interesting...

mine was an easy fix by changing the owner and permissions so underline
has some other triggering to the kernel and how it reads those layers.

On 9/1/17 11:18 AM, Eric Broch wrote:
>
> 1)  Problem forking
>
> vfork() is used to execute qmail-queue
>
> The error 'simscan: error forking qmail-queue' will happen for either
> of the following reasons:
>
> a) [EAGAIN]
>     The system-wide limit on the total number of processes under
>     execution would be exceeded, or the system-imposed limit on the
>     total number of processes under execution by a single user would
>     be exceeded. 
> b) [ENOMEM]
>     There is insufficient swap space for the new process. 
>
>
> On 9/1/2017 11:53 AM, Eric Broch wrote:
>>
>> Are there any errors in /var/log/messages that correspond?
>>
>>
>> On 9/1/2017 11:39 AM, Jeff Koch wrote:
>>>
>>> Eric / Remo / Rajesh - we reported this same problem a number of
>>> months ago and thought we had fixed it. But alas, it's still with
>>> us. The good news is that we haven't had any customer complaints.
>>> I'll be very interested if it can be resolved.
>>>
>>> Jeff Koch
>>>
>>>
>>> On 9/1/2017 12:01 PM, Eric Broch wrote:
>>>>
>>>> I'm not sure what's going on here. Is this a relatively new
>>>> phenomenon?
>>>>
>>>> I wonder if it's a memory, or even a disk speed, issue since it
>>>> only happens at peak hours?
>>>>
>>>> I think I'll appy Johannes Weberhofer's patch and put it out there
>>>> for you...and cross or fingers.
>>>>
>>>>
>>>> On 9/1/2017 6:28 AM, Rajesh M wrote:
>>>>> remo / eric
>>>>>
>>>>> i have still not being able to resolve the qq soft reject error.
>>>>>
>>>>> these are my findings 
>>>>>
>>>>> 1) the errors i see are "error forking qmail-queue" and "ripmime error" 
>>>>> which causes the qq soft reject.
>>>>>
>>>>> 2) the max concurrent connections in the logs is around 35.
>>>>>
>>>>> 3)  These errors come up during peak working hours when the server is 
>>>>> under a  load of 4 - 8, and they increase the load even more to over 
>>>>> 10-15.
>>>>>
>>>>> 4) i came across this link (not sure if this is related)
>>>>> https://github.com/qmail/simscan/blob/master/simscan.c
>>>>>
>>>>> 5) i can share with you my live smtp logs with simscan debug.
>>>>>
>>>>> have extracted some lines below 
>>>>>
>>>>>
>>>>> Error forking qmail-queue
>>>>>
>>>>> @4000000059a8fa7b0a2ed1b4 tcpserver: status: 31/200
>>>>> @4000000059a8fa7b13162584 simscan: cdb looking up version spam
>>>>> @4000000059a8fa7b13166bd4 simscan: runned_scanners is  attach: 1.4.0 
>>>>> clamav: 0.98.6/m: spam: 3.3.2
>>>>> @4000000059a8fa7b13166fbc simscan: found 3.3.2
>>>>> @4000000059a8fa7b13168efc simscan:[10757]:CLEAN 
>>>>> (5.00/30.00):9.7712s:-Possible Spam- RE_ REQUIRE BOOKING // 1X20  //
>>>>> ICD TKD TO BANDAR 
>>>>> ABASS:103.241.181.228:cs....@atlasdecargo.com:rathe...@radiant-india.net
>>>>> @4000000059a8fa7b1316cd7c simscan: done, execing qmail-queue
>>>>> @4000000059a8fa7b1316fc5c simscan: error forking qmail-queue
>>>>> @4000000059a8fa7b13199854 simscan: exit error code: 71
>>>>> @4000000059a8fa7b131c4004 qmail-smtpd: qq soft reject (mail server 
>>>>> temporarily rejected message (#4.3.0)): MAILFROM:<cs....@xxxxx.com>
>>>>> RCPTTO:rathe...@yyyyy.net
>>>>>
>>>>>
>>>>> Error in ripmime
>>>>>
>>>>> @4000000059a8fa98045a4bc4 simscan: pelookup: domain is aissamaritime.in
>>>>> @4000000059a8fa98045a4bc4 simscan: cdb looking up aissamaritime.in
>>>>> @4000000059a8fa98045a4fac simscan: pelookup: local part is shailesh_k_bom
>>>>> @4000000059a8fa98045a4fac simscan: lpart: local part is **
>>>>> @4000000059a8fa98045a5394 simscan: cdb looking up 
>>>>> shailesh_k_...@aissamaritime.in
>>>>> @4000000059a8fa98045a5394 simscan: ripmime error
>>>>> @4000000059a8fa98045a6334 simscan: exit error code: 71
>>>>> @4000000059a8fa98045a95fc qmail-smtpd: qq soft reject (mail server 
>>>>> temporarily rejected message (#4.3.0)):
>>>>> MAILFROM:<imp...@xxxxxxx.in> RCPTTO:shailesh_k_...@yyyyyy.in
>>>>>
>>>>>
>>>>> Wierd error logs
>>>>>
>>>>> @4000000059a9032f3aa79a24 simscan: clamdscan: ----------- SCAN SUMMARY 
>>>>> -----------
>>>>> @4000000059a9032f3aa7b964 simscan: clamdscan: 
>>>>> /var/qmail/simscan/1504248613.321653.5221: OK
>>>>> @4000000059a9032f3aa86d14 simscan: clamdscan:
>>>>> @4000000059a9032f3aa870fc simscan: clamdscan: ---simscan: cdb looking up 
