eric the machine i have is a dell, hex core with hyperthreading, 16 gb ram -- hardly 4 gb being used, 600 gb 15krpm drive, 2 drives of 2000 gb each separately handling data.
rajesh ----- Original Message ----- From: Eric Broch [mailto:ebr...@whitehorsetc.com] To: qmailtoaster-list@qmailtoaster.com Sent: Fri, 1 Sep 2017 10:01:01 -0600 Subject: I'm not sure what's going on here. Is this a relatively new phenomenon? I wonder if it's a memory, or even a disk speed, issue since it only happens at peak hours? I think I'll appy Johannes Weberhofer's patch and put it out there for you...and cross or fingers. On 9/1/2017 6:28 AM, Rajesh M wrote: > remo / eric > > i have still not being able to resolve the qq soft reject error. > > these are my findings > > 1) the errors i see are "error forking qmail-queue" and "ripmime error" which > causes the qq soft reject. > > 2) the max concurrent connections in the logs is around 35. > > 3) These errors come up during peak working hours when the server is under a > load of 4 - 8, and they increase the load even more to over 10-15. > > 4) i came across this link (not sure if this is related) > https://github.com/qmail/simscan/blob/master/simscan.c > > 5) i can share with you my live smtp logs with simscan debug. > > have extracted some lines below > > > Error forking qmail-queue > > @4000000059a8fa7b0a2ed1b4 tcpserver: status: 31/200 > @4000000059a8fa7b13162584 simscan: cdb looking up version spam > @4000000059a8fa7b13166bd4 simscan: runned_scanners is attach: 1.4.0 clamav: > 0.98.6/m: spam: 3.3.2 > @4000000059a8fa7b13166fbc simscan: found 3.3.2 > @4000000059a8fa7b13168efc simscan:[10757]:CLEAN > (5.00/30.00):9.7712s:-Possible Spam- RE_ REQUIRE BOOKING // 1X20 // > ICD TKD TO > BANDARABASS:103.241.181.228:cs....@atlasdecargo.com:rathe...@radiant-india.net > @4000000059a8fa7b1316cd7c simscan: done, execing qmail-queue > @4000000059a8fa7b1316fc5c simscan: error forking qmail-queue > @4000000059a8fa7b13199854 simscan: exit error code: 71 > @4000000059a8fa7b131c4004 qmail-smtpd: qq soft reject (mail server > temporarily rejected message (#4.3.0)): MAILFROM:<cs....@xxxxx.com> > RCPTTO:rathe...@yyyyy.net > > > Error in ripmime > > @4000000059a8fa98045a4bc4 simscan: pelookup: domain is aissamaritime.in > @4000000059a8fa98045a4bc4 simscan: cdb looking up aissamaritime.in > @4000000059a8fa98045a4fac simscan: pelookup: local part is shailesh_k_bom > @4000000059a8fa98045a4fac simscan: lpart: local part is ** > @4000000059a8fa98045a5394 simscan: cdb looking > upshailesh_k_...@aissamaritime.in > @4000000059a8fa98045a5394 simscan: ripmime error > @4000000059a8fa98045a6334 simscan: exit error code: 71 > @4000000059a8fa98045a95fc qmail-smtpd: qq soft reject (mail server > temporarily rejected message (#4.3.0)): > MAILFROM:<imp...@xxxxxxx.in> RCPTTO:shailesh_k_...@yyyyyy.in > > > Wierd error logs > > @4000000059a9032f3aa79a24 simscan: clamdscan: ----------- SCAN SUMMARY > ----------- > @4000000059a9032f3aa7b964 simscan: clamdscan: > /var/qmail/simscan/1504248613.321653.5221: OK > @4000000059a9032f3aa86d14 simscan: clamdscan: > @4000000059a9032f3aa870fc simscan: clamdscan: ---simscan: cdb looking up > version clamav > @4000000059a9032f3aa8a3c4 -------- SCAN simscan: clamdscan: SIUnMfMeAcRtYe d- > -fsimscan: runned_scanners is attach: 1.4.0 clamav: 0.98.6/m: > @4000000059a9032f3aa8c304 -isimscan: found 0.98.6/m: > @4000000059a9032f3aa8c6ec -l-e-s-:- -0 > @4000000059a9032f3aa8f1e4 --simscan: normal clamdscan return code: 0 > @4000000059a9032f3aa8f1e4 > @4000000059a9032f3aa8f5cc simscan: clamdscan: Infected fsimscan: clamdscan: > iTliemes:: 00 > @4000000059a9032f3aa93834 .simscan: clamdscan: 1T1i8m es:e c0 .1(002 ms > e0simscan: calling spamc > @4000000059a9032f3aa96ee4 c s(0)simscan: calling /usr/bin/spamc simscan: > clamdscan: > @4000000059a9032f3aa999dc spamcm > @4000000059a9032f3aa999dc 0 s) > @4000000059a9032f3aa9ad64 /var/qmail/simscan/1simscan: check_spam had an > error ret: -1 > @4000000059a9032f3aa9e02c 504248613.307311.5215: OK > @4000000059a9032f3aaaa37c simscan: clamdscan: > @4000000059a9032f3aaaa764 simscan: clamdscan: ----------- SCAN SUMMARY > ----------- > @4000000059a9032f3aab3fbc simscan: clamdscan: Infected files: 0 > @4000000059a9032f3aaba164 simscan: clamdscan: Time: 0.135 sec (0 m 0 s) > @4000000059a9032f3aac39bc simscan: clamdscan: /var/qmail/simscan/15simscan: > exit error code: 71 > @4000000059a9032f3aaca334 04248613.308469.5216: OK > @4000000059a9032f3aacddcc simscan: clamdscan: > @4000000059a9032f3aace984 simscan: clamdscan: ----------- SCAN SUMMARY > ----------- > @4000000059a9 > > > ################ > > @4000000059a9032f3aa86d14 simscan: clamdscan: > @4000000059a9032f3aa870fc simscan: clamdscan: ---simscan: cdb looking up > version clamav > @4000000059a9032f3aa8a3c4 -------- SCAN simscan: clamdscan: SIUnMfMeAcRtYe d- > -fsimscan: runned_scanners is attach: 1.4.0 clamav: 0.98.6/m: > @4000000059a9032f3aa8c304 -isimscan: found 0.98.6/m: > @4000000059a9032f3aa8c6ec -l-e-s-:- -0 > @4000000059a9032f3aa8f1e4 --simscan: normal clamdscan return code: 0 > @4000000059a9032f3aa8f1e4 > @4000000059a9032f3aa8f5cc simscan: clamdscan: Infected fsimscan: clamdscan: > iTliemes:: 00 > @4000000059a9032f3aa93834 .simscan: clamdscan: 1T1i8m es:e c0 .1(002 ms > e0simscan: calling spamc > @4000000059a9032f3aa96ee4 c s(0)simscan: calling /usr/bin/spamc simscan: > clamdscan: > @4000000059a9032f3aa999dc spamcm > @4000000059a9032f3aa999dc 0 s) > @4000000059a9032f3aa9ad64 /var/qmail/simscan/1simscan: check_spam had an > error ret: -1 > @4000000059a9032f3aa9e02c 504248613.307311.5215: OK > @4000000059a9032f3aaaa37c simscan: clamdscan: > @4000000059a9032f3aaaa764 simscan: clamdscan: ----------- SCAN SUMMARY > ----------- > @4000000059a9032f3aab3fbc simscan: clamdscan: Infected files: 0 > @4000000059a9032f3aaba164 simscan: clamdscan: Time: 0.135 sec (0 m 0 s) > @4000000059a9032f3aac39bc simscan: clamdscan: /var/qmail/simscan/15simscan: > exit error code: 71 > @4000000059a9032f3aaca334 04248613.308469.5216: OK > > > > thanks, > rajesh > > > > ----- Original Message ----- > From: Remo Mattei [mailto:r...