Hi all,
This is my configuration :
Suse 9
amavisd-new-20030616p5
spamassassin-2.55-63
perl-spamassassin-2.55-63
razor-agents-2.34
All these tools come from RPMs of Suse 9.
I added Kaspersky 5.02 as an AV.
I have a performance problem with amavis and spamassassin, there is a
timeout of nearly 20 seconds here :
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) CALLING
NoMailAudit::check
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) RETURNED FROM
NoMailAudit::check, time left: 0 s
>>From my tests, it seems that the script hangs up on this line :
debug: Ran run_rbl_eval_test rule RCVD_IN_DSBL ======> got hit
For details, please see the attached file (output of amavisd debug)
I already saw a message about that on amavis ML (june of 2003) but no
answer to it.
The only answer is to set $sa_local_tests_only to 1, it works, but I
think I don't use Razor anymore with this config.
Should I upgrade SA or anything else ? I didn't find anything about that
in the FAQs.
Thanks for your help
--
Christophe Sahut
Mar 26 16:34:55 huginn amavisd[14477]: starting. amavisd at huginn
amavisd-new-20030616-p5, Unicode aware
Mar 26 16:34:55 huginn amavisd[14477]: Perl version 5.008001
Mar 26 16:34:55 huginn amavisd[14477]: Module Amavis::Conf 1.15
Mar 26 16:34:55 huginn amavisd[14477]: Module Archive::Tar 0.23
Mar 26 16:34:55 huginn amavisd[14477]: Module Archive::Zip 1.05
Mar 26 16:34:55 huginn amavisd[14477]: Module Compress::Zlib 1.16
Mar 26 16:34:55 huginn amavisd[14477]: Module Convert::TNEF 0.17
Mar 26 16:34:55 huginn amavisd[14477]: Module Convert::UUlib 0.31
Mar 26 16:34:55 huginn amavisd[14477]: Module MIME::Entity 5.404
Mar 26 16:34:55 huginn amavisd[14477]: Module MIME::Parser 5.406
Mar 26 16:34:55 huginn amavisd[14477]: Module MIME::Tools 5.411
Mar 26 16:34:55 huginn amavisd[14477]: Module Mail::Header 1.58
Mar 26 16:34:55 huginn amavisd[14477]: Module Mail::Internet 1.58
Mar 26 16:34:55 huginn amavisd[14477]: Module Mail::SpamAssassin 2.55
Mar 26 16:34:55 huginn amavisd[14477]: Module Net::Cmd 2.24
Mar 26 16:34:55 huginn amavisd[14477]: Module Net::DNS 0.38
Mar 26 16:34:55 huginn amavisd[14477]: Module Net::SMTP 2.26
Mar 26 16:34:55 huginn amavisd[14477]: Module Net::Server 0.85
Mar 26 16:34:55 huginn amavisd[14477]: Module Time::HiRes 1.51
Mar 26 16:34:55 huginn amavisd[14477]: Module Unix::Syslog 0.98
Mar 26 16:34:55 huginn amavisd[14477]: Found myself: /usr/sbin/amavisd -c
/etc/amavisd.conf
Mar 26 16:34:55 huginn amavisd[14477]: Lookup::SQL code NOT loaded
Mar 26 16:34:55 huginn amavisd[14477]: Lookup::LDAP code NOT loaded
Mar 26 16:34:55 huginn amavisd[14477]: AMCL-in protocol code loaded
Mar 26 16:34:55 huginn amavisd[14477]: SMTP-in protocol code loaded
Mar 26 16:34:55 huginn amavisd[14477]: ANTI-VIRUS code loaded
Mar 26 16:34:55 huginn amavisd[14477]: ANTI-SPAM code loaded
Mar 26 16:34:55 huginn amavisd[14477]: Net::Server: 2004/03/26-16:34:55 Amavis
(type Net::Server::PreForkSimple) starting! pid(14477)
Mar 26 16:34:55 huginn amavisd[14477]: Net::Server: Binding to UNIX socket file
/var/spool/amavis/amavisd.sock using SOCK_STREAM
Mar 26 16:34:55 huginn amavisd[14477]: Net::Server: Binding to TCP port 10024
on host 127.0.0.1
Mar 26 16:34:55 huginn amavisd[14477]: Net::Server: Setting gid to "101 101"
Mar 26 16:34:55 huginn amavisd[14477]: Net::Server: Setting uid to "65"
Mar 26 16:34:55 huginn amavisd[14477]: Net::Server: Couldn't POSIX::setuid to
"65" [Illegal seek]
Mar 26 16:34:55 huginn amavisd[14477]: Net::Server: Setting up serialization
via flock
Mar 26 16:34:55 huginn amavisd[14477]: Found $file at /usr/bin/file
Mar 26 16:34:55 huginn amavisd[14477]: Found $arc at /usr/bin/arc
Mar 26 16:34:55 huginn amavisd[14477]: Found $gzip at /usr/bin/gzip
Mar 26 16:34:55 huginn amavisd[14477]: Found $bzip2 at /usr/bin/bzip2
Mar 26 16:34:55 huginn amavisd[14477]: No $lzop, not using it
Mar 26 16:34:55 huginn amavisd[14477]: Found $lha at /usr/bin/lha
Mar 26 16:34:55 huginn amavisd[14477]: Found $unarj at /usr/bin/unarj
Mar 26 16:34:55 huginn amavisd[14477]: Found $uncompress at /usr/bin/uncompress
Mar 26 16:34:55 huginn amavisd[14477]: No $unfreeze, not using it
Mar 26 16:34:55 huginn amavisd[14477]: Found $unrar at /usr/bin/unrar
Mar 26 16:34:55 huginn amavisd[14477]: Found $zoo at /usr/bin/zoo
Mar 26 16:34:55 huginn amavisd[14477]: Found $cpio at /usr/bin/cpio
Mar 26 16:34:55 huginn amavisd[14477]: Found primary av scanner KasperskyLab
kavscanner 4.5 at /opt/kav/bin/kavscanner
Mar 26 16:34:55 huginn amavisd[14477]: No secondary av scanner: Clam Antivirus
- clamscan
Mar 26 16:34:55 huginn amavisd[14477]: No secondary av scanner: FRISK F-Prot
Antivirus
Mar 26 16:34:55 huginn amavisd[14477]: No secondary av scanner: Trend Micro
FileScanner
Mar 26 16:34:55 huginn amavisd[14477]: SpamControl: initializing
Mail::SpamAssassin
debug: Score set 0 chosen.
debug: running in taint mode? no
Mar 26 16:34:55 huginn amavisd[14477]: SpamControl: turning on SA
auto-whitelisting (AWL)
debug: ignore: test message to precompile patterns and load modules
debug: using "/usr/share/spamassassin" for default rules dir
debug: using "/etc/mail/spamassassin" for site rules dir
debug: using "/var/spool/amavis/.spamassassin/user_prefs" for user prefs file
debug: Failed to parse line in SpamAssassin configuration, skipping:
report_header 1
debug: Failed to parse line in SpamAssassin configuration, skipping:
defang_mime 0
debug: bayes: 14477 tie-ing to DB file R/O
/var/spool/amavis/.spamassassin/bayes_toks
debug: bayes: 14477 tie-ing to DB file R/O
/var/spool/amavis/.spamassassin/bayes_seen
debug: debug: Only 4 spam(s) in Bayes DB < 200
debug: bayes: 14477 untie-ing
debug: bayes: 14477 untie-ing db_toks
debug: bayes: 14477 untie-ing db_seen
debug: Score set 1 chosen.