>>>>> version clamav
>>>>> @4000000059a9032f3aa8a3c4 -------- SCAN simscan: clamdscan: 
>>>>> SIUnMfMeAcRtYe d- -fsimscan: runned_scanners is  attach: 1.4.0 clamav: 
>>>>> 0.98.6/m:
>>>>> @4000000059a9032f3aa8c304 -isimscan: found 0.98.6/m:
>>>>> @4000000059a9032f3aa8c6ec -l-e-s-:- -0
>>>>> @4000000059a9032f3aa8f1e4 --simscan: normal clamdscan return code: 0
>>>>> @4000000059a9032f3aa8f1e4
>>>>> @4000000059a9032f3aa8f5cc simscan: clamdscan: Infected fsimscan: 
>>>>> clamdscan: iTliemes::  00
>>>>> @4000000059a9032f3aa93834 .simscan: clamdscan: 1T1i8m es:e c0 .1(002  ms 
>>>>> e0simscan: calling spamc
>>>>> @4000000059a9032f3aa96ee4 c  s(0)simscan: calling /usr/bin/spamc simscan: 
>>>>> clamdscan:
>>>>> @4000000059a9032f3aa999dc  spamcm
>>>>> @4000000059a9032f3aa999dc 0 s)
>>>>> @4000000059a9032f3aa9ad64 /var/qmail/simscan/1simscan: check_spam had an 
>>>>> error ret: -1
>>>>> @4000000059a9032f3aa9e02c 504248613.307311.5215: OK
>>>>> @4000000059a9032f3aaaa37c simscan: clamdscan:
>>>>> @4000000059a9032f3aaaa764 simscan: clamdscan: ----------- SCAN SUMMARY 
>>>>> -----------
>>>>> @4000000059a9032f3aab3fbc simscan: clamdscan: Infected files: 0
>>>>> @4000000059a9032f3aaba164 simscan: clamdscan: Time: 0.135 sec (0 m 0 s)
>>>>> @4000000059a9032f3aac39bc simscan: clamdscan: 
>>>>> /var/qmail/simscan/15simscan: exit error code: 71
>>>>> @4000000059a9032f3aaca334 04248613.308469.5216: OK
>>>>> @4000000059a9032f3aacddcc simscan: clamdscan:
>>>>> @4000000059a9032f3aace984 simscan: clamdscan: ----------- SCAN SUMMARY 
>>>>> -----------
>>>>> @4000000059a9
>>>>>
>>>>>
>>>>> ################
>>>>>
>>>>> @4000000059a9032f3aa86d14 simscan: clamdscan:
>>>>> @4000000059a9032f3aa870fc simscan: clamdscan: ---simscan: cdb looking up 
>>>>> version clamav
>>>>> @4000000059a9032f3aa8a3c4 -------- SCAN simscan: clamdscan: 
>>>>> SIUnMfMeAcRtYe d- -fsimscan: runned_scanners is  attach: 1.4.0 clamav: 
>>>>> 0.98.6/m:
>>>>> @4000000059a9032f3aa8c304 -isimscan: found 0.98.6/m:
>>>>> @4000000059a9032f3aa8c6ec -l-e-s-:- -0
>>>>> @4000000059a9032f3aa8f1e4 --simscan: normal clamdscan return code: 0
>>>>> @4000000059a9032f3aa8f1e4
>>>>> @4000000059a9032f3aa8f5cc simscan: clamdscan: Infected fsimscan: 
>>>>> clamdscan: iTliemes::  00
>>>>> @4000000059a9032f3aa93834 .simscan: clamdscan: 1T1i8m es:e c0 .1(002  ms 
>>>>> e0simscan: calling spamc
>>>>> @4000000059a9032f3aa96ee4 c  s(0)simscan: calling /usr/bin/spamc simscan: 
>>>>> clamdscan:
>>>>> @4000000059a9032f3aa999dc  spamcm
>>>>> @4000000059a9032f3aa999dc 0 s)
>>>>> @4000000059a9032f3aa9ad64 /var/qmail/simscan/1simscan: check_spam had an 
>>>>> error ret: -1
>>>>> @4000000059a9032f3aa9e02c 504248613.307311.5215: OK
>>>>> @4000000059a9032f3aaaa37c simscan: clamdscan:
>>>>> @4000000059a9032f3aaaa764 simscan: clamdscan: ----------- SCAN SUMMARY 
>>>>> -----------
>>>>> @4000000059a9032f3aab3fbc simscan: clamdscan: Infected files: 0
>>>>> @4000000059a9032f3aaba164 simscan: clamdscan: Time: 0.135 sec (0 m 0 s)
>>>>> @4000000059a9032f3aac39bc simscan: clamdscan: 
>>>>> /var/qmail/simscan/15simscan: exit error code: 71
>>>>> @4000000059a9032f3aaca334 04248613.308469.5216: OK
>>>>>
>>>>>
>>>>>
>>>>> thanks,
>>>>> rajesh
>>>>>
>>>>>
>>>>>
>>>>> ----- Original Message -----
>>>>> From: Remo Mattei [mailto:r...@mattei.org]
>>>>> To: 24x7ser...@24x7server.net
>>>>> Sent: Thu, 31 Aug 2017 07:58:22 -0700
>>>>> Subject: 
>>>>>
>>>>> No it reads it everytime.
>>>>>
>>>>> Yes permissions are good
>>>>>
>>>>> Remo
>>>>>
>>>>> On 8/31/17 7:48 AM, Rajesh M wrote:
>>>>>> thank for sharing your experience remo,
>>>>>>
>>>>>> so would the following be correct ?
>>>>>>
>>>>>> chmod 2750  simscan
>>>>>> chown clamav.clamav simscan
>>>>>>
>>>>>> do i need to stop qmail while applying this ?
>>>>>>
>>>>>> rajesh
>>>>>>
>>>>>>
>>>>>> ----- Original Message -----
>>>>>> From: Remo Mattei [mailto:r...@mattei.org]
>>>>>> To: qmailtoaster-list@qmailtoaster.com,24x7ser...@24x7server.net
>>>>>> Sent: Thu, 31 Aug 2017 07:23:20 -0700
>>>>>> Subject: 
>>>>>>
>>>>>> I had the same issue with qq.
>>>>>>
>>>>>> I changed the permissions and all good. I also raised the value of the
>>>>>> softlimits exec /usr/bin/softlimit -m 1040000000
>>>>>>
>>>>>> and my permissions are drwxr-s---   2 clamav clamav 4096 Aug 31 07:19
>>>>>> simscan
>>>>>>
>>>>>> So hopefully this helps.
