from header EnvelopeFrom: match at freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: RULE (__freemail_reply) check_freemail_replyto
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: From address: match at freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: No Reply-To and From is not freemail, skipping check
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: RULE (FREEMAIL_REPLYTO_END_DIGIT) check_freemail_header regex:\\d@
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: header Reply-To not found from mail
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: RULE (__freemail_replyto) check_freemail_replyto
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: From address: match at freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: Reply-To is not freemail, skipping check
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: eval: From 2nd level domain: freshwarm.cyou, EnvelopeFrom 2nd level domain: freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: spf: whitelist_from_spf: match at freshwarm.cyou is not in user's WHITELIST_FROM_SPF
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule __ENV_AND_HDR_FROM_MATCH ======> got hit (1)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: RULE (__freemail_hdr_replyto) check_freemail_header
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: header Reply-To not found from mail
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule SPF_PASS ======> got hit (1)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: spf: def_whitelist_from_spf: match at freshwarm.cyou is not in DEF_WHITELIST_FROM_SPF
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: RULE (__smf_freemail_hdr_replyto) check_freemail_header
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: FreeMail: header Reply-To:addr not found from mail
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 99 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 15972 is OK, 3 answer records
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key A:rory.ns.cloudflare.com
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup A:rory.ns.cloudflare.com
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(1) A for rory.ns.cloudflare.com: rory.ns.cloudflare.com. 900 IN A 172.64.35.166
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/166.35.64.172.zen.spamhaus.org for DNSBL:166.35.64.172:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 10118/IN/A/166.35.64.172.zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:166.35.64.172:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 10118/IN/A/166.35.64.172.zen.spamhaus.org already underway, adding no.2 URIBL_ZEN_BLOCKED
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 10118/IN/A/166.35.64.172.zen.spamhaus.org already underway, adding no.3 URIBL_CSS
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 10118/IN/A/166.35.64.172.zen.spamhaus.org already underway, adding no.4 URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(2) A for rory.ns.cloudflare.com: rory.ns.cloudflare.com. 900 IN A 162.159.44.166
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/166.44.159.162.zen.spamhaus.org for DNSBL:166.44.159.162:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 14720/IN/A/166.44.159.162.zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:166.44.159.162:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 14720/IN/A/166.44.159.162.zen.spamhaus.org already underway, adding no.2 URIBL_ZEN_BLOCKED
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 14720/IN/A/166.44.159.162.zen.spamhaus.org already underway, adding no.3 URIBL_CSS
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 14720/IN/A/166.44.159.162.zen.spamhaus.org already underway, adding no.4 URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(3) A for rory.ns.cloudflare.com: rory.ns.cloudflare.com. 900 IN A 108.162.195.166
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/166.195.162.108.zen.spamhaus.org for DNSBL:166.195.162.108:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 62895/IN/A/166.195.162.108.zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:166.195.162.108:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 62895/IN/A/166.195.162.108.zen.spamhaus.org already underway, adding no.2 URIBL_ZEN_BLOCKED
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 62895/IN/A/166.195.162.108.zen.spamhaus.org already underway, adding no.3 URIBL_CSS
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 62895/IN/A/166.195.162.108.zen.spamhaus.org already underway, adding no.4 URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 100 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply 30980 is OK, 3 answer records
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key A:jewel.ns.cloudflare.com
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup A:jewel.ns.cloudflare.com
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(1) A for jewel.ns.cloudflare.com: jewel.ns.cloudflare.com. 900 IN A 162.159.38.171
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/171.38.159.162.zen.spamhaus.org for DNSBL:171.38.159.162:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 11417/IN/A/171.38.159.162.zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:171.38.159.162:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 11417/IN/A/171.38.159.162.zen.spamhaus.org already underway, adding no.2 URIBL_ZEN_BLOCKED
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 11417/IN/A/171.38.159.162.zen.spamhaus.org already underway, adding no.3 URIBL_CSS
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 11417/IN/A/171.38.159.162.zen.spamhaus.org already underway, adding no.4 URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(2) A for jewel.ns.cloudflare.com: jewel.ns.cloudflare.com. 900 IN A 172.64.34.171
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/171.34.64.172.zen.spamhaus.org for DNSBL:171.34.64.172:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 52827/IN/A/171.34.64.172.zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:171.34.64.172:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 52827/IN/A/171.34.64.172.zen.spamhaus.org already underway, adding no.2 URIBL_ZEN_BLOCKED
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 52827/IN/A/171.34.64.172.zen.spamhaus.org already underway, adding no.3 URIBL_CSS
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 52827/IN/A/171.34.64.172.zen.spamhaus.org already underway, adding no.4 URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_a_lookup got(3) A for jewel.ns.cloudflare.com: jewel.ns.cloudflare.com. 900 IN A 108.162.194.171
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: launching A/171.194.162.108.zen.spamhaus.org for DNSBL:171.194.162.108:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgsend, DNS servers: [127.0.0.1]:53, [0:0:0:0:0:0:0:1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: attempt 1/2, trying connect/sendto to [127.0.0.1]:53
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: providing a callback for id: 11264/IN/A/171.194.162.108.zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: starting: URIBL_SBL, URI-DNSBL, DNSBL:171.194.162.108:zen.spamhaus.org (timeout 15.0s, min 3.0s)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 11264/IN/A/171.194.162.108.zen.spamhaus.org already underway, adding no.2 URIBL_ZEN_BLOCKED
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 11264/IN/A/171.194.162.108.zen.spamhaus.org already underway, adding no.3 URIBL_CSS
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: query 11264/IN/A/171.194.162.108.zen.spamhaus.org already underway, adding no.4 URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 140 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 58205/IN/A/103.156.27.104.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:103.156.27.104:zen.spamhaus.org, rule URIBL_CSS_A
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS_A DNSBL:103.156.27.104:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:103.156.27.104:zen.spamhaus.org, rule URIBL_SBL_A
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:103.156.27.104:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 140 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 30181/IN/A/181.200.67.172.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:181.200.67.172:zen.spamhaus.org, rule URIBL_CSS_A
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS_A DNSBL:181.200.67.172:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:181.200.67.172:zen.spamhaus.org, rule URIBL_SBL_A
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:181.200.67.172:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 140 bytes from 127.0.0.1
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 18056/IN/A/103.157.27.104.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:103.157.27.104:zen.spamhaus.org, rule URIBL_CSS_A
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS_A DNSBL:103.157.27.104:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:103.157.27.104:zen.spamhaus.org, rule URIBL_SBL_A