@mattei.org] > To:24x7ser...@24x7server.net > Sent: Thu, 31 Aug 2017 07:58:22 -0700 > Subject: > > No it reads it everytime. > > Yes permissions are good > > Remo > > On 8/31/17 7:48 AM, Rajesh M wrote: >> thank for sharing your experience remo, >> >> so would the following be correct ? >> >> chmod 2750 simscan >> chown clamav.clamav simscan >> >> do i need to stop qmail while applying this ? >> >> rajesh >> >> >> ----- Original Message ----- >> From: Remo Mattei [mailto:r...@mattei.org] >> To:qmailtoaster-list@qmailtoaster.com,24x7ser...@24x7server.net >> Sent: Thu, 31 Aug 2017 07:23:20 -0700 >> Subject: >> >> I had the same issue with qq. >> >> I changed the permissions and all good. I also raised the value of the >> softlimits exec /usr/bin/softlimit -m 1040000000 >> >> and my permissions are drwxr-s---  2 clamav clamav 4096 Aug 31 07:19 >> simscan >> >> So hopefully this helps. >> >> Remo >> >> >> On 8/31/17 6:51 AM, Rajesh M wrote: >>> eric >>> >>> on my qmailtoaster server (centos 6 64 bit) there are several domains --- >>> high traffic >>> >>> about 80 percent of them are routed via the sophos antispam filter and then >>> passed on to the mailserver with spamassassin/clam disabled by adding the >>> ip of the sophos server to the tcp.smtp file to exclude the line >>> /var/qmail/bin/simscan >>> >>> the balance 20 are directly reaching the mailserver ie mx pointed to >>> mailserver instead of sophos server and are scanned with clam / >>> spamassassin. >>> >>> today i turned on the spamassassin / clam for the above 80 percent domains >>> too and this started throwing qq reject errors on a large scale but >>> randomly. >>> >>> spamassassin child-processes was set to 20 to handle the load >>> >>> i checked the log files for the last 30 days till yesterday and found that >>> the same qq reject errors were present but very rarely ie 3 to 4 times on a >>> single day (occasional high load ??) >>> so it seems that this error comes up only when the load on the server is >>> high, all take place when there are attachments. >>> >>> reading the thread you sent me, i am not sure whether it applies to my case >>> but i can try out. >>> >>> ############# >>> drwxr-x--- 2 clamav root 6 May 6 17:57 simscan/ >>> >>> changing this to the following fixed the problem: >>> drwxr-s--- 2 clamav clamav 6 May 6 17:57 simscan/ >>> ########### >>> >>> should i just >>> chown clamav.clamav simscan >>> >>> >>> thanks >>> rajesh >>> >>> >>> >>> >>> >>> ----- Original Message ----- >>> From: Eric Broch [mailto:ebr...@whitehorsetc.com] >>> To:24x7ser...@24x7server.net >>> Sent: Thu, 31 Aug 2017 06:42:08 -0600 >>> Subject: >>> >>> Have a look here, Rajesh, I'm not sure if it will help: >>> >>> https://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg40456.html >>> >>> >>> On 8/31/2017 4:51 AM, Rajesh M wrote: >>>> hi >>>> >>>> centos 6 64 bit >>>> SpamAssassin version 3.3.2 >>>> ClamAV 0.98.6/23745/Thu Aug 31 14:07:08 2017 >>>> >>>> we have a sophos antispam firewall which receives our emails and then >>>> routes them to our mail server (qmailtoaster, dovecot, spamassassin, clam) >>>> >>>> in the mail server we had stopped spamassassin >>>> >>>> however due to some custom requirements by our clients we enabled the same >>>> >>>> however we get the following error when the load on the server is high on >>>> a random basis. >>>> >>>> 2017-08-31 14:48:05.753994500 simscan: calling spamc >>>> 2017-08-31 14:48:05.754001500 simscan: calling /usr/bin/spamc spamc >>>> 2017-08-31 14:48:05.754010500 simscan: check_spam had an error ret: -1 >>>> 2017-08-31 14:48:05.754101500 simscan: exit error code: 71 >>>> 2017-08-31 14:48:05.754220500 qmail-smtpd: qq soft reject (mail server >>>> temporarily rejected message (#4.3.0)): MAILFROM:<sunil.saharan@@yyyy.com> >>>> RCPTTO:c...@yyyy.com >>>> >>>> >>>> 2017-08-31 14:48:05.956137500 simscan: ripmime error >>>> qmail-smtpd: qq soft reject (mail server temporarily rejected message >>>> >>>> >>>> >>>> if i disable simscan in tcp.smtp then errors do not take place. >>>> >>>> i enabled simscan debug and this is the result. >>>> >>>> 2017-08-31 14:48:05.956144500 qmail-smtpd: qq soft reject (mail server >>>> temporarily rejected message (#4.3.0)): MAILFROM:<sunil.saha...@yyyy.com> >>>> RCPTTO:inv1...@xxxx.net >>>> >>>> >>>> clam=yes,spam=yes,spam_hits=30,spam_passthru=yes,attach=.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>> 2017-08-31 14:48:05.746592500 simscan: pelookup clam = yes >>>> 2017-08-31 14:48:05.746593500 simscan: pelookup spam = yes >>>> 2017-08-31 14:48:05.746593500 simscan: pelookup spam_hits = 30 >>>> 2017-08-31 14:48:05.746595500 simscan: Per Domain Hits set to : 30.000000 >>>> 2017-08-31 14:48:05.746595500 simscan: pelookup spam_passthru = yes >>>> 2017-08-31 14:48:05.746596500 simscan: unimplemented flag spam_passthru = >>>> yes >>>> 2017-08-31 14:48:05.746596500 simscan: pelookup attach = >>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>> 2017-08-31 14:48:05.746599500 simscan: attachment flag attach = >>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>> 2017-08-31 14:48:05.746602500 simscan: add_attach called with >>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>> 2017-08-31 