>>>>>>
>>>>>> Remo
>>>>>>
>>>>>>
>>>>>> On 8/31/17 6:51 AM, Rajesh M wrote:
>>>>>>> eric
>>>>>>>
>>>>>>> on my qmailtoaster server (centos 6 64 bit)  there are several domains 
>>>>>>> --- high traffic
>>>>>>>
>>>>>>> about 80 percent of them are routed via the sophos antispam filter and 
>>>>>>> then passed on to the mailserver with spamassassin/clam disabled by 
>>>>>>> adding the ip of the sophos server to the tcp.smtp file to exclude the 
>>>>>>> line /var/qmail/bin/simscan
>>>>>>>
>>>>>>> the balance 20 are directly reaching the mailserver ie mx pointed to 
>>>>>>> mailserver instead of sophos server and are scanned with clam / 
>>>>>>> spamassassin.
>>>>>>>
>>>>>>> today i turned on the spamassassin / clam for the above 80 percent 
>>>>>>> domains too and this started throwing qq reject errors on  a large 
>>>>>>> scale but randomly.
>>>>>>>
>>>>>>> spamassassin child-processes was set to 20 to handle the load
>>>>>>>
>>>>>>> i checked the log files for the last 30 days till yesterday and found 
>>>>>>> that the same qq reject errors were present but very rarely ie 3 to 4 
>>>>>>> times on a single day (occasional high load ??)
>>>>>>> so it seems that this error comes up only when the load on the server 
>>>>>>> is high, all take place when there are attachments.
>>>>>>>
>>>>>>> reading the thread you sent me, i am not sure whether it applies to my 
>>>>>>> case but i can try out.
>>>>>>>
>>>>>>> #############
>>>>>>> drwxr-x---  2 clamav root     6 May  6 17:57 simscan/
>>>>>>>
>>>>>>> changing this to the following fixed the problem:
>>>>>>> drwxr-s---  2 clamav clamav     6 May  6 17:57 simscan/
>>>>>>> ###########
>>>>>>>
>>>>>>> should i just 
>>>>>>> chown clamav.clamav simscan
>>>>>>>
>>>>>>>
>>>>>>> thanks
>>>>>>> rajesh
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> ----- Original Message -----
>>>>>>> From: Eric Broch [mailto:ebr...@whitehorsetc.com]
>>>>>>> To: 24x7ser...@24x7server.net
>>>>>>> Sent: Thu, 31 Aug 2017 06:42:08 -0600
>>>>>>> Subject: 
>>>>>>>
>>>>>>> Have a look here, Rajesh, I'm not sure if it will help:
>>>>>>>
>>>>>>> https://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg40456.html
>>>>>>>
>>>>>>>
>>>>>>> On 8/31/2017 4:51 AM, Rajesh M wrote:
>>>>>>>> hi
>>>>>>>>
>>>>>>>> centos 6 64 bit
>>>>>>>> SpamAssassin version 3.3.2
>>>>>>>> ClamAV 0.98.6/23745/Thu Aug 31 14:07:08 2017
>>>>>>>>
>>>>>>>> we have a sophos antispam firewall which receives our emails and then 
>>>>>>>> routes them to our mail server (qmailtoaster, dovecot, spamassassin, 
>>>>>>>> clam)
>>>>>>>>
>>>>>>>> in the mail server we had stopped spamassassin
>>>>>>>>
>>>>>>>> however due to some custom requirements by our clients we enabled the 
>>>>>>>> same
>>>>>>>>
>>>>>>>> however we get the following error when the load on the server is high 
>>>>>>>> on a random basis.
>>>>>>>>
>>>>>>>> 2017-08-31 14:48:05.753994500 simscan: calling spamc
>>>>>>>> 2017-08-31 14:48:05.754001500 simscan: calling /usr/bin/spamc  spamc
>>>>>>>> 2017-08-31 14:48:05.754010500 simscan: check_spam had an error ret: -1
>>>>>>>> 2017-08-31 14:48:05.754101500 simscan: exit error code: 71
>>>>>>>> 2017-08-31 14:48:05.754220500 qmail-smtpd: qq soft reject (mail server 
>>>>>>>> temporarily rejected message (#4.3.0)): 
>>>>>>>> MAILFROM:<sunil.saharan@@yyyy.com> RCPTTO:c...@yyyy.com
>>>>>>>>
>>>>>>>>
>>>>>>>> 2017-08-31 14:48:05.956137500 simscan: ripmime error
>>>>>>>> qmail-smtpd: qq soft reject (mail server temporarily rejected message
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> if i disable simscan in tcp.smtp then errors do not take place.
>>>>>>>>
>>>>>>>> i enabled simscan debug and this is the result.