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL_A DNSBL:103.157.27.104:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: select found no responses ready (t.o.=0.0)
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 1.070 s: TXT, askdns:TXT:freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.264 s: URIBL_CSS_A, URI-DNSBL, DNSBL:181.200.67.172:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 1.147 s: URI-NS, NS:freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.256 s: URIBL_CSS_A, URI-DNSBL, DNSBL:103.156.27.104:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.258 s: URIBL_CSS_A, URI-DNSBL, DNSBL:103.157.27.104:zen.spamhaus.org
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.222 s: URI-A, A:jewel.ns.cloudflare.com
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.206 s: URI-A, A:rory.ns.cloudflare.com
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 1.125 s: URI-A, A:www.freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.975 s: NO_DNS_FOR_FROM, DNSBL-A, dns:A:freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 0.967 s: NO_DNS_FOR_FROM, DNSBL-MX, dns:MX:freshwarm.cyou
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: queries completed: 10, started: 6
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: async: queries active: DNSBL-A=1 URI-DNSBL=6 at Mon Aug 24 04:53:12 2020
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: dns: harvested completed queries
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: running body tests; score so far=3.998
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __BODY_TEXT_LINE ======> got hit: "W"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __BODY_TEXT_LINE ======> got hit: "T"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __BODY_TEXT_LINE ======> got hit: "n"
Aug 24 04:53:12 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __FB_S_STOCK ======> got hit: "stock"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __DOS_BODY_SUN ======> got hit: "sun"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "W"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __FIFTY_FIFTY ======> got hit: "50%"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __LOWER_E ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __LOWER_E ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __LOWER_E ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __LOWER_E ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __LOWER_E ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __LOWER_E ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __LOWER_E ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __LOWER_E ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __LOWER_E ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __LOWER_E ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __LOWER_E ======> got hit: "e" [... logline repeated 220 times]
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __DOS_BODY_MON ======> got hit: "Monday"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __hk_bigmoney ======> got hit: "$1 mil"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __FB_NUM_PERCNT ======> got hit: "8%"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __FRAUD_DBI ======> got hit: "$1 million"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __LOTSA_MONEY_03 ======> got hit: "$1 million"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __DOS_BODY_FRI ======> got hit: "Friday"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __CLICK_HERE ======> got hit: "Click here"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __FB_S_PRICE ======> got hit: "price"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __E_LIKE_LETTER ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __E_LIKE_LETTER ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __E_LIKE_LETTER ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __E_LIKE_LETTER ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __E_LIKE_LETTER ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __E_LIKE_LETTER ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __E_LIKE_LETTER ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __E_LIKE_LETTER ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __E_LIKE_LETTER ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __E_LIKE_LETTER ======> got hit: "e"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran body rule __E_LIKE_LETTER ======> got hit: "e" [... logline repeated 310 times]
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 139 bytes from 127.0.0.1
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 52827/IN/A/171.34.64.172.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:171.34.64.172:zen.spamhaus.org, rule URIBL_SBL
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:171.34.64.172:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:171.34.64.172:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED DNSBL:171.34.64.172:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:171.34.64.172:zen.spamhaus.org, rule URIBL_CSS
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS DNSBL:171.34.64.172:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:171.34.64.172:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED_OPENDNS DNSBL:171.34.64.172:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 139 bytes from 127.0.0.1
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 10118/IN/A/166.35.64.172.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:166.35.64.172:zen.spamhaus.org, rule URIBL_SBL
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:166.35.64.172:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:166.35.64.172:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED DNSBL:166.35.64.172:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:166.35.64.172:zen.spamhaus.org, rule URIBL_CSS
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS DNSBL:166.35.64.172:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:166.35.64.172:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED_OPENDNS DNSBL:166.35.64.172:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 141 bytes from 127.0.0.1
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 11264/IN/A/171.194.162.108.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:171.194.162.108:zen.spamhaus.org, rule URIBL_SBL
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:171.194.162.108:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:171.194.162.108:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED DNSBL:171.194.162.108:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:171.194.162.108:zen.spamhaus.org, rule URIBL_CSS
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS DNSBL:171.194.162.108:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:171.194.162.108:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED_OPENDNS DNSBL:171.194.162.108:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 141 bytes from 127.0.0.1
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 62895/IN/A/166.195.162.108.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:166.195.162.108:zen.spamhaus.org, rule URIBL_SBL
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:166.195.162.108:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:166.195.162.108:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED DNSBL:166.195.162.108:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:166.195.162.108:zen.spamhaus.org, rule URIBL_CSS
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS DNSBL:166.195.162.108:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:166.195.162.108:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED_OPENDNS DNSBL:166.195.162.108:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 140 bytes from 127.0.0.1
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 14720/IN/A/166.44.159.162.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:166.44.159.162:zen.spamhaus.org, rule URIBL_SBL
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:166.44.159.162:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:166.44.159.162:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED DNSBL:166.44.159.162:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:166.44.159.162:zen.spamhaus.org, rule URIBL_CSS
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS DNSBL:166.44.159.162:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:166.44.159.162:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED_OPENDNS DNSBL:166.44.159.162:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 140 bytes from 127.0.0.1
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 11417/IN/A/171.38.159.162.zen.spamhaus.org: NXDOMAIN
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:171.38.159.162:zen.spamhaus.org, rule URIBL_SBL
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL DNSBL:171.38.159.162:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:171.38.159.162:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED DNSBL:171.38.159.162:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:171.38.159.162:zen.spamhaus.org, rule URIBL_CSS