debug: Initialising learner
debug: bayes: 14477 tie-ing to DB file R/O
/var/spool/amavis/.spamassassin/bayes_toks
debug: bayes: 14477 tie-ing to DB file R/O
/var/spool/amavis/.spamassassin/bayes_seen
debug: debug: Only 4 spam(s) in Bayes DB < 200
debug: bayes: 14477 untie-ing
debug: bayes: 14477 untie-ing db_toks
debug: bayes: 14477 untie-ing db_seen
debug: is Net::DNS::Resolver available? yes
debug: trying (3) nytimes.com...
debug: looking up MX for 'nytimes.com'
debug: MX for 'nytimes.com' exists? 1
debug: MX lookup of nytimes.com succeeded => Dns available (set dns_available
to hardcode)
debug: is DNS available? 1
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=1.9
debug: running raw-body-text per-line regexp tests; score so far=1.9
debug: running uri tests; score so far=1.9
debug: uri tests: Done uriRE
debug: running full-text regexp tests; score so far=1.9
debug: Current PATH is:
/usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/usr/bin:/bin
debug: Pyzor is not available: pyzor not found
debug: DCC is not available: dccproc not found
debug: Razor2 is available
debug: Razor2 is available
debug: entering helper-app run mode
Razor-Log: read_file: 17 items read from
/var/spool/amavis/.razor/razor-agent.conf
Razor-Log: Found razorhome: /var/spool/amavis/.razor
Mar 26 16:34:55.628452 check[14477]: [ 1] [bootup] Logging initiated
LogDebugLevel=999 to stdout
Mar 26 16:34:55.628696 check[14477]: [15] cmd-line options:
HASH - HASH(0x90692b4),3 keys
config => /var/spool/amavis/.razor/razor-agent.conf
debug => 1
foreground => 1
Mar 26 16:34:55.628992 check[14477]: [ 5] computed
razorhome=/var/spool/amavis/.razor,
conf=/var/spool/amavis/.razor/razor-agent.conf,
ident=/var/spool/amavis/.razor/identity-ruyREQ65qj
Mar 26 16:34:55.629154 check[14477]: [ 8] Client supported_engines: 1 2 3 4
Mar 26 16:34:55.629485 check[14477]: [16] log2file: wrote message len=1442 to
file: /tmp/razor.14477.1.orig_mail
prep_mail: orig=1442
split_mime: valid_mime_hdr [len=100], but no nested mime
From: [EMAIL PROTECTED]
Message-Id: <[EMAIL PROTECTED]>
split_mime: returning total=1376; hdrs=35, body=1340
**** prep_mail done: headers=101
**** mail 0 [1376] X-Razor2-Agent: Razor-Agents v2.34
I ne
Mar 26 16:34:55.629897 check[14477]: [ 8] prep_mail done: mail 1 headers=101,
mime0=1376
Mar 26 16:34:55.630357 check[14477]: [14] prepared objs:
ARRAY - ARRAY(0x8e33b3c),1 items
HASH - HASH(0x9b4964c),5 keys
e1 => HASH - HASH(0x9b49670),2 keys
body => SCALAR - SCALAR(0x90693bc)
[length=1442] From: [EMAIL PROTECTED]
id => 1.e1
headers => SCALAR - SCALAR(0x8ebee08)
[length=101] From: [EMAIL PROTECTED]
id => 1
orig_mail => SCALAR - SCALAR(0x90693bc)
[length=1442] From: [EMAIL PROTECTED]
p => ARRAY - ARRAY(0x9b49718),1 items
HASH - HASH(0x9b49754),2 keys
body => SCALAR - SCALAR(0x8eb619c)
[length=1376] X-Razor2-Agent: Razor-Agents v2.34
id => 1.0
Mar 26 16:34:55.630682 check[14477]: [ 5] read_file: 1 items read from
/var/spool/amavis/.razor/servers.discovery.lst
Mar 26 16:34:55.630830 check[14477]: [11] Read 1 from server listfile:
/var/spool/amavis/.razor/servers.discovery.lst
Mar 26 16:34:55.630987 check[14477]: [ 5] read_file: 2 items read from
/var/spool/amavis/.razor/servers.nomination.lst
Mar 26 16:34:55.631073 check[14477]: [11] Read 2 from server listfile:
/var/spool/amavis/.razor/servers.nomination.lst
Mar 26 16:34:55.631215 check[14477]: [ 5] read_file: 2 items read from
/var/spool/amavis/.razor/servers.catalogue.lst
Mar 26 16:34:55.631295 check[14477]: [11] Read 2 from server listfile:
/var/spool/amavis/.razor/servers.catalogue.lst
Mar 26 16:34:55.631496 check[14477]: [ 9] Assigning defaults to
folly.cloudmark.com
Mar 26 16:34:55.631604 check[14477]: [ 9] Assigning defaults to
joy.cloudmark.com
Mar 26 16:34:55.631708 check[14477]: [ 9] Assigning defaults to
pride.cloudmark.com
Mar 26 16:34:55.631806 check[14477]: [ 9] Assigning defaults to
thrill.cloudmark.com
Mar 26 16:34:55.632293 check[14477]: [ 5] read_file: 14 items read from
/var/spool/amavis/.razor/server.pride.cloudmark.com.conf
Mar 26 16:34:55.632629 check[14477]: [ 5] read_file: 14 items read from
/var/spool/amavis/.razor/server.pride.cloudmark.com.conf
Mar 26 16:34:55.632933 check[14477]: [ 5] read_file: 12 items read from
/var/spool/amavis/.razor/server.joy.cloudmark.com.conf
Mar 26 16:34:55.633225 check[14477]: [ 5] read_file: 12 items read from
/var/spool/amavis/.razor/server.joy.cloudmark.com.conf
Mar 26 16:34:55.633305 check[14477]: [16] entered nextserver
Mar 26 16:34:55.633365 check[14477]: [16] entered discover
Mar 26 16:34:55.633467 check[14477]: [ 5] 19032171 seconds before closest
server discovery
Mar 26 16:34:55.633610 check[14477]: [ 6] pride.cloudmark.com is a Catalogue
Server srl 249; computed min_cf=6, Server se: D8
Mar 26 16:34:55.633755 check[14477]: [ 8] Computed supported_engines: 4
Mar 26 16:34:55.633827 check[14477]: [11] No bootstrap_discovery (DNS)
recently, not recording .lst files
Mar 26 16:34:55.633895 check[14477]: [ 8] Using next closest server
pride.cloudmark.com:2703, cached info srl 249
Mar 26 16:34:55.633969 check[14477]: [ 8] mail 1 has no subject
Mar 26 16:34:55.634270 check[14477]: [16] log2file: wrote message len=1340 to
file: /tmp/razor.14477.1.before.preproc_vr1
Mar 26 16:34:55.634698 check[14477]: [16] log2file: wrote message len=1340 to
file: /tmp/razor.14477.1.after.preproc_vr1
Mar 26 16:34:55.635202 check[14477]: [11] engine 1 computing on 1340,
sig=bmH5jQh1zIK-Mb8sbJmXdSIeelgA
Mar 26 16:34:55.635659 check[14477]: [15] log2file: wrote message len=1376 to