14:48:05.746606500 simscan: .ace is attachment number 0 >>>> 2017-08-31 14:48:05.746607500 simscan: .arc is attachment number 1 >>>> 2017-08-31 14:48:05.746607500 simscan: .arj is attachment number 2 >>>> 2017-08-31 14:48:05.746607500 simscan: .b64 is attachment number 3 >>>> 2017-08-31 14:48:05.746610500 simscan: .bat is attachment number 4 >>>> 2017-08-31 14:48:05.746610500 simscan: .bhx is attachment number 5 >>>> 2017-08-31 14:48:05.746610500 simscan: .cab is attachment number 6 >>>> 2017-08-31 14:48:05.746611500 simscan: .chm is attachment number 7 >>>> 2017-08-31 14:48:05.746611500 simscan: .com is attachment number 8 >>>> 2017-08-31 14:48:05.746611500 simscan: .cpl is attachment number 9 >>>> 2017-08-31 14:48:05.746611500 simscan: .dll is attachment number 10 >>>> 2017-08-31 14:48:05.746612500 simscan: .exe is attachment number 11 >>>> 2017-08-31 14:48:05.746614500 simscan: .gz is attachment number 12 >>>> 2017-08-31 14:48:05.746614500 simscan: .hqx is attachment number 13 >>>> 2017-08-31 14:48:05.746614500 simscan: .hta is attachment number 14 >>>> 2017-08-31 14:48:05.746615500 simscan: .inf is attachment number 15 >>>> 2017-08-31 14:48:05.746615500 simscan: .ins is attachment number 16 >>>> 2017-08-31 14:48:05.746615500 simscan: .iso is attachment number 17 >>>> 2017-08-31 14:48:05.746616500 simscan: .isp is attachment number 18 >>>> 2017-08-31 14:48:05.746616500 simscan: .jse is attachment number 19 >>>> 2017-08-31 14:48:05.746618500 simscan: .lib is attachment number 20 >>>> 2017-08-31 14:48:05.746618500 simscan: .lnk is attachment number 21 >>>> 2017-08-31 14:48:05.746619500 simscan: .lzh is attachment number 22 >>>> 2017-08-31 14:48:05.746622500 simscan: .mim is attachment number 23 >>>> 2017-08-31 14:48:05.746622500 simscan: .msp is attachment number 24 >>>> 2017-08-31 14:48:05.746623500 simscan: .mst is attachment number 25 >>>> 2017-08-31 14:48:05.746623500 simscan: .pif is attachment number 26 >>>> 2017-08-31 14:48:05.746623500 simscan: .reg is attachment number 27 >>>> 2017-08-31 14:48:05.746624500 simscan: .scf is attachment number 28 >>>> 2017-08-31 14:48:05.746624500 simscan: .scr is attachment number 29 >>>> 2017-08-31 14:48:05.746624500 simscan: .sct is attachment number 30 >>>> 2017-08-31 14:48:05.746630500 simscan: .shb is attachment number 31 >>>> 2017-08-31 14:48:05.746630500 simscan: .shs is attachment number 32 >>>> 2017-08-31 14:48:05.746631500 simscan: .sys is attachment number 33 >>>> 2017-08-31 14:48:05.746631500 simscan: .taz is attachment number 34 >>>> 2017-08-31 14:48:05.746631500 simscan: .tgz is attachment number 35 >>>> 2017-08-31 14:48:05.746632500 simscan: .tz is attachment number 36 >>>> 2017-08-31 14:48:05.746632500 simscan: .url is attachment number 37 >>>> 2017-08-31 14:48:05.746632500 simscan: .uu is attachment number 38 >>>> 2017-08-31 14:48:05.746635500 simscan: .uue is attachment number 39 >>>> 2017-08-31 14:48:05.746635500 simscan: .vb is attachment number 40 >>>> 2017-08-31 14:48:05.746635500 simscan: .vbe is attachment number 41 >>>> 2017-08-31 14:48:05.746636500 simscan: .vbs is attachment number 42 >>>> 2017-08-31 14:48:05.746636500 simscan: .wsc is attachment number 43 >>>> 2017-08-31 14:48:05.746636500 simscan: .wsf is attachment number 44 >>>> 2017-08-31 14:48:05.746637500 simscan: .wsh is attachment number 45 >>>> 2017-08-31 14:48:05.746637500 simscan: .xxe is attachment number 46 >>>> 2017-08-31 14:48:05.746639500 simscan: .docm is attachment number 47 >>>> 2017-08-31 14:48:05.746639500 simscan: .z is attachment number 48 >>>> 2017-08-31 14:48:05.746640500 simscan: .jar is attachment number 49 >>>> 2017-08-31 14:48:05.746643500 simscan: pelookup: local part is cs2 >>>> 2017-08-31 14:48:05.746643500 simscan: lpart: local part is ** >>>> 2017-08-31 14:48:05.746644500 simscan: cdb looking up...@yyyy.com >>>> 2017-08-31 14:48:05.747114500 simscan: checking attachment textfile2 >>>> against .ace >>>> 2017-08-31 14:48:05.747123500 simscan: checking attachment textfile2 >>>> against .arc >>>> 2017-08-31 14:48:05.747124500 simscan: checking attachment textfile2 >>>> against .arj >>>> 2017-08-31 14:48:05.747124500 simscan: checking attachment textfile2 >>>> against .b64 >>>> 2017-08-31 14:48:05.747125500 simscan: checking attachment textfile2 >>>> against .bat >>>> 2017-08-31 14:48:05.747126500 simscan: checking attachment textfile2 >>>> against .bhx >>>> 2017-08-31 14:48:05.747132500 simscan: checking attachment textfile2 >>>> against .cab >>>> 2017-08-31 14:48:05.747133500 simscan: checking attachment textfile2 >>>> against .chm >>>> 2017-08-31 14:48:05.747134500 simscan: checking attachment textfile2 >>>> against .com >>>> 2017-08-31 14:48:05.747134500 simscan: checking attachment textfile2 >>>> against .cpl >>>> 2017-08-31 14:48:05.747135500 simscan: checking attachment textfile2 >>>> against .dll >>>> 2017-08-31 14:48:05.747135500 simscan: checking attachment textfile2 >>>> against .exe >>>> 2017-08-31 14:48:05.747136500 simscan: checking attachment textfile2 >>>> against .gz >>>> 2017-08-31 14:48:05.747140500 simscan: checking attachment textfile2 >>>> against .hqx >>>> 2017-08-31 14:48:05.747146500 simscan: checking attachment textfile2 >>>> against .hta >>>> 2017-08-31 14:48:05.747147500 simscan: checking attachment textfile2 >>>> against .inf >>>> 2017-08-31 14:48:05.747147500 simscan: checking attachment textfile2 >>>> against .ins >>>> 2017-08-31 14:48:05.747148500 simscan: checking attachment textfile2 >>>> against .iso >>>> 2017-08-31 14:48:05.747149500 simscan: checking attachment textfile2 >>>> against .isp >>>> 2017-08-31 14:48:05.747149500 simscan: checking attachment textfile2 >>>> against .jse >>>> 