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CSS DNSBL:171.38.159.162:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key DNSBL:171.38.159.162:zen.spamhaus.org, rule URIBL_ZEN_BLOCKED_OPENDNS
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ZEN_BLOCKED_OPENDNS DNSBL:171.38.159.162:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: bgread: received 128 bytes from 127.0.0.1
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: dns reply to 61156/IN/A/140.7.136.45.dnsbl.sorbs.net: NXDOMAIN
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: calling callback on key dns:A:140.7.136.45.dnsbl.sorbs.net
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: select found no responses ready (t.o.=0.0)
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 1.608 s: URIBL_SBL, URI-DNSBL, DNSBL:171.38.159.162:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 1.580 s: URIBL_SBL, URI-DNSBL, DNSBL:171.34.64.172:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 1.610 s: URIBL_SBL, URI-DNSBL, DNSBL:166.35.64.172:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 1.618 s: URIBL_SBL, URI-DNSBL, DNSBL:166.44.159.162:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 1.607 s: URIBL_SBL, URI-DNSBL, DNSBL:166.195.162.108:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 1.584 s: URIBL_SBL, URI-DNSBL, DNSBL:171.194.162.108:zen.spamhaus.org
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: async: completed in 2.901 s: DNSBL-A, dns:A:140.7.136.45.dnsbl.sorbs.net
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: dns: harvested completed queries
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: running uri tests; score so far=3.998
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran uri rule __DOS_HAS_ANY_URI ======> got hit: "http://"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran uri rule __HAS_URI ======> got hit: "h"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran uri rule __LOCAL_PP_NONPPURL ======> got hit: "http://www.freshwarm.cyou"
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: running body_eval tests; score so far=3.998
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule __TVD_MIME_ATT_TP ======> got hit (1)
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: eval: body_length - 13825 - check for min of 512
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule __TAG_EXISTS_CENTER ======> got hit (1)
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: eval: text words: 417, html words: 334
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: eval: madiff: left: 166, orig: 334, max-difference: 49.70%
Aug 24 04:53:13 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule __TAG_EXISTS_HTML ======> got hit (1)
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule MISSING_MIME_HB_SEP ======> got hit (1)
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule __TAG_EXISTS_HEAD ======> got hit (1)
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: running ZABOJCASPAMU_SERVICE_SHORT_URL
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: running ZABOJCASPAMU_SERVICE_SHORT_URL
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: running ZABOJCASPAMU_SERVICE_SHORT_URL
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: eval: body_length - 13825 - check for min of 256
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule __TAG_EXISTS_BODY ======> got hit (1)
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: running __ZABOJCASPAMU_RECHNUNG_201506112_2
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: cleaned matched: 'http://imgstore.host/tniueS30.jpg' !~ /(?^:(t-online|telekom)\\.de)/
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: running __ZABOJCASPAMU_RECHNUNG_201506112_2
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: cleaned matched: 'http://www.freshwarm.cyou/Ocihn/w5Y7M4uG_fRJx0snHLqb-Zhsxyqoe5o2uOWSBc8m76hQEfWPgtmt6JZimwMHe0sIkOPj0kaFfQ45G001mVDoTA.0vcInXpBqVwuECbzByU_k3yjmgzkmAsq4VC6yTU1gq' !~ /(?^:(t-online|telekom)\\.de)/
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: running __ZABOJCASPAMU_RECHNUNG_201506112_2
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: cleaned matched: 'http://www.freshwarm.cyou/hfxrdr/bntpu756380jkdxm/-qg1UTy6CV4qsAmkzgmjy3k_UyBzbCEuwVqBpXnIcv0/AToDVm100G54QfFak0jPOkIs0eHMwmiZJ6tmtgPWfEQh67m8cBSWOu2o5eoqyxshZ-bqLHns0xJRf_Gu4M7Y5w' !~ /(?^:(t-online|telekom)\\.de)/
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule __TAG_EXISTS_META ======> got hit (1)
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule __MIME_HTML ======> got hit (1)
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: running ZABOJCASPAMU_FAKE_IPKOv3
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: cleaned matched: 'http://imgstore.host/tniueS30.jpg' !~ /(?^:www.ipko.pl)/
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: running ZABOJCASPAMU_FAKE_IPKOv3
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: cleaned matched: 'http://www.freshwarm.cyou/Ocihn/w5Y7M4uG_fRJx0snHLqb-Zhsxyqoe5o2uOWSBc8m76hQEfWPgtmt6JZimwMHe0sIkOPj0kaFfQ45G001mVDoTA.0vcInXpBqVwuECbzByU_k3yjmgzkmAsq4VC6yTU1gq' !~ /(?^:www.ipko.pl)/
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: running ZABOJCASPAMU_FAKE_IPKOv3
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: uri: cleaned matched: 'http://www.freshwarm.cyou/hfxrdr/bntpu756380jkdxm/-qg1UTy6CV4qsAmkzgmjy3k_UyBzbCEuwVqBpXnIcv0/AToDVm100G54QfFak0jPOkIs0eHMwmiZJ6tmtgPWfEQh67m8cBSWOu2o5eoqyxshZ-bqLHns0xJRf_Gu4M7Y5w' !~ /(?^:www.ipko.pl)/
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: eval: body_length - 13825 - check for min of 1024
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: https_http_mismatch: anchors 1
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule __ANY_TEXT_ATTACH_DOC ======> got hit (1)
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule HTML_MESSAGE ======> got hit (1)
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: eval: body_length - 13825 - check for min of 128
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: eval: tvd_vertical_words value: 25 / min: 0 / max: 10 - value must be >= min and < max
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule __ANY_TEXT_ATTACH ======> got hit (1)
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: running rawbody tests; score so far=4
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran rawbody rule __HAS_HREF ======> got hit: " you're a woodworker, you really don't want miss out on </span><a href="
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran rawbody rule __HAS_IMG_SRC ======> got hit: " target="_blank"><img src="
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran rawbody rule __HAS_IMG_SRC_ONECASE ======> got hit: " target="_blank"><img src="
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran rawbody rule __HAS_HREF_ONECASE ======> got hit: " you're a woodworker, you really don't want miss out on </span><a href="
Aug 24 04:53:14 black amavis[1561530]: [80B blob data]
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran rawbody rule __HTML_SINGLET ======> got hit: "> <"
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran rawbody rule __HTML_SINGLET ======> got hit: "> <"
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran rawbody rule __HTML_SINGLET ======> got hit: ">
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: [...] <"
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: running rawbody_eval tests; score so far=4
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: running full tests; score so far=4
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules-all: running full rule NULL_IN_BODY
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules-all: running full rule __FROM_NAME_IN_MSG
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules-all: running full rule __BOGUS_MIME_HDR
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules-all: running full rule __LONGLINE
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran full rule __LONGLINE ======> got hit: "That was how he came to win $1 million. She wondered what his eyes were saying beneath his mirrored sunglasses. He found his art never progressed when he literally used his sweat and tears She had the gift of being able to paint songs. With a single flip of the coin, his life changed forever. It was obvious she was hot, sweaty, and tired. Lucifer was surprised at the amount of life at Death Valley. He decided water-skiing on a frozen lake wasn’t a good idea. She could hear him in the shower singing with a joy she hoped he'd retain after she delivered the news. He looked behind the door and didn't like what he saw. He spiked his hair green to support his iguana. The beach was crowded with snow leopards. The fifty mannequin heads floating in the pool kind of freaked them out. He's in a boy band which doesn't make much sense for a snake. The hand sanitizer was actually clear glue. She looked at...
