MESSAGE HEADERS: Return-Path: Delivered-To: someuser@example.com Received: from mail8.networktest.com (localhost [127.0.0.1]) by mail8.networktest.com (Postfix) with ESMTP id D1432622302 for ; Thu, 24 May 2018 13:50:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at mail8.networktest.com X-Spam-Flag: YES X-Spam-Score: 1.683 X-Spam-Level: * X-Spam-Status: Yes, score=1.683 tagged_above=0 required=0 tests=[BAYES_80=2, DCC_CHECK=1.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-1.418, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail8.networktest.com ([127.0.0.1]) by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bs-Bf9vkcpJD for ; Thu, 24 May 2018 13:50:24 -0700 (PDT) Received: from mail01.e.seagate.com (mail01.e.seagate.com [209.167.231.189]) by mail8.networktest.com (Postfix) with ESMTPS id B13F9622304 for ; Thu, 24 May 2018 13:50:21 -0700 (PDT) Received: from [10.4.1.245] ([10.4.1.245:47619] helo=G01SNJ022) by msm-mta08-tor6 (envelope-from ) (ecelerity 3.6.9.48312 r(Core:3.6.9.0)) with ESMTP id 99/8B-08980-585270B5; Thu, 24 May 2018 16:50:13 -0400 Message-ID: <70a5656f9658413f898a334468d3f653@43975733> X-Binding: 43975733 X-elqSiteID: 43975733 X-elqPod: 0x3BC0F1C4E8C62358C67C33A17D924B7F1CC164F157C9649CB0F6FD597FB1CA9C X-cid: 4498-40731 List-Unsubscribe: MIME-Version: 1.0 From: "LaCie" To: someuser@example.com Reply-To: "Seagate Technology" Date: 24 May 2018 16:50:13 -0400 Subject: ***Spam*** Vote Now for Your Favorite PushPlay Video =?UTF-8?Q?=F0=9F=8E=AC?= Content-Type: multipart/alternative; boundary=--boundary_300976_92eaf268-f4d0-4b22-b24d-981717e214fe LOG OUTPUT: $ grep seagate /var/log/maillog May 24 13:50:21 mail8 postfix/smtpd[86428]: connect from mail01.e.seagate.com[209.167.231.189] May 24 13:50:21 mail8 postfix/smtpd[86428]: Anonymous TLS connection established from mail01.e.seagate.com[209.167.231.189]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) May 24 13:50:24 mail8 postfix/smtpd[86428]: B13F9622304: client=mail01.e.seagate.com[209.167.231.189] May 24 13:50:24 mail8 postfix/qmgr[991]: B13F9622304: from=, size=41861, nrcpt=1 (queue active) May 24 13:50:24 mail8 amavis[86087]: (86087-08) ESMTP [127.0.0.1]:10024 /var/amavis/tmp/amavis-20180524T133526-86087-EfRxnatq: -> SIZE=41861 Received: from mail8.networktest.com ([127.0.0.1]) by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for ; Thu, 24 May 2018 13:50:24 -0700 (PDT) May 24 13:50:25 mail8 amavis[86087]: (86087-08) Checking: Bs-Bf9vkcpJD [209.167.231.189] -> May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: received-header: parsed as [ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= msa=0 ] May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: received-header: parsed as [ ip=10.4.1.245 rdns= helo=G01SNJ022 by=msm-mta08-tor6 ident= envfrom=bounce@e.seagate.com intl=0 id=99/8B-08980-585270B5 auth= msa=0 ] May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: metadata: X-Spam-Relays-Untrusted: [ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= msa=0 ] [ ip=10.4.1.245 rdns= helo=G01SNJ022 by=msm-mta08-tor6 ident= envfrom=bounce@e.seagate.com intl=0 id=99/8B-08980-585270B5 auth= msa=0 ] May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: metadata: X-Spam-Relays-External: [ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= msa=0 ] [ ip=10.4.1.245 rdns= helo=G01SNJ022 by=msm-mta08-tor6 ident= envfrom=bounce@e.seagate.com intl=0 id=99/8B-08980-585270B5 auth= msa=0 ] May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: check: tagrun - tag SENDERDOMAIN is now ready, value: e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: check: tagrun - tag RELAYSUNTRUSTED is now ready, value: [ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= msa=0 ] [ ip=10.4.1.245 rdns= helo=G01SNJ022 by=msm-mta08-tor6 ident= envfrom=bounce@e.seagate.com intl=0 id=99/8B-08980-585270B5 auth= msa=0 ] May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: check: tagrun - tag RELAYSEXTERNAL is now ready, value: [ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= msa=0 ] [ ip=10.4.1.245 rdns= helo=G01SNJ022 by=msm-mta08-tor6 ident= envfrom=bounce@e.seagate.com intl=0 id=99/8B-08980-585270B5 auth= msa=0 ] May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: check: tagrun - tag URIHOSTS is now ready, value: ARY:[now.eloqua.com,app.e.seagate.com,collective.lacie.com,www.lacie.com,images.e.seagate.com] May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: check: tagrun - tag URIDOMAINS is now ready, value: ARY:[eloqua.com,seagate.com,lacie.com,lacie.com,seagate.com] May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: considering host=app.e.seagate.com, domain=seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/seagate.com.multi.uribl.com for DNSBL:seagate.com:multi.uribl.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 54946/IN/A/seagate.com.multi.uribl.