Advertisement
Guest User

Untitled

a guest
May 24th, 2018
512
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. MESSAGE HEADERS:
  2.  
  3. Return-Path: <bounce@e.seagate.com>
  4. Delivered-To: someuser@example.com
  5. Received: from mail8.networktest.com (localhost [127.0.0.1])
  6. by mail8.networktest.com (Postfix) with ESMTP id D1432622302
  7. for <someuser@example.com>; Thu, 24 May 2018 13:50:28 -0700 (PDT)
  8. X-Virus-Scanned: amavisd-new at mail8.networktest.com
  9. X-Spam-Flag: YES
  10. X-Spam-Score: 1.683
  11. X-Spam-Level: *
  12. X-Spam-Status: Yes, score=1.683 tagged_above=0 required=0 tests=[BAYES_80=2,
  13. DCC_CHECK=1.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001,
  14. HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001,
  15. RP_MATCHES_RCVD=-1.418, SPF_PASS=-0.001]
  16. autolearn=no autolearn_force=no
  17. Received: from mail8.networktest.com ([127.0.0.1])
  18. by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10024)
  19. with ESMTP id Bs-Bf9vkcpJD for <someuser@example.com>;
  20. Thu, 24 May 2018 13:50:24 -0700 (PDT)
  21. Received: from mail01.e.seagate.com (mail01.e.seagate.com [209.167.231.189])
  22. by mail8.networktest.com (Postfix) with ESMTPS id B13F9622304
  23. for <someuser@example.com>; Thu, 24 May 2018 13:50:21 -0700 (PDT)
  24. Received: from [10.4.1.245] ([10.4.1.245:47619] helo=G01SNJ022)
  25. by msm-mta08-tor6 (envelope-from <bounce@e.seagate.com>)
  26. (ecelerity 3.6.9.48312 r(Core:3.6.9.0)) with ESMTP
  27. id 99/8B-08980-585270B5; Thu, 24 May 2018 16:50:13 -0400
  28. Message-ID: <70a5656f9658413f898a334468d3f653@43975733>
  29. X-Binding: 43975733
  30. X-elqSiteID: 43975733
  31. X-elqPod: 0x3BC0F1C4E8C62358C67C33A17D924B7F1CC164F157C9649CB0F6FD597FB1CA9C
  32. X-cid: 4498-40731
  33. List-Unsubscribe: <http://app.e.seagate.com/e/u?s=43975733&elq=70a5656f-9658-413f-898a-334468d3f653>
  34. MIME-Version: 1.0
  35. From: "LaCie" <mail@messages.lacie.com>
  36. To: someuser@example.com
  37. Reply-To: "Seagate Technology" <mail@messages.seagate.com>
  38. Date: 24 May 2018 16:50:13 -0400
  39. Subject: ***Spam*** Vote Now for Your Favorite PushPlay Video
  40. =?UTF-8?Q?=F0=9F=8E=AC?=
  41. Content-Type: multipart/alternative;
  42. boundary=--boundary_300976_92eaf268-f4d0-4b22-b24d-981717e214fe
  43.  
  44.  
  45.  
  46. LOG OUTPUT:
  47.  