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) ... the masterpiece hanging in the museum but all she could think is that her five-year-old c"
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: running full_eval tests; score so far=4
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: ran eval rule __DKIM_DEPENDABLE ======> got hit (1)
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: running meta tests; score so far=4
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: check: running tests for priority: 20
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: running head tests; score so far=4
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: running body tests; score so far=4
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: running uri tests; score so far=4
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: running body_eval tests; score so far=4
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: running rawbody tests; score so far=4
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: running full tests; score so far=4
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: rules: running full_eval tests; score so far=4
Aug 24 04:53:14 black amavis[1561530]: (1561530-09) SA dbg: dns: entering helper-app run mode
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: dns: leaving helper-app run mode
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: razor2: part=0 engine=8 contested=0 confidence=0
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: razor2: part=1 engine=8 contested=0 confidence=0
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: razor2: results: spam? 0
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: razor2: results: engine 8, highest cf score: 0
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: razor2: results: engine 4, highest cf score: 0
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: rules: running meta tests; score so far=4
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: check: running tests for priority: 30
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: rules: running head tests; score so far=4
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: rules: running body tests; score so far=4
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: rules: running uri tests; score so far=4
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: rules: running body_eval tests; score so far=4
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: rules: running rawbody tests; score so far=4
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: rules: running full tests; score so far=4
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: rules: running full_eval tests; score so far=4
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: pyzor: pyzor is available: /usr/sbin/pyzor
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: util: secure_tmpfile created a temporary file /var/spool/amavis/tmp/.spamassassin1561530XeY9Vgtmp
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: check: create_fulltext_tmpfile, written 14329 bytes to file /var/spool/amavis/tmp/.spamassassin1561530XeY9Vgtmp
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: dns: entering helper-app run mode
Aug 24 04:53:15 black amavis[1561530]: (1561530-09) SA dbg: pyzor: opening pipe: /usr/sbin/pyzor check < /var/spool/amavis/tmp/.spamassassin1561530XeY9Vgtmp
Aug 24 04:53:15 black amavis[1600959]: (1561530-09) SA dbg: util: get_user_groups: uid is 333
Aug 24 04:53:15 black amavis[1600959]: (1561530-09) SA dbg: util: get_user_groups: added 64 (clamav) to group list which is now: 333 64
Aug 24 04:53:15 black amavis[1600959]: (1561530-09) SA info: util: setuid: ruid=333 euid=333 rgid=333 64 333 egid=333 64 333
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: [1600959] finished: exit 1
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: got response: Traceback (most recent call last):\\n File "/usr/sbin/pyzor", line 408, in <module>\\n main()\\n File "/usr/sbin/pyzor", line 152, in main\\n if not dispatch(client, servers, config):\\n File "/usr/sbin/pyzor", line 237, in check\\n for digested in get_input_handler(style):\\n File "/usr/sbin/pyzor", line 174, in _get_input_msg\\n msg = email.message_from_file(sys.stdin)\\n File "/usr/lib/python3.8/email/__init__.py", line 54, in message_from_file\\n return Parser(*args, **kws).parse(fp)\\n File "/usr/lib/python3.8/email/parser.py", line 53, in parse\\n data = fp.read(8192)\\n File "/usr/lib/python3.8/codecs.py", line 322, in decode\\n (result, consumed) = self._buffer_decode(data, self.errors, final)\\nUnicodeDecodeError: 'utf-8' codec can't decode byte 0xe2 in position 1591: invalid continuation byte
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) _WARN: internal error, python traceback seen in response
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: dns: leaving helper-app run mode
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response "Traceback (most recent call last):"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " File "/usr/sbin/pyzor", line 408, in <module>"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " main()"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " File "/usr/sbin/pyzor", line 152, in main"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " if not dispatch(client, servers, config):"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " File "/usr/sbin/pyzor", line 237, in check"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " for digested in get_input_handler(style):"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " File "/usr/sbin/pyzor", line 174, in _get_input_msg"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " msg = email.message_from_file(sys.stdin)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " File "/usr/lib/python3.8/email/__init__.py", line 54, in message_from_file"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " return Parser(*args, **kws).parse(fp)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " File "/usr/lib/python3.8/email/parser.py", line 53, in parse"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " data = fp.read(8192)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " File "/usr/lib/python3.8/codecs.py", line 322, in decode"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response " (result, consumed) = self._buffer_decode(data, self.errors, final)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: pyzor: failure to parse response "UnicodeDecodeError: 'utf-8' codec can't decode byte 0xe2 in position 1591: invalid continuation byte"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag PYZOR is now ready, value: Reported 0 times.
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: rules: running meta tests; score so far=4
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: check: running tests for priority: 500
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: dns: harvest_dnsbl_queries
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.110 . dns:A:140.7.136.45.list.dnswl.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.122 . NS:imgstore.host
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.135 . DNSBL:imgstore.host:dob.sibl.support-intelligence.net
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.154 . A:imgstore.host
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.194 . DNSBL:imgstore.host:dbl.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.197 . DNSBL:freshwarm.cyou:dbl.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.206 . A:rory.ns.cloudflare.com
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.222 . A:jewel.ns.cloudflare.com
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.256 . DNSBL:103.156.27.104:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.258 . DNSBL:103.157.27.104:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.264 . DNSBL:181.200.67.172:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.284 . DNSBL:180.58.245.173:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.293 . DNSBL:freshwarm.cyou:multi.surbl.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.304 . DNSBL:180.32.64.172:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.318 . DNSBL:180.192.162.108:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.319 . DNSBL:90.33.64.172:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.320 . DNSBL:90.59.245.173:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.322 . DNSBL:90.193.162.108:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.497 . A:clint.ns.cloudflare.com
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.512 . A:kiki.ns.cloudflare.com
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.539 . DNSBL:4.136.27.104:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.552 . DNSBL:4.137.27.104:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.556 . DNSBL:11.223.67.172:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.626 . dns:A:140.7.136.45.wl.mailspike.net
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.627 . dns:A:140.7.136.45.bl.mailspike.net
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.637 . dns:A:140.7.136.45.zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.657 . dns:A:140.7.136.45.bl.score.senderscore.com
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.659 . dns:A:140.7.136.45.iadb.isipp.com
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.660 . askdns:A:freshwarm.cyou.fresh.fmb.la.
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.660 . dns:TXT:140.7.136.45.sa-accredit.habeas.com
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.678 . dns:TXT:140.7.136.45.bl.spamcop.net
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.692 . dns:TXT:140.7.136.45.sa-trusted.bondedsender.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.707 . dns:A:140.7.136.45.psbl.surriel.com
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.709 . DNSBL:imgstore.host:multi.surbl.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.736 . DNSBL:imgstore.host:multi.uribl.com
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.762 . DNSBL:freshwarm.cyou:multi.uribl.com
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.770 . DNSBL:freshwarm.cyou:dob.sibl.support-intelligence.net
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.967 . dns:MX:freshwarm.cyou
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 0.975 . dns:A:freshwarm.cyou
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 1.070 . askdns:TXT:freshwarm.cyou
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 1.125 . A:www.freshwarm.cyou
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 1.147 . NS:freshwarm.cyou
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 1.580 . DNSBL:171.34.64.172:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 1.584 . DNSBL:171.194.162.108:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 1.607 . DNSBL:166.195.162.108:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 1.608 . DNSBL:171.38.159.162:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 1.610 . DNSBL:166.35.64.172:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 1.618 . DNSBL:166.44.159.162:zen.spamhaus.org
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: async: timing: 2.901 . dns:A:140.7.136.45.dnsbl.sorbs.net
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag RBL is now ready, value: <dns:freshwarm.cyou> [45.136.7.140]
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: check: [...] <dns:freshwarm.cyou?type=MX> [10 aspmx.l.google.com.]