2017-08-31 14:48:05.747150500 simscan: checking attachment textfile2 >>>> against .lib >>>> 2017-08-31 14:48:05.747162500 simscan: checking attachment textfile2 >>>> against .lnk >>>> 2017-08-31 14:48:05.747162500 simscan: checking attachment textfile2 >>>> against .lzh >>>> 2017-08-31 14:48:05.747163500 simscan: checking attachment textfile2 >>>> against .mim >>>> 2017-08-31 14:48:05.747164500 simscan: checking attachment textfile2 >>>> against .msp >>>> 2017-08-31 14:48:05.747164500 simscan: checking attachment textfile2 >>>> against .mst >>>> 2017-08-31 14:48:05.747171500 simscan: checking attachment textfile2 >>>> against .pif >>>> 2017-08-31 14:48:05.747171500 simscan: checking attachment textfile2 >>>> against .reg >>>> 2017-08-31 14:48:05.747172500 simscan: checking attachment textfile2 >>>> against .scf >>>> 2017-08-31 14:48:05.747173500 simscan: checking attachment textfile2 >>>> against .scr >>>> 2017-08-31 14:48:05.747173500 simscan: checking attachment textfile2 >>>> against .sct >>>> 2017-08-31 14:48:05.747174500 simscan: checking attachment textfile2 >>>> against .shb >>>> 2017-08-31 14:48:05.747175500 simscan: checking attachment textfile2 >>>> against .shs >>>> 2017-08-31 14:48:05.747189500 simscan: checking attachment textfile2 >>>> against .sys >>>> 2017-08-31 14:48:05.747189500 simscan: checking attachment textfile2 >>>> against .taz >>>> 2017-08-31 14:48:05.747190500 simscan: checking attachment textfile2 >>>> against .tgz >>>> 2017-08-31 14:48:05.747191500 simscan: checking attachment textfile2 >>>> against .tz >>>> 2017-08-31 14:48:05.747191500 simscan: checking attachment textfile2 >>>> against .url >>>> 2017-08-31 14:48:05.747192500 simscan: checking attachment textfile2 >>>> against .uu >>>> 2017-08-31 14:48:05.747195500 simscan: checking attachment textfile2 >>>> against .uue >>>> 2017-08-31 14:48:05.747196500 simscan: checking attachment textfile2 >>>> against .vb >>>> 2017-08-31 14:48:05.747197500 simscan: checking attachment textfile2 >>>> against .vbe >>>> 2017-08-31 14:48:05.747197500 simscan: checking attachment textfile2 >>>> against .vbs >>>> 2017-08-31 14:48:05.747198500 simscan: checking attachment textfile2 >>>> against .wsc >>>> 2017-08-31 14:48:05.747198500 simscan: checking attachment textfile2 >>>> against .wsf >>>> 2017-08-31 14:48:05.747202500 simscan: checking attachment textfile2 >>>> against .wsh >>>> 2017-08-31 14:48:05.747208500 simscan: checking attachment textfile2 >>>> against .xxe >>>> 2017-08-31 14:48:05.747209500 simscan: checking attachment textfile2 >>>> against .docm >>>> 2017-08-31 14:48:05.747209500 simscan: checking attachment textfile2 >>>> against .z >>>> 2017-08-31 14:48:05.747210500 simscan: checking attachment textfile2 >>>> against .jar >>>> 2017-08-31 14:48:05.747210500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .ace >>>> 2017-08-31 14:48:05.747211500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .arc >>>> 2017-08-31 14:48:05.747215500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .arj >>>> 2017-08-31 14:48:05.747215500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .b64 >>>> 2017-08-31 14:48:05.747216500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .bat >>>> 2017-08-31 14:48:05.747217500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .bhx >>>> 2017-08-31 14:48:05.747218500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .cab >>>> 2017-08-31 14:48:05.747221500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .chm >>>> 2017-08-31 14:48:05.747222500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .com >>>> 2017-08-31 14:48:05.747223500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .cpl >>>> 2017-08-31 14:48:05.747224500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .dll >>>> 2017-08-31 14:48:05.747224500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .exe >>>> 2017-08-31 14:48:05.747230500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .gz >>>> 2017-08-31 14:48:05.747231500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .hqx >>>> 2017-08-31 14:48:05.747231500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .hta >>>> 2017-08-31 14:48:05.747232500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .inf >>>> 2017-08-31 14:48:05.747233500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .ins >>>> 2017-08-31 14:48:05.747237500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .iso >>>> 2017-08-31 14:48:05.747238500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .isp >>>> 2017-08-31 14:48:05.747238500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .jse >>>> 2017-08-31 14:48:05.747239500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .lib >>>> 2017-08-31 14:48:05.747240500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .lnk >>>> 2017-08-31 14:48:05.747243500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .lzh >>>> 2017-08-31 14:48:05.747244500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .mim >>>> 2017-08-31 14:48:05.747245500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .msp >>>> 2017-08-31 14:48:05.747246500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .mst >>>> 2017-08-31 14:48:05.747246500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .pif >>>> 2017-08-31 14:48:05.747257500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .reg >>>> 2017-08-31 14:48:05.747258500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .scf >>>> 2017-08-31 14:48:05.747259500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .scr >>>> 2017-08-31 14:48:05.747260500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .sct >>>> 2017-08-31 14:48:05.747260500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .shb >>>> 2017-08-31 14:48:05.747264500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .shs >>>> 2017-08-31 14:48:05.747265500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .sys >>>> 2017-08-31 14:48:05.747266500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .taz >>>> 2017-08-31 14:48:05.747266500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .tgz >>>> 2017-08-31 14:48:05.747267500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .tz >>>> 2017-08-31 14:48:05.747271500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .url >>>> 2017-08-31 14:48:05.747271500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .uu >>>> 2017-08-31 14:48:05.747272500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .uue >>>> 2017-08-31 14:48:05.747273500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .vb >>>> 2017-08-31 14:48:05.747279500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .vbe >>>> 2017-08-31 14:48:05.747280500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .vbs >>>> 2017-08-31 14:48:05.747280500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .wsc >>>> 2017-08-31 14:48:05.747281500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .wsf >>>> 2017-08-31 14:48:05.747282500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .wsh >>>> 2017-08-31 14:48:05.747285500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .xxe >>>> 2017-08-31 14:48:05.747286500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .docm >>>> 2017-08-31 14:48:05.747287500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .z >>>> 2017-08-31 14:48:05.747288500 simscan: checking attachment >>>> msg.1504171085.205836.36767 against .jar >>>> 2017-08-31 14:48:05.747289500 simscan: checking attachment textfile0 >>>> against .ace >>>> 2017-08-31 14:48:05.747292500 simscan: checking attachment textfile0 >>>> against .arc >>>> 2017-08-31 14:48:05.747293500 simscan: checking attachment textfile0 >>>> against .arj >>>> 2017-08-31 14:48:05.747294500 simscan: checking attachment textfile0 >>>> against .b64 >>>> 2017-08-31 14:48:05.747294500 simscan: checking attachment textfile0 >>>> against .bat >>>> 2017-08-31 14:48:05.747295500 simscan: checking attachment textfile0 >>>> against .bhx >>>> 2017-08-31 14:48:05.747296500 simscan: checking attachment textfile0 >>>> against .cab >>>> 2017-08-31 14:48:05.747299500 simscan: checking attachment textfile0 >>>> against .chm >>>> 2017-08-31 14:48:05.747305500 simscan: checking attachment textfile0 >>>> against .com >>>> 2017-08-31 14:48:05.747305500 simscan: checking attachment textfile0 >>>> against .cpl >>>> 2017-08-31 14:48:05.747306500 simscan: checking attachment textfile0 >>>> against .dll >>>> 2017-08-31 14:48:05.747307500 simscan: checking attachment textfile0 >>>> against .exe >>>> 2017-08-31 14:48:05.747307500 simscan: checking attachment textfile0 >>>> against .gz >>>> 2017-08-31 14:48:05.747308500 simscan: checking attachment textfile0 >>>> against .hqx >>>> 2017-08-31 14:48:05.747311500 simscan: checking attachment textfile0 >>>> against .hta >>>> 2017-08-31 14:48:05.747312500 simscan: checking attachment textfile0 >>>> against .inf >>>> 2017-08-31 14:48:05.747312500 simscan: checking attachment textfile0 >>>> against .ins >>>> 2017-08-31 14:48:05.747313500 simscan: checking attachment textfile0 >>>> against .iso >>>> 2017-08-31 14:48:05.747314500 simscan: checking attachment textfile0 >>>> against .isp >>>> 2017-08-31 14:48:05.747314500 simscan: checking attachment textfile0 >>>> against .jse >>>> 2017-08-31 14:48:05.747318500 simscan: checking attachment textfile0 >>>> against .lib >>>> 2017-08-31 14:48:05.747318500 simscan: checking attachment textfile0 >>>> against .lnk >>>> 2017-08-31 14:48:05.747319500 simscan: checking attachment textfile0 >>>> against .lzh >>>> 2017-08-31 14:48:05.747320500 simscan: checking attachment textfile0 >>>> against .mim >>>> 2017-08-31 14:48:05.747320500 simscan: checking attachment textfile0 >>>> against .msp >>>> 2017-08-31 14:48:05.747321500 simscan: checking attachment textfile0 >>>> against .mst >>>> 2017-08-31 14:48:05.747328500 simscan: checking attachment textfile0 >>>> against .pif >>>> 2017-08-31 14:48:05.747329500 simscan: checking attachment textfile0 >>>> against .reg >>>> 2017-08-31 14:48:05.747335500 simscan: checking attachment textfile0 >>>> against .scf >>>> 2017-08-31 14:48:05.747336500 simscan: checking attachment textfile0 >>>> against .scr >>>> 2017-08-31 14:48:05.747336500 simscan: checking attachment textfile0 >>>> against .sct >>>> 2017-08-31 14:48:05.747337500 simscan: checking attachment textfile0 >>>> against .shb >>>> 2017-08-31 14:48:05.747338500 simscan: checking attachment textfile0 >>>> against .shs >>>> 2017-08-31 14:48:05.747338500 simscan: checking attachment textfile0 >>>> against .sys >>>> 2017-08-31 14:48:05.747342500 simscan: checking attachment textfile0 >>>> against .taz >>>> 2017-08-31 14:48:05.747342500 simscan: checking attachment textfile0 >>>> against .tgz >>>> 2017-08-31 14:48:05.747343500 simscan: checking attachment textfile0 >>>> against .tz >>>> 2017-08-31 14:48:05.747344500 simscan: checking attachment textfile0 >>>> against .url >>>> 2017-08-31 14:48:05.747344500 simscan: checking attachment textfile0 >>>> against .uu >>>> 2017-08-31 14:48:05.747345500 simscan: checking attachment textfile0 >>>> against .uue >>>> 2017-08-31 14:48:05.747349500 simscan: checking attachment textfile0 >>>> against .vb >>>> 2017-08-31 14:48:05.747349500 simscan: checking attachment textfile0 >>>> against .vbe >>>> 2017-08-31 14:48:05.747350500 simscan: checking attachment textfile0 >>>> against .vbs >>>> 2017-08-31 14:48:05.747350500 