  48. $ grep seagate /var/log/maillog
  49. May 24 13:50:21 mail8 postfix/smtpd[86428]: connect from mail01.e.seagate.com[209.167.231.189]
  50. May 24 13:50:21 mail8 postfix/smtpd[86428]: Anonymous TLS connection established from mail01.e.seagate.com[209.167.231.189]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
  51. May 24 13:50:24 mail8 postfix/smtpd[86428]: B13F9622304: client=mail01.e.seagate.com[209.167.231.189]
  52. May 24 13:50:24 mail8 postfix/qmgr[991]: B13F9622304: from=<bounce@e.seagate.com>, size=41861, nrcpt=1 (queue active)
  53. May 24 13:50:24 mail8 amavis[86087]: (86087-08) ESMTP [127.0.0.1]:10024 /var/amavis/tmp/amavis-20180524T133526-86087-EfRxnatq: <bounce@e.seagate.com> -> <someuser@example.com> SIZE=41861 Received: from mail8.networktest.com ([127.0.0.1]) by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <someuser@example.com>; Thu, 24 May 2018 13:50:24 -0700 (PDT)
  54. May 24 13:50:25 mail8 amavis[86087]: (86087-08) Checking: Bs-Bf9vkcpJD [209.167.231.189] <bounce@e.seagate.com> -> <someuser@example.com>
  55. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: received-header: parsed as [ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= msa=0 ]
  56. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: received-header: parsed as [ ip=10.4.1.245 rdns= helo=G01SNJ022 by=msm-mta08-tor6 ident= envfrom=bounce@e.seagate.com intl=0 id=99/8B-08980-585270B5 auth= msa=0 ]
  57. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: metadata: X-Spam-Relays-Untrusted: [ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= msa=0 ] [ ip=10.4.1.245 rdns= helo=G01SNJ022 by=msm-mta08-tor6 ident= envfrom=bounce@e.seagate.com intl=0 id=99/8B-08980-585270B5 auth= msa=0 ]
  58. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: metadata: X-Spam-Relays-External: [ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= msa=0 ] [ ip=10.4.1.245 rdns= helo=G01SNJ022 by=msm-mta08-tor6 ident= envfrom=bounce@e.seagate.com intl=0 id=99/8B-08980-585270B5 auth= msa=0 ]
  59. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: check: tagrun - tag SENDERDOMAIN is now ready, value: e.seagate.com
  60. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: check: tagrun - tag RELAYSUNTRUSTED is now ready, value: [ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= msa=0 ] [ ip=10.4.1.245 rdns= helo=G01SNJ022 by=msm-mta08-tor6 ident= envfrom=bounce@e.seagate.com intl=0 id=99/8B-08980-585270B5 auth= msa=0 ]
  61. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: check: tagrun - tag RELAYSEXTERNAL is now ready, value: [ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= msa=0 ] [ ip=10.4.1.245 rdns= helo=G01SNJ022 by=msm-mta08-tor6 ident= envfrom=bounce@e.seagate.com intl=0 id=99/8B-08980-585270B5 auth= msa=0 ]
  62. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: check: tagrun - tag URIHOSTS is now ready, value: ARY:[now.eloqua.com,app.e.seagate.com,collective.lacie.com,www.lacie.com,images.e.seagate.com]
  63. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: check: tagrun - tag URIDOMAINS is now ready, value: ARY:[eloqua.com,seagate.com,lacie.com,lacie.com,seagate.com]
  64. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: considering host=app.e.seagate.com, domain=seagate.com
  65. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/seagate.com.multi.uribl.com for DNSBL:seagate.com:multi.uribl.com
  66. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 54946/IN/A/seagate.com.multi.uribl.com
  67. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URIBL_BLOCKED, URI-DNSBL, DNSBL:seagate.com:multi.uribl.com (timeout 15.0s, min 3.0s)
  68. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/seagate.com.multi.surbl.org for DNSBL:seagate.com:multi.surbl.org
  69. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 8245/IN/A/seagate.com.multi.surbl.org
  70. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URIBL_CR_SURBL, URI-DNSBL, DNSBL:seagate.com:multi.surbl.org (timeout 15.0s, min 3.0s)
  71. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.2 URIBL_ABUSE_SURBL
  72. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/seagate.com.dob.sibl.support-intelligence.net for DNSBL:seagate.com:dob.sibl.support-intelligence.net
  73. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 2943/IN/A/seagate.com.dob.sibl.support-intelligence.net
  74. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URIBL_RHS_DOB, URI-DNSBL, DNSBL:seagate.com:dob.sibl.support-intelligence.net (timeout 15.0s, min 3.0s)
  75. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.3 URIBL_MW_SURBL
  76. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.2 URIBL_RED
  77. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.3 URIBL_BLACK
  78. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.4 URIBL_WS_SURBL
  79. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.4 URIBL_GREY
  80. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.5 URIBL_PH_SURBL
  81. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.6 SURBL_BLOCKED
  82. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/seagate.com.dbl.spamhaus.org for DNSBL:seagate.com:dbl.spamhaus.org
  83. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 24344/IN/A/seagate.com.dbl.spamhaus.org
  84. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URIBL_DBL_ABUSE_SPAM, URI-DNSBL, DNSBL:seagate.com:dbl.spamhaus.org (timeout 15.0s, min 3.0s)