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: rules: running head tests; score so far=4
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: rules: running body tests; score so far=4
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: rules: running uri tests; score so far=4
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: rules: running rawbody tests; score so far=4
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: rules: running full tests; score so far=4
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: rules: running meta tests; score so far=4
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: learn: auto-learn: currently using scoreset 3, recomputing score based on scoreset 1
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: learn: auto-learn: adding body_only points 1.7
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: learn: auto-learn: adding head_only points 1.5
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: learn: auto-learn: adding body_only points 0.001
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: learn: auto-learn: adding body_only points 0.001
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: learn: auto-learn: adding head_only points 1.274
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: learn: auto-learn: adding head_only points 0.001
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: learn: auto-learn: adding head_only points 0.01
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: learn: auto-learn: message score: 4.804, computed score for autolearn: 4.487
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: learn: auto-learn? ham=0.1, spam=12, body-points=1.702, head-points=2.785, learned-points=0.8
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: learn: auto-learn? no: inside auto-learn thresholds, not considered ham or spam
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: check: is spam? score=4.804 required=5
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: check: tests=BAYES_50,HTML_MESSAGE,LOTS_OF_MONEY,MISSING_MIME_HB_SEP,RDNS_NONE,SPF_HELO_PASS,SPF_PASS,T_MONEY_PERCENT,URIBL_BLACK,ZABOJCASPAMU_FROM_UNKNOWN
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: check: subtests=__ANY_TEXT_ATTACH,__ANY_TEXT_ATTACH_DOC,__BODY_TEXT_LINE(3),__CLICK_HERE,__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__CTYPE_MULTIPART_ANY,__DKIM_DEPENDABLE,__DOS_BODY_FRI,__DOS_BODY_MON,__DOS_BODY_SUN,__DOS_DIRECT_TO_MX,__DOS_HAS_ANY_URI,__DOS_RCVD_MON,__DOS_REF_TODAY,__DOS_SINGLE_EXT_RELAY,__ENV_AND_HDR_FROM_MATCH,__E_LIKE_LETTER(320),__FB_NUM_PERCNT,__FB_S_PRICE,__FB_S_STOCK,__FIFTY_FIFTY,__FM_MY_PRICE,__FRAUD_DBI,__FROM_FULL_NAME,__HAS_ANY_URI,__HAS_DATE,__HAS_FROM,__HAS_HREF,__HAS_HREF_ONECASE,__HAS_IMG_SRC,__HAS_IMG_SRC_ONECASE,__HAS_MESSAGE_ID,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HAS_TO,__HAS_URI,__HTML_SINGLET(3),__LAST_EXTERNAL_RELAY_NO_AUTH,__LAST_UNTRUSTED_RELAY_NO_AUTH,__LCL__ENV_AND_HDR_FROM_MATCH,__LOCAL_PP_NONPPURL,__LONGLINE,__LOTSA_MONEY_03,__LOWER_E(230),__L_BODY_8BITS,__MIME_HTML,__MIME_VERSION,__MISSING_REF,__MISSING_REPLY,__MSGID_OK_HOST,__NONEMPTY_BODY,__NOT_SPOOFED,__RDNS_NONE,__SANE_MSGID,__SPF_FU...
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) ...LL_PASS,__SUBJ_NOT_SHORT,__TAG_EXISTS_BODY,__TAG_EXISTS_CENTER,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META,__TOCC_EXISTS,__TVD_MIME_ATT_TP,__ZABOJCASPAMU_SA_20160728_1,__hk_bigmoney (Total Subtest Hits: 620 / Deduplicated Total Hits: 68)
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: timing: total 5548 ms - parse: 5 (0.1%), extract_message_metadata: 155 (2.8%), get_uri_detail_list: 22 (0.4%), tests_pri_-1000: 114 (2.1%), tests_pri_-950: 7 (0.1%), tests_pri_-900: 517 (9.3%), tests_pri_-90: 230 (4.1%), check_bayes: 189 (3.4%), b_tokenize: 71 (1.3%), b_tok_get_all: 68 (1.2%), b_comp_prob: 33 (0.6%), b_tok_touch_all: 3.1 (0.1%), b_finish: 4.0 (0.1%), tests_pri_0: 2058 (37.1%), check_spf: 71 (1.3%), poll_dns_idle: 0.24 (0.0%), check_dkim_adsp: 97 (1.7%), tests_pri_20: 1848 (33.3%), check_razor2: 1841 (33.2%), tests_pri_30: 475 (8.6%), check_pyzor: 468 (8.4%), tests_pri_500: 37 (0.7%)
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) DONE SA check (0)
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SA dbg: check: tagrun - tag DKIMDOMAIN is still blocking action 2
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) get_deadline spam_scan_sa - deadline in 473.8 s, set to 285.000 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) prolong_timer spam_scan_sa: timer 285, was 471, deadline in 473.8 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) spam_scan: score=4.804 autolearn=no autolearn_force=no tests=[BAYES_50=0.8,HTML_MESSAGE=0.001,LOTS_OF_MONEY=0.001,MISSING_MIME_HB_SEP=0.001,RDNS_NONE=0.793,SPF_HELO_PASS=-0.001,SPF_PASS=-0.001,T_MONEY_PERCENT=0.01,URIBL_BLACK=1.7,ZABOJCASPAMU_FROM_UNKNOWN=1.5] recips=0
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) get_deadline spam_scan - deadline in 473.8 s, set to 285.000 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) prolong_timer spam_scan: timer 285, was 285, deadline in 473.8 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup: (scalar) matches, result="-999"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [spam_tag_level] => true, "zork at zork.pl" matches, result="-999", matching_key="(constant:-999)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup: (scalar) matches, result="5.3"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [spam_tag2_level] => true, "zork at zork.pl" matches, result="5.3", matching_key="(constant:5.3)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [spam_tag3_level] => undef, "zork at zork.pl" does not match
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup: (scalar) matches, result="10"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [spam_kill_level] => true, "zork at zork.pl" matches, result="10", matching_key="(constant:10)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) final_destiny (ccat=4) is PASS, recip zork at zork.pl
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) final_destiny (ccat=0) is PASS, recip zork at zork.pl
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) final_destiny PASS, recip zork at zork.pl
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) do_notify_and_quar: ccat=BadHdrMime (4,1) ("4,1":BadHdrMime, "4":BadHdr, "1,1":CleanTag, "1":Clean, "0":CatchAll) ccat_block=(), qar_mth=
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup: (scalar) matches, result="bad-header-quarantine"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [bad_header_quarantine_to] => true, "zork at zork.pl" matches, result="bad-header-quarantine", matching_key="(constant:bad-header-quarantine)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [bad_header_admin] => undef, "zork at zork.pl" does not match
