from smtp
@400000004af3c9c62ff93254 simscan:[16170]:SPAM REJECT (16.30/12.00):25.1791s:We
Provide Nice Choice Of Affordable
Soft.:222.254.140.77:mole...@rgleq.com:mydomainu...@mydomain.com:
@400000004af3c9c62ff99014 qmail-smtpd: qq hard reject (Your email is considered
spam (16.30 spam-hits)): MAILFROM:<mole...@rgleq.com>
RCPTTO:mydomainu...@mydomain.com
@400000004af3c9c70707fed4 tcpserver: end 16170 status 256
@400000004af3c9c7070806a4 tcpserver: status: 2/50
@400000004af3c9d51b8ed904 tcpserver: end 16336 status 0
@400000004af3c9d51b8f32dc tcpserver: status: 1/50
@400000004af3c9e51b78d44c tcpserver: end 16335 status 0
@400000004af3c9e51b79226c tcpserver: status: 0/50
from spamd
@400000004af3c9c62f9c703c [16157] info: spamd: identified spam (16.3/12.0) for
clamav:508 in 9.9 seconds, 4446 bytes.
@400000004af3c9c62f9e21d4 [16157] info: spamd: result: Y 16 -
BAYES_99,HELO_LOCALHOST,HTML_MESSAGE,RDNS_NONE,URIBL_AB_SURBL,URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL
scantime=9.9,size=4446,user=clamav,uid=508,required_score=12.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52586,mid=<000d01ca5eae$d178b630$6400a...@molests>,bayes=1.000000,autolearn=spam
@400000004af3c9c6314a9d3c [2460] info: prefork: child states: BBBBB
@400000004af3c9c6314aa50c [2460] info: prefork: server reached --max-children
setting, consider raising it
@400000004af3c9c631727c44 [16157] info: spamd: connection from
localhost.localdomain [127.0.0.1] at port 52596
@400000004af3c9c631f423ac [16157] info: spamd: processing message
<008c01ca5eae$f2cd4620$d867d2...@com> for vpopmail:508
@400000004af3c9c917309794 [12120] info: spamd: clean message (-3.2/12.0) for
vpopmail:508 in 4.2 seconds, 53607 bytes.
@400000004af3c9c917325cb4 [12120] info: spamd: result: . -3 -
AWL,BAYES_00,HTML_MESSAGE,NO_RELAYS
scantime=4.2,size=53607,user=vpopmail,uid=508,required_score=12.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52591,mid=<00b101ca5eae$e1c22d00$a54687...@com>,bayes=0.000000,autolearn=unavailable
Date: Thu, 5 Nov 2009 22:29:23 -0500
From: j...@qmailtoaster.com
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Spam issues
nicole thomson wrote:
here
it is jake
tcp.smtp
#cat /etc/tcprules.d/tcp.smtp
127.:allow,RELAYCLIENT="",SENDER_NOCHECK=""
192.168.25.:allow,SENDER_NOCHECK=""
172.16.0.:allow,RELAYCLIENT="",SENDER_NOCHECK=""
216.9.253.191,allow,RBLSMTPD="-rblsmtpd deny: take your spam elsewhere!"
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="10000",CHKUSER_WRONGRCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",NOP0FCHECK="1",SENDER_NOCHECK="1"
Hmm. This should have caught it. Can you show us a log entry (20 lines
or so) when the message came in so we can trace it's path on your
system?
And FWIW, chkuser has a RCPTLIMIT of around 350 or so, hard coded in
the C source.
_________________________________________________________________
New Windows 7: Find the right PC for you. Learn more.
http://windows.microsoft.com/shop