  85. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.2 URIBL_DBL_ABUSE_BOTCC
  86. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.3 URIBL_DBL_ERROR
  87. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.4 URIBL_DBL_MALWARE
  88. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.5 URIBL_DBL_PHISH
  89. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.6 URIBL_DBL_ABUSE_MALW
  90. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.7 URIBL_DBL_ABUSE_PHISH
  91. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.8 URIBL_DBL_BOTNETCC
  92. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.9 URIBL_DBL_ABUSE_REDIR
  93. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.10 URIBL_DBL_SPAM
  94. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching NS/seagate.com for NS:seagate.com
  95. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 37666/IN/NS/seagate.com
  96. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-NS, NS:seagate.com (timeout 15.0s, min 3.0s)
  97. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/app.e.seagate.com for A:app.e.seagate.com
  98. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 36977/IN/A/app.e.seagate.com
  99. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:app.e.seagate.com (timeout 15.0s, min 3.0s)
  100. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: considering host=images.e.seagate.com, domain=seagate.com
  101. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.5 URIBL_BLOCKED
  102. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.7 URIBL_CR_SURBL
  103. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.8 URIBL_ABUSE_SURBL
  104. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 2943/IN/A/seagate.com.dob.sibl.support-intelligence.net already underway, adding no.2 URIBL_RHS_DOB
  105. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.9 URIBL_MW_SURBL
  106. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.6 URIBL_RED
  107. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.7 URIBL_BLACK
  108. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.10 URIBL_WS_SURBL
  109. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.8 URIBL_GREY
  110. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.11 URIBL_PH_SURBL
  111. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.12 SURBL_BLOCKED
  112. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.11 URIBL_DBL_ABUSE_SPAM
  113. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.12 URIBL_DBL_ABUSE_BOTCC
  114. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.13 URIBL_DBL_ERROR
  115. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.14 URIBL_DBL_MALWARE
  116. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.15 URIBL_DBL_PHISH
  117. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.16 URIBL_DBL_ABUSE_MALW
  118. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.17 URIBL_DBL_ABUSE_PHISH
  119. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.18 URIBL_DBL_BOTNETCC
  120. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.19 URIBL_DBL_ABUSE_REDIR
  121. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.20 URIBL_DBL_SPAM
  122. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/images.e.seagate.com for A:images.e.seagate.com
  123. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 49101/IN/A/images.e.seagate.com
  124. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:images.e.seagate.com (timeout 15.0s, min 3.0s)
  125. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: checking A and MX for host e.seagate.com
  126. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/e.seagate.com for dns:A:e.seagate.com
  127. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 42097/IN/A/e.seagate.com
  128. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: NO_DNS_FOR_FROM, DNSBL-A, dns:A:e.seagate.com (timeout 15.0s, min 3.0s)
  129. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching MX/e.seagate.com for dns:MX:e.seagate.com
  130. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 2066/IN/MX/e.seagate.com
  131. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: NO_DNS_FOR_FROM, DNSBL-MX, dns:MX:e.seagate.com (timeout 15.0s, min 3.0s)
  132. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: dns reply to 24344/IN/A/seagate.com.dbl.spamhaus.org: NXDOMAIN
  133. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_SPAM
  134. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_SPAM DNSBL:seagate.com:dbl.spamhaus.org
  135. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_BOTCC
  136. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_BOTCC DNSBL:seagate.com:dbl.spamhaus.org
  137. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ERROR
  138. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ERROR DNSBL:seagate.com:dbl.spamhaus.org
  139. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_MALWARE
  140. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_MALWARE DNSBL:seagate.com:dbl.spamhaus.org
  141. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_PHISH
  142. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_PHISH DNSBL:seagate.com:dbl.spamhaus.org
  143. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_MALW
  144. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_MALW DNSBL:seagate.com:dbl.spamhaus.org
  145. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_PHISH
