eric i would like to conduct more load intensive tests.
is it possible to provide me the shell script that you use for this purpose. rajesh ----- Original Message ----- From: Eric Broch [mailto:ebr...@whitehorsetc.com] To: qmailtoaster-list@qmailtoaster.com Sent: Sat, 2 Sep 2017 14:04:36 -0600 Subject: My testing was at about 1/2 that rate with 320K attachments, almost double that rate with 1/2 email 320K attachments, and 1/2 email with no attachments. No soft rejects. Ugh!...difficult to troubleshoot if not repeatable. On 9/2/2017 1:36 PM, Rajesh M wrote: > eric > > thanks for the info. the script you sent works > > the server processes roughly around 80000 emails per day during week days and > around 80 percent of it comes during around 12 hours. So during peak hours it > is around 8000 emails per hour. > > i will test this out monday morning peak hours and revert. > > thanks > rajesh > > ----- Original Message ----- > From: Eric Broch [mailto:ebr...@whitehorsetc.com] > To: qmailtoaster-list@qmailtoaster.com > Sent: Sat, 2 Sep 2017 12:35:14 -0600 > Subject: > > Rajesh, > > I'm still not sure the process limit is being reached. > > I'm testing a COS6/QMT server now and haven't been able to bring about > 'qq soft reject' or failure of any sort. I'm hitting it with email using > a delivery script from two servers with attachment size of 320KB. > > try the script below (psmem) to monitor: > > <psmem> > > #!/bin/bash > ps -C $1 -O rss | gawk '{ count ++; sum += $2 }; END {count --; print > "Number of processes =",count; print "Memory usage per process > =",sum/1024/count, "MB"; print "Total memory usage =", sum/1024, "MB" ;};' > > </psmem> > > # chmod 755 psmem > > # watch -n 1 ./psmem simscan > > > Not sure I should change anything until we figure out what's going on. > > Eric > > > > On 9/2/2017 12:03 PM, Rajesh M wrote: >> eric >> >> i could not get the bash script working with either of the two options. >> still gives error >> line 23: `return-limits': not a valid identifier. >> >> >> >> can the limits issue in simscan be fixed ? >> >> thanks, >> rajesh >> >> ----- Original Message ----- >> From: Eric Broch [mailto:ebr...@whitehorsetc.com] >> To:qmailtoaster-list@qmailtoaster.com >> Sent: Fri, 1 Sep 2017 23:46:15 -0600 >> Subject: >> >> Rajesh, >> >> It has something to do with #!/bin/bash or #!/bin/sh. >> >> At top of script, when I use #!/bin/sh I get the same error you do, but >> when I use #!/bin/bash script works fine. >> >> >> Eric >> >> >> On 9/1/2017 11:07 PM, Rajesh M wrote: >>> eric >>> >>> 1) is their any resolution for this issue ? >>> >>> 2) if i run the script it throws error as such >>> . >>> /limits.sh: line 23: `return-limits': not a valid identifier >>> >>> #!/bin/bash >>> if [ "$#" -ne "1" ]; then >>> echo "" >>> echo -e "\033[01;32mLimit checker\033[00m" >>> echo -e "\033[01;37mUsage:\033[01;33m $0 process_name\033[00m" >>> echo "" >>> exit 0 >>> fi >>> >>> return-limits(){ >>> for process in $@; do >>> process_pids=`ps -C $process -o pid --no-headers | cut -d " " -f 2` >>> >>> if [ -z $@ ]; then >>> echo "[no $process running]" >>> else >>> for pid in $process_pids; do >>> echo "[$process #$pid -- limits]" >>> cat /proc/$pid/limits >>> done >>> fi >>> done >>> } >>> return-limits $1 >>> >>> rajesh >>> >>> >>> >>> ----- Original Message ----- >>> From: Eric Broch [mailto:ebr...@whitehorsetc.com] >>> To:qmailtoaster-list@qmailtoaster.com >>> Sent: Fri, 1 Sep 2017 17:28:40 -0600 >>> Subject: >>> >>> I sent myself a large file so that I could examine simscan with the >>> below script (limits.sh). Here's the output: >>> >>> [root@pet105 simscan-1.4.0]# ./limits simscan >>> [simscan #31535 -- limits] >>> Limit   >>>    >>>    >>>    >>>    >>>    >>>   Soft Limit >>>    >>>    >>>    Hard >>> Limit   >>>    >>>    >>>  Units >>> Max cpu time   >>>    >>>    >>>    >>>  unlimited unlimited >>>    >>>    >>>    >>>  seconds >>> Max file size   >>>    >>>    >>>    unlimited >>> unlimited   >>>    >>>    >>>   bytes >>> Max data size   >>>    >>>    >>>    unlimited >>> unlimited   >>>    >>>    >>>   bytes >>> Max stack size 10485760 unlimited  >>>    >>>    >>>    bytes >>> Max core file size  >>>    >>>   0 unlimited >>>    >>>    >>>    >>>  bytes >>> Max resident set   >>>    >>>    unlimited >>> unlimited   >>>    >>>    >>>   bytes >>> Max processes 1024 31121  >>>    >>>    >>>    >>>    >>>  processes >>> Max open files   >>>    >>>    >>>   1024 4096 >>>    >>>    >>>    >>>    >>>    files >>> Max locked memory  >>>    >>>    65536 >>> 65536   >>>    >>>    >>>    >>>    bytes >>> Max address space  >>>    >>>    unlimited >>> unlimited   >>>    >>>    >>>   bytes >>> Max file locks   >>>    >>>    >>>   unlimited >>> unlimited   >>>    >>>    >>>   locks >>> Max pending signals  >>>    >>>  31121 31121  >>>    >>>    >>>    >>>    >>>  signals >>> Max msgqueue size  >>>    >>>    819200 >>> 819200   >>>    >>>    >>>    >>>   bytes >>> Max nice priority  >>>    >>>    >>> 0   >>>    >>>    >>>    >>>    >>>    >>>  0 >>> Max realtime priority  >>>   0 >>>    >>>    >>>    >>>    >>>    >>>    0 >>> Max realtime timeout  >>>    unlimited >>> unlimited   >>>    >>>    >>>   us >>> >>> Notice the 'Max processes' and 'Max stack size', this could very well be >>> the issue for our simscan failures. >>> >>> Eric >>> >>> On 9/1/2017 5:20 PM, Eric Broch wrote: >>>> This looks like a decent script: >>>> >>>> <limits.sh> >>>> #!/bin/bash >>>> if [ "$#" -ne "1" ]; then >>>> echo "" >>>> echo -e "\033[01;32mLimit checker\033[00m" >>>> echo -e "\033[01;37mUsage:\033[01;33m $0 process_name\033[00m" >>>> echo "" >>>> exit 0 >>>> fi >>>> >>>> return-limits(){ >>>> for process in $@; do >>>>    >>>> process_pids=`ps -C $process -o pid --no-headers | cut -d " " -f 2` >>>> >>>> if [ -z $@ ]; then >>>> echo "[no $process running]" >>>> else >>>> for pid in $process_pids; do >>>> echo "[$process #$pid -- limits]" >>>>    >>>>    cat >>>> /proc/$pid/limits >>>>    done >>>>    fi >>>>   done >>>> } >>>> >>>> return-limits $1 >>>> </limits.sh> >>>> >>>> Example: >>>> # ./limits.sh tcpserver >>>> or >>>> # ./limits.sh simscan >>>> >>>> Eric >>>> >>>> >>>> On 9/1/2017 2:51 PM, Rajesh M wrote: >>>>> eric >>>>> >>>>> how do i check the number of user processes being consumed and by which >>>>> user >>>>> >>>>> rajesh >>>>> >>>>> ----- Original Message ----- >>>>> From: Eric Broch [mailto:ebr...@whitehorsetc.com] >>>>> To:qmailtoaster-list@qmailtoaster.com >>>>> Sent: Fri, 1 Sep 2017 14:25:36 -0600 >>>>> Subject: >>>>> >>>>> Number of user processes. >>>>> >>>>> >>>>> On 9/1/2017 1:57 PM, Rajesh M wrote: >>>>>> eric >>>>>> >>>>>> what is RLIMIT ? is it related to memory ? >>>>>> >>>>>> rajesh >>>>>> >>>>>> ----- Original Message ----- >>>>>> From: Eric Broch [mailto:ebr...@whitehorsetc.com] >>>>>> To:qmailtoaster-list@qmailtoaster.com >>>>>> Sent: Fri, 1 Sep 2017 13:25:49 -0600 >>>>>> Subject: >>>>>> >>>>>> Here's a section of code in simscan.c that controls the number of >>>>>> processes. >>>>>> >>>>>> #ifdef HAS_ULIMIT_NPROC >>>>>> ÃÆ>>>>>> ’‚ >>>>>> /* Set ulimits to prevent hangs if it forks too many processes */ >>>>>> ÃÆ>>>>>> ’‚ >>>>>> getrlimit(RLIMIT_NPROC, &limits); >>>>>> ÃÆ>>>>>> ’‚ >>>>>> limits.rlim_cur = 1024; >>>>>> ÃÆ>>>>>> ’‚ >>>>>> setrlimit(RLIMIT_NPROC, &limits); >>>>>> #endif >>>>>> >>>>>> The RLIMIT is set to 1024. >>>>>> >>>>>> I think this may be the issue and would explain why there would be >>>>>> forking issues with qmail-queue, ripmime, and others. This is in place >>>>>> to prevent hangs...could be a good thing. >>>>>> >>>>>> >>>>>> On 9/1/2017 1:04 PM, Remo Mattei wrote: >>>>>>> interesting... >>>>>>> >>>>>>> mine was an easy fix by changing the owner and permissions so >>>>>>> underline has some other triggering to the kernel and how it reads >>>>>>> those layers. >>>>>>> >>>>>>> On 9/1/17 11:18 AM, Eric Broch wrote: >>>>>>>> 1)ÃÆ>>>>>>>> ’‚ >>>>>>>> Problem forking >>>>>>>> >>>>>>>> vfork() is used to execute qmail-queue >>>>>>>> >>>>>>>> The error 'simscan: error forking qmail-queue' will happen for either >>>>>>>> of the following reasons: >>>>>>>> >>>>>>>> a) [EAGAIN] >>>>>>>> The system-wide limit on the total number of processes under >>>>>>>> execution would be exceeded, or the system-imposed limit on >>>>>>>> the >>>>>>>> total number of processes under execution by a single user >>>>>>>> would >>>>>>>> be exceeded. >>>>>>>> b) [ENOMEM] >>>>>>>> There is insufficient swap space for the new process. >>>>>>>> >>>>>>>> >>>>>>>> On 9/1/2017 11:53 AM, Eric Broch wrote: >>>>>>>>> Are there any errors in /var/log/messages that correspond? >>>>>>>>> >>>>>>>>> >>>>>>>>> On 9/1/2017 11:39 AM, Jeff Koch wrote: >>>>>>>>>> Eric / Remo / Rajesh - we reported this same problem a number of >>>>>>>>>> months ago and thought we had fixed it. But alas, it's still with >>>>>>>>>> us. The good news is that we haven't had any customer complaints. >>>>>>>>>> I'll be very interested if it can be resolved. >>>>>>>>>> >>>>>>>>>> Jeff Koch >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> On 9/1/2017 12:01 PM, Eric Broch wrote: >>>>>>>>>>> I'm not sure what's going on here. Is this a relatively new >>>>>>>>>>> phenomenon? >>>>>>>>>>> >>>>>>>>>>> I wonder if it's a memory, or even a disk speed, issue since it >>>>>>>>>>> only happens at peak hours? >>>>>>>>>>> >>>>>>>>>>> I think I'll appy Johannes Weberhofer's patch and put it out there >>>>>>>>>>> for you...and cross or fingers. >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> On 9/1/2017 6:28 AM, Rajesh M wrote: >>>>>>>>>>>> remo / eric >>>>>>>>>>>> >>>>>>>>>>>> i have still not being able to resolve the qq soft reject error. >>>>>>>>>>>> >>>>>>>>>>>> these are my findings >>>>>>>>>>>> >>>>>>>>>>>> 1) the errors i see are "error forking qmail-queue" and "ripmime >>>>>>>>>>>> error" which causes the qq soft reject. >>>>>>>>>>>> >>>>>>>>>>>> 2) the max concurrent connections in the logs is around 35. >>>>>>>>>>>> >>>>>>>>>>>> 3) These errors come up during peak working hours when the server >>>>>>>>>>>> is under a load of 4 - 8, and they increase the load even more to >>>>>>>>>>>> over 10-15. >>>>>>>>>>>> >>>>>>>>>>>> 4) i came across this link (not sure if this is related) >>>>>>>>>>>> https://github.com/qmail/simscan/blob/master/simscan.c >>>>>>>>>>>> >>>>>>>>>>>> 5) i can share with you my live smtp logs with simscan debug. >>>>>>>>>>>> >>>>>>>>>>>> have extracted some lines below >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> Error forking qmail-queue >>>>>>>>>>>> >>>>>>>>>>>> @4000000059a8fa7b0a2ed1b4 tcpserver: status: 31/200 >>>>>>>>>>>> @4000000059a8fa7b13162584 simscan: cdb looking up version spam >>>>>>>>>>>> @4000000059a8fa7b13166bd4 simscan: runned_scanners is attach: >>>>>>>>>>>> 1.4.0 clamav: 0.98.6/m: spam: 3.3.2 >>>>>>>>>>>> @4000000059a8fa7b13166fbc simscan: found 3.3.2 >>>>>>>>>>>> @4000000059a8fa7b13168efc simscan:[10757]:CLEAN >>>>>>>>>>>> (5.00/30.00):9.7712s:-Possible Spam- RE_ REQUIRE BOOKING // 1X20 >>>>>>>>>>>> // >>>>>>>>>>>> ICD >>>>>>>>>>>> TKDTOBANDARABASS:103.241.181.228:cs....@atlasdecargo.com:rathe...@radiant-india.net >>>>>>>>>>>> @4000000059a8fa7b1316cd7c simscan: done, execing qmail-queue >>>>>>>>>>>> @4000000059a8fa7b1316fc5c simscan: error forking qmail-queue >>>>>>>>>>>> @4000000059a8fa7b13199854 simscan: exit error code: 71 >>>>>>>>>>>> @4000000059a8fa7b131c4004 qmail-smtpd: qq soft reject (mail server >>>>>>>>>>>> temporarily rejected message (#4.3.0)): MAILFROM:<cs....@xxxxx.com> >>>>>>>>>>>> RCPTTO:rathe...@yyyyy.net >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> Error in ripmime >>>>>>>>>>>> >>>>>>>>>>>> @4000000059a8fa98045a4bc4 simscan: pelookup: domain is >>>>>>>>>>>> aissamaritime.in >>>>>>>>>>>> @4000000059a8fa98045a4bc4 simscan: cdb looking up aissamaritime.in >>>>>>>>>>>> @4000000059a8fa98045a4fac simscan: pelookup: local part is >>>>>>>>>>>> shailesh_k_bom >>>>>>>>>>>> @4000000059a8fa98045a4fac simscan: lpart: local part is ** >>>>>>>>>>>> @4000000059a8fa98045a5394 simscan: >>>>>>>>>>>> cdblookingupshailesh_k_...@aissamaritime.in >>>>>>>>>>>> @4000000059a8fa98045a5394 simscan: ripmime error >>>>>>>>>>>> @4000000059a8fa98045a6334 simscan: exit error code: 71 >>>>>>>>>>>> @4000000059a8fa98045a95fc qmail-smtpd: qq soft reject (mail server >>>>>>>>>>>> temporarily rejected message (#4.3.0)): >>>>>>>>>>>> MAILFROM:<imp...@xxxxxxx.in> RCPTTO:shailesh_k_...@yyyyyy.in >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> Wierd error logs >>>>>>>>>>>> >>>>>>>>>>>> @4000000059a9032f3aa79a24 simscan: clamdscan: ----------- SCAN >>>>>>>>>>>> SUMMARY ----------- >>>>>>>>>>>> @4000000059a9032f3aa7b964 simscan: clamdscan: >>>>>>>>>>>> /var/qmail/simscan/1504248613.321653.5221: OK >>>>>>>>>>>> @4000000059a9032f3aa86d14 simscan: clamdscan: >>>>>>>>>>>> @4000000059a9032f3aa870fc simscan: clamdscan: ---simscan: cdb >>>>>>>>>>>> looking up version clamav >>>>>>>>>>>> @4000000059a9032f3aa8a3c4 -------- SCAN simscan: clamdscan: >>>>>>>>>>>> SIUnMfMeAcRtYe d- -fsimscan: runned_scanners is attach: 1.4.0 >>>>>>>>>>>> clamav: 0.98.6/m: >>>>>>>>>>>> @4000000059a9032f3aa8c304 -isimscan: found 0.98.6/m: >>>>>>>>>>>> @4000000059a9032f3aa8c6ec -l-e-s-:- -0 >>>>>>>>>>>> @4000000059a9032f3aa8f1e4 --simscan: normal clamdscan return code: >>>>>>>>>>>> 0 >>>>>>>>>>>> @4000000059a9032f3aa8f1e4 >>>>>>>>>>>> @4000000059a9032f3aa8f5cc simscan: clamdscan: Infected fsimscan: >>>>>>>>>>>> clamdscan: iTliemes:: 00 >>>>>>>>>>>> @4000000059a9032f3aa93834 .simscan: clamdscan: 1T1i8m es:e c0 >>>>>>>>>>>> .1(002 ms e0simscan: calling spamc >>>>>>>>>>>> @4000000059a9032f3aa96ee4 c s(0)simscan: calling /usr/bin/spamc >>>>>>>>>>>> simscan: clamdscan: >>>>>>>>>>>> @4000000059a9032f3aa999dc spamcm >>>>>>>>>>>> @4000000059a9032f3aa999dc 0 s) >>>>>>>>>>>> @4000000059a9032f3aa9ad64 /var/qmail/simscan/1simscan: check_spam >>>>>>>>>>>> had an error ret: -1 >>>>>>>>>>>> @4000000059a9032f3aa9e02c 504248613.307311.5215: OK >>>>>>>>>>>> @4000000059a9032f3aaaa37c simscan: clamdscan: >>>>>>>>>>>> @4000000059a9032f3aaaa764 simscan: clamdscan: ----------- SCAN >>>>>>>>>>>> SUMMARY ----------- >>>>>>>>>>>> @4000000059a9032f3aab3fbc simscan: clamdscan: Infected files: 0 >>>>>>>>>>>> @4000000059a9032f3aaba164 simscan: clamdscan: Time: 0.135 sec (0 m >>>>>>>>>>>> 0 s) >>>>>>>>>>>> @4000000059a9032f3aac39bc simscan: clamdscan: >>>>>>>>>>>> /var/qmail/simscan/15simscan: exit error code: 71 >>>>>>>>>>>> @4000000059a9032f3aaca334 04248613.308469.5216: OK >>>>>>>>>>>> @4000000059a9032f3aacddcc simscan: clamdscan: >>>>>>>>>>>> @4000000059a9032f3aace984 simscan: clamdscan: ----------- SCAN >>>>>>>>>>>> SUMMARY ----------- >>>>>>>>>>>> @4000000059a9 >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> ################ >>>>>>>>>>>> >>>>>>>>>>>> @4000000059a9032f3aa86d14 simscan: clamdscan: >>>>>>>>>>>> @4000000059a9032f3aa870fc simscan: clamdscan: ---simscan: cdb >>>>>>>>>>>> looking up version clamav >>>>>>>>>>>> @4000000059a9032f3aa8a3c4 -------- SCAN simscan: clamdscan: >>>>>>>>>>>> SIUnMfMeAcRtYe d- -fsimscan: runned_scanners is attach: 1.4.0 >>>>>>>>>>>> clamav: 0.98.6/m: >>>>>>>>>>>> @4000000059a9032f3aa8c304 -isimscan: found 0.98.6/m: >>>>>>>>>>>> @4000000059a9032f3aa8c6ec -l-e-s-:- -0 >>>>>>>>>>>> @4000000059a9032f3aa8f1e4 --simscan: normal clamdscan return code: >>>>>>>>>>>> 0 >>>>>>>>>>>> @4000000059a9032f3aa8f1e4 >>>>>>>>>>>> @4000000059a9032f3aa8f5cc simscan: clamdscan: Infected fsimscan: >>>>>>>>>>>> clamdscan: iTliemes:: 00 >>>>>>>>>>>> @4000000059a9032f3aa93834 .simscan: clamdscan: 1T1i8m es:e c0 >>>>>>>>>>>> .1(002 ms e0simscan: calling spamc >>>>>>>>>>>> @4000000059a9032f3aa96ee4 c s(0)simscan: calling /usr/bin/spamc >>>>>>>>>>>> simscan: clamdscan: >>>>>>>>>>>> @4000000059a9032f3aa999dc spamcm >>>>>>>>>>>> @4000000059a9032f3aa999dc 0 s) >>>>>>>>>>>> @4000000059a9032f3aa9ad64 /var/qmail/simscan/1simscan: check_spam >>>>>>>>>>>> had an error ret: -1 >>>>>>>>>>>> @4000000059a9032f3aa9e02c 504248613.307311.5215: OK >>>>>>>>>>>> @4000000059a9032f3aaaa37c simscan: clamdscan: >>>>>>>>>>>> @4000000059a9032f3aaaa764 simscan: clamdscan: ----------- SCAN >>>>>>>>>>>> SUMMARY ----------- >>>>>>>>>>>> @4000000059a9032f3aab3fbc simscan: clamdscan: Infected files: 0 >>>>>>>>>>>> @4000000059a9032f3aaba164 simscan: clamdscan: Time: 0.135 sec (0 m >>>>>>>>>>>> 0 s) >>>>>>>>>>>> @4000000059a9032f3aac39bc simscan: clamdscan: >>>>>>>>>>>> /var/qmail/simscan/15simscan: exit error code: 71 >>>>>>>>>>>> @4000000059a9032f3aaca334 04248613.308469.5216: OK >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> thanks, >>>>>>>>>>>> rajesh >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> ----- Original Message ----- >>>>>>>>>>>> From: Remo Mattei [mailto:r...@mattei.org] >>>>>>>>>>>> To:24x7ser...@24x7server.net >>>>>>>>>>>> Sent: Thu, 31 Aug 2017 07:58:22 -0700 >>>>>>>>>>>> Subject: >>>>>>>>>>>> >>>>>>>>>>>> No it reads it everytime. >>>>>>>>>>>> >>>>>>>>>>>> Yes permissions are good >>>>>>>>>>>> >>>>>>>>>>>> Remo >>>>>>>>>>>> >>>>>>>>>>>> On 8/31/17 7:48 AM, Rajesh M wrote: >>>>>>>>>>>>> thank for sharing your experience remo, >>>>>>>>>>>>> >>>>>>>>>>>>> so would the following be correct ? >>>>>>>>>>>>> >>>>>>>>>>>>> chmod 2750 simscan >>>>>>>>>>>>> chown clamav.clamav simscan >>>>>>>>>>>>> >>>>>>>>>>>>> do i need to stop qmail while applying this ? >>>>>>>>>>>>> >>>>>>>>>>>>> rajesh >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> ----- Original Message ----- >>>>>>>>>>>>> From: Remo Mattei [mailto:r...@mattei.org] >>>>>>>>>>>>> To:qmailtoaster-list@qmailtoaster.com,24x7ser...