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URIBL_BLOCKED, URI-DNSBL, DNSBL:seagate.com:multi.uribl.com (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/seagate.com.multi.surbl.org for DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 8245/IN/A/seagate.com.multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URIBL_CR_SURBL, URI-DNSBL, DNSBL:seagate.com:multi.surbl.org (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.2 URIBL_ABUSE_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/seagate.com.dob.sibl.support-intelligence.net for DNSBL:seagate.com:dob.sibl.support-intelligence.net May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 2943/IN/A/seagate.com.dob.sibl.support-intelligence.net May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URIBL_RHS_DOB, URI-DNSBL, DNSBL:seagate.com:dob.sibl.support-intelligence.net (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.3 URIBL_MW_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.2 URIBL_RED May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.3 URIBL_BLACK May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.4 URIBL_WS_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.4 URIBL_GREY May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.5 URIBL_PH_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.6 SURBL_BLOCKED May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/seagate.com.dbl.spamhaus.org for DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 24344/IN/A/seagate.com.dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URIBL_DBL_ABUSE_SPAM, URI-DNSBL, DNSBL:seagate.com:dbl.spamhaus.org (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.2 URIBL_DBL_ABUSE_BOTCC May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.3 URIBL_DBL_ERROR May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.4 URIBL_DBL_MALWARE May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.5 URIBL_DBL_PHISH May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.6 URIBL_DBL_ABUSE_MALW May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.7 URIBL_DBL_ABUSE_PHISH May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.8 URIBL_DBL_BOTNETCC May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.9 URIBL_DBL_ABUSE_REDIR May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.10 URIBL_DBL_SPAM May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching NS/seagate.com for NS:seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 37666/IN/NS/seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-NS, NS:seagate.com (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/app.e.seagate.com for A:app.e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 36977/IN/A/app.e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:app.e.seagate.com (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: considering host=images.e.seagate.com, domain=seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.5 URIBL_BLOCKED May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.7 URIBL_CR_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.8 URIBL_ABUSE_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 2943/IN/A/seagate.com.dob.sibl.support-intelligence.net already underway, adding no.2 URIBL_RHS_DOB May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.9 URIBL_MW_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.6 URIBL_RED May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.7 URIBL_BLACK May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.10 URIBL_WS_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 54946/IN/A/seagate.com.multi.uribl.com already underway, adding no.8 URIBL_GREY May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.11 URIBL_PH_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 8245/IN/A/seagate.com.multi.surbl.org already underway, adding no.12 SURBL_BLOCKED May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.11 URIBL_DBL_ABUSE_SPAM May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.12 URIBL_DBL_ABUSE_BOTCC May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.13 URIBL_DBL_ERROR May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.14 URIBL_DBL_MALWARE May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.15 URIBL_DBL_PHISH May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.16 URIBL_DBL_ABUSE_MALW May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.17 URIBL_DBL_ABUSE_PHISH May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.18 URIBL_DBL_BOTNETCC May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.19 URIBL_DBL_ABUSE_REDIR May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: query 24344/IN/A/seagate.com.dbl.spamhaus.org already underway, adding no.20 URIBL_DBL_SPAM May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/images.e.seagate.com for A:images.e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 49101/IN/A/images.e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:images.e.seagate.com (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: checking A and MX for host e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/e.seagate.com for dns:A:e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 42097/IN/A/e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: NO_DNS_FOR_FROM, DNSBL-A, dns:A:e.seagate.com (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching MX/e.seagate.com for dns:MX:e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 2066/IN/MX/e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: NO_DNS_FOR_FROM, DNSBL-MX, dns:MX:e.seagate.com (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: dns reply to 24344/IN/A/seagate.com.dbl.spamhaus.org: NXDOMAIN May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_SPAM May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_SPAM DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_BOTCC May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_BOTCC DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ERROR May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ERROR DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_MALWARE May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_MALWARE DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_PHISH