>>>>>>>>
>>>>>>>> 2017-08-31 14:48:05.956144500 qmail-smtpd: qq soft reject (mail server 
>>>>>>>> temporarily rejected message (#4.3.0)): 
>>>>>>>> MAILFROM:<sunil.saha...@yyyy.com> RCPTTO:inv1...@xxxx.net
>>>>>>>>
>>>>>>>>
>>>>>>>> clam=yes,spam=yes,spam_hits=30,spam_passthru=yes,attach=.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>>>>> 2017-08-31 14:48:05.746592500 simscan: pelookup clam = yes
>>>>>>>> 2017-08-31 14:48:05.746593500 simscan: pelookup spam = yes
>>>>>>>> 2017-08-31 14:48:05.746593500 simscan: pelookup spam_hits = 30
>>>>>>>> 2017-08-31 14:48:05.746595500 simscan: Per Domain Hits set to : 
>>>>>>>> 30.000000
>>>>>>>> 2017-08-31 14:48:05.746595500 simscan: pelookup spam_passthru = yes
>>>>>>>> 2017-08-31 14:48:05.746596500 simscan: unimplemented flag 
>>>>>>>> spam_passthru = yes
>>>>>>>> 2017-08-31 14:48:05.746596500 simscan: pelookup attach = 
>>>>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>>>>> 2017-08-31 14:48:05.746599500 simscan: attachment flag attach = 
>>>>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>>>>> 2017-08-31 14:48:05.746602500 simscan: add_attach called with 
>>>>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>>>>> 2017-08-31 14:48:05.746606500 simscan: .ace is attachment number 0
>>>>>>>> 2017-08-31 14:48:05.746607500 simscan: .arc is attachment number 1
>>>>>>>> 2017-08-31 14:48:05.746607500 simscan: .arj is attachment number 2
>>>>>>>> 2017-08-31 14:48:05.746607500 simscan: .b64 is attachment number 3
>>>>>>>> 2017-08-31 14:48:05.746610500 simscan: .bat is attachment number 4
>>>>>>>> 2017-08-31 14:48:05.746610500 simscan: .bhx is attachment number 5
>>>>>>>> 2017-08-31 14:48:05.746610500 simscan: .cab is attachment number 6
>>>>>>>> 2017-08-31 14:48:05.746611500 simscan: .chm is attachment number 7
>>>>>>>> 2017-08-31 14:48:05.746611500 simscan: .com is attachment number 8
>>>>>>>> 2017-08-31 14:48:05.746611500 simscan: .cpl is attachment number 9
>>>>>>>> 2017-08-31 14:48:05.746611500 simscan: .dll is attachment number 10
>>>>>>>> 2017-08-31 14:48:05.746612500 simscan: .exe is attachment number 11
>>>>>>>> 2017-08-31 14:48:05.746614500 simscan: .gz is attachment number 12
>>>>>>>> 2017-08-31 14:48:05.746614500 simscan: .hqx is attachment number 13
>>>>>>>> 2017-08-31 14:48:05.746614500 simscan: .hta is attachment number 14
>>>>>>>> 2017-08-31 14:48:05.746615500 simscan: .inf is attachment number 15
>>>>>>>> 2017-08-31 14:48:05.746615500 simscan: .ins is attachment number 16
>>>>>>>> 2017-08-31 14:48:05.746615500 simscan: .iso is attachment number 17
>>>>>>>> 2017-08-31 14:48:05.746616500 simscan: .isp is attachment number 18
>>>>>>>> 2017-08-31 14:48:05.746616500 simscan: .jse is attachment number 19
>>>>>>>> 2017-08-31 14:48:05.746618500 simscan: .lib is attachment number 20
>>>>>>>> 2017-08-31 14:48:05.746618500 simscan: .lnk is attachment number 21
>>>>>>>> 2017-08-31 14:48:05.746619500 simscan: .lzh is attachment number 22
>>>>>>>> 2017-08-31 14:48:05.746622500 simscan: .mim is attachment number 23
>>>>>>>> 2017-08-31 14:48:05.746622500 simscan: .msp is attachment number 24
>>>>>>>> 2017-08-31 14:48:05.746623500 simscan: .mst is attachment number 25
>>>>>>>> 2017-08-31 14:48:05.746623500 simscan: .pif is attachment number 26
>>>>>>>> 2017-08-31 14:48:05.746623500 simscan: .reg is attachment number 27
>>>>>>>> 2017-08-31 14:48:05.746624500 simscan: .scf is attachment number 28
>>>>>>>> 2017-08-31 14:48:05.746624500 simscan: .scr is attachment number 29
>>>>>>>> 2017-08-31 14:48:05.746624500 simscan: .sct is attachment number 30
>>>>>>>> 2017-08-31 14:48:05.746630500 simscan: .shb is attachment number 31
>>>>>>>> 2017-08-31 14:48:05.746630500 simscan: .shs is attachment number 32
>>>>>>>> 2017-08-31 14:48:05.746631500 simscan: .sys is attachment number 33
>>>>>>>> 2017-08-31 14:48:05.746631500 simscan: .taz is attachment number 34
>>>>>>>> 2017-08-31 14:48:05.746631500 simscan: .tgz is attachment number 35
>>>>>>>> 2017-08-31 14:48:05.746632500 simscan: .tz is attachment number 36
>>>>>>>> 2017-08-31 14:48:05.746632500 simscan: .url is attachment number 37
>>>>>>>> 2017-08-31 14:48:05.746632500 simscan: .uu is attachment number 38
>>>>>>>> 2017-08-31 14:48:05.746635500 simscan: .uue is attachment number 39
>>>>>>>> 2017-08-31 14:48:05.746635500 simscan: .vb is attachment number 40
>>>>>>>> 2017-08-31 14:48:05.746635500 simscan: .vbe is attachment number 41
>>>>>>>> 2017-08-31 14:48:05.746636500 simscan: .vbs is attachment number 42
>>>>>>>> 2017-08-31 14:48:05.746636500 simscan: .wsc is attachment number 43
>>>>>>>> 2017-08-31 14:48:05.746636500 simscan: .wsf is attachment number 44
>>>>>>>> 2017-08-31 14:48:05.746637500 simscan: .wsh is attachment number 45
>>>>>>>> 2017-08-31 14:48:05.746637500 simscan: .xxe is attachment number 46
>>>>>>>> 2017-08-31 14:48:05.746639500 simscan: .docm is attachment number 47
>>>>>>>> 2017-08-31 14:48:05.746639500 simscan: .z is attachment number 48
>>>>>>>> 2017-08-31 14:48:05.746640500 simscan: .jar is attachment number 49
>>>>>>>> 2017-08-31 14:48:05.746643500 simscan: pelookup: local part is cs2
>>>>>>>> 2017-08-31 14:48:05.746643500 simscan: lpart: local part is **
>>>>>>>> 2017-08-31 14:48:05.746644500 simscan: cdb looking up c...@yyyy.com
>>>>>>>> 2017-08-31 14:48:05.747114500 simscan: checking attachment textfile2 
>>>>>>>> against .ace
>>>>>>>> 2017-08-31 14:48:05.747123500 simscan: checking attachment textfile2 
>>>>>>>> against .arc
>>>>>>>> 2017-08-31 14:48:05.747124500 simscan: checking attachment textfile2 
>>>>>>>> against .arj
>>>>>>>> 2017-08-31 14:48:05.747124500 simscan: checking attachment textfile2 
>>>>>>>> against .b64
>>>>>>>> 2017-08-31 14:48:05.747125500 simscan: checking attachment textfile2 