@24x7server.net >>>>>>>>>>>>> Sent: Thu, 31 Aug 2017 07:23:20 -0700 >>>>>>>>>>>>> Subject: >>>>>>>>>>>>> >>>>>>>>>>>>> I had the same issue with qq. >>>>>>>>>>>>> >>>>>>>>>>>>> I changed the permissions and all good. I also raised the value >>>>>>>>>>>>> of the >>>>>>>>>>>>> softlimits exec /usr/bin/softlimit -m 1040000000 >>>>>>>>>>>>> >>>>>>>>>>>>> and my permissions are drwxr-s---ÃÆ>>>>>>>>>>>>> ’‚ÃÆ>>>>>>>>>>>>> >>>>>>>>>>>>> ’‚ >>>>>>>>>>>>> ÃÆ>>>>>>>>>>>>> ’‚ÃÆ>>>>>>>>>>>>> >>>>>>>>>>>>> ’‚ >>>>>>>>>>>>> 2 clamav clamav 4096 Aug 31 07:19 >>>>>>>>>>>>> simscan >>>>>>>>>>>>> >>>>>>>>>>>>> So hopefully this helps. >>>>>>>>>>>>> >>>>>>>>>>>>> Remo >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> On 8/31/17 6:51 AM, Rajesh M wrote: >>>>>>>>>>>>>> eric >>>>>>>>>>>>>> >>>>>>>>>>>>>> on my qmailtoaster server (centos 6 64 bit) there are several >>>>>>>>>>>>>> domains --- high traffic >>>>>>>>>>>>>> >>>>>>>>>>>>>> about 80 percent of them are routed via the sophos antispam >>>>>>>>>>>>>> filter and then passed on to the mailserver with >>>>>>>>>>>>>> spamassassin/clam disabled by adding the ip of the sophos server >>>>>>>>>>>>>> to the tcp.smtp file to exclude the line /var/qmail/bin/simscan >>>>>>>>>>>>>> >>>>>>>>>>>>>> the balance 20 are directly reaching the mailserver ie mx >>>>>>>>>>>>>> pointed to mailserver instead of sophos server and are scanned >>>>>>>>>>>>>> with clam / spamassassin. >>>>>>>>>>>>>> >>>>>>>>>>>>>> today i turned on the spamassassin / clam for the above 80 >>>>>>>>>>>>>> percent domains too and this started throwing qq reject errors >>>>>>>>>>>>>> on a large scale but randomly. >>>>>>>>>>>>>> >>>>>>>>>>>>>> spamassassin child-processes was set to 20 to handle the load >>>>>>>>>>>>>> >>>>>>>>>>>>>> i checked the log files for the last 30 days till yesterday and >>>>>>>>>>>>>> found that the same qq reject errors were present but very >>>>>>>>>>>>>> rarely ie 3 to 4 times on a single day (occasional high load ??) >>>>>>>>>>>>>> so it seems that this error comes up only when the load on the >>>>>>>>>>>>>> server is high, all take place when there are attachments. >>>>>>>>>>>>>> >>>>>>>>>>>>>> reading the thread you sent me, i am not sure whether it applies >>>>>>>>>>>>>> to my case but i can try out. >>>>>>>>>>>>>> >>>>>>>>>>>>>> ############# >>>>>>>>>>>>>> drwxr-x--- 2 clamav root 6 May 6 17:57 simscan/ >>>>>>>>>>>>>> >>>>>>>>>>>>>> changing this to the following fixed the problem: >>>>>>>>>>>>>> drwxr-s--- 2 clamav clamav 6 May 6 17:57 simscan/ >>>>>>>>>>>>>> ########### >>>>>>>>>>>>>> >>>>>>>>>>>>>> should i just >>>>>>>>>>>>>> chown clamav.clamav simscan >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> thanks >>>>>>>>>>>>>> rajesh >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> ----- Original Message ----- >>>>>>>>>>>>>> From: Eric Broch [mailto:ebr...@whitehorsetc.com] >>>>>>>>>>>>>> To:24x7ser...@24x7server.net >>>>>>>>>>>>>> Sent: Thu, 31 Aug 2017 06:42:08 -0600 >>>>>>>>>>>>>> Subject: >>>>>>>>>>>>>> >>>>>>>>>>>>>> Have a look here, Rajesh, I'm not sure if it will help: >>>>>>>>>>>>>> >>>>>>>>>>>>>> https://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg40456.html >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> On 8/31/2017 4:51 AM, Rajesh M wrote: >>>>>>>>>>>>>>> hi >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> centos 6 64 bit >>>>>>>>>>>>>>> SpamAssassin version 3.3.2 >>>>>>>>>>>>>>> ClamAV 0.98.6/23745/Thu Aug 31 14:07:08 2017 >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> we have a sophos antispam firewall which receives our emails >>>>>>>>>>>>>>> and then routes them to our mail server (qmailtoaster, dovecot, >>>>>>>>>>>>>>> spamassassin, clam) >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> in the mail server we had stopped spamassassin >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> however due to some custom requirements by our clients we >>>>>>>>>>>>>>> enabled the same >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> however we get the following error when the load on the server >>>>>>>>>>>>>>> is high on a random basis. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> 2017-08-31 14:48:05.753994500 simscan: calling spamc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.754001500 simscan: calling /usr/bin/spamc >>>>>>>>>>>>>>> spamc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.754010500 simscan: check_spam had an error >>>>>>>>>>>>>>> ret: -1 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.754101500 simscan: exit error code: 71 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.754220500 qmail-smtpd: qq soft reject (mail >>>>>>>>>>>>>>> server temporarily rejected message (#4.3.0)): >>>>>>>>>>>>>>> MAILFROM:<sunil.saharan@@yyyy.com> RCPTTO:c...@yyyy.com >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956137500 simscan: ripmime error >>>>>>>>>>>>>>> qmail-smtpd: qq soft reject (mail server temporarily rejected >>>>>>>>>>>>>>> message >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> if i disable simscan in tcp.smtp then errors do not take place. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> i enabled simscan debug and this is the result. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956144500 qmail-smtpd: qq soft reject (mail >>>>>>>>>>>>>>> server temporarily rejected message (#4.3.0)): >>>>>>>>>>>>>>> MAILFROM:<sunil.saha...@yyyy.com> RCPTTO:inv1...@xxxx.net >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> clam=yes,spam=yes,spam_hits=30,spam_passthru=yes,attach=.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746592500 simscan: pelookup clam = yes >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746593500 simscan: pelookup spam = yes >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746593500 simscan: pelookup spam_hits = 30 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746595500 simscan: Per Domain Hits set to : >>>>>>>>>>>>>>> 30.000000 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746595500 simscan: pelookup spam_passthru = >>>>>>>>>>>>>>> yes >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746596500 simscan: unimplemented flag >>>>>>>>>>>>>>> spam_passthru = yes >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746596500 simscan: pelookup attach = >>>>>>>>>>>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746599500 simscan: attachment flag attach = >>>>>>>>>>>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746602500 simscan: add_attach called with >>>>>>>>>>>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746606500 simscan: .ace is attachment >>>>>>>>>>>>>>> number 0 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746607500 simscan: .arc is attachment >>>>>>>>>>>>>>> number 1 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746607500 simscan: .arj is attachment >>>>>>>>>>>>>>> number 2 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746607500 simscan: .b64 is attachment >>>>>>>>>>>>>>> number 3 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746610500 simscan: .bat is attachment >>>>>>>>>>>>>>> number 4 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746610500 simscan: .bhx is attachment >>>>>>>>>>>>>>> number 5 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746610500 simscan: .cab is attachment >>>>>>>>>>>>>>> number 6 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746611500 simscan: .chm is attachment >>>>>>>>>>>>>>> number 7 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746611500 simscan: .com is attachment >>>>>>>>>>>>>>> number 8 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746611500 simscan: .cpl is attachment >>>>>>>>>>>>>>> number 9 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746611500 simscan: .dll is attachment >>>>>>>>>>>>>>> number 10 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746612500 simscan: .exe is attachment >>>>>>>>>>>>>>> number 11 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746614500 simscan: .gz is attachment number >>>>>>>>>>>>>>> 12 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746614500 simscan: .hqx is attachment >>>>>>>>>>>>>>> number 13 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746614500 simscan: .hta is attachment >>>>>>>>>>>>>>> number 14 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746615500 simscan: .inf is attachment >>>>>>>>>>>>>>> number 15 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746615500 simscan: .ins is attachment >>>>>>>>>>>>>>> number 16 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746615500 simscan: .iso is attachment >>>>>>>>>>>>>>> number 17 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746616500 simscan: .isp is attachment >>>>>>>>>>>>>>> number 18 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746616500 simscan: .jse is attachment >>>>>>>>>>>>>>> number 19 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746618500 simscan: .lib is attachment >>>>>>>>>>>>>>> number 20 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746618500 simscan: .lnk is attachment >>>>>>>>>>>>>>> number 21 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746619500 simscan: .lzh is attachment >>>>>>>>>>>>>>> number 22 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746622500 simscan: .mim is attachment >>>>>>>>>>>>>>> number 23 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746622500 simscan: .msp is attachment >>>>>>>>>>>>>>> number 24 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746623500 simscan: .mst is attachment >>>>>>>>>>>>>>> number 25 