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup: (scalar) matches, result="-999"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [spam_tag_level] => true, "zork at zork.pl" matches, result="-999", matching_key="(constant:-999)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup: (scalar) matches, result="5.3"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [spam_tag2_level] => true, "zork at zork.pl" matches, result="5.3", matching_key="(constant:5.3)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup: (scalar) matches, result="10"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [spam_kill_level] => true, "zork at zork.pl" matches, result="10", matching_key="(constant:10)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Amavis-Alert: BAD HEADER SECTION, MIME error: error: part did not end with expected boundary; ; error: unexpected end of parts before epilogue
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Amavis-Alert: BAD HEADER SECTION, MIME error: error: part did not end with\n\texpected boundary; ; error: unexpected end of parts before epilogue\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header_edits_for_quar: <match at freshwarm.cyou> -> <zork at zork.pl>, No, score=4.804 tag=-999 tag2=5.3 kill=10 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, LOTS_OF_MONEY=0.001, MISSING_MIME_HB_SEP=0.001, RDNS_NONE=0.793, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_MONEY_PERCENT=0.01, URIBL_BLACK=1.7, ZABOJCASPAMU_FROM_UNKNOWN=1.5] autolearn=no autolearn_force=no
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Spam-Flag: NO
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Spam-Flag: NO\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Spam-Score: 4.804
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Spam-Score: 4.804\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Spam-Level: ****
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Spam-Level: ****\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Spam-Status: No,\n score=4.804\n tag=-999\n tag2=5.3\n kill=10\n tests=[BAYES_50=0.8,\n HTML_MESSAGE=0.001,\n LOTS_OF_MONEY=0.001,\n MISSING_MIME_HB_SEP=0.001,\n RDNS_NONE=0.793,\n SPF_HELO_PASS=-0.001,\n SPF_PASS=-0.001,\n T_MONEY_PERCENT=0.01,\n URIBL_BLACK=1.7,\n ZABOJCASPAMU_FROM_UNKNOWN=1.5]\n autolearn=no autolearn_force=no
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Spam-Status: No, score=4.804 tag=-999 tag2=5.3 kill=10 tests=[BAYES_50=0.8,\n\tHTML_MESSAGE=0.001, LOTS_OF_MONEY=0.001, MISSING_MIME_HB_SEP=0.001,\n\tRDNS_NONE=0.793, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001,\n\tT_MONEY_PERCENT=0.01, URIBL_BLACK=1.7, ZABOJCASPAMU_FROM_UNKNOWN=1.5]\n\tautolearn=no autolearn_force=no\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) quar: scanner provided a header field X-Spam-Checker-Version, inhibited by %allowed_added_header_fields
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) quar: scanner provided a header field X-Spam-Level, but we preferred our own
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) quar: scanner provided a header field X-Spam-Status, but we preferred our own
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) do_notify_and_quarantine: quarantine bad-header-quarantine
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Quarantine-ID: <xO3nU-4WJdBM>
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Quarantine-ID: <xO3nU-4WJdBM>\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Envelope-To-Blocked:
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Envelope-To-Blocked:\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Envelope-To: <zork at zork.pl>
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Envelope-To: <zork at zork.pl>\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Envelope-From: <match at freshwarm.cyou>
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Envelope-From: <match at freshwarm.cyou>\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): Received: from black.zork.pl ([127.0.0.1])\n by localhost (black.zork.pl [127.0.0.1]) (amavisd-new, port 10024)\n with ESMTP\n id xO3nU-4WJdBM\n for <zork at zork.pl>;\n Mon, 24 Aug 2020 04:53:10 +0200 (CEST)
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: Received: from black.zork.pl ([127.0.0.1])\n\tby localhost (black.zork.pl [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id xO3nU-4WJdBM for <zork at zork.pl>;\n\tMon, 24 Aug 2020 04:53:10 +0200 (CEST)\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) DO_QUARANTINE, local:badh-%m, <> -> <bad-header-quarantine>
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) delivering to local:badh-%m, SEND via LOCAL: <> -> <bad-header-quarantine>
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) skip local delivery(3): <> -> <bad-header-quarantine>
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) one_response_for_all, per_recip_capable: N, suppressed: N
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) one_response_for_all <>: success, r=0,b=0,d=0, ndn_needed=0, '250 2.6.0 Ok, skip local delivery(3), id=1561530-09'
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) quar_types: , quar_to:
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) DO_QUARANTINE done
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) skip admin notification, no administrators
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [warnbadhrecip] => undef, "zork at zork.pl" does not match
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) do_notify_and_quarantine - done
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup: (opaque) matches, result="smtp:[127.0.0.1]:10025"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [forward_method] => true, "zork at zork.pl" matches, result="smtp:[127.0.0.1]:10025", matching_key="(opaque:smtp:[127.0.0.1]:10025)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) delivery method is 1, recips: zork at zork.pl
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup: (scalar) matches, result="-999"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [spam_tag_level] => true, "zork at zork.pl" matches, result="-999", matching_key="(constant:-999)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup: (scalar) matches, result="5.3"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [spam_tag2_level] => true, "zork at zork.pl" matches, result="5.3", matching_key="(constant:5.3)"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [spam_subject_tag] => undef, "zork at zork.pl" does not match
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) headers CLUSTERING: NEW CLUSTER <zork at zork.pl>: score=4.804, tag=1, tag2=0, local=1, bl=, s=, mangle=
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Virus-Scanned: amavisd-new at zork.pl
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Virus-Scanned: amavisd-new at zork.pl\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Amavis-Alert: BAD HEADER SECTION, MIME error: error: part did not end with expected boundary; ; error: unexpected end of parts before epilogue
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Amavis-Alert: BAD HEADER SECTION, MIME error: error: part did not end with\n\texpected boundary; ; error: unexpected end of parts before epilogue\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Spam-Flag: NO
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Spam-Flag: NO\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Spam-Score: 4.804
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Spam-Score: 4.804\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Spam-Level: ****