file: /tmp/razor.14477.1.0.before_preproc.as_reported
Mar 26 16:34:55.635874 check[14477]: [15] log2file: wrote message len=1339 to
file: /tmp/razor.14477.1.0.after_preproc
Mar 26 16:34:55.635952 check[14477]: [ 6] preproc: mail 1.0 went from 1376
bytes to 1339
Mar 26 16:34:55.636022 check[14477]: [15] mail part is [I need to make this
message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads
I need to make this message body somewhat long so TextCat preloads]
Mar 26 16:34:55.636212 check[14477]: [ 6] computing sigs for mail 1.0, len 1339
Mar 26 16:34:55.637066 check[14477]: [11] engine 4 computing on 1339,
sig=xFaZIZUVHk90OQfARnenjx5BZTMA
Mar 26 16:34:55.637551 check[14477]: [14] computed sigs for obj:
HASH - HASH(0x9b4964c),6 keys
e1 => HASH - HASH(0x9b49670),4 keys
body => SCALAR - SCALAR(0x8f31ebc)
[length=1340] I need to make this message body somewhat long so Text
cleaned => SCALAR - SCALAR(0x8f34da0)
[length=1340] I need to make this message body somewhat long so Text
e1 => bmH5jQh1zIK-Mb8sbJmXdSIeelgA
id => 1.e1
ep4 => 7542-10
headers => SCALAR - SCALAR(0x8ebee08)
[length=101] From: [EMAIL PROTECTED]
id => 1
orig_mail => SCALAR - SCALAR(0x90693bc)
[length=1442] From: [EMAIL PROTECTED]
p => ARRAY - ARRAY(0x9b49718),1 items
HASH - HASH(0x9b49754),4 keys
body => SCALAR - SCALAR(0x8eb619c)
[length=1376] X-Razor2-Agent: Razor-Agents v2.34
cleaned => SCALAR - SCALAR(0x8f35058)
[length=1339] I need to make this message body somewhat long so
e4 => xFaZIZUVHk90OQfARnenjx5BZTMA
id => 1.0
Mar 26 16:34:55.637801 check[14477]: [ 6] skipping whitelist file (empty?):
/var/spool/amavis/.razor/razor-whitelist
Mar 26 16:34:55.637874 check[14477]: [16] entered connect
Mar 26 16:34:55.637934 check[14477]: [ 5] Connecting to pride.cloudmark.com ...
Mar 26 16:34:55.957188 check[14477]: [ 8] Connection established
Mar 26 16:34:55.957372 check[14477]: [ 4] pride.cloudmark.com >> 35 server
greeting: sn=C&srl=249&a=l&a=cg&ep4=7542-10
Mar 26 16:34:55.957461 check[14477]: [16] entered
parse_greeting(sn=C&srl=249&a=l&a=cg&ep4=7542-10
)
Mar 26 16:34:55.957665 check[14477]: [16] entered _send
Mar 26 16:34:55.957771 check[14477]: [ 4] pride.cloudmark.com << 25
Mar 26 16:34:55.957823 check[14477]: [ 6] cn=razor-agents&cv=2.34
Mar 26 16:34:55.958003 check[14477]: [ 6] pride.cloudmark.com is a Catalogue
Server srl 249; computed min_cf=6, Server se: D8
Mar 26 16:34:55.958170 check[14477]: [ 8] Computed supported_engines: 4
Mar 26 16:34:55.958293 check[14477]: [ 8] mail 1.0 e4 sig:
xFaZIZUVHk90OQfARnenjx5BZTMA
Mar 26 16:34:55.958418 check[14477]: [ 8] preparing 1 queries
Mar 26 16:34:55.958556 check[14477]: [ 8] sending 1 batches
Mar 26 16:34:55.958610 check[14477]: [16] entered _send
Mar 26 16:34:55.958704 check[14477]: [ 4] pride.cloudmark.com << 52
Mar 26 16:34:55.958754 check[14477]: [ 6]
a=c&e=4&ep4=7542-10&s=xFaZIZUVHk90OQfARnenjx5BZTMA
Mar 26 16:34:56.346143 check[14477]: [ 4] pride.cloudmark.com >> 5
Mar 26 16:34:56.346242 check[14477]: [ 6] response to sent.2
p=0
Mar 26 16:34:56.346413 check[14477]: [12] processing 1 responses
Mar 26 16:34:56.346566 check[14477]: [14] from_batched_query:
ARRAY - ARRAY(0x8f484dc),1 items
HASH - HASH(0x8ea56a0),1 keys
p => 0
Mar 26 16:34:56.346660 check[14477]: [12] adding a resp to mail 1.0
Mar 26 16:34:56.346788 check[14477]: [ 6] mail 1.0 e=4
sig=xFaZIZUVHk90OQfARnenjx5BZTMA: sig not found.
Mar 26 16:34:56.346864 check[14477]: [ 7] method 4: mail 1.0: no-contention
part, spam=0
Mar 26 16:34:56.346917 check[14477]: [ 7] method 4: mail 1: all non-contention
parts not spam, mail not spam
Mar 26 16:34:56.346970 check[14477]: [ 3] mail 1 is not known spam.
Mar 26 16:34:56.347035 check[14477]: [ 5] disconnecting from server
pride.cloudmark.com
Mar 26 16:34:56.347087 check[14477]: [16] entered _send
Mar 26 16:34:56.347188 check[14477]: [ 4] pride.cloudmark.com << 5
Mar 26 16:34:56.347235 check[14477]: [ 6] a=q
debug: Using results from Razor v2.34
debug: Found Razor2 part: part=0 engine=4 ct=0 cf=0
debug: leaving helper-app run mode
debug: Razor2 results: spam? 0 highest cf score: 0
debug: all '*From' addrs: [EMAIL PROTECTED]
debug: all '*To' addrs:
debug: running meta tests; score so far=2.4
debug: lock: 14477 created
/var/spool/amavis/.spamassassin/auto-whitelist.lock.huginn.14477
debug: lock: 14477 trying to get lock on
/var/spool/amavis/.spamassassin/auto-whitelist with 0 retries
debug: lock: 14477 link to /var/spool/amavis/.spamassassin/auto-whitelist.lock:
link ok
debug: Tie-ing to DB file R/W in /var/spool/amavis/.spamassassin/auto-whitelist
debug: auto-whitelist (db-based): [EMAIL PROTECTED]|ip=none scores 0/0
debug: AWL active, pre-score: 2.4, mean: undef, originating-ip: undef
debug: Post AWL score: 2.4
debug: DB addr list: untie-ing and unlocking.
debug: DB addr list: file locked, breaking lock.
debug: unlock: 14477 unlink /var/spool/amavis/.spamassassin/auto-whitelist.lock
debug: is spam? score=2.4 required=5
tests=DATE_MISSING,MISSING_HEADERS,NO_REAL_NAME
debug: bayes: 14477 untie-ing
Mar 26 16:34:56 huginn amavisd[14477]: SpamControl: done
Mar 26 16:34:56 huginn amavisd[14477]: Net::Server: Beginning prefork (4
processes)
Mar 26 16:34:56 huginn amavisd[14477]: Net::Server: Starting "4" children
Mar 26 16:34:56 huginn amavisd[14478]: Net::Server: Child Preforked (14478)
Mar 26 16:34:56 huginn amavisd[14479]: Net::Server: Child Preforked (14479)
Mar 26 16:34:56 huginn amavisd[14480]: Net::Server: Child Preforked (14480)
Mar 26 16:34:56 huginn amavisd[14477]: Net::Server: Parent ready for children.