>>>>>>>> against .bat
>>>>>>>> 2017-08-31 14:48:05.747126500 simscan: checking attachment textfile2 
>>>>>>>> against .bhx
>>>>>>>> 2017-08-31 14:48:05.747132500 simscan: checking attachment textfile2 
>>>>>>>> against .cab
>>>>>>>> 2017-08-31 14:48:05.747133500 simscan: checking attachment textfile2 
>>>>>>>> against .chm
>>>>>>>> 2017-08-31 14:48:05.747134500 simscan: checking attachment textfile2 
>>>>>>>> against .com
>>>>>>>> 2017-08-31 14:48:05.747134500 simscan: checking attachment textfile2 
>>>>>>>> against .cpl
>>>>>>>> 2017-08-31 14:48:05.747135500 simscan: checking attachment textfile2 
>>>>>>>> against .dll
>>>>>>>> 2017-08-31 14:48:05.747135500 simscan: checking attachment textfile2 
>>>>>>>> against .exe
>>>>>>>> 2017-08-31 14:48:05.747136500 simscan: checking attachment textfile2 
>>>>>>>> against .gz
>>>>>>>> 2017-08-31 14:48:05.747140500 simscan: checking attachment textfile2 
>>>>>>>> against .hqx
>>>>>>>> 2017-08-31 14:48:05.747146500 simscan: checking attachment textfile2 
>>>>>>>> against .hta
>>>>>>>> 2017-08-31 14:48:05.747147500 simscan: checking attachment textfile2 
>>>>>>>> against .inf
>>>>>>>> 2017-08-31 14:48:05.747147500 simscan: checking attachment textfile2 
>>>>>>>> against .ins
>>>>>>>> 2017-08-31 14:48:05.747148500 simscan: checking attachment textfile2 
>>>>>>>> against .iso
>>>>>>>> 2017-08-31 14:48:05.747149500 simscan: checking attachment textfile2 
>>>>>>>> against .isp
>>>>>>>> 2017-08-31 14:48:05.747149500 simscan: checking attachment textfile2 
>>>>>>>> against .jse
>>>>>>>> 2017-08-31 14:48:05.747150500 simscan: checking attachment textfile2 
>>>>>>>> against .lib
>>>>>>>> 2017-08-31 14:48:05.747162500 simscan: checking attachment textfile2 
>>>>>>>> against .lnk
>>>>>>>> 2017-08-31 14:48:05.747162500 simscan: checking attachment textfile2 
>>>>>>>> against .lzh
>>>>>>>> 2017-08-31 14:48:05.747163500 simscan: checking attachment textfile2 
>>>>>>>> against .mim
>>>>>>>> 2017-08-31 14:48:05.747164500 simscan: checking attachment textfile2 
>>>>>>>> against .msp
>>>>>>>> 2017-08-31 14:48:05.747164500 simscan: checking attachment textfile2 
>>>>>>>> against .mst
>>>>>>>> 2017-08-31 14:48:05.747171500 simscan: checking attachment textfile2 
>>>>>>>> against .pif
>>>>>>>> 2017-08-31 14:48:05.747171500 simscan: checking attachment textfile2 
>>>>>>>> against .reg
>>>>>>>> 2017-08-31 14:48:05.747172500 simscan: checking attachment textfile2 
>>>>>>>> against .scf
>>>>>>>> 2017-08-31 14:48:05.747173500 simscan: checking attachment textfile2 
>>>>>>>> against .scr
>>>>>>>> 2017-08-31 14:48:05.747173500 simscan: checking attachment textfile2 
>>>>>>>> against .sct
>>>>>>>> 2017-08-31 14:48:05.747174500 simscan: checking attachment textfile2 
>>>>>>>> against .shb
>>>>>>>> 2017-08-31 14:48:05.747175500 simscan: checking attachment textfile2 
>>>>>>>> against .shs
>>>>>>>> 2017-08-31 14:48:05.747189500 simscan: checking attachment textfile2 
>>>>>>>> against .sys
>>>>>>>> 2017-08-31 14:48:05.747189500 simscan: checking attachment textfile2 
>>>>>>>> against .taz
>>>>>>>> 2017-08-31 14:48:05.747190500 simscan: checking attachment textfile2 
>>>>>>>> against .tgz
>>>>>>>> 2017-08-31 14:48:05.747191500 simscan: checking attachment textfile2 
>>>>>>>> against .tz
>>>>>>>> 2017-08-31 14:48:05.747191500 simscan: checking attachment textfile2 
>>>>>>>> against .url
>>>>>>>> 2017-08-31 14:48:05.747192500 simscan: checking attachment textfile2 
>>>>>>>> against .uu
>>>>>>>> 2017-08-31 14:48:05.747195500 simscan: checking attachment textfile2 
>>>>>>>> against .uue
>>>>>>>> 2017-08-31 14:48:05.747196500 simscan: checking attachment textfile2 
>>>>>>>> against .vb
>>>>>>>> 2017-08-31 14:48:05.747197500 simscan: checking attachment textfile2 
>>>>>>>> against .vbe
>>>>>>>> 2017-08-31 14:48:05.747197500 simscan: checking attachment textfile2 
>>>>>>>> against .vbs
>>>>>>>> 2017-08-31 14:48:05.747198500 simscan: checking attachment textfile2 
>>>>>>>> against .wsc
>>>>>>>> 2017-08-31 14:48:05.747198500 simscan: checking attachment textfile2 
>>>>>>>> against .wsf
>>>>>>>> 2017-08-31 14:48:05.747202500 simscan: checking attachment textfile2 
>>>>>>>> against .wsh
>>>>>>>> 2017-08-31 14:48:05.747208500 simscan: checking attachment textfile2 
>>>>>>>> against .xxe
>>>>>>>> 2017-08-31 14:48:05.747209500 simscan: checking attachment textfile2 
>>>>>>>> against .docm
>>>>>>>> 2017-08-31 14:48:05.747209500 simscan: checking attachment textfile2 
>>>>>>>> against .z
>>>>>>>> 2017-08-31 14:48:05.747210500 simscan: checking attachment textfile2 
>>>>>>>> against .jar
>>>>>>>> 2017-08-31 14:48:05.747210500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .ace
>>>>>>>> 2017-08-31 14:48:05.747211500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .arc
>>>>>>>> 2017-08-31 14:48:05.747215500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .arj
>>>>>>>> 2017-08-31 14:48:05.747215500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .b64
>>>>>>>> 2017-08-31 14:48:05.747216500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .bat
>>>>>>>> 2017-08-31 14:48:05.747217500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .bhx
>>>>>>>> 2017-08-31 14:48:05.747218500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .cab
>>>>>>>> 2017-08-31 14:48:05.747221500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .chm
>>>>>>>> 2017-08-31 14:48:05.747222500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .com
>>>>>>>> 2017-08-31 14:48:05.747223500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .cpl
>>>>>>>> 2017-08-31 14:48:05.747224500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .dll
>>>>>>>> 2017-08-31 14:48:05.747224500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .exe