simscan: checking attachment textfile0 >>>> against .wsc >>>> 2017-08-31 14:48:05.747351500 simscan: checking attachment textfile0 >>>> against .wsf >>>> 2017-08-31 14:48:05.747352500 simscan: checking attachment textfile0 >>>> against .wsh >>>> 2017-08-31 14:48:05.747355500 simscan: checking attachment textfile0 >>>> against .xxe >>>> 2017-08-31 14:48:05.747361500 simscan: checking attachment textfile0 >>>> against .docm >>>> 2017-08-31 14:48:05.747362500 simscan: checking attachment textfile0 >>>> against .z >>>> 2017-08-31 14:48:05.747363500 simscan: checking attachment textfile0 >>>> against .jar >>>> 2017-08-31 14:48:05.747363500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .ace >>>> 2017-08-31 14:48:05.747364500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .arc >>>> 2017-08-31 14:48:05.747365500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .arj >>>> 2017-08-31 14:48:05.747368500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .b64 >>>> 2017-08-31 14:48:05.747369500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .bat >>>> 2017-08-31 14:48:05.747370500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .bhx >>>> 2017-08-31 14:48:05.747371500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .cab >>>> 2017-08-31 14:48:05.747372500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .chm >>>> 2017-08-31 14:48:05.747375500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .com >>>> 2017-08-31 14:48:05.747376500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .cpl >>>> 2017-08-31 14:48:05.747376500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .dll >>>> 2017-08-31 14:48:05.747377500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .exe >>>> 2017-08-31 14:48:05.747378500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .gz >>>> 2017-08-31 14:48:05.747384500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .hqx >>>> 2017-08-31 14:48:05.747385500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .hta >>>> 2017-08-31 14:48:05.747385500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .inf >>>> 2017-08-31 14:48:05.747386500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .ins >>>> 2017-08-31 14:48:05.747387500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .iso >>>> 2017-08-31 14:48:05.747391500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .isp >>>> 2017-08-31 14:48:05.747392500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .jse >>>> 2017-08-31 14:48:05.747392500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .lib >>>> 2017-08-31 14:48:05.747393500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .lnk >>>> 2017-08-31 14:48:05.747394500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .lzh >>>> 2017-08-31 14:48:05.747402500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .mim >>>> 2017-08-31 14:48:05.747403500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .msp >>>> 2017-08-31 14:48:05.747403500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .mst >>>> 2017-08-31 14:48:05.747404500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .pif >>>> 2017-08-31 14:48:05.747410500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .reg >>>> 2017-08-31 14:48:05.747411500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .scf >>>> 2017-08-31 14:48:05.747412500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .scr >>>> 2017-08-31 14:48:05.747412500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .sct >>>> 2017-08-31 14:48:05.747413500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .shb >>>> 2017-08-31 14:48:05.747417500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .shs >>>> 2017-08-31 14:48:05.747418500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .sys >>>> 2017-08-31 14:48:05.747418500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .taz >>>> 2017-08-31 14:48:05.747419500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .tgz >>>> 2017-08-31 14:48:05.747420500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .tz >>>> 2017-08-31 14:48:05.747424500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .url >>>> 2017-08-31 14:48:05.747425500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .uu >>>> 2017-08-31 14:48:05.747426500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .uue >>>> 2017-08-31 14:48:05.747426500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .vb >>>> 2017-08-31 14:48:05.747432500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .vbe >>>> 2017-08-31 14:48:05.747433500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .vbs >>>> 2017-08-31 14:48:05.747434500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .wsc >>>> 2017-08-31 14:48:05.747435500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .wsf >>>> 2017-08-31 14:48:05.747435500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .wsh >>>> 2017-08-31 14:48:05.747439500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .xxe >>>> 2017-08-31 14:48:05.747440500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .docm >>>> 2017-08-31 14:48:05.747441500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .z >>>> 2017-08-31 14:48:05.747442500 simscan: checking attachment >>>> addr.1504171085.205836.36767 against .jar >>>> 2017-08-31 14:48:05.747442500 simscan: checking attachment textfile1 >>>> against .ace >>>> 2017-08-31 14:48:05.747446500 simscan: checking attachment textfile1 >>>> against .arc >>>> 2017-08-31 14:48:05.747446500 simscan: checking attachment textfile1 >>>> against .arj >>>> 2017-08-31 14:48:05.747447500 simscan: checking attachment textfile1 >>>> against .b64 >>>> 2017-08-31 14:48:05.747447500 simscan: checking attachment textfile1 >>>> against .bat >>>> 2017-08-31 14:48:05.747448500 simscan: checking attachment textfile1 >>>> against .bhx >>>> 2017-08-31 14:48:05.747449500 simscan: checking attachment textfile1 >>>> against .cab >>>> 2017-08-31 14:48:05.747452500 simscan: checking attachment textfile1 >>>> against .chm >>>> 2017-08-31 14:48:05.747458500 simscan: checking attachment textfile1 >>>> against .com >>>> 2017-08-31 14:48:05.747459500 simscan: checking attachment textfile1 >>>> against .cpl >>>> 2017-08-31 14:48:05.747460500 simscan: checking attachment textfile1 >>>> against .dll >>>> 2017-08-31 14:48:05.747460500 simscan: checking attachment textfile1 >>>> against .exe >>>> 2017-08-31 14:48:05.747461500 simscan: checking attachment textfile1 >>>> against .gz >>>> 2017-08-31 14:48:05.747461500 simscan: checking attachment textfile1 >>>> against .hqx >>>> 2017-08-31 14:48:05.747465500 simscan: checking attachment textfile1 >>>> against .hta >>>> 2017-08-31 14:48:05.747466500 simscan: checking attachment textfile1 >>>> against .inf >>>> 2017-08-31 14:48:05.747467500 simscan: checking attachment textfile1 >>>> against .ins >>>> 2017-08-31 14:48:05.747467500 simscan: checking attachment textfile1 >>>> against .iso >>>> 2017-08-31 14:48:05.747468500 simscan: checking attachment textfile1 >>>> against .isp >>>> 2017-08-31 14:48:05.747469500 simscan: checking attachment textfile1 >>>> against .jse >>>> 2017-08-31 14:48:05.747477500 simscan: checking attachment textfile1 >>>> against .lib >>>> 2017-08-31 14:48:05.747477500 simscan: checking attachment textfile1 >>>> against .lnk >>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 >>>> against .lzh >>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 >>>> against .mim >>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 >>>> against .msp >>>> 2017-08-31 14:48:05.747479500 simscan: checking attachment textfile1 >>>> against .mst >>>> 2017-08-31 14:48:05.747481500 simscan: checking attachment textfile1 >>>> against .pif >>>> 2017-08-31 14:48:05.747482500 simscan: checking attachment textfile1 >>>> against .reg >>>> 2017-08-31 14:48:05.747485500 simscan: checking attachment textfile1 >>>> against .scf >>>> 2017-08-31 14:48:05.747486500 simscan: checking attachment textfile1 >>>> against .scr >>>> 2017-08-31 14:48:05.747486500 simscan: checking attachment textfile1 >>>> against .sct >>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 >>>> against .shb >>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 >>>> against .shs >>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 >>>> against .sys >>>> 2017-08-31 14:48:05.747489500 simscan: checking attachment textfile1 >>>> against .taz >>>> 2017-08-31 14:48:05.747490500 simscan: checking attachment textfile1 >>>> against .tgz >>>> 2017-08-31 14:48:05.747490500 simscan: checking attachment textfile1 >>>> against .tz >>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 >>>> against .url >>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 >>>> against .uu >>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 >>>> against .uue >>>> 2017-08-31 14:48:05.747493500 simscan: checking attachment textfile1 >>>> against .vb >>>> 2017-08-31 14:48:05.747494500 simscan: checking attachment textfile1 >>>> against .vbe >>>> 2017-08-31 14:48:05.747494500 simscan: checking attachment textfile1 >>>> against .vbs >>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 >>>> against .wsc >>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 >>>> against .wsf >>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 >>>> against .wsh >>>> 2017-08-31 14:48:05.747497500 simscan: checking attachment textfile1 >>>> against .xxe >>>> 2017-08-31 14:48:05.747501500 simscan: checking attachment textfile1 >>>> against .docm >>>> 2017-08-31 14:48:05.747502500 simscan: checking attachment textfile1 >>>> against .z >>>> 2017-08-31 14:48:05.747502500 simscan: checking attachment textfile1 >>>> against .jar >>>> 2017-08-31 14:48:05.747502500 simscan: cdb looking up version attach >>>> 2017-08-31 14:48:05.747503500 simscan: runned_scanners is attach: 1.4.0 >>>> 2017-08-31 14:48:05.747503500 simscan: found 1.4.0 >>>> 2017-08-31 14:48:05.747503500 simscan: calling clamdscan >>>> 2017-08-31 14:48:05.753721500 simscan: clamdscan: >>>> /var/qmail/simscan/1504171085.205836.36767: OK >>>> 2017-08-31 14:48:05.753754500 simscan: clamdscan: >>>> 2017-08-31 14:48:05.753754500 simscan: clamdscan: ----------- SCAN SUMMARY >>>> ----------- >>>> 2017-08-31 14:48:05.753768500 simscan: clamdscan: Infected files: 0 >>>> 2017-08-31 14:48:05.753771500 simscan: clamdscan: Time: 0.004 sec (0 m 0 s) >>>> 2017-08-31 14:48:05.753957500 simscan: cdb looking up version clamav >>>> 2017-08-31 14:48:05.753968500 simscan: runned_scanners is attach: 1.4.0 >>>> clamav: 0.98.6/m: >>>> 2017-08-31 14:48:05.753969500 simscan: found 0.98.6/m: >>>> 2017-08-31 14:48:05.753974500 simscan: normal clamdscan return code: 0 >>>> 2017-08-31 14:48:05.753994500 simscan: calling spamc >>>> 2017-08-31 14:48:05.754001500 simscan: calling /usr/bin/spamc spamc >>>> 2017-08-31 14:48:05.754010500 simscan: check_spam had an error ret: -1 >>>> 2017-08-31 14:48:05.754101500 simscan: exit error code: 71 >>>> 2017-08-31 14:48:05.754220500 qmail-smtpd: qq soft reject (mail server >>>> temporarily rejected message (#4.3.0)): MAILFROM:<sunil.saharan@@yyyy.com> >>>> RCPTTO:c...@yyyy.com >>>> 2017-08-31 14:48:05.755317500 tcpserver: end 36645 status 0 >>>> >>>> ################## >>>> >>>> >>>> 2017-08-31 14:48:05.956040500 simscan: cdb looking upsunil.saha...@yyyy.com >>>> 2017-08-31 14:48:05.956041500 simscan: pelookup: called >>>> withinv1...