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746623500 simscan: .pif is attachment >>>>>>>>>>>>>>> number 26 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746623500 simscan: .reg is attachment >>>>>>>>>>>>>>> number 27 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746624500 simscan: .scf is attachment >>>>>>>>>>>>>>> number 28 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746624500 simscan: .scr is attachment >>>>>>>>>>>>>>> number 29 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746624500 simscan: .sct is attachment >>>>>>>>>>>>>>> number 30 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746630500 simscan: .shb is attachment >>>>>>>>>>>>>>> number 31 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746630500 simscan: .shs is attachment >>>>>>>>>>>>>>> number 32 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746631500 simscan: .sys is attachment >>>>>>>>>>>>>>> number 33 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746631500 simscan: .taz is attachment >>>>>>>>>>>>>>> number 34 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746631500 simscan: .tgz is attachment >>>>>>>>>>>>>>> number 35 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746632500 simscan: .tz is attachment number >>>>>>>>>>>>>>> 36 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746632500 simscan: .url is attachment >>>>>>>>>>>>>>> number 37 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746632500 simscan: .uu is attachment number >>>>>>>>>>>>>>> 38 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746635500 simscan: .uue is attachment >>>>>>>>>>>>>>> number 39 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746635500 simscan: .vb is attachment number >>>>>>>>>>>>>>> 40 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746635500 simscan: .vbe is attachment >>>>>>>>>>>>>>> number 41 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746636500 simscan: .vbs is attachment >>>>>>>>>>>>>>> number 42 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746636500 simscan: .wsc is attachment >>>>>>>>>>>>>>> number 43 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746636500 simscan: .wsf is attachment >>>>>>>>>>>>>>> number 44 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746637500 simscan: .wsh is attachment >>>>>>>>>>>>>>> number 45 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746637500 simscan: .xxe is attachment >>>>>>>>>>>>>>> number 46 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746639500 simscan: .docm is attachment >>>>>>>>>>>>>>> number 47 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746639500 simscan: .z is attachment number >>>>>>>>>>>>>>> 48 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746640500 simscan: .jar is attachment >>>>>>>>>>>>>>> number 49 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746643500 simscan: pelookup: local part is >>>>>>>>>>>>>>> cs2 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746643500 simscan: lpart: local part is ** >>>>>>>>>>>>>>> 2017-08-31 14:48:05.746644500 simscan: cdblookingup...@yyyy.com >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747114500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .ace >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747123500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .arc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747124500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .arj >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747124500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .b64 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747125500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .bat >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747126500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .bhx >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747132500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .cab >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747133500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .chm >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747134500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .com >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747134500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .cpl >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747135500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .dll >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747135500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .exe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747136500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .gz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747140500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .hqx >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747146500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .hta >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747147500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .inf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747147500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .ins >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747148500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .iso >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747149500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .isp >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747149500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .jse >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747150500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .lib >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747162500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .lnk >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747162500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .lzh >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747163500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .mim >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747164500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .msp >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747164500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .mst >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747171500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .pif >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747171500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .reg >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747172500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .scf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747173500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .scr >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747173500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .sct >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747174500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .shb >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747175500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .shs >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747189500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .sys >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747189500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .taz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747190500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .tgz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747191500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .tz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747191500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .url >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747192500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .uu >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747195500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .uue >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747196500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .vb >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747197500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .vbe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747197500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .vbs >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747198500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .wsc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747198500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .wsf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747202500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .wsh >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747208500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .xxe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747209500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .docm >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747209500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .z >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747210500 