>>>>>>>> 2017-08-31 14:48:05.747230500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .gz
>>>>>>>> 2017-08-31 14:48:05.747231500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .hqx
>>>>>>>> 2017-08-31 14:48:05.747231500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .hta
>>>>>>>> 2017-08-31 14:48:05.747232500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .inf
>>>>>>>> 2017-08-31 14:48:05.747233500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .ins
>>>>>>>> 2017-08-31 14:48:05.747237500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .iso
>>>>>>>> 2017-08-31 14:48:05.747238500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .isp
>>>>>>>> 2017-08-31 14:48:05.747238500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .jse
>>>>>>>> 2017-08-31 14:48:05.747239500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .lib
>>>>>>>> 2017-08-31 14:48:05.747240500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .lnk
>>>>>>>> 2017-08-31 14:48:05.747243500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .lzh
>>>>>>>> 2017-08-31 14:48:05.747244500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .mim
>>>>>>>> 2017-08-31 14:48:05.747245500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .msp
>>>>>>>> 2017-08-31 14:48:05.747246500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .mst
>>>>>>>> 2017-08-31 14:48:05.747246500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .pif
>>>>>>>> 2017-08-31 14:48:05.747257500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .reg
>>>>>>>> 2017-08-31 14:48:05.747258500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .scf
>>>>>>>> 2017-08-31 14:48:05.747259500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .scr
>>>>>>>> 2017-08-31 14:48:05.747260500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .sct
>>>>>>>> 2017-08-31 14:48:05.747260500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .shb
>>>>>>>> 2017-08-31 14:48:05.747264500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .shs
>>>>>>>> 2017-08-31 14:48:05.747265500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .sys
>>>>>>>> 2017-08-31 14:48:05.747266500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .taz
>>>>>>>> 2017-08-31 14:48:05.747266500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .tgz
>>>>>>>> 2017-08-31 14:48:05.747267500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .tz
>>>>>>>> 2017-08-31 14:48:05.747271500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .url
>>>>>>>> 2017-08-31 14:48:05.747271500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .uu
>>>>>>>> 2017-08-31 14:48:05.747272500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .uue
>>>>>>>> 2017-08-31 14:48:05.747273500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .vb
>>>>>>>> 2017-08-31 14:48:05.747279500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .vbe
>>>>>>>> 2017-08-31 14:48:05.747280500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .vbs
>>>>>>>> 2017-08-31 14:48:05.747280500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .wsc
>>>>>>>> 2017-08-31 14:48:05.747281500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .wsf
>>>>>>>> 2017-08-31 14:48:05.747282500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .wsh
>>>>>>>> 2017-08-31 14:48:05.747285500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .xxe
>>>>>>>> 2017-08-31 14:48:05.747286500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .docm
>>>>>>>> 2017-08-31 14:48:05.747287500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .z
>>>>>>>> 2017-08-31 14:48:05.747288500 simscan: checking attachment 
>>>>>>>> msg.1504171085.205836.36767 against .jar
>>>>>>>> 2017-08-31 14:48:05.747289500 simscan: checking attachment textfile0 
>>>>>>>> against .ace
>>>>>>>> 2017-08-31 14:48:05.747292500 simscan: checking attachment textfile0 
>>>>>>>> against .arc
>>>>>>>> 2017-08-31 14:48:05.747293500 simscan: checking attachment textfile0 
>>>>>>>> against .arj
>>>>>>>> 2017-08-31 14:48:05.747294500 simscan: checking attachment textfile0 
>>>>>>>> against .b64
>>>>>>>> 2017-08-31 14:48:05.747294500 simscan: checking attachment textfile0 
>>>>>>>> against .bat
>>>>>>>> 2017-08-31 14:48:05.747295500 simscan: checking attachment textfile0 
>>>>>>>> against .bhx
>>>>>>>> 2017-08-31 14:48:05.747296500 simscan: checking attachment textfile0 
>>>>>>>> against .cab
>>>>>>>> 2017-08-31 14:48:05.747299500 simscan: checking attachment textfile0 
>>>>>>>> against .chm
>>>>>>>> 2017-08-31 14:48:05.747305500 simscan: checking attachment textfile0 
>>>>>>>> against .com
>>>>>>>> 2017-08-31 14:48:05.747305500 simscan: checking attachment textfile0 
>>>>>>>> against .cpl
>>>>>>>> 2017-08-31 14:48:05.747306500 simscan: checking attachment textfile0 
>>>>>>>> against .dll
>>>>>>>> 2017-08-31 14:48:05.747307500 simscan: checking attachment textfile0 
>>>>>>>> against .exe
>>>>>>>> 2017-08-31 14:48:05.747307500 simscan: checking attachment textfile0 
>>>>>>>> against .gz
>>>>>>>> 2017-08-31 14:48:05.747308500 simscan: checking attachment textfile0 
>>>>>>>> against .hqx
>>>>>>>> 2017-08-31 14:48:05.747311500 simscan: checking attachment textfile0 
>>>>>>>> against .hta
>>>>>>>> 2017-08-31 14:48:05.747312500 simscan: checking attachment textfile0 
>>>>>>>> against .inf
>>>>>>>> 2017-08-31 14:48:05.747312500 simscan: checking attachment textfile0 
>>>>>>>> against .ins
>>>>>>>> 2017-08-31 14:48:05.747313500 simscan: checking attachment textfile0 
>>>>>>>> against .iso
>>>>>>>> 2017-08-31 14:48:05.747314500 simscan: checking attachment textfile0 
>>>>>>>> against .isp
>>>>>>>> 2017-08-31 14:48:05.747314500 simscan: checking attachment textfile0 
>>>>>>>> against .jse
>>>>>>>> 2017-08-31 14:48:05.747318500 simscan: checking attachment textfile0 