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Spam-Level: ****\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): X-Spam-Status: No,\n score=4.804\n tagged_above=-999\n required=5.3\n tests=[BAYES_50=0.8,\n HTML_MESSAGE=0.001,\n LOTS_OF_MONEY=0.001,\n MISSING_MIME_HB_SEP=0.001,\n RDNS_NONE=0.793,\n SPF_HELO_PASS=-0.001,\n SPF_PASS=-0.001,\n T_MONEY_PERCENT=0.01,\n URIBL_BLACK=1.7,\n ZABOJCASPAMU_FROM_UNKNOWN=1.5]\n autolearn=no autolearn_force=no
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: X-Spam-Status: No, score=4.804 tagged_above=-999 required=5.3\n\ttests=[BAYES_50=0.8, HTML_MESSAGE=0.001, LOTS_OF_MONEY=0.001,\n\tMISSING_MIME_HB_SEP=0.001, RDNS_NONE=0.793, SPF_HELO_PASS=-0.001,\n\tSPF_PASS=-0.001, T_MONEY_PERCENT=0.01, URIBL_BLACK=1.7,\n\tZABOJCASPAMU_FROM_UNKNOWN=1.5] autolearn=no autolearn_force=no\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) fwd: scanner provided a header field X-Spam-Checker-Version, inhibited by %allowed_added_header_fields
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) fwd: scanner provided a header field X-Spam-Level, but we preferred our own
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) fwd: scanner provided a header field X-Spam-Status, but we preferred our own
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header encoded (all-ASCII): Received: from black.zork.pl ([127.0.0.1])\n by localhost (black.zork.pl [127.0.0.1]) (amavisd-new, port 10024)\n with ESMTP\n id xO3nU-4WJdBM\n for <zork at zork.pl>;\n Mon, 24 Aug 2020 04:53:10 +0200 (CEST)
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) header: Received: from black.zork.pl ([127.0.0.1])\n\tby localhost (black.zork.pl [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id xO3nU-4WJdBM for <zork at zork.pl>;\n\tMon, 24 Aug 2020 04:53:10 +0200 (CEST)\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) headers CLUSTERING: done all 1 recips in one go
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) spam-tag, <match at freshwarm.cyou> -> <zork at zork.pl>, No, score=4.804 tagged_above=-999 required=5.3 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, LOTS_OF_MONEY=0.001, MISSING_MIME_HB_SEP=0.001, RDNS_NONE=0.793, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_MONEY_PERCENT=0.01, URIBL_BLACK=1.7, ZABOJCASPAMU_FROM_UNKNOWN=1.5] autolearn=no autolearn_force=no
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) dkim: not signing mail which is not originating from our site
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) about to connect to smtp:[127.0.0.1]:10025, xO3nU-4WJdBM FWD from <match at freshwarm.cyou> -> <zork at zork.pl>
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) get_deadline fwd_init - deadline in 473.7 s, set to 474.000 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp session: setting up a new session
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) establish_or_refresh, state: down
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) new socket using IO::Socket::IP to [127.0.0.1]:10025, timeout 35
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) connected to [127.0.0.1]:10025 successfully
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: needline=1, flush=0, wr=0, timeout=35
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: receiving
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop read 33 chars< 220 black.zork.pl ESMTP Postfix\r\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp greeting: 220 black.zork.pl ESMTP Postfix, dt: 85.1 ms
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp cmd> EHLO localhost
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: needline=0, flush=1, wr=1, timeout=300
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: sending 16 chars
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop sent 16> EHLO localhost\r\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: needline=1, flush=0, wr=0, timeout=300
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: receiving
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop read 286 chars< 250-black.zork.pl\r\n250-PIPELINING\r\n250-SIZE 81920000\r\n250-VRFY\r\n250-ETRN\r\n250-STARTTLS\r\n250-AUTH SCRAM-SHA-1 SCRAM-SHA-256 DIGEST-MD5 CRAM-MD5 NTLM\r\n250-AUTH=SCRAM-SHA-1 SCRAM-SHA-256 DIGEST-MD5 CRAM-MD5 NTLM\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250-DSN\r\n250-SMTPUTF8\r\n250 CHUNKING\r\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp resp to EHLO: 250 black.zork.pl\nPIPELINING\nSIZE 81920000\nVRFY\nETRN\nSTARTTLS\nAUTH SCRAM-SHA-1 SCRAM-SHA-256 DIGEST-MD5 CRAM-MD5 NTLM\nAUTH=SCRAM-SHA-1 SCRAM-SHA-256 DIGEST-MD5 CRAM-MD5 NTLM\nENHANCEDSTATUSCODES\n8BITMIME\nDSN\nSMTPUTF8\nCHUNKING
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) tls active=0, capable=1, sec_level=0
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) Remote host presents itself as: black.zork.pl, handles DSN, PIPELINING, 8BITMIME, SMTPUTF8
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) AUTH not needed, user='', MTA offers 'SCRAM-SHA-1 SCRAM-SHA-256 DIGEST-MD5 CRAM-MD5 NTLM'
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp cmd> MAIL FROM:<match at freshwarm.cyou> RET=HDRS BODY=8BITMIME
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) orcpt_encode rfc822, lm at zork.pl, encode_for_smtp
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp cmd> RCPT TO:<zork at zork.pl> ORCPT=rfc822;lm at zork.pl
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp cmd> DATA
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: needline=0, flush=1, wr=1, timeout=120
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: sending 111 chars
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop sent 111> MAIL FROM:<match at freshwarm.cyou> RET=HDRS BODY=8BITMIME\r\nRCPT TO:<zork at zork.pl> ORCPT=rfc822;lm at zork.pl\r\nDATA\r\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: needline=1, flush=0, wr=0, timeout=300
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: receiving
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop read 65 chars< 250 2.1.0 Ok\r\n250 2.1.5 Ok\r\n354 End data with <CR><LF>.<CR><LF>\r\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp resp to MAIL (pip): 250 2.1.0 Ok
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp resp to RCPT (pip) (<zork at zork.pl>): 250 2.1.5 Ok
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp resp to DATA: 354 End data with <CR><LF>.<CR><LF>
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) write_header: 1, Amavis::Out::SMTP::Protocol=HASH(0x561306450a88)
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp connection_cache disabled, sending QUIT
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp cmd> QUIT
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: needline=0, flush=1, wr=1, timeout=473.895
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: sending 15109 chars
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop sent 15109> X-Virus-Scanned: amavisd-new at zork.pl\r\nX-Amavis-Alert: BAD HEADER SECTION, MIME error: error: part did not end with\r\n\texpected boundary; ; error: unexpected end of parts before epilogue\r\nX-Spam-Flag [...]