Mar 26 16:34:56 huginn amavisd[14481]: Net::Server: Child Preforked (14481)
Mar 26 16:35:01 huginn amavisd[14478]: Net::Server: 2004/03/26-16:35:01 CONNECT
UNIX Socket: "/var/spool/amavis/amavisd.sock"
Mar 26 16:35:01 huginn amavisd[14478]: prolong_timer after new request - timer
reset: remaining time = 300 s
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_acl: key="[EMAIL
PROTECTED]", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) AM.CL
/var/spool/amavis/amavis-XXecYKfr: <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) body hash:
5991bb16a39ddd0a7cd970b39cfa705d
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) Original mail size: 5104;
quota set to: 2552000 bytes
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) Checking: <[EMAIL PROTECTED]>
-> <[EMAIL PROTECTED]>
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_acl: key="[EMAIL
PROTECTED]", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_acl: key="[EMAIL
PROTECTED]", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) Extracting mime components
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) Issued a new file name:
part-00001
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) mime_decode: Content-type:
text/plain, name:
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) Charging 3103 bytes to
remaining quota 2552000 (out of 2552000, (0%)) - by mime_decode
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
mime_decode-1: remaining time = 300 s
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) Checking for banned MIME
types and names
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) check_for_banned - mime-type:
text/plain
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_RE: key="text/plain",
no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_acl: key="[EMAIL
PROTECTED]", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) Using KasperskyLab kavscanner
4.5: /opt/kav/bin/kavscanner -i1 -xp /var/spool/amavis/amavis-XXecYKfr/parts
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) run_command: [14484]
/opt/kav/bin/kavscanner -i1 -xp /var/spool/amavis/amavis-XXecYKfr/parts
</dev/null 2>&1
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) run_av:
/opt/kav/bin/kavscanner status=0 (0 ),Kaspersky Virus Scanner for linux.
Version 5.0.2.0/RELEASE build #1\nCopyright (C) Kaspersky Lab.
1998-2003.\nThere are 84821 records loaded, the latest update
26-03-2004\nConfig file:
/etc/kav/5.0/kav4unix.conf\n\r/var/spool/amavis/amavis-XXecYKfr/parts/part-00001
OK
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) run_av: clean
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
virus_scan: remaining time = 300 s
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) white_black_list: checking
sender <[EMAIL PROTECTED]>
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_acl: key="[EMAIL
PROTECTED]", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_RE: key="[EMAIL
PROTECTED]", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_hash: key="[EMAIL
PROTECTED]", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_hash: key="root@", no
match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_hash:
key="sigurdhr.domain.ch", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_hash:
key=".sigurdhr.domain.ch", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_hash:
key=".domain.ch", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_hash: key=".ch", no
match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_hash: key=".", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_acl: key="[EMAIL
PROTECTED]", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) lookup_acl: key="[EMAIL
PROTECTED]", no match
Mar 26 16:35:01 huginn amavisd[14478]: (XXecYKfr) CALLING NoMailAudit::check
debug: bayes: 14478 tie-ing to DB file R/O
/var/spool/amavis/.spamassassin/bayes_toks
debug: bayes: 14478 tie-ing to DB file R/O
/var/spool/amavis/.spamassassin/bayes_seen
debug: debug: Only 4 spam(s) in Bayes DB < 200
debug: bayes: 14478 untie-ing
debug: bayes: 14478 untie-ing db_toks
debug: bayes: 14478 untie-ing db_seen
debug: is Net::DNS::Resolver available? yes
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=1.4
debug: running raw-body-text per-line regexp tests; score so far=5.1
debug: running uri tests; score so far=5.1
debug: uri tests: Done uriRE
debug: running full-text regexp tests; score so far=5.1
debug: Pyzor is not available: pyzor not found
debug: DCC is not available: dccproc not found
debug: Razor2 is available
debug: Razor2 is available
debug: entering helper-app run mode
Razor-Log: read_file: 17 items read from
/var/spool/amavis/.razor/razor-agent.conf
Razor-Log: Found razorhome: /var/spool/amavis/.razor
Mar 26 16:35:01.798057 check[14478]: [ 1] [bootup] Logging initiated
LogDebugLevel=999 to stdout
Mar 26 16:35:01.798463 check[14478]: [15] cmd-line options:
HASH - HASH(0x9b47c74),3 keys
config => /var/spool/amavis/.razor/razor-agent.conf
debug => 1
foreground => 1
Mar 26 16:35:01.798826 check[14478]: [ 5] computed
razorhome=/var/spool/amavis/.razor,
conf=/var/spool/amavis/.razor/razor-agent.conf,
ident=/var/spool/amavis/.razor/identity-ruyREQ65qj
Mar 26 16:35:01.799120 check[14478]: [ 8] Client supported_engines: 1 2 3 4
Mar 26 16:35:01.799474 check[14478]: [16] log2file: wrote message len=5199 to
file: /tmp/razor.14478.1.orig_mail
prep_mail: orig=5199
split_mime: valid_mime_hdr [len=2094], but no nested mime
X-Envelope-From: <[EMAIL PROTECTED]>
X-Envelope-To: <[EMAIL PROTECTED]>
Received: from mail1.domain.ch (dns1.domain.ch [193.134.178.36])
by huginn.domain.ch (Postfix) with ESMTP id 3ACED724
for <[EMAIL PROTECTED]>; Fri, 26 Mar 2004 16:35:01 +0100 (CET)
Received: from sigurdhr.domain.ch (sigurdhr.domain.ch [193.134.178.101])
by mail1.domain.ch (8.9.0/8.9.0) with ESMTP id QAA03694
for <[EMAIL PROTECTED]>; Fri, 26 Mar 2004 16:31:54 +0100 (MET)
Received: by sigurdhr.domain.ch (Postfix, from userid 0)
id 154BC1C02F; Fri, 26 Mar 2004 16:35:01 +0100 (CET)
Delivery-Date: Mon, 22 Jan 2001 12:36:25 +0000
Delivered-To: [EMAIL PROTECTED]
Received: from dogma.slashnull.org (dogma.slashnull.org [212.17.35.15])
by mail.netnoteinc.com (Postfix) with ESMTP id F138F114121
for <[EMAIL PROTECTED]>; Mon, 22 Jan 2001 12:36:21 +0000 (Eire)
Received: (from [EMAIL PROTECTED])
by dogma.slashnull.org (8.9.3/8.9.3) id MAA17343
for [EMAIL PROTECTED]; Mon, 22 Jan 2001 12:36:21 GMT
Received: from XeNT.ics.uci.edu (xent.ics.uci.edu [128.195.21.213])
by dogma.slashnull.org (8.9.3/8.9.3) with ESMTP id MAA17336
for <[EMAIL PROTECTED]>; Mon, 22 Jan 2001 12:36:16 GMT
From: [EMAIL PROTECTED]
Received: from blue.mydomain.com (blue.mydomain.com [208.184.130.52])
by XeNT.ics.uci.edu (8.8.5/8.8.5) with ESMTP id EAA16254
for <[EMAIL PROTECTED]>; Mon, 22 Jan 2001 04:38:11 -0800 (PST)
Received: from ns.fundch.cl (unknown [200.28.105.254])
by blue.mydomain.com (Postfix) with ESMTP id C32333424F
for <[email protected]>; Sun, 21 Jan 2001 20:33:02 -0500 (EST)
X-Antispam: rblchk: (RSS) 3 Relayed through blacklisted site 200.28.105.254
Received: from y068k3017 [63.10.249.142] by ns.fundch.cl
(SMTPD32-6.00) id A92614DC012A; Sun, 21 Jan 2001 22:21:26 -0400
DATE: 21 Jan 01 8:24:27 PM
Message-ID: <N1msdrbJXNPfV4wg9>
Subject: ATTENTION !! Home Based Business for Grownups !!