@xxxx.net >>>> 2017-08-31 14:48:05.956042500 simscan: pelookup: domain is >>>> radiant-india.net >>>> 2017-08-31 14:48:05.956042500 simscan: cdb looking up radiant-india.net >>>> 2017-08-31 14:48:05.956043500 simscan: cdb for radiant-india.net found >>>> clam=yes,spam=yes,spam_hits=30,spam_passthru=yes,attach=.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>> 2017-08-31 14:48:05.956049500 simscan: pelookup clam = yes >>>> 2017-08-31 14:48:05.956049500 simscan: pelookup spam = yes >>>> 2017-08-31 14:48:05.956050500 simscan: pelookup spam_hits = 30 >>>> 2017-08-31 14:48:05.956053500 simscan: Per Domain Hits set to : 30.000000 >>>> 2017-08-31 14:48:05.956053500 simscan: pelookup spam_passthru = yes >>>> 2017-08-31 14:48:05.956059500 simscan: unimplemented flag spam_passthru = >>>> yes >>>> 2017-08-31 14:48:05.956060500 simscan: pelookup attach = >>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>> 2017-08-31 14:48:05.956062500 simscan: attachment flag attach = >>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>> 2017-08-31 14:48:05.956074500 simscan: add_attach called with >>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>> 2017-08-31 14:48:05.956079500 simscan: .ace is attachment number 0 >>>> 2017-08-31 14:48:05.956080500 simscan: .arc is attachment number 1 >>>> 2017-08-31 14:48:05.956081500 simscan: .arj is attachment number 2 >>>> 2017-08-31 14:48:05.956081500 simscan: .b64 is attachment number 3 >>>> 2017-08-31 14:48:05.956087500 simscan: .bat is attachment number 4 >>>> 2017-08-31 14:48:05.956087500 simscan: .bhx is attachment number 5 >>>> 2017-08-31 14:48:05.956088500 simscan: .cab is attachment number 6 >>>> 2017-08-31 14:48:05.956088500 simscan: .chm is attachment number 7 >>>> 2017-08-31 14:48:05.956089500 simscan: .com is attachment number 8 >>>> 2017-08-31 14:48:05.956089500 simscan: .cpl is attachment number 9 >>>> 2017-08-31 14:48:05.956090500 simscan: .dll is attachment number 10 >>>> 2017-08-31 14:48:05.956090500 simscan: .exe is attachment number 11 >>>> 2017-08-31 14:48:05.956094500 simscan: .gz is attachment number 12 >>>> 2017-08-31 14:48:05.956094500 simscan: .hqx is attachment number 13 >>>> 2017-08-31 14:48:05.956095500 simscan: .hta is attachment number 14 >>>> 2017-08-31 14:48:05.956095500 simscan: .inf is attachment number 15 >>>> 2017-08-31 14:48:05.956096500 simscan: .ins is attachment number 16 >>>> 2017-08-31 14:48:05.956096500 simscan: .iso is attachment number 17 >>>> 2017-08-31 14:48:05.956097500 simscan: .isp is attachment number 18 >>>> 2017-08-31 14:48:05.956097500 simscan: .jse is attachment number 19 >>>> 2017-08-31 14:48:05.956106500 simscan: .lib is attachment number 20 >>>> 2017-08-31 14:48:05.956106500 simscan: .lnk is attachment number 21 >>>> 2017-08-31 14:48:05.956107500 simscan: .lzh is attachment number 22 >>>> 2017-08-31 14:48:05.956107500 simscan: .mim is attachment number 23 >>>> 2017-08-31 14:48:05.956108500 simscan: .msp is attachment number 24 >>>> 2017-08-31 14:48:05.956108500 simscan: .mst is attachment number 25 >>>> 2017-08-31 14:48:05.956109500 simscan: .pif is attachment number 26 >>>> 2017-08-31 14:48:05.956109500 simscan: .reg is attachment number 27 >>>> 2017-08-31 14:48:05.956113500 simscan: .scf is attachment number 28 >>>> 2017-08-31 14:48:05.956113500 simscan: .scr is attachment number 29 >>>> 2017-08-31 14:48:05.956114500 simscan: .sct is attachment number 30 >>>> 2017-08-31 14:48:05.956120500 simscan: .shb is attachment number 31 >>>> 2017-08-31 14:48:05.956121500 simscan: .shs is attachment number 32 >>>> 2017-08-31 14:48:05.956121500 simscan: .sys is attachment number 33 >>>> 2017-08-31 14:48:05.956122500 simscan: .taz is attachment number 34 >>>> 2017-08-31 14:48:05.956122500 simscan: .tgz is attachment number 35 >>>> 2017-08-31 14:48:05.956123500 simscan: .tz is attachment number 36 >>>> 2017-08-31 14:48:05.956123500 simscan: .url is attachment number 37 >>>> 2017-08-31 14:48:05.956124500 simscan: .uu is attachment number 38 >>>> 2017-08-31 14:48:05.956127500 simscan: .uue is attachment number 39 >>>> 2017-08-31 14:48:05.956128500 simscan: .vb is attachment number 40 >>>> 2017-08-31 14:48:05.956128500 simscan: .vbe is attachment number 41 >>>> 2017-08-31 14:48:05.956129500 simscan: .vbs is attachment number 42 >>>> 2017-08-31 14:48:05.956129500 simscan: .wsc is attachment number 43 >>>> 2017-08-31 14:48:05.956130500 simscan: .wsf is attachment number 44 >>>> 2017-08-31 14:48:05.956130500 simscan: .wsh is attachment number 45 >>>> 2017-08-31 14:48:05.956131500 simscan: .xxe is attachment number 46 >>>> 2017-08-31 14:48:05.956134500 simscan: .docm is attachment number 47 >>>> 2017-08-31 14:48:05.956134500 simscan: .z is attachment number 48 >>>> 2017-08-31 14:48:05.956135500 simscan: .jar is attachment number 49 >>>> 2017-08-31 14:48:05.956136500 simscan: pelookup: local part is inv1mum >>>> 2017-08-31 14:48:05.956136500 simscan: lpart: local part is ** >>>> 2017-08-31 14:48:05.956137500 simscan: cdb looking upinv1...@xxxx.net >>>> 2017-08-31 14:48:05.956137500 simscan: ripmime error >>>> 2017-08-31 14:48:05.956138500 simscan: exit error code: 71 >>>> 2017-08-31 14:48:05.956144500 qmail-smtpd: qq soft reject (mail server >>>> temporarily rejected message (#4.3.0)): MAILFROM:<sunil.saha...@yyyy.com> >>>> RCPTTO:inv1...@xxxx.net >>>> >>>> >>>> thanks >>>> rajesh >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>>> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com > For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com -- Eric Broch White Horse Technical Consulting (WHTC)
--------------------------------------------------------------------- To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
