Thomas, ASSP version 2.3.4(13187) Perl Version: 5.016003
Note that ASSP did not perform a DNSBL look up for the source IP address, 200.105.242.142. If it had, the message would have been blocked. That IP address is black listed. 13-Jul-13 02:36:35 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> info: found message size announcement: 1.85 kByte 13-Jul-13 02:36:35 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> IP 200.105.242.142 matches noPBwhite - with 128.0.0.0/1 13-Jul-13 02:36:35 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> [SMTP Reply] 250 OK 13-Jul-13 02:36:35 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> mail...@xxxxxxxxx.tld validated by ldapcache 13-Jul-13 02:36:35 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld recipient accepted: mail...@xxxxxxxxx.tld 13-Jul-13 02:36:35 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld [SMTP Reply] 250 OK 13-Jul-13 02:36:35 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld [SMTP Reply] 354 OK, send. 13-Jul-13 02:36:35 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: detected IP's on the mail routing way: 5.9.156.238 13-Jul-13 02:36:35 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: detected source IP: 5.9.156.238 13-Jul-13 02:36:35 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: check IP's on mail route for IP-blocking 13-Jul-13 02:36:35 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld Message-ID found: 201307130629.r6d45dpu009...@proracing.com.ec 13-Jul-13 02:36:36 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld [scoring] DKIM domain-check skipped - hsbc.co.uk does not support DKIM 13-Jul-13 02:36:36 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld [scoring] SPF: softfail (cache) ip=200.105.242.142 mailfrom=c.mo...@hsbc.co.uk helo=proracing.com.ec 13-Jul-13 02:36:36 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld Message-Score: added 5 (spfsValencePB) for SPF softfail, total score for this message is now 5 13-Jul-13 02:36:36 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld PB-IP-Score for '200.105.242.142' is 5, added 5 for SPFsoftfail 13-Jul-13 02:36:36 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld SenderBase(Cache) -- country:BO orgname:AXS Bolivia S. A. domain:acelerate.net 13-Jul-13 02:36:36 97395-00783 [Worker_2] [Organization] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: check IP's on mail route for DNSBL 13-Jul-13 02:36:36 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld [scoring] no Bomb found in header 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld MX found: hsbc.co.uk -> symailserver.hsbc.co.uk 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld A record found: hsbc.co.uk -> 193.108.72.62 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld MX found: yahoo.com.hk -> mx-apac.mail.gm0.yahoodns.net 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld A record found: yahoo.com.hk -> 106.10.166.52 13-Jul-13 02:36:37 97395-00783 [Worker_2] [PTRinvalid] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld found valid PTR mail.proracing.com.ec 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld [scoring] no Bomb found for 'bombSuspiciousRe' 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld Regex:BombDataRe 'PB 10: for million USD' 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld million USD : 10 , count : 1 , sum : 10 , time : 0 s 13-Jul-13 02:36:37 97395-00783 [Worker_2] [BombData] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld [scoring] (BombData ''million usd (10)'') 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld Message-Score: added 10 for Regex:BombDataRe 'PB 10: for million USD' BombData: ''million usd (10)'', total score for this message is now 15 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld PB-IP-Score for '200.105.242.142' is 15, added 10 for BombData 13-Jul-13 02:36:37 97395-00783 [Worker_2] [BombData] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld [scoring] no Bomb found for 'bombRe' 13-Jul-13 02:36:37 97395-00783 [Worker_2] [BombData] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld [scoring] no Bomb found for 'bombCharSets' 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld no Bomb found for 'bombBlack' 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld ClamAV: scanned 2087 bytes in message - OK 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: found URI co.uk 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: found URI hsbc.co.uk 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: registered URI co.uk for check 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: registered URI hsbc.co.uk for check 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: found raw URI/URL @hsbc.co.uk 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: found URI hsbc.co.uk 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: registered TLD(2/3) URI hsbc.co.uk for check 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: found raw URI/URL @yahoo.com.hk 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: found URI yahoo.com.hk 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: registered TLD(2/3) URI yahoo.com.hk for check 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: found raw URI/URL @yahoo.com.hk) 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: found URI yahoo.com.hk 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld info: registered TLD(2/3) URI yahoo.com.hk for check 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld URIBL: lookup returned <1> for co.uk - res: '' 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld URIBL: lookup returned <1> for hsbc.co.uk - res: '' 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld URIBL: lookup returned <1> for yahoo.com.hk - res: '' 13-Jul-13 02:36:37 97395-00783 [Worker_2] [MessageOK] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld message ok [Kindly read and reply] 13-Jul-13 02:36:37 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld [SMTP Reply] 250 Queued (2.141 seconds) 13-Jul-13 02:36:41 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld [SMTP Reply] 221 goodbye 13-Jul-13 02:36:41 97395-00783 [Worker_2] 200.105.242.142 <c.mo...@hsbc.co.uk> to: mail...@xxxxxxxxx.tld finished message - received DATA size: 2.95 kByte - sent DATA size: 2.95 kByte -- Michael Thomas Mathbox 978-687-3300 Toll Free: 1-877-MATHBOX (1-877-628-4269) ------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