simscan: checking attachment >>>>>>>>>>>>>>> textfile2 against .jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747210500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .ace >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747211500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .arc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747215500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .arj >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747215500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .b64 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747216500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .bat >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747217500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .bhx >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747218500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .cab >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747221500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .chm >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747222500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .com >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747223500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .cpl >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747224500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .dll >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747224500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .exe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747230500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .gz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747231500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .hqx >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747231500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .hta >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747232500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .inf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747233500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .ins >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747237500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .iso >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747238500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .isp >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747238500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .jse >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747239500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .lib >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747240500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .lnk >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747243500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .lzh >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747244500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .mim >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747245500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .msp >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747246500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .mst >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747246500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .pif >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747257500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .reg >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747258500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .scf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747259500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .scr >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747260500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .sct >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747260500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .shb >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747264500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .shs >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747265500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .sys >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747266500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .taz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747266500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .tgz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747267500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .tz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747271500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .url >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747271500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .uu >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747272500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .uue >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747273500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .vb >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747279500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .vbe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747280500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .vbs >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747280500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .wsc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747281500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .wsf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747282500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .wsh >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747285500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .xxe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747286500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .docm >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747287500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .z >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747288500 simscan: checking attachment >>>>>>>>>>>>>>> msg.1504171085.205836.36767 against .jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747289500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .ace >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747292500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .arc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747293500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .arj >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747294500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .b64 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747294500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .bat >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747295500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .bhx >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747296500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .cab >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747299500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .chm >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747305500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .com >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747305500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .cpl >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747306500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .dll >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747307500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .exe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747307500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .gz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747308500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .hqx >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747311500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .hta >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747312500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .inf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747312500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .ins >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747313500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .iso >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747314500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .isp >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747314500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .jse >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747318500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .lib >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747318500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .lnk >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747319500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .lzh >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747320500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .mim >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747320500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .msp >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747321500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .mst >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747328500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .pif >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747329500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .reg >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747335500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .scf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747336500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .scr >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747336500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .sct >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747337500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .shb >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747338500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .shs >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747338500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .sys >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747342500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .taz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747342500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .tgz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747343500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .tz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747344500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .url >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747344500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .uu >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747345500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .uue >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747349500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .vb >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747349500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .vbe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747350500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .vbs >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747350500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .wsc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747351500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .wsf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747352500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .wsh >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747355500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .xxe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747361500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .docm >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747362500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .z >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747363500 simscan: checking attachment >>>>>>>>>>>>>>> textfile0 against .jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747363500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .ace >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747364500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .arc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747365500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .arj >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747368500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .b64 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747369500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .bat >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747370500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .bhx >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747371500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .cab >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747372500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .chm >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747375500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .com >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747376500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .cpl >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747376500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .dll >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747377500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .exe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747378500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .gz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747384500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .hqx >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747385500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .hta >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747385500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .inf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747386500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .ins >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747387500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .iso >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747391500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .isp >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747392500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .jse >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747392500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .lib >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747393500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .lnk >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747394500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .lzh >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747402500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .mim >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747403500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .msp >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747403500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .mst >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747404500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .pif >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747410500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .reg >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747411500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .scf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747412500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .scr >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747412500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .sct >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747413500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .shb >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747417500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .shs >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747418500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .sys >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747418500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .taz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747419500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .tgz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747420500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .tz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747424500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .url >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747425500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .uu >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747426500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .uue >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747426500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .vb >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747432500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .vbe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747433500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .vbs >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747434500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .wsc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747435500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .wsf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747435500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .wsh >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747439500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .xxe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747440500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .docm >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747441500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .z >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747442500 