>>>>>>>> against .lib
>>>>>>>> 2017-08-31 14:48:05.747318500 simscan: checking attachment textfile0 
>>>>>>>> against .lnk
>>>>>>>> 2017-08-31 14:48:05.747319500 simscan: checking attachment textfile0 
>>>>>>>> against .lzh
>>>>>>>> 2017-08-31 14:48:05.747320500 simscan: checking attachment textfile0 
>>>>>>>> against .mim
>>>>>>>> 2017-08-31 14:48:05.747320500 simscan: checking attachment textfile0 
>>>>>>>> against .msp
>>>>>>>> 2017-08-31 14:48:05.747321500 simscan: checking attachment textfile0 
>>>>>>>> against .mst
>>>>>>>> 2017-08-31 14:48:05.747328500 simscan: checking attachment textfile0 
>>>>>>>> against .pif
>>>>>>>> 2017-08-31 14:48:05.747329500 simscan: checking attachment textfile0 
>>>>>>>> against .reg
>>>>>>>> 2017-08-31 14:48:05.747335500 simscan: checking attachment textfile0 
>>>>>>>> against .scf
>>>>>>>> 2017-08-31 14:48:05.747336500 simscan: checking attachment textfile0 
>>>>>>>> against .scr
>>>>>>>> 2017-08-31 14:48:05.747336500 simscan: checking attachment textfile0 
>>>>>>>> against .sct
>>>>>>>> 2017-08-31 14:48:05.747337500 simscan: checking attachment textfile0 
>>>>>>>> against .shb
>>>>>>>> 2017-08-31 14:48:05.747338500 simscan: checking attachment textfile0 
>>>>>>>> against .shs
>>>>>>>> 2017-08-31 14:48:05.747338500 simscan: checking attachment textfile0 
>>>>>>>> against .sys
>>>>>>>> 2017-08-31 14:48:05.747342500 simscan: checking attachment textfile0 
>>>>>>>> against .taz
>>>>>>>> 2017-08-31 14:48:05.747342500 simscan: checking attachment textfile0 
>>>>>>>> against .tgz
>>>>>>>> 2017-08-31 14:48:05.747343500 simscan: checking attachment textfile0 
>>>>>>>> against .tz
>>>>>>>> 2017-08-31 14:48:05.747344500 simscan: checking attachment textfile0 
>>>>>>>> against .url
>>>>>>>> 2017-08-31 14:48:05.747344500 simscan: checking attachment textfile0 
>>>>>>>> against .uu
>>>>>>>> 2017-08-31 14:48:05.747345500 simscan: checking attachment textfile0 
>>>>>>>> against .uue
>>>>>>>> 2017-08-31 14:48:05.747349500 simscan: checking attachment textfile0 
>>>>>>>> against .vb
>>>>>>>> 2017-08-31 14:48:05.747349500 simscan: checking attachment textfile0 
>>>>>>>> against .vbe
>>>>>>>> 2017-08-31 14:48:05.747350500 simscan: checking attachment textfile0 
>>>>>>>> against .vbs
>>>>>>>> 2017-08-31 14:48:05.747350500 simscan: checking attachment textfile0 
>>>>>>>> against .wsc
>>>>>>>> 2017-08-31 14:48:05.747351500 simscan: checking attachment textfile0 
>>>>>>>> against .wsf
>>>>>>>> 2017-08-31 14:48:05.747352500 simscan: checking attachment textfile0 
>>>>>>>> against .wsh
>>>>>>>> 2017-08-31 14:48:05.747355500 simscan: checking attachment textfile0 
>>>>>>>> against .xxe
>>>>>>>> 2017-08-31 14:48:05.747361500 simscan: checking attachment textfile0 
>>>>>>>> against .docm
>>>>>>>> 2017-08-31 14:48:05.747362500 simscan: checking attachment textfile0 
>>>>>>>> against .z
>>>>>>>> 2017-08-31 14:48:05.747363500 simscan: checking attachment textfile0 
>>>>>>>> against .jar
>>>>>>>> 2017-08-31 14:48:05.747363500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .ace
>>>>>>>> 2017-08-31 14:48:05.747364500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .arc
>>>>>>>> 2017-08-31 14:48:05.747365500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .arj
>>>>>>>> 2017-08-31 14:48:05.747368500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .b64
>>>>>>>> 2017-08-31 14:48:05.747369500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .bat
>>>>>>>> 2017-08-31 14:48:05.747370500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .bhx
>>>>>>>> 2017-08-31 14:48:05.747371500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .cab
>>>>>>>> 2017-08-31 14:48:05.747372500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .chm
>>>>>>>> 2017-08-31 14:48:05.747375500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .com
>>>>>>>> 2017-08-31 14:48:05.747376500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .cpl
>>>>>>>> 2017-08-31 14:48:05.747376500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .dll
>>>>>>>> 2017-08-31 14:48:05.747377500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .exe
>>>>>>>> 2017-08-31 14:48:05.747378500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .gz
>>>>>>>> 2017-08-31 14:48:05.747384500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .hqx
>>>>>>>> 2017-08-31 14:48:05.747385500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .hta
>>>>>>>> 2017-08-31 14:48:05.747385500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .inf
>>>>>>>> 2017-08-31 14:48:05.747386500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .ins
>>>>>>>> 2017-08-31 14:48:05.747387500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .iso
>>>>>>>> 2017-08-31 14:48:05.747391500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .isp
>>>>>>>> 2017-08-31 14:48:05.747392500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .jse
>>>>>>>> 2017-08-31 14:48:05.747392500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .lib
>>>>>>>> 2017-08-31 14:48:05.747393500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .lnk
>>>>>>>> 2017-08-31 14:48:05.747394500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .lzh
>>>>>>>> 2017-08-31 14:48:05.747402500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .mim
>>>>>>>> 2017-08-31 14:48:05.747403500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .msp
>>>>>>>> 2017-08-31 14:48:05.747403500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .mst
>>>>>>>> 2017-08-31 14:48:05.747404500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .pif
>>>>>>>> 2017-08-31 14:48:05.747410500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .reg
>>>>>>>> 2017-08-31 14:48:05.747411500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .scf