To: [EMAIL PROTECTED];
Sender: [EMAIL PROTECTED]
split_mime: returning total=3139; hdrs=35, body=3103
**** prep_mail done: headers=2095
**** mail 0 [3139] X-Razor2-Agent: Razor-Agents v2.34
Mar 26 16:35:01.800406 check[14478]: [ 8] prep_mail done: mail 1 headers=2095,
mime0=3139
Mar 26 16:35:01.800969 check[14478]: [14] prepared objs:
ARRAY - ARRAY(0x9b49748),1 items
HASH - HASH(0x9bdc0bc),5 keys
e1 => HASH - HASH(0x9bdc050),2 keys
body => SCALAR - SCALAR(0x90693bc)
[length=5199] X-Envelope-From: <[EMAIL PROTECTED]>
id => 1.e1
headers => SCALAR - SCALAR(0x9b49694)
[length=2095] X-Envelope-From: <[EMAIL PROTECTED]>
id => 1
orig_mail => SCALAR - SCALAR(0x90693bc)
[length=5199] X-Envelope-From: <[EMAIL PROTECTED]>
p => ARRAY - ARRAY(0x9bdc140),1 items
HASH - HASH(0x9bdc17c),2 keys
body => SCALAR - SCALAR(0x9b4967c)
[length=3139] X-Razor2-Agent: Razor-Agents v2.34
id => 1.0
Mar 26 16:35:01.801304 check[14478]: [ 5] read_file: 1 items read from
/var/spool/amavis/.razor/servers.discovery.lst
Mar 26 16:35:01.801435 check[14478]: [11] Read 1 from server listfile:
/var/spool/amavis/.razor/servers.discovery.lst
Mar 26 16:35:01.801591 check[14478]: [ 5] read_file: 2 items read from
/var/spool/amavis/.razor/servers.nomination.lst
Mar 26 16:35:01.801680 check[14478]: [11] Read 2 from server listfile:
/var/spool/amavis/.razor/servers.nomination.lst
Mar 26 16:35:01.801820 check[14478]: [ 5] read_file: 2 items read from
/var/spool/amavis/.razor/servers.catalogue.lst
Mar 26 16:35:01.801912 check[14478]: [11] Read 2 from server listfile:
/var/spool/amavis/.razor/servers.catalogue.lst
Mar 26 16:35:01.802149 check[14478]: [ 9] Assigning defaults to
folly.cloudmark.com
Mar 26 16:35:01.802272 check[14478]: [ 9] Assigning defaults to
joy.cloudmark.com
Mar 26 16:35:01.802378 check[14478]: [ 9] Assigning defaults to
pride.cloudmark.com
Mar 26 16:35:01.802480 check[14478]: [ 9] Assigning defaults to
thrill.cloudmark.com
Mar 26 16:35:01.802986 check[14478]: [ 5] read_file: 14 items read from
/var/spool/amavis/.razor/server.pride.cloudmark.com.conf
Mar 26 16:35:01.803331 check[14478]: [ 5] read_file: 14 items read from
/var/spool/amavis/.razor/server.pride.cloudmark.com.conf
Mar 26 16:35:01.803637 check[14478]: [ 5] read_file: 12 items read from
/var/spool/amavis/.razor/server.joy.cloudmark.com.conf
Mar 26 16:35:01.803935 check[14478]: [ 5] read_file: 12 items read from
/var/spool/amavis/.razor/server.joy.cloudmark.com.conf
Mar 26 16:35:01.804040 check[14478]: [16] entered nextserver
Mar 26 16:35:01.804130 check[14478]: [16] entered discover
Mar 26 16:35:01.804247 check[14478]: [ 5] 19024494 seconds before closest
server discovery
Mar 26 16:35:01.804431 check[14478]: [ 6] pride.cloudmark.com is a Catalogue
Server srl 249; computed min_cf=6, Server se: D8
Mar 26 16:35:01.804661 check[14478]: [ 8] Computed supported_engines: 4
Mar 26 16:35:01.804753 check[14478]: [11] No bootstrap_discovery (DNS)
recently, not recording .lst files
Mar 26 16:35:01.804824 check[14478]: [ 8] Using next closest server
pride.cloudmark.com:2703, cached info srl 249
Mar 26 16:35:01.804978 check[14478]: [ 8] mail 1 Subject: ATTENTION !! Home
Based Business for Grownups !!
Mar 26 16:35:01.805344 check[14478]: [16] log2file: wrote message len=3103 to
file: /tmp/razor.14478.1.before.preproc_vr1
Mar 26 16:35:01.806087 check[14478]: [16] log2file: wrote message len=3062 to
file: /tmp/razor.14478.1.after.preproc_vr1
Mar 26 16:35:01.806666 check[14478]: [11] engine 1 computing on 3062,
sig=eRlKA-35jZ8dptVG1IbwrKaTDmwA
Mar 26 16:35:01.807250 check[14478]: [15] log2file: wrote message len=3139 to
file: /tmp/razor.14478.1.0.before_preproc.as_reported
Mar 26 16:35:01.807498 check[14478]: [15] log2file: wrote message len=3100 to
file: /tmp/razor.14478.1.0.after_preproc
Mar 26 16:35:01.807602 check[14478]: [ 6] preproc: mail 1.0 went from 3139
bytes to 3100
Mar 26 16:35:01.807701 check[14478]: [15] mail part is [
THIS ENTERPRISE IS AWESOMELY FEATURED
IN SEPTEMBER 2000 MILLIONAIRE,
AUGUST 2000 TYCOONS AND
AUGUST 2000 ENTREPRENEUR Magazine.