  146. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_PHISH DNSBL:seagate.com:dbl.spamhaus.org
  147. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_BOTNETCC
  148. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_BOTNETCC DNSBL:seagate.com:dbl.spamhaus.org
  149. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_REDIR
  150. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_REDIR DNSBL:seagate.com:dbl.spamhaus.org
  151. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_SPAM
  152. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_SPAM DNSBL:seagate.com:dbl.spamhaus.org
  153. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_SPAM
  154. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_SPAM DNSBL:seagate.com:dbl.spamhaus.org
  155. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_BOTCC
  156. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_BOTCC DNSBL:seagate.com:dbl.spamhaus.org
  157. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ERROR
  158. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ERROR DNSBL:seagate.com:dbl.spamhaus.org
  159. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_MALWARE
  160. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_MALWARE DNSBL:seagate.com:dbl.spamhaus.org
  161. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_PHISH
  162. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_PHISH DNSBL:seagate.com:dbl.spamhaus.org
  163. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_MALW
  164. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_MALW DNSBL:seagate.com:dbl.spamhaus.org
  165. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_PHISH
  166. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_PHISH DNSBL:seagate.com:dbl.spamhaus.org
  167. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_BOTNETCC
  168. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_BOTNETCC DNSBL:seagate.com:dbl.spamhaus.org
  169. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_REDIR
  170. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_REDIR DNSBL:seagate.com:dbl.spamhaus.org
  171. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_SPAM
  172. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_SPAM DNSBL:seagate.com:dbl.spamhaus.org
  173. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: dns reply to 2943/IN/A/seagate.com.dob.sibl.support-intelligence.net: NXDOMAIN
  174. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dob.sibl.support-intelligence.net, rule URIBL_RHS_DOB
  175. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RHS_DOB DNSBL:seagate.com:dob.sibl.support-intelligence.net
  176. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dob.sibl.support-intelligence.net, rule URIBL_RHS_DOB
  177. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RHS_DOB DNSBL:seagate.com:dob.sibl.support-intelligence.net
  178. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: dns reply to 8245/IN/A/seagate.com.multi.surbl.org: NXDOMAIN
  179. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_CR_SURBL
  180. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CR_SURBL DNSBL:seagate.com:multi.surbl.org
  181. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_ABUSE_SURBL
  182. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ABUSE_SURBL DNSBL:seagate.com:multi.surbl.org
  183. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_MW_SURBL
  184. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_MW_SURBL DNSBL:seagate.com:multi.surbl.org
  185. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_WS_SURBL
  186. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_WS_SURBL DNSBL:seagate.com:multi.surbl.org
  187. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_PH_SURBL
  188. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_PH_SURBL DNSBL:seagate.com:multi.surbl.org
  189. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule SURBL_BLOCKED
  190. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup SURBL_BLOCKED DNSBL:seagate.com:multi.surbl.org
  191. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_CR_SURBL
  192. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CR_SURBL DNSBL:seagate.com:multi.surbl.org
  193. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_ABUSE_SURBL
  194. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ABUSE_SURBL DNSBL:seagate.com:multi.surbl.org
  195. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_MW_SURBL
  196. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_MW_SURBL DNSBL:seagate.com:multi.surbl.org
  197. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_WS_SURBL
  198. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_WS_SURBL DNSBL:seagate.com:multi.surbl.org
  199. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_PH_SURBL
  200. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_PH_SURBL DNSBL:seagate.com:multi.surbl.org
  201. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule SURBL_BLOCKED
  202. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup SURBL_BLOCKED DNSBL:seagate.com:multi.surbl.org
  203. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key NS:seagate.com
  204. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_ns_lookup NS:seagate.com
  205. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(1) NS for seagate.com: seagate.com. 14400 IN NS ns3.seagate.com.