simscan: checking attachment >>>>>>>>>>>>>>> addr.1504171085.205836.36767 against .jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747442500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .ace >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747446500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .arc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747446500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .arj >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747447500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .b64 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747447500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .bat >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747448500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .bhx >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747449500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .cab >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747452500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .chm >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747458500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .com >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747459500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .cpl >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747460500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .dll >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747460500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .exe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747461500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .gz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747461500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .hqx >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747465500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .hta >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747466500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .inf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747467500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .ins >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747467500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .iso >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747468500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .isp >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747469500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .jse >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747477500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .lib >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747477500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .lnk >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .lzh >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .mim >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .msp >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747479500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .mst >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747481500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .pif >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747482500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .reg >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747485500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .scf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747486500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .scr >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747486500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .sct >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .shb >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .shs >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .sys >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747489500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .taz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747490500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .tgz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747490500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .tz >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .url >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .uu >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .uue >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747493500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .vb >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747494500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .vbe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747494500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .vbs >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .wsc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .wsf >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .wsh >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747497500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .xxe >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747501500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .docm >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747502500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .z >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747502500 simscan: checking attachment >>>>>>>>>>>>>>> textfile1 against .jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747502500 simscan: cdb looking up version >>>>>>>>>>>>>>> attach >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747503500 simscan: runned_scanners is >>>>>>>>>>>>>>> attach: 1.4.0 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747503500 simscan: found 1.4.0 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.747503500 simscan: calling clamdscan >>>>>>>>>>>>>>> 2017-08-31 14:48:05.753721500 simscan: clamdscan: >>>>>>>>>>>>>>> /var/qmail/simscan/1504171085.205836.36767: OK >>>>>>>>>>>>>>> 2017-08-31 14:48:05.753754500 simscan: clamdscan: >>>>>>>>>>>>>>> 2017-08-31 14:48:05.753754500 simscan: clamdscan: ----------- >>>>>>>>>>>>>>> SCAN SUMMARY ----------- >>>>>>>>>>>>>>> 2017-08-31 14:48:05.753768500 simscan: clamdscan: Infected >>>>>>>>>>>>>>> files: 0 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.753771500 simscan: clamdscan: Time: 0.004 >>>>>>>>>>>>>>> sec (0 m 0 s) >>>>>>>>>>>>>>> 2017-08-31 14:48:05.753957500 simscan: cdb looking up version >>>>>>>>>>>>>>> clamav >>>>>>>>>>>>>>> 2017-08-31 14:48:05.753968500 simscan: runned_scanners is >>>>>>>>>>>>>>> attach: 1.4.0 clamav: 0.98.6/m: >>>>>>>>>>>>>>> 2017-08-31 14:48:05.753969500 simscan: found 0.98.6/m: >>>>>>>>>>>>>>> 2017-08-31 14:48:05.753974500 simscan: normal clamdscan return >>>>>>>>>>>>>>> code: 0 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.753994500 simscan: calling spamc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.754001500 simscan: calling /usr/bin/spamc >>>>>>>>>>>>>>> spamc >>>>>>>>>>>>>>> 2017-08-31 14:48:05.754010500 simscan: check_spam had an error >>>>>>>>>>>>>>> ret: -1 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.754101500 simscan: exit error code: 71 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.754220500 qmail-smtpd: qq soft reject (mail >>>>>>>>>>>>>>> server temporarily rejected message (#4.3.0)): >>>>>>>>>>>>>>> MAILFROM:<sunil.saharan@@yyyy.com> RCPTTO:c...@yyyy.com >>>>>>>>>>>>>>> 2017-08-31 14:48:05.755317500 tcpserver: end 36645 status 0 >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> ################## >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956040500 simscan: >>>>>>>>>>>>>>> cdblookingupsunil.saha...@yyyy.com >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956041500 simscan: >>>>>>>>>>>>>>> pelookup:calledwithinv1...@xxxx.net >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956042500 simscan: pelookup: domain is >>>>>>>>>>>>>>> radiant-india.net >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956042500 simscan: cdb looking up >>>>>>>>>>>>>>> radiant-india.net >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956043500 simscan: cdb for >>>>>>>>>>>>>>> radiant-india.net found >>>>>>>>>>>>>>> clam=yes,spam=yes,spam_hits=30,spam_passthru=yes,attach=.