May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_PHISH DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_MALW May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_MALW DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_PHISH May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_PHISH DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_BOTNETCC May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_BOTNETCC DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_REDIR May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_REDIR DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_SPAM May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_SPAM DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_SPAM May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_SPAM DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_BOTCC May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_BOTCC DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ERROR May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ERROR DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_MALWARE May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_MALWARE DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_PHISH May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_PHISH DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_MALW May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_MALW DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_PHISH May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_PHISH DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_BOTNETCC May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_BOTNETCC DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_ABUSE_REDIR May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_ABUSE_REDIR DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dbl.spamhaus.org, rule URIBL_DBL_SPAM May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_SPAM DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: dns reply to 2943/IN/A/seagate.com.dob.sibl.support-intelligence.net: NXDOMAIN May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dob.sibl.support-intelligence.net, rule URIBL_RHS_DOB May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RHS_DOB DNSBL:seagate.com:dob.sibl.support-intelligence.net May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:dob.sibl.support-intelligence.net, rule URIBL_RHS_DOB May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RHS_DOB DNSBL:seagate.com:dob.sibl.support-intelligence.net May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: dns reply to 8245/IN/A/seagate.com.multi.surbl.org: NXDOMAIN May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_CR_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CR_SURBL DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_ABUSE_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ABUSE_SURBL DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_MW_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_MW_SURBL DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_WS_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_WS_SURBL DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_PH_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_PH_SURBL DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule SURBL_BLOCKED May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup SURBL_BLOCKED DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_CR_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_CR_SURBL DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_ABUSE_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_ABUSE_SURBL DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_MW_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_MW_SURBL DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_WS_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_WS_SURBL DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule URIBL_PH_SURBL May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_PH_SURBL DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.surbl.org, rule SURBL_BLOCKED May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup SURBL_BLOCKED DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key NS:seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_ns_lookup NS:seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(1) NS for seagate.com: seagate.com. 14400 IN NS ns3.seagate.com. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/ns3.seagate.com for A:ns3.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 59210/IN/A/ns3.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:ns3.seagate.com (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(2) NS for seagate.com: seagate.com. 14400 IN NS ns2.seagate.com. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/ns2.seagate.com for A:ns2.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 6177/IN/A/ns2.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:ns2.seagate.com (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(3) NS for seagate.com: seagate.com. 14400 IN NS ns5.seagate.com. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/ns5.seagate.com for A:ns5.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 17448/IN/A/ns5.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:ns5.seagate.com (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(4) NS for seagate.com: seagate.com. 14400 IN NS ns1.seagate.com. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/ns1.seagate.com for A:ns1.