  206. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/ns3.seagate.com for A:ns3.seagate.com
  207. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 59210/IN/A/ns3.seagate.com
  208. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:ns3.seagate.com (timeout 15.0s, min 3.0s)
  209. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(2) NS for seagate.com: seagate.com. 14400 IN NS ns2.seagate.com.
  210. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/ns2.seagate.com for A:ns2.seagate.com
  211. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 6177/IN/A/ns2.seagate.com
  212. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:ns2.seagate.com (timeout 15.0s, min 3.0s)
  213. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(3) NS for seagate.com: seagate.com. 14400 IN NS ns5.seagate.com.
  214. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/ns5.seagate.com for A:ns5.seagate.com
  215. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 17448/IN/A/ns5.seagate.com
  216. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:ns5.seagate.com (timeout 15.0s, min 3.0s)
  217. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(4) NS for seagate.com: seagate.com. 14400 IN NS ns1.seagate.com.
  218. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/ns1.seagate.com for A:ns1.seagate.com
  219. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 39359/IN/A/ns1.seagate.com
  220. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:ns1.seagate.com (timeout 15.0s, min 3.0s)
  221. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(5) NS for seagate.com: seagate.com. 14400 IN NS ns4.seagate.com.
  222. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/ns4.seagate.com for A:ns4.seagate.com
  223. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 32703/IN/A/ns4.seagate.com
  224. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:ns4.seagate.com (timeout 15.0s, min 3.0s)
  225. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key dns:MX:e.seagate.com
  226. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: hit <dns:e.seagate.com?type=MX> 10 s43975733.m.en25.com.
  227. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key dns:A:e.seagate.com
  228. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: hit <dns:e.seagate.com> 209.167.231.15
  229. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: dns reply to 54946/IN/A/seagate.com.multi.uribl.com: NXDOMAIN
  230. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_BLOCKED
  231. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLOCKED DNSBL:seagate.com:multi.uribl.com
  232. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_RED
  233. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RED DNSBL:seagate.com:multi.uribl.com
  234. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_BLACK
  235. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLACK DNSBL:seagate.com:multi.uribl.com
  236. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_GREY
  237. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_GREY DNSBL:seagate.com:multi.uribl.com
  238. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_BLOCKED
  239. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLOCKED DNSBL:seagate.com:multi.uribl.com
  240. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_RED
  241. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RED DNSBL:seagate.com:multi.uribl.com
  242. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_BLACK
  243. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLACK DNSBL:seagate.com:multi.uribl.com
  244. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_GREY
  245. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_GREY DNSBL:seagate.com:multi.uribl.com
  246. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:app.e.seagate.com
  247. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:app.e.seagate.com
  248. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for app.e.seagate.com: app.e.seagate.com. 600 IN CNAME s43975733.t.en25.com.
  249. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(2) A for app.e.seagate.com: s43975733.t.en25.com. 86400 IN CNAME p01.t.en25.com.