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956049500 simscan: pelookup clam = yes >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956049500 simscan: pelookup spam = yes >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956050500 simscan: pelookup spam_hits = 30 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956053500 simscan: Per Domain Hits set to : >>>>>>>>>>>>>>> 30.000000 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956053500 simscan: pelookup spam_passthru = >>>>>>>>>>>>>>> yes >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956059500 simscan: unimplemented flag >>>>>>>>>>>>>>> spam_passthru = yes >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956060500 simscan: pelookup attach = >>>>>>>>>>>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956062500 simscan: attachment flag attach = >>>>>>>>>>>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956074500 simscan: add_attach called with >>>>>>>>>>>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956079500 simscan: .ace is attachment >>>>>>>>>>>>>>> number 0 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956080500 simscan: .arc is attachment >>>>>>>>>>>>>>> number 1 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956081500 simscan: .arj is attachment >>>>>>>>>>>>>>> number 2 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956081500 simscan: .b64 is attachment >>>>>>>>>>>>>>> number 3 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956087500 simscan: .bat is attachment >>>>>>>>>>>>>>> number 4 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956087500 simscan: .bhx is attachment >>>>>>>>>>>>>>> number 5 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956088500 simscan: .cab is attachment >>>>>>>>>>>>>>> number 6 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956088500 simscan: .chm is attachment >>>>>>>>>>>>>>> number 7 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956089500 simscan: .com is attachment >>>>>>>>>>>>>>> number 8 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956089500 simscan: .cpl is attachment >>>>>>>>>>>>>>> number 9 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956090500 simscan: .dll is attachment >>>>>>>>>>>>>>> number 10 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956090500 simscan: .exe is attachment >>>>>>>>>>>>>>> number 11 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956094500 simscan: .gz is attachment number >>>>>>>>>>>>>>> 12 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956094500 simscan: .hqx is attachment >>>>>>>>>>>>>>> number 13 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956095500 simscan: .hta is attachment >>>>>>>>>>>>>>> number 14 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956095500 simscan: .inf is attachment >>>>>>>>>>>>>>> number 15 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956096500 simscan: .ins is attachment >>>>>>>>>>>>>>> number 16 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956096500 simscan: .iso is attachment >>>>>>>>>>>>>>> number 17 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956097500 simscan: .isp is attachment >>>>>>>>>>>>>>> number 18 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956097500 simscan: .jse is attachment >>>>>>>>>>>>>>> number 19 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956106500 simscan: .lib is attachment >>>>>>>>>>>>>>> number 20 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956106500 simscan: .lnk is attachment >>>>>>>>>>>>>>> number 21 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956107500 simscan: .lzh is attachment >>>>>>>>>>>>>>> number 22 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956107500 simscan: .mim is attachment >>>>>>>>>>>>>>> number 23 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956108500 simscan: .msp is attachment >>>>>>>>>>>>>>> number 24 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956108500 simscan: .mst is attachment >>>>>>>>>>>>>>> number 25 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956109500 simscan: .pif is attachment >>>>>>>>>>>>>>> number 26 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956109500 simscan: .reg is attachment >>>>>>>>>>>>>>> number 27 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956113500 simscan: .scf is attachment >>>>>>>>>>>>>>> number 28 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956113500 simscan: .scr is attachment >>>>>>>>>>>>>>> number 29 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956114500 simscan: .sct is attachment >>>>>>>>>>>>>>> number 30 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956120500 simscan: .shb is attachment >>>>>>>>>>>>>>> number 31 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956121500 simscan: .shs is attachment >>>>>>>>>>>>>>> number 32 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956121500 simscan: .sys is attachment >>>>>>>>>>>>>>> number 33 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956122500 simscan: .taz is attachment >>>>>>>>>>>>>>> number 34 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956122500 simscan: .tgz is attachment >>>>>>>>>>>>>>> number 35 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956123500 simscan: .tz is attachment number >>>>>>>>>>>>>>> 36 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956123500 simscan: .url is attachment >>>>>>>>>>>>>>> number 37 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956124500 simscan: .uu is attachment number >>>>>>>>>>>>>>> 38 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956127500 simscan: .uue is attachment >>>>>>>>>>>>>>> number 39 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956128500 simscan: .vb is attachment number >>>>>>>>>>>>>>> 40 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956128500 simscan: .vbe is attachment >>>>>>>>>>>>>>> number 41 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956129500 simscan: .vbs is attachment >>>>>>>>>>>>>>> number 42 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956129500 simscan: .wsc is attachment >>>>>>>>>>>>>>> number 43 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956130500 simscan: .wsf is attachment >>>>>>>>>>>>>>> number 44 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956130500 simscan: .wsh is attachment >>>>>>>>>>>>>>> number 45 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956131500 simscan: .xxe is attachment >>>>>>>>>>>>>>> number 46 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956134500 simscan: .docm is attachment >>>>>>>>>>>>>>> number 47 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956134500 simscan: .z is attachment number >>>>>>>>>>>>>>> 48 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956135500 simscan: .jar is attachment >>>>>>>>>>>>>>> number 49 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956136500 simscan: pelookup: local part is >>>>>>>>>>>>>>> inv1mum >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956136500 simscan: lpart: local part is ** >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956137500 simscan: >>>>>>>>>>>>>>> cdblookingupinv1...@xxxx.net >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956137500 simscan: ripmime error >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956138500 simscan: exit error code: 71 >>>>>>>>>>>>>>> 2017-08-31 14:48:05.956144500 qmail-smtpd: qq soft reject (mail >>>>>>>>>>>>>>> server temporarily rejected message (#4.3.0)): >>>>>>>>>>>>>>> MAILFROM:<sunil.saha...@yyyy.com> RCPTTO:inv1...@xxxx.net >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> thanks >>>>>>>>>>>>>>> rajesh >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> --------------------------------------------------------------------- >>>>>>>>>>>>>>> To >>>>>>>>>>>>>>> unsubscribe,e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>>>>>>>>>>>>>> For additional >>>>>>>>>>>>>>> commands,e-mail:qmailtoaster-list-h...@qmailtoaster.com >>>>>>>>>>>>>> --------------------------------------------------------------------- >>>>>>>>>>>>>> To >>>>>>>>>>>>>> unsubscribe,e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>>>>>>>>>>>>> For additional >>>>>>>>>>>>>> commands,e-mail:qmailtoaster-list-h...@qmailtoaster.com >>>>>>>>>>>>> --------------------------------------------------------------------- >>>>>>>>>>>>> To >>>>>>>>>>>>> unsubscribe,e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>>>>>>>>>>>> For additional >>>>>>>>>>>>> commands,e-mail:qmailtoaster-list-h...@qmailtoaster.com >>>>>>>>>>>> --------------------------------------------------------------------- >>>>>>>>>>>> To >>>>>>>>>>>> unsubscribe,e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>>>>>>>>>>> For additional >>>>>>>>>>>> commands,e-mail:qmailtoaster-list-h...@qmailtoaster.com >>>>>>>>>>> -- >>>>>>>>>>> Eric Broch >>>>>>>>>>> White Horse Technical Consulting (WHTC) >>>>>>>>> -- >>>>>>>>> Eric Broch >>>>>>>>> White Horse Technical Consulting (WHTC) >>>>>>>> -- >>>>>>>> Eric Broch >>>>>>>> White Horse Technical Consulting (WHTC) >>>>>> --------------------------------------------------------------------- >>>>>> To unsubscribe,e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>>>>> For additional commands,e-mail:qmailtoaster-list-h...@qmailtoaster.com >>>>> --------------------------------------------------------------------- >>>>> To unsubscribe,e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>>>> For additional commands,e-mail:qmailtoaster-list-h...@qmailtoaster.com >>>> -- >>>> Eric Broch >>>> White Horse Technical Consulting (WHTC) >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com > For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com -- Eric Broch White Horse Technical Consulting (WHTC)
--------------------------------------------------------------------- To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com