====> Do you have a burning desire to change the quality of your existing life?
====> Would you like to live the life that others only dream about?
====> The fact is we have many people in our enterprise that earn over 50k per
month
from the privacy of their own home and are retiring in 2-3 years.
====> Become Wealthy and having total freedom both personal and financial.
READ ON! READ ON! READ ON! READ ON! READ ON! READ ON! READ ON!!!
How would you like to:(LEGALLY & LAWFULLY)
1. KEEP MOST OF YOUR TAX DOLLARS
2. Drastically reduce personal, business and capital gains taxes?
3. Protect all assets from any form of seizure, liens, or judgments?
4. Create a six figure income every 4 months?
5. Restoring and preserving complete personal and financial privacy?
6. Create and amass personal wealth, multiply it and protect it?
7. Realize a 3 to 6 times greater returns on your money?
8. Legally make yourself and your assets completely judgment-proof,
SEIZURE-PROOOOF, LIEN-PROOOOOOF, DIVORCE-PROOOOOOF, ATTORNEY-PROOOOOOF,
IRS-PROOOOOOF
((((((((((((((((((((BECOME COMPLETELY
INSULATED))))))))))))))))))))))))
(((((((((((((((((((((((((HELP PEOPLE DO THE
SAME))))))))))))))))))))))))))
===> Are you a thinker, and a person that believes they deserve to have the
best in life?
===> Are you capable of recognizing a once in a lifetime opportunity when
it's looking right at you?
===> Countless others have missed their shot. Don't look back years later
and wish you made the move.
===> It's to my benefit to train you for success.
===> In fact, I'm so sure that I can do so,
I'm willing to put my money where my mouth is!
===> Upon accepting you as a member on my team, I will provide you with
complete Professional Training as well as FRESH inquiring LEADS to put
you immediately on the road to success.
If you are skeptical that's OK but don't let that stop you
from getting all the information you need.
DROP THE MOUSE=====> AND CALL 800-320-9895 x2068 <======= DROP THE MOUSE
AND CALL
************************************800-320-9895
x2068**************************************
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
Your E-mail Address Removal/Deletion Instructions:
We comply with proposed federal legislation regarding unsolicited
commercial e-mail by providing you with a method for your e-mail address
to be permanently removed from our database and any future mailings from
our company.
To remove your address, please send an e-mail message with the word REMOVE
in the subject line to: [EMAIL PROTECTED]
If you do not type the word REMOVE in the subject line, your request to
be removed will not be processed.
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ]
Mar 26 16:35:01.807832 check[14478]: [ 6] computing sigs for mail 1.0, len 3100
Mar 26 16:35:01.808836 check[14478]: [11] engine 4 computing on 3100,
sig=04rRJ9uwTYgQJ5mkkDDpFS6NpiEA
Mar 26 16:35:01.809467 check[14478]: [14] computed sigs for obj:
HASH - HASH(0x9bdc0bc),6 keys
e1 => HASH - HASH(0x9bdc050),4 keys
body => SCALAR - SCALAR(0x9b542e4)
[length=3103]
cleaned => SCALAR - SCALAR(0x8fca1cc)
[length=3062] THIS ENTERPRISE IS AWESOMELY FEATURED
e1 => eRlKA-35jZ8dptVG1IbwrKaTDmwA
id => 1.e1
ep4 => 7542-10
headers => SCALAR - SCALAR(0x9b49694)
[length=2095] X-Envelope-From: <[EMAIL PROTECTED]>
id => 1
orig_mail => SCALAR - SCALAR(0x90693bc)
[length=5199] X-Envelope-From: <[EMAIL PROTECTED]>
p => ARRAY - ARRAY(0x9bdc140),1 items
HASH - HASH(0x9bdc17c),4 keys
body => SCALAR - SCALAR(0x9b4967c)
[length=3139] X-Razor2-Agent: Razor-Agents v2.34
cleaned => SCALAR - SCALAR(0x9b542c0)
[length=3100]
e4 => 04rRJ9uwTYgQJ5mkkDDpFS6NpiEA
id => 1.0
Mar 26 16:35:01.809711 check[14478]: [ 6] skipping whitelist file (empty?):
/var/spool/amavis/.razor/razor-whitelist
Mar 26 16:35:01.809840 check[14478]: [16] entered connect
Mar 26 16:35:01.809931 check[14478]: [ 5] Connecting to pride.cloudmark.com ...
Mar 26 16:35:02.127485 check[14478]: [ 8] Connection established
Mar 26 16:35:02.127681 check[14478]: [ 4] pride.cloudmark.com >> 35 server
greeting: sn=C&srl=249&a=l&a=cg&ep4=7542-10
Mar 26 16:35:02.127785 check[14478]: [16] entered
parse_greeting(sn=C&srl=249&a=l&a=cg&ep4=7542-10
)
Mar 26 16:35:02.128088 check[14478]: [16] entered _send
Mar 26 16:35:02.128240 check[14478]: [ 4] pride.cloudmark.com << 25
Mar 26 16:35:02.128302 check[14478]: [ 6] cn=razor-agents&cv=2.34
Mar 26 16:35:02.128513 check[14478]: [ 6] pride.cloudmark.com is a Catalogue
Server srl 249; computed min_cf=6, Server se: D8
Mar 26 16:35:02.128677 check[14478]: [ 8] Computed supported_engines: 4
Mar 26 16:35:02.128867 check[14478]: [ 8] mail 1.0 e4 sig:
04rRJ9uwTYgQJ5mkkDDpFS6NpiEA
Mar 26 16:35:02.129050 check[14478]: [ 8] preparing 1 queries
Mar 26 16:35:02.129261 check[14478]: [ 8] sending 1 batches
Mar 26 16:35:02.129323 check[14478]: [16] entered _send
Mar 26 16:35:02.129447 check[14478]: [ 4] pride.cloudmark.com << 52
Mar 26 16:35:02.129497 check[14478]: [ 6]
a=c&e=4&ep4=7542-10&s=04rRJ9uwTYgQJ5mkkDDpFS6NpiEA
Mar 26 16:35:02.547693 check[14478]: [ 4] pride.cloudmark.com >> 12
Mar 26 16:35:02.547819 check[14478]: [ 6] response to sent.2
p=1&cf=100
Mar 26 16:35:02.548085 check[14478]: [12] processing 1 responses
Mar 26 16:35:02.548282 check[14478]: [14] from_batched_query:
ARRAY - ARRAY(0x8f484dc),1 items
HASH - HASH(0x9b54428),2 keys
cf => 100
p => 1
Mar 26 16:35:02.548381 check[14478]: [12] adding a resp to mail 1.0
Mar 26 16:35:02.548567 check[14478]: [ 6] mail 1.0 e=4
sig=04rRJ9uwTYgQJ5mkkDDpFS6NpiEA: Is spam: cf 100 >= min_cf 6
Mar 26 16:35:02.548683 check[14478]: [ 7] method 4: mail 1.0: no-contention
part, spam=1
Mar 26 16:35:02.548742 check[14478]: [ 7] method 4: mail 1: a non-contention
part was spam, mail spam
Mar 26 16:35:02.548793 check[14478]: [ 3] mail 1 is known spam.