  250. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(3) A for app.e.seagate.com: p01.t.en25.com. 86400 IN A 209.167.231.27
  251. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:ns3.seagate.com
  252. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:ns3.seagate.com
  253. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns3.seagate.com: ns3.seagate.com. 14400 IN A 134.204.224.50
  254. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:ns2.seagate.com
  255. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:ns2.seagate.com
  256. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns2.seagate.com: ns2.seagate.com. 14400 IN A 192.55.20.49
  257. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:ns5.seagate.com
  258. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:ns5.seagate.com
  259. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns5.seagate.com: ns5.seagate.com. 14400 IN A 192.55.14.49
  260. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:ns1.seagate.com
  261. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:ns1.seagate.com
  262. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns1.seagate.com: ns1.seagate.com. 14400 IN A 134.204.224.51
  263. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:ns4.seagate.com
  264. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:ns4.seagate.com
  265. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns4.seagate.com: ns4.seagate.com. 14400 IN A 192.55.20.50
  266. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.130 s: URIBL_RHS_DOB, URI-DNSBL, DNSBL:seagate.com:dob.sibl.support-intelligence.net
  267. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.128 s: URI-NS, NS:seagate.com
  268. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.102 s: URIBL_DBL_ABUSE_SPAM, URI-DNSBL, DNSBL:seagate.com:dbl.spamhaus.org
  269. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.118 s: URI-A, A:ns1.seagate.com
  270. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.109 s: URI-A, A:ns2.seagate.com
  271. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.188 s: URI-A, A:app.e.seagate.com
  272. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.134 s: URIBL_CR_SURBL, URI-DNSBL, DNSBL:seagate.com:multi.surbl.org
  273. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.104 s: URI-A, A:ns3.seagate.com
  274. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.122 s: URI-A, A:ns4.seagate.com
  275. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.079 s: NO_DNS_FOR_FROM, DNSBL-MX, dns:MX:e.seagate.com
  276. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.113 s: URI-A, A:ns5.seagate.com
  277. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.092 s: NO_DNS_FOR_FROM, DNSBL-A, dns:A:e.seagate.com
  278. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.193 s: URIBL_BLOCKED, URI-DNSBL, DNSBL:seagate.com:multi.uribl.com
  279. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: eval: all '*From' addrs: mail@messages.lacie.com bounce@e.seagate.com
  280. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: rules: ran header rule __LAST_EXTERNAL_RELAY_NO_AUTH ======> got hit: "[ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= "
  281. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: rules: ran header rule __LAST_UNTRUSTED_RELAY_NO_AUTH ======> got hit: "[ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= "
  282. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: rules: ran header rule __DOS_RELAYED_EXT ======> got hit: "Received: from mail01.e.seagate.com (mail01.e.seagate.com [209.167.231.189])
  283. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: rules: bounce@e.seagate.com MATCHES relay mail01.e.seagate.com (seagate.com)
  284. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: spf: checking EnvelopeFrom (helo=mail01.e.seagate.com, ip=209.167.231.189, envfrom=bounce@e.seagate.com)
  285. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 12018/IN/TXT/e.seagate.com
  286. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:images.e.seagate.com
  287. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:images.e.seagate.com
  288. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for images.e.seagate.com: images.e.seagate.com. 600 IN CNAME elqcdn.eloqua.com.
  289. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(2) A for images.e.seagate.com: elqcdn.eloqua.com. 86400 IN CNAME now.eloqua.com.edgesuite.net.
  290. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(3) A for images.e.seagate.com: now.eloqua.com.edgesuite.net. 21600 IN CNAME a578.g.akamai.net.
  291. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(4) A for images.e.seagate.com: a578.g.akamai.net. 20 IN A 184.51.0.227
  292. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(5) A for images.e.seagate.com: a578.g.akamai.net. 20 IN A 184.51.0.233
  293. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(1) NS for lacie.com: lacie.com. 300 IN NS ns1.seagate.com.
  294. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(2) NS for lacie.com: lacie.com. 300 IN NS ns2.seagate.com.
  295. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(3) NS for lacie.com: lacie.com. 300 IN NS ns5.seagate.com.
