Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- -rw-r--r-- 1 root assp 1478 Oct 12 07:58 Luxury_Algarve_Holiday_from_227pp_4_Berlin_City_Br--3096130.eml
- -rw-r--r-- 1 root assp 1374 Oct 12 08:01 Today_Only_Buy_1_Get_1_Free_On_World_Arthritis_Day--3096134.eml
- -rw-r--r-- 1 root assp 1478 Oct 12 08:09 Luxury_Algarve_Holiday_from_227pp_4_Berlin_City_Br--3096141.eml
- -rw-r--r-- 1 root assp 1789 Oct 12 08:13 Say_yes--3096143.eml
- -rw-r--r-- 1 root assp 1651 Oct 12 08:29 50_Adidas_79_Apple_70_Decathlon_31_Tiffany_CO--3096148.eml
- -rw-r--r-- 1 root assp 1789 Oct 12 08:35 Say_yes--3096151.eml
- -rw-r--r-- 1 root assp 1478 Oct 12 08:39 Luxury_Algarve_Holiday_from_227pp_4_Berlin_City_Br--3096155.eml
- -rw-r--r-- 1 root assp 1756 Oct 12 08:39 Huge_40_discount_on_Ladies_Breeches_excludes_Coco_--3096156.eml
- -rw-r--r-- 1 root assp 1789 Oct 12 08:56 Say_yes--3096165.eml
- -rw-r--r-- 1 root assp 1860 Oct 12 09:03 Ends_soon_30_off_for_Friends_and_Family--3096177.eml
- 2017-10-12 09:03:12 95381-05353 [Worker_1] [TLS-in] [DKIM] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org info: domain victoriassecret.com has published a DMARC record
- 2017-10-12 09:03:12 95381-05353 [Worker_1] [TLS-in] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org info: remove IP-score from 136.147.180.76 - this mail passed the SPF check
- 2017-10-12 09:03:12 95381-05353 [Worker_1] [TLS-in] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org Message-Score: added -10 (spfpValencePB) for SPF pass, total score for this message is now -5
- 2017-10-12 09:03:12 95381-05353 [Worker_1] [TLS-in] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org DMARC: this mail breakes the DKIM policies defined in the DMARC record for domain victoriassecret.com - there is no DKIM-signature found in this mail for domain victoriassecret.com
- 2017-10-12 09:03:23 95381-05353 [Worker_1] [TLS-in] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org u1.victoriassecret.com - can't get DNS-server answer for MX - (TIMEOUT)
- 2017-10-12 09:03:24 95381-05353 [Worker_1] [TLS-in] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org spambomb Regex: bombRe 'PB 40: for You've received'
- 2017-10-12 09:03:24 95381-05353 [Worker_1] [TLS-in] [bombRe] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org [scoring] (bombRe 'You've received')
- 2017-10-12 09:03:24 95381-05353 [Worker_1] [TLS-in] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org Message-Score: added 40 for Regex: bombRe 'PB 40: for You've received' bombRe: 'You've received', total score for this message is now 35
- 2017-10-12 09:03:24 95381-05353 [Worker_1] [TLS-in] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org Bayesian Check [scoring] - Prob: 1.00000 => spam - answer/query relation: 33% of 153
- 2017-10-12 09:03:24 95381-05353 [Worker_1] [TLS-in] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org Message-Score: added 49 for Bayesian Probability: 1.00000, total score for this message is now 84
- 2017-10-12 09:03:24 95381-05353 [Worker_1] [TLS-in] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org deleting spamming safelisted tuplet: (136.147.180.0,bounce.e1.victoriassecret.com) age: 23s
- 2017-10-12 09:03:24 95381-05353 [Worker_1] [TLS-in] [MessageLimit] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org [spam found] (MessageScore 84, limit 50) [Ends soon 30 off for Friends and Family] -> /usr/local/assp/spam/Ends_soon_30_off_for_Friends_and_Family--3096177.eml;
- 2017-10-12 09:03:24 95381-05353 [Worker_1] [TLS-in] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org [SMTP Error] 554 5.7.1 Error, resend your email with NOTSPAM in the subject to ensure delivery.
- 2017-10-12 09:03:24 95381-05353 [Worker_1] [TLS-in] 136.147.180.76 <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com> to: fred@example.org info: PB-IP-Score for '136.147.180.0' is 0, added 5 in this session
- X-Assp-Version: 2.5.6(17281) on assp.example.org
- X-Assp-ID: assp.example.org 95381-05353
- X-Assp-Session: 7F9F2DC28348 (mail 1)
- X-Assp-Envelope-From: bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com
- X-Assp-Intended-For: fred@example.org
- X-Assp-Original-Subject: Ends soon! 30% off for Friends and Family...
- X-Assp-Client-TLS: yes
- X-Assp-Message-Score: -10 (SSL-TLS-connection-OK)
- X-Assp-IP-Score: -10 (SSL-TLS-connection-OK)
- X-Assp-Delay: not delayed (auto accepted); 12 Oct 2017 09:03:01 +0100
- X-Assp-Message-Score: 15 (DKIM domain mismatch - bounce.e1.victoriassecret.com
- found in DKIMCache, but no DKIM-Signature found in mail header)
- X-Assp-IP-Score: 15 (DKIM domain mismatch - bounce.e1.victoriassecret.com
- found in DKIMCache, but no DKIM-Signature found in mail header)
- X-Original-Authentication-Results: assp.example.org; spf=pass
- X-Assp-Message-Score: -10 (SPF pass)
- X-Assp-IP-Score: -10 (SPF pass)
- X-Assp-Re-bombRe: PB 40: for You've received
- X-Assp-Message-Score: 40 (Regex: bombRe 'PB 40: for You've received'
- bombRe: 'You've received')
- X-Assp-IP-Score: 40 (Regex: bombRe 'PB 40: for You've received' bombRe:
- 'You've received')
- X-Assp-Message-Score: 49 (Bayesian Probability: 1.00000)
- X-Assp-IP-Score: 49 (Bayesian Probability: 1.00000)
- X-Assp-Spam-Prob: 1.00000
- X-Assp-Tag: MessageLimit
- X-Spam-Status:yes
- X-Assp-Spam-Reason: MessageScore 84, limit 50
- X-Assp-Message-Totalscore: 84
- X-Assp-8BITMIME: YES
- Received: from mta6.e1.victoriassecret.com ([136.147.180.76]
- helo=mta6.e1.victoriassecret.com) by assp.example.org with
- SMTP (2.5.6);
- 12 Oct 2017 09:02:59 +0100
- Received: by mta6.e1.victoriassecret.com id hrsgra163hsu for <fred@example.org>; Thu, 12 Oct 2017 08:02:59 +0000 (envelope-from <bounce-68_HTML-125431020-269638-7210964-237@bounce.e1.victoriassecret.com>)
Add Comment
Please, Sign In to add comment