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 39359/IN/A/ns1.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:ns1.seagate.com (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(5) NS for seagate.com: seagate.com. 14400 IN NS ns4.seagate.com. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: launching A/ns4.seagate.com for A:ns4.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 32703/IN/A/ns4.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: starting: URI-A, A:ns4.seagate.com (timeout 15.0s, min 3.0s) May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key dns:MX:e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: hit 10 s43975733.m.en25.com. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key dns:A:e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: hit 209.167.231.15 May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: dns: dns reply to 54946/IN/A/seagate.com.multi.uribl.com: NXDOMAIN May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_BLOCKED May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLOCKED DNSBL:seagate.com:multi.uribl.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_RED May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RED DNSBL:seagate.com:multi.uribl.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_BLACK May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLACK DNSBL:seagate.com:multi.uribl.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_GREY May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_GREY DNSBL:seagate.com:multi.uribl.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_BLOCKED May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLOCKED DNSBL:seagate.com:multi.uribl.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_RED May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_RED DNSBL:seagate.com:multi.uribl.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_BLACK May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_BLACK DNSBL:seagate.com:multi.uribl.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key DNSBL:seagate.com:multi.uribl.com, rule URIBL_GREY May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_dnsbl_lookup URIBL_GREY DNSBL:seagate.com:multi.uribl.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:app.e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:app.e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for app.e.seagate.com: app.e.seagate.com. 600 IN CNAME s43975733.t.en25.com. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(2) A for app.e.seagate.com: s43975733.t.en25.com. 86400 IN CNAME p01.t.en25.com. May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(3) A for app.e.seagate.com: p01.t.en25.com. 86400 IN A 209.167.231.27 May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:ns3.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:ns3.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns3.seagate.com: ns3.seagate.com. 14400 IN A 134.204.224.50 May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:ns2.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:ns2.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns2.seagate.com: ns2.seagate.com. 14400 IN A 192.55.20.49 May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:ns5.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:ns5.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns5.seagate.com: ns5.seagate.com. 14400 IN A 192.55.14.49 May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:ns1.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:ns1.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns1.seagate.com: ns1.seagate.com. 14400 IN A 134.204.224.51 May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:ns4.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:ns4.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for ns4.seagate.com: ns4.seagate.com. 14400 IN A 192.55.20.50 May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.130 s: URIBL_RHS_DOB, URI-DNSBL, DNSBL:seagate.com:dob.sibl.support-intelligence.net May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.128 s: URI-NS, NS:seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.102 s: URIBL_DBL_ABUSE_SPAM, URI-DNSBL, DNSBL:seagate.com:dbl.spamhaus.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.118 s: URI-A, A:ns1.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.109 s: URI-A, A:ns2.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.188 s: URI-A, A:app.e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.134 s: URIBL_CR_SURBL, URI-DNSBL, DNSBL:seagate.com:multi.surbl.org May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.104 s: URI-A, A:ns3.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.122 s: URI-A, A:ns4.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.079 s: NO_DNS_FOR_FROM, DNSBL-MX, dns:MX:e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.113 s: URI-A, A:ns5.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.092 s: NO_DNS_FOR_FROM, DNSBL-A, dns:A:e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 0.193 s: URIBL_BLOCKED, URI-DNSBL, DNSBL:seagate.com:multi.uribl.