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: needline=1, flush=0, wr=0, timeout=473.895
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop: receiving
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rw_loop read 52 chars< 250 2.0.0 Ok: queued as 907F914B188\r\n221 2.0.0 Bye\r\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) smtp resp to data-dot (<zork at zork.pl>): 250 2.0.0 Ok: queued as 907F914B188, dt: 19.0 ms
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) Amavis::Out::SMTP::Session close, disconnecting
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) get_deadline fwd-end-chkpnt - deadline in 473.6 s, set to 285.000 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) prolong_timer fwd-end-chkpnt: timer 285, was 0, deadline in 473.6 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) xO3nU-4WJdBM FWD from <match at freshwarm.cyou> -> <zork at zork.pl>, BODY=8BITMIME RET=HDRS 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 907F914B188
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) get_deadline forwarding - deadline in 473.6 s, set to 285.000 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) prolong_timer forwarding: timer 285, was 285, deadline in 473.6 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) DSN: sender NOT credible, SA: 4.804, <match at freshwarm.cyou>
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) lookup [spam_dsn_cutoff_level_bysender] => undef, "match at freshwarm.cyou" does not match
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) dsn: from MTA 250 NonBlocking:BadHdrMime <match at freshwarm.cyou> -> <zork at zork.pl>: on_succ=0, on_dly=1, on_fail=1, never=0, warn_sender=, DSN_passed_on=1, destiny=1, mta_resp: "250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 907F914B188"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) DSN: SUCC from MTA 250 NonBlocking:BadHdrMime, no DSN requested: <match at freshwarm.cyou> -> <zork at zork.pl>
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) delivery_status_notification: notif 0 bytes, suppressed: no
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) one_response_for_all, per_recip_capable: N, suppressed: N
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) one_response_for_all <match at freshwarm.cyou>: success, r=0,b=0,d=0, ndn_needed=0, '250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 907F914B188'
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) notif=N, suppressed=0, ndn_needed=0, exit=0, 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 907F914B188
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) get_deadline delivery-notification - deadline in 473.6 s, set to 285.000 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) prolong_timer delivery-notification: timer 285, was 285, deadline in 473.6 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) status counters: InMsgsStatus{Relayed,RelayedUntagged,RelayedUntaggedInbound}
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) get_deadline snmp-counters - deadline in 473.6 s, set to 285.000 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) prolong_timer snmp-counters: timer 285, was 285, deadline in 473.6 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) orcpt_encode rfc822, lm at zork.pl, smtputf8
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) oldest_public_ip_addr_from_received: 45.136.7.140
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) Passed BAD-HEADER-1 {RelayedInbound,Quarantined}, [127.0.0.1] [45.136.7.140] <match at freshwarm.cyou> -> <zork at zork.pl>, Message-ID: <zUpYETG0BustuLALz7_FiPSLJjsSo6Eqfa_25y_ZFDw._tbxozaitj0XqutqAEWMwA at freshwarm.cyou>, mail_id: xO3nU-4WJdBM, Hits: 4.804, size: 14332, queued_as: 907F914B188, 6476 ms
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) get_deadline main_log_entry - deadline in 473.5 s, set to 285.000 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) prolong_timer main_log_entry: timer 285, was 285, deadline in 473.5 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) TIMING-SA total 5571 ms - parse: 5 (0.1%), extract_message_metadata: 155 (2.8%), get_uri_detail_list: 22 (0.4%), tests_pri_-1000: 114 (2.1%), tests_pri_-950: 7 (0.1%), tests_pri_-900: 517 (9.3%), tests_pri_-90: 230 (4.1%), check_bayes: 189 (3.4%), b_tokenize: 71 (1.3%), b_tok_get_all: 68 (1.2%), b_comp_prob: 33 (0.6%), b_tok_touch_all: 3.1 (0.1%), b_finish: 4.0 (0.1%), tests_pri_0: 2058 (36.9%), check_spf: 71 (1.3%), poll_dns_idle: 0.24 (0.0%), check_dkim_adsp: 97 (1.7%), tests_pri_20: 1848 (33.2%), check_razor2: 1841 (33.0%), tests_pri_30: 475 (8.5%), check_pyzor: 468 (8.4%), tests_pri_500: 37 (0.7%), get_report: 2.6 (0.0%)
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) updating snmp variables in BDB
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) get_deadline check done - deadline in 473.5 s, set to 285.000 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) prolong_timer check done: timer 285, was 285, deadline in 473.5 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) sending SMTP response: "250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 907F914B188"
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) ESMTP> 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 907F914B188
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) switch_to_client_time 480 s, smtp response sent
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) TempDir::strip: /var/spool/amavis/tmp/amavis-20200824T002210-1561530-7GmGOGvq
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) rmdir_recursively: /var/spool/amavis/tmp/amavis-20200824T002210-1561530-7GmGOGvq/parts, excl=1
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) size: 14332, TIMING [total 6506 ms] - SMTP greeting: 6 (0%)0, SMTP EHLO: 6 (0%)0, SMTP pre-MAIL: 2.1 (0%)0, SMTP MAIL: 4.1 (0%)0, SMTP pre-DATA-flush: 9 (0%)0, SMTP DATA: 2.6 (0%)0, check_init: 1.6 (0%)0, digest_hdr: 3.4 (0%)1, digest_body_dkim: 2.3 (0%)1, collect_info: 6 (0%)1, mime_decode: 35 (1%)1, get-file-type2: 98 (2%)3, parts_decode: 1.5 (0%)3, check_header: 3.1 (0%)3, AV-scan-1: 495 (8%)10, spam-wb-list: 5 (0%)10, SA msg read: 1.6 (0%)10, SA parse: 7 (0%)11, SA check: 5555 (85%)96, decide_mail_destiny: 29 (0%)96, notif-quar: 2.8 (0%)96, quar-hdrs: 10 (0%)97, save-to-local-mailbox: 8 (0%)97, fwd-connect: 111 (2%)98, fwd-mail-pip: 9 (0%)99, fwd-rcpt-pip: 0.8 (0%)99, fwd-data-chkpnt: 0.3 (0%)99, write-header: 1.8 (0%)99, fwd-data-contents: 0.6 (0%)99, fwd-end-chkpnt: 26 (0%)99, prepare-dsn: 6 (0%)99, report: 7 (0%)99, main_log_entry: 26 (0%)100, update_snmp: 12 (0%)100, SMTP pre-response: 2.6 (0%)100, SMTP response: 6 (0%)100, unlink-3-files: 2....
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) ...5 (0%)100, rundown: 1.9 (0%)100
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) idle_proc, 6: was busy, 6486.2 ms, total idle 16216.715 s, busy 49.074 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) idle_proc, 5: was idle, 1.0 ms, total idle 16216.716 s, busy 49.074 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) ESMTP< QUIT\r\n
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) get_deadline switch_to_my_time(rx SMTP QUIT) - deadline in 480.0 s, set to 288.000 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) prolong_timer switch_to_my_time(rx SMTP QUIT): timer 288, was 480, deadline in 480.0 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) ESMTP> 221 2.0.0 [127.0.0.1] amavisd-new closing transmission channel
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) switch_to_client_time 480 s, smtp response sent
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) SMTP session over, timer stopped
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) exiting process_request
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) idle_proc, bye: was busy, 10.3 ms, total idle 16216.716 s, busy 49.085 s
Aug 24 04:53:16 black amavis[1561530]: (1561530-09) load: 0 %, total idle 16216.716 s, busy 49.085 s
More information about the amavis-users
mailing list