Mar 26 16:35:02.548880 check[14478]: [ 5] disconnecting from server
pride.cloudmark.com
Mar 26 16:35:02.548938 check[14478]: [16] entered _send
Mar 26 16:35:02.549065 check[14478]: [ 4] pride.cloudmark.com << 5
Mar 26 16:35:02.549115 check[14478]: [ 6] a=q
debug: Using results from Razor v2.34
debug: Found Razor2 part: part=0 engine=4 ct=0 cf=100
debug: leaving helper-app run mode
debug: Razor2 results: spam? 1 highest cf score: 100
debug: all '*From' addrs: [EMAIL PROTECTED] [EMAIL PROTECTED]
debug: all '*To' addrs: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
debug: forged_rcvd_trail: entry 0: by=domain.ch from=domain.ch mismatches=0
debug: forged_rcvd_trail: entry 1: by=domain.ch from=domain.ch mismatches=0
debug: forged_rcvd_trail: entry 2: by=domain.ch from=(undef) mismatches=0
debug: forged_rcvd_trail: entry 3: by=netnoteinc.com from=slashnull.org
mismatches=0
debug: forged_rcvd_trail: entry 4: by=slashnull.org from=(undef) mismatches=0
debug: forged_rcvd_trail: entry 5: by=slashnull.org from=uci.edu mismatches=0
debug: forged_rcvd_trail: entry 6: by=uci.edu from=mydomain.com mismatches=0
debug: forged_rcvd_trail: entry 7: by=mydomain.com from=fundch.cl mismatches=0
debug: looking up PTR record for '63.10.249.142'
debug: PTR for '63.10.249.142': ''
debug: round-the-world: mail relayed through ns.fundch.cl by 63.10.249.142
(HELO y068k3017, rev DNS says )
debug: round-the-world: probably not
debug: Ran run_rbl_eval_test rule RCVD_IN_DSBL ======> got hit
debug: Ran run_rbl_eval_test rule RCVD_IN_NJABL ======> got hit
debug: running meta tests; score so far=10.8
debug: auto-learn? safety=4, ham=-2, spam=15, body-hits=9.3, head-hits=7.1
debug: auto-learn: currently using scoreset 1. no need to recompute.
debug: auto-learn? no: inside auto-learn thresholds or safety zone around
required_hits
debug: lock: 14478 created
/var/spool/amavis/.spamassassin/auto-whitelist.lock.huginn.14478
debug: lock: 14478 trying to get lock on
/var/spool/amavis/.spamassassin/auto-whitelist with 0 retries
debug: lock: 14478 link to /var/spool/amavis/.spamassassin/auto-whitelist.lock:
link ok
debug: Tie-ing to DB file R/W in /var/spool/amavis/.spamassassin/auto-whitelist
debug: auto-whitelist (db-based): [EMAIL PROTECTED]|ip=63.10 scores 70/929.33
debug: AWL active, pre-score: 12.1, mean: 13.2761428571429, originating-ip:
63.10.249.142
debug: add_score: New count: 71, new totscore: 941.43
debug: Post AWL score: 12.7
debug: DB addr list: untie-ing and unlocking.
debug: DB addr list: file locked, breaking lock.
debug: unlock: 14478 unlink /var/spool/amavis/.spamassassin/auto-whitelist.lock
debug: is spam? score=12.7 required=5
tests=AWL,DATE_IN_PAST_12_24,DRASTIC_REDUCED,HOME_EMPLOYMENT,INVALID_DATE,INVALID_MSGID,MANY_EXCLAMATIONS,NO_REAL_NAME,ONCE_IN_LIFETIME,RAZOR2_CHECK,RCVD_IN_DSBL,RCVD_IN_NJABL,REMOVE_SUBJ
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) RETURNED FROM
NoMailAudit::check, time left: 0 s
debug: bayes: 14478 untie-ing
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
spam_scan_SA: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) spam_scan: hits=12.7
tests=AWL,DATE_IN_PAST_12_24,DRASTIC_REDUCED,HOME_EMPLOYMENT,INVALID_DATE,INVALID_MSGID,MANY_EXCLAMATIONS,NO_REAL_NAME,ONCE_IN_LIFETIME,RAZOR2_CHECK,RCVD_IN_DSBL,RCVD_IN_NJABL,REMOVE_SUBJ
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
spam_scan: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup: (scalar) matches,
result="4.5"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup: (scalar) matches,
result="2"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup: (scalar) matches,
result="4.5"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup: (scalar) matches,
result="4.5"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) do_spam: looking for a
quarantine address
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup: (scalar) matches,
result="[EMAIL PROTECTED]"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) header: X-Quarantine-id:
<spam-5991bb16a39ddd0a7cd970b39cfa705d-20040326-163529-XXecYKfr>\n
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) header: X-Spam-Status: Yes,
hits=12.7 tag1=2.0 tag2=4.5 kill=4.5 tests=AWL,\n DATE_IN_PAST_12_24,
DRASTIC_REDUCED, HOME_EMPLOYMENT, INVALID_DATE,\n INVALID_MSGID,
MANY_EXCLAMATIONS, NO_REAL_NAME, ONCE_IN_LIFETIME,\n RAZOR2_CHECK,
RCVD_IN_DSBL, RCVD_IN_NJABL, REMOVE_SUBJ\n
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) header: X-Spam-Level:
************\n
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) header: X-Envelope-From:
<[EMAIL PROTECTED]>\n
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) header: X-Envelope-To:
<[EMAIL PROTECTED]>\n
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) DO_QUARANTINE, sender: [EMAIL
PROTECTED]
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) SEND via SMTP:
[127.0.0.1:10025] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) Remote host introduces itself
as: huginn.domain.ch
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-connect: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-mail-from: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-rcpt-to: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) response to DATA: "354 End
data with <CR><LF>.<CR><LF>"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after fwd-data:
remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-data-end: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) response to data end: "250
Ok: queued as A3E20766"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-rundown-1: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) mail_via_smtp: 250 2.6.0 Ok,
id=XXecYKfr, from MTA: 250 Ok: queued as A3E20766
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) one_response_for_all <[EMAIL
PROTECTED]>: success, dsn_needed=0, '250 2.6.0 Ok, id=XXecYKfr, from MTA: 250
Ok: queued as A3E20766'
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) DO_QUARANTINE done
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) SPAM, <[EMAIL PROTECTED]> ->
<[EMAIL PROTECTED]>, Yes, hits=12.7 tag1=2.0 tag2=4.5 kill=4.5 tests=AWL,
DATE_IN_PAST_12_24, DRASTIC_REDUCED, HOME_EMPLOYMENT, INVALID_DATE,
INVALID_MSGID, MANY_EXCLAMATIONS, NO_REAL_NAME, ONCE_IN_LIFETIME, RAZOR2_CHECK,
RCVD_IN_DSBL, RCVD_IN_NJABL, REMOVE_SUBJ, quarantine
spam-5991bb16a39ddd0a7cd970b39cfa705d-20040326-163529-XXecYKfr ([EMAIL
PROTECTED])
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup: (scalar) matches,
result="[EMAIL PROTECTED]"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) DO_SPAM - NOTIFICATIONS,
sender: [EMAIL PROTECTED]
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup_hash: key="[EMAIL
PROTECTED]", no match
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup_hash: key="root@", no
match
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup_hash:
key="sigurdhr.domain.ch", no match
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup_hash:
key=".sigurdhr.domain.ch", no match
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup_hash: key=".domain.ch"
matches, result=1
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) first_received_from:
y068k3017 [63.10.249.142]
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) first_received_from:
y068k3017 [63.10.249.142]
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) string_to_mime_entity Date:
Fri, 26 Mar 2004 16:35:29 +0100 (CET)
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) string_to_mime_entity From:
[EMAIL PROTECTED]
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) string_to_mime_entity
Subject: SPAM FROM LOCAL <[EMAIL PROTECTED]>
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) string_to_mime_entity To:
<[EMAIL PROTECTED]>
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) string_to_mime_entity
Message-ID: <[EMAIL PROTECTED]>
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) SEND via SMTP:
[127.0.0.1:10025] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) Remote host introduces itself
as: huginn.domain.ch
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-connect: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-mail-from: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-rcpt-to: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) response to DATA: "354 End
data with <CR><LF>.<CR><LF>"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after fwd-data:
remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-data-end: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) response to data end: "250
Ok: queued as BF132767"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-rundown-1: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) mail_via_smtp: 250 2.6.0 Ok,
id=XXecYKfr, from MTA: 250 Ok: queued as BF132767
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) one_response_for_all <[EMAIL
PROTECTED]>: success, dsn_needed=0, '250 2.6.0 Ok, id=XXecYKfr, from MTA: 250
Ok: queued as BF132767'
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) DO_SPAM DONE
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) header: Received: from by
localhost (amavisd-new, port ) id XXecYKfr\n for <[EMAIL PROTECTED]>; Fri, 26
Mar 2004 16:35:01 +0100 (CET)\n
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) header: X-Virus-Scanned: by
amavisd-new at domain.ch\n
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup_hash: key="[EMAIL
PROTECTED]", no match
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup_hash:
key="gilles.user@", no match
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup_hash:
key="admin.domain.ch", no match
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup_hash:
key=".admin.domain.ch", no match
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup_hash: key=".domain.ch"
matches, result=1
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup: (scalar) matches,
result="2"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup: (scalar) matches,
result="4.5"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) lookup: (scalar) matches,
result="1"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) headers CLUSTERING: NEW
CLUSTER <[EMAIL PROTECTED]>: hits=12.7, tag=1, tag2=1, subj=1, local=1, bl=0
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) header: X-Spam-Status: Yes,
hits=12.7 tagged_above=2.0 required=4.5 tests=AWL,\n DATE_IN_PAST_12_24,
DRASTIC_REDUCED, HOME_EMPLOYMENT, INVALID_DATE,\n INVALID_MSGID,
MANY_EXCLAMATIONS, NO_REAL_NAME, ONCE_IN_LIFETIME,\n RAZOR2_CHECK,
RCVD_IN_DSBL, RCVD_IN_NJABL, REMOVE_SUBJ\n
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) header: X-Spam-Level:
************\n
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) header: X-Spam-Flag: YES\n
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) headers CLUSTERING: done all
1 recips in one go
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) SPAM-TAG, <[EMAIL PROTECTED]>
-> <[EMAIL PROTECTED]>, Yes, hits=12.7 tagged_above=2.0 required=4.5 tests=AWL,
DATE_IN_PAST_12_24, DRASTIC_REDUCED, HOME_EMPLOYMENT, INVALID_DATE,
INVALID_MSGID, MANY_EXCLAMATIONS, NO_REAL_NAME, ONCE_IN_LIFETIME, RAZOR2_CHECK,
RCVD_IN_DSBL, RCVD_IN_NJABL, REMOVE_SUBJ
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) FWD via SMTP:
[127.0.0.1:10025] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) Remote host introduces itself
as: huginn.domain.ch
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-connect: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-mail-from: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-rcpt-to: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) response to DATA: "354 End
data with <CR><LF>.<CR><LF>"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) header: Subject:
-----SPAM-----[huginn] ATTENTION !! Home Based Business for Grownups !!\n
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after fwd-data:
remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-data-end: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) response to data end: "250
Ok: queued as D799D766"
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
fwd-rundown-1: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) mail_via_smtp: 250 2.6.0 Ok,
id=XXecYKfr, from MTA: 250 Ok: queued as D799D766
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) prolong_timer after
forwarding: remaining time = 300 s
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) one_response_for_all <[EMAIL
PROTECTED]>: success, dsn_needed=0, '250 2.6.0 Ok, id=XXecYKfr, from MTA: 250
Ok: queued as D799D766'
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) warnsender_with_pass=,
dsn_needed=0, exit=0, 250 2.6.0 Ok, id=XXecYKfr, from MTA: 250 Ok: queued as
D799D766
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) Passed, <[EMAIL PROTECTED]>
-> <[EMAIL PROTECTED]>, quarantine
spam-5991bb16a39ddd0a7cd970b39cfa705d-20040326-163529-XXecYKfr, Message-ID:
<N1msdrbJXNPfV4wg9>, Hits: 12.7
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) tempdir being removed:
/var/spool/amavis/amavis-XXecYKfr
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) rmdir_recursively:
/var/spool/amavis/amavis-XXecYKfr, excl=
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) rmdir_recursively:
/var/spool/amavis/amavis-XXecYKfr/parts, excl=0
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) mail checking ended:
exit_code=0 (250 2.6.0 Ok, id=XXecYKfr, from MTA: 250 Ok: queued as D799D766)
Mar 26 16:35:29 huginn amavisd[14478]: (XXecYKfr) TIMING [total 28657 ms] - got
data: 3 (0%), body hash: 1 (0%), mkdir parts: 1 (0%), mime_decode: 13 (0%),
AV-scan-1: 374 (1%), SA msg read: 3 (0%), SA parse: 1 (0%), SA check: 27951
(98%), fwd-connect: 13 (0%), fwd-mail-from: 1 (0%), fwd-rcpt-to: 1 (0%),
write-header: 4 (0%), fwd-data: 0 (0%), fwd-data-end: 84 (0%), fwd-rundown: 2
(0%), fwd-connect: 19 (0%), fwd-mail-from: 1 (0%), fwd-rcpt-to: 1 (0%),
write-header: 2 (0%), fwd-data: 10 (0%), fwd-data-end: 79 (0%), fwd-rundown: 2
(0%), fwd-connect: 6 (0%), fwd-mail-from: 1 (0%), fwd-rcpt-to: 1 (0%),
write-header: 4 (0%), fwd-data: 0 (0%), fwd-data-end: 73 (0%), fwd-rundown: 2
(0%), unlink-1-files: 3 (0%), rmdir: 0 (0%), unlink-1-files: 0 (0%), rmdir: 0
(0%), rundown: 0 (0%)
Mar 26 16:35:42 huginn amavisd[14477]: Net::Server: 2004/03/26-16:35:42 Server
closing!