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: eval: all '*From' addrs: mail@messages.lacie.com bounce@e.seagate.com May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: rules: ran header rule __LAST_EXTERNAL_RELAY_NO_AUTH ======> got hit: "[ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= " May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: rules: ran header rule __LAST_UNTRUSTED_RELAY_NO_AUTH ======> got hit: "[ ip=209.167.231.189 rdns=mail01.e.seagate.com helo=mail01.e.seagate.com by=mail8.networktest.com ident= envfrom= intl=0 id=B13F9622304 auth= " May 24 13:50:25 mail8 amavis[86087]: (86087-08) SA dbg: rules: ran header rule __DOS_RELAYED_EXT ======> got hit: "Received: from mail01.e.seagate.com (mail01.e.seagate.com [209.167.231.189]) May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: rules: bounce@e.seagate.com MATCHES relay mail01.e.seagate.com (seagate.com) May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: spf: checking EnvelopeFrom (helo=mail01.e.seagate.com, ip=209.167.231.189, envfrom=bounce@e.seagate.com) May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 12018/IN/TXT/e.seagate.com May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: async: calling callback on key A:images.e.seagate.com May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup A:images.e.seagate.com May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(1) A for images.e.seagate.com: images.e.seagate.com. 600 IN CNAME elqcdn.eloqua.com. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(2) A for images.e.seagate.com: elqcdn.eloqua.com. 86400 IN CNAME now.eloqua.com.edgesuite.net. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(3) A for images.e.seagate.com: now.eloqua.com.edgesuite.net. 21600 IN CNAME a578.g.akamai.net. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(4) A for images.e.seagate.com: a578.g.akamai.net. 20 IN A 184.51.0.227 May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: complete_a_lookup got(5) A for images.e.seagate.com: a578.g.akamai.net. 20 IN A 184.51.0.233 May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(1) NS for lacie.com: lacie.com. 300 IN NS ns1.seagate.com. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(2) NS for lacie.com: lacie.com. 300 IN NS ns2.seagate.com. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: uridnsbl: got(3) NS for lacie.com: lacie.com. 300 IN NS ns5.seagate.com. May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: spf: query for bounce@e.seagate.com/209.167.231.189/mail01.e.seagate.com: result: pass, comment: , text: Mechanism 'include:_netblocks.eloqua.com' matched May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: address from header Reply-To:addr: mail@messages.seagate.com May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: spf: checking HELO (helo=mail01.e.seagate.com, ip=209.167.231.189) May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: dns: providing a callback for id: 35439/IN/TXT/mail01.e.seagate.com May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: spf: query for bounce@e.seagate.com/209.167.231.189/mail01.e.seagate.com: result: none, comment: , text: No applicable sender policy available May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: spf: whitelist_from_spf: bounce@e.seagate.com is not in user's WHITELIST_FROM_SPF May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: address from header EnvelopeFrom: bounce@e.seagate.com May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: Reply-To address: mail@messages.seagate.com May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: address from header Reply-To: mail@messages.seagate.com May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: all from-addresses: mail@messages.lacie.com, bounce@e.seagate.com May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: eval: From 2nd level domain: lacie.com, EnvelopeFrom 2nd level domain: seagate.com May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: spf: def_whitelist_from_spf: bounce@e.seagate.com is not in DEF_WHITELIST_FROM_SPF May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: rules: bounce@e.seagate.com MATCHES relay mail01.e.seagate.com (seagate.com) May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: address from header Reply-To: mail@messages.seagate.com May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: FreeMail: Reply-To address: mail@messages.seagate.com May 24 13:50:27 mail8 amavis[86087]: (86087-08) SA dbg: async: completed in 2.369 s: URI-A, A:images.e.seagate.com May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: rules: ran uri rule __LOCAL_PP_NONPPURL ======> got hit: "http://images.e.seagate.com" May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: rules: ran rawbody rule __BUGGED_IMG ======> got hit: " [209.167.231.15] May 24 13:50:28 mail8 amavis[86087]: (86087-08) SA dbg: check: [...] [10 s43975733.m.en25.com.] May 24 13:50:28 mail8 amavis[86087]: (86087-08) spam-tag, -> , Yes, score=1.683 tagged_above=0 required=0 tests=[BAYES_80=2, DCC_CHECK=1.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-1.418, SPF_PASS=-0.001] autolearn=no autolearn_force=no May 24 13:50:28 mail8 postfix/qmgr[991]: D1432622302: from=, size=42673, nrcpt=1 (queue active) May 24 13:50:28 mail8 amavis[86087]: (86087-08) Bs-Bf9vkcpJD FWD from -> , BODY=7BIT 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as D1432622302 May 24 13:50:28 mail8 amavis[86087]: (86087-08) Passed SPAM {RelayedTaggedInbound}, [209.167.231.189]:60831 [209.167.231.189] -> , Queue-ID: B13F9622304, Message-ID: <70a5656f9658413f898a334468d3f653@43975733>, mail_id: Bs-Bf9vkcpJD, Hits: 1.683, size: 41811, queued_as: D1432622302, 3895 ms, Tests: [BAYES_80=2,DCC_CHECK=1.1,HEADER_FROM_DIFFERENT_DOMAINS=0.001,HTML_MESSAGE=0.001,RCVD_IN_DNSWL_NONE=-0.0001,RP_MATCHES_RCVD=-1.418,SPF_PASS=-0.001] May 24 13:50:30 mail8 postfix/smtpd[86428]: disconnect from mail01.e.seagate.com[209.167.231.189] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7