  296. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: spf: query for bounce@e.seagate.com/209.167.231.189/mail01.e.seagate.com: result: pass, comment: , text: Mechanism 'include:_netblocks.eloqua.com' matched
  297. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: address from header Reply-To:addr: mail@messages.seagate.com
  298. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: spf: checking HELO (helo=mail01.e.seagate.com, ip=209.167.231.189)
  299. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 35439/IN/TXT/mail01.e.seagate.com
  300. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: spf: query for bounce@e.seagate.com/209.167.231.189/mail01.e.seagate.com: result: none, comment: , text: No applicable sender policy available
  301. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: spf: whitelist_from_spf: bounce@e.seagate.com is not in user's WHITELIST_FROM_SPF
  302. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: address from header EnvelopeFrom: bounce@e.seagate.com
  303. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: Reply-To address: mail@messages.seagate.com
  304. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: address from header Reply-To: mail@messages.seagate.com
  305. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: all from-addresses: mail@messages.lacie.com, bounce@e.seagate.com
  306. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: eval: From 2nd level domain: lacie.com, EnvelopeFrom 2nd level domain: seagate.com
  307. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: spf: def_whitelist_from_spf: bounce@e.seagate.com is not in DEF_WHITELIST_FROM_SPF
  308. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: rules: bounce@e.seagate.com MATCHES relay mail01.e.seagate.com (seagate.com)
  309. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: address from header Reply-To: mail@messages.seagate.com
  310. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: Reply-To address: mail@messages.seagate.com
  311. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 2.369 s: URI-A, A:images.e.seagate.com
  312. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: rules: ran uri rule __LOCAL_PP_NONPPURL ======> got hit: "http://images.e.seagate.com"
  313. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: rules: ran rawbody rule __BUGGED_IMG ======> got hit: "<img src="http://images.e.seagate.com/EloquaImages/clients/SeagateTech/%7B299cb635-5660-492e-b0f5-09fa597b"
  314. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.079 . dns:MX:e.seagate.com
  315. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.092 . dns:A:e.seagate.com
  316. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.102 . DNSBL:seagate.com:dbl.spamhaus.org
  317. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.104 . A:ns3.seagate.com
  318. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.109 . A:ns2.seagate.com
  319. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.113 . A:ns5.seagate.com
  320. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.118 . A:ns1.seagate.com
  321. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.122 . A:ns4.seagate.com
  322. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.128 . NS:seagate.com
  323. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.130 . DNSBL:seagate.com:dob.sibl.support-intelligence.net
  324. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.134 . DNSBL:seagate.com:multi.surbl.org
  325. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.188 . A:app.e.seagate.com
  326. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 0.193 . DNSBL:seagate.com:multi.uribl.com
  327. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: async: timing: 2.369 . A:images.e.seagate.com
  328. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: check: tagrun - tag RBL is now ready, value: <dns:e.seagate.com> [209.167.231.15]
  329. May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: check: [...] <dns:e.seagate.com?type=MX> [10 s43975733.m.en25.com.]
  330. May 24 13:50:28 mail8 amavis[86087]: (86087-08) spam-tag, <bounce@e.seagate.com> -> <someuser@example.com>, Yes, score=1.683 tagged_above=0 required=0 tests=[BAYES_80=2, DCC_CHECK=1.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-1.418, SPF_PASS=-0.001] autolearn=no autolearn_force=no
  331. May 24 13:50:28 mail8 postfix/qmgr[991]: D1432622302: from=<bounce@e.seagate.com>, size=42673, nrcpt=1 (queue active)
  332. May 24 13:50:28 mail8 amavis[86087]: (86087-08) Bs-Bf9vkcpJD FWD from <bounce@e.seagate.com> -> <someuser@example.com>, BODY=7BIT 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as D1432622302
  333. May 24 13:50:28 mail8 amavis[86087]: (86087-08) Passed SPAM {RelayedTaggedInbound}, [209.167.231.189]:60831 [209.167.231.189] <bounce@e.seagate.com> -> <someuser@example.com>, Queue-ID: B13F9622304, Message-ID: <70a5656f9658413f898a334468d3f653@43975733>, mail_id: Bs-Bf9vkcpJD, Hits: 1.683, size: 41811, queued_as: D1432622302, 3895 ms, Tests: [BAYES_80=2,DCC_CHECK=1.1,HEADER_FROM_DIFFERENT_DOMAINS=0.001,HTML_MESSAGE=0.001,RCVD_IN_DNSWL_NONE=-0.0001,RP_MATCHES_RCVD=-1.418,SPF_PASS=-0.001]
  334. May 24 13:50:30 mail8 postfix/smtpd[86428]: disconnect from mail01.e.seagate.com[209.167.231.189] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
Advertisement
RAW Paste Data Copied
Advertisement