>>>>>>>> 2017-08-31 14:48:05.747412500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .scr
>>>>>>>> 2017-08-31 14:48:05.747412500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .sct
>>>>>>>> 2017-08-31 14:48:05.747413500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .shb
>>>>>>>> 2017-08-31 14:48:05.747417500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .shs
>>>>>>>> 2017-08-31 14:48:05.747418500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .sys
>>>>>>>> 2017-08-31 14:48:05.747418500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .taz
>>>>>>>> 2017-08-31 14:48:05.747419500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .tgz
>>>>>>>> 2017-08-31 14:48:05.747420500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .tz
>>>>>>>> 2017-08-31 14:48:05.747424500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .url
>>>>>>>> 2017-08-31 14:48:05.747425500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .uu
>>>>>>>> 2017-08-31 14:48:05.747426500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .uue
>>>>>>>> 2017-08-31 14:48:05.747426500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .vb
>>>>>>>> 2017-08-31 14:48:05.747432500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .vbe
>>>>>>>> 2017-08-31 14:48:05.747433500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .vbs
>>>>>>>> 2017-08-31 14:48:05.747434500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .wsc
>>>>>>>> 2017-08-31 14:48:05.747435500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .wsf
>>>>>>>> 2017-08-31 14:48:05.747435500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .wsh
>>>>>>>> 2017-08-31 14:48:05.747439500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .xxe
>>>>>>>> 2017-08-31 14:48:05.747440500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .docm
>>>>>>>> 2017-08-31 14:48:05.747441500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .z
>>>>>>>> 2017-08-31 14:48:05.747442500 simscan: checking attachment 
>>>>>>>> addr.1504171085.205836.36767 against .jar
>>>>>>>> 2017-08-31 14:48:05.747442500 simscan: checking attachment textfile1 
>>>>>>>> against .ace
>>>>>>>> 2017-08-31 14:48:05.747446500 simscan: checking attachment textfile1 
>>>>>>>> against .arc
>>>>>>>> 2017-08-31 14:48:05.747446500 simscan: checking attachment textfile1 
>>>>>>>> against .arj
>>>>>>>> 2017-08-31 14:48:05.747447500 simscan: checking attachment textfile1 
>>>>>>>> against .b64
>>>>>>>> 2017-08-31 14:48:05.747447500 simscan: checking attachment textfile1 
>>>>>>>> against .bat
>>>>>>>> 2017-08-31 14:48:05.747448500 simscan: checking attachment textfile1 
>>>>>>>> against .bhx
>>>>>>>> 2017-08-31 14:48:05.747449500 simscan: checking attachment textfile1 
>>>>>>>> against .cab
>>>>>>>> 2017-08-31 14:48:05.747452500 simscan: checking attachment textfile1 
>>>>>>>> against .chm
>>>>>>>> 2017-08-31 14:48:05.747458500 simscan: checking attachment textfile1 
>>>>>>>> against .com
>>>>>>>> 2017-08-31 14:48:05.747459500 simscan: checking attachment textfile1 
>>>>>>>> against .cpl
>>>>>>>> 2017-08-31 14:48:05.747460500 simscan: checking attachment textfile1 
>>>>>>>> against .dll
>>>>>>>> 2017-08-31 14:48:05.747460500 simscan: checking attachment textfile1 
>>>>>>>> against .exe
>>>>>>>> 2017-08-31 14:48:05.747461500 simscan: checking attachment textfile1 
>>>>>>>> against .gz
>>>>>>>> 2017-08-31 14:48:05.747461500 simscan: checking attachment textfile1 
>>>>>>>> against .hqx
>>>>>>>> 2017-08-31 14:48:05.747465500 simscan: checking attachment textfile1 
>>>>>>>> against .hta
>>>>>>>> 2017-08-31 14:48:05.747466500 simscan: checking attachment textfile1 
>>>>>>>> against .inf
>>>>>>>> 2017-08-31 14:48:05.747467500 simscan: checking attachment textfile1 
>>>>>>>> against .ins
>>>>>>>> 2017-08-31 14:48:05.747467500 simscan: checking attachment textfile1 
>>>>>>>> against .iso
>>>>>>>> 2017-08-31 14:48:05.747468500 simscan: checking attachment textfile1 
>>>>>>>> against .isp
>>>>>>>> 2017-08-31 14:48:05.747469500 simscan: checking attachment textfile1 
>>>>>>>> against .jse
>>>>>>>> 2017-08-31 14:48:05.747477500 simscan: checking attachment textfile1 
>>>>>>>> against .lib
>>>>>>>> 2017-08-31 14:48:05.747477500 simscan: checking attachment textfile1 
>>>>>>>> against .lnk
>>>>>>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 
>>>>>>>> against .lzh
>>>>>>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 
>>>>>>>> against .mim
>>>>>>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 
>>>>>>>> against .msp
>>>>>>>> 2017-08-31 14:48:05.747479500 simscan: checking attachment textfile1 
>>>>>>>> against .mst
>>>>>>>> 2017-08-31 14:48:05.747481500 simscan: checking attachment textfile1 
>>>>>>>> against .pif
>>>>>>>> 2017-08-31 14:48:05.747482500 simscan: checking attachment textfile1 
>>>>>>>> against .reg
>>>>>>>> 2017-08-31 14:48:05.747485500 simscan: checking attachment textfile1 
>>>>>>>> against .scf
>>>>>>>> 2017-08-31 14:48:05.747486500 simscan: checking attachment textfile1 
>>>>>>>> against .scr
>>>>>>>> 2017-08-31 14:48:05.747486500 simscan: checking attachment textfile1 
>>>>>>>> against .sct
>>>>>>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 
>>>>>>>> against .shb
>>>>>>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 
>>>>>>>> against .shs
>>>>>>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 
>>>>>>>> against .sys
>>>>>>>> 2017-08-31 14:48:05.747489500 simscan: checking attachment textfile1 
>>>>>>>> against .taz
>>>>>>>> 2017-08-31 14:48:05.747490500 simscan: checking attachment textfile1 
>>>>>>>> against .tgz
>>>>>>>> 2017-08-31 14:48:05.747490500 simscan: checking attachment textfile1 
>>>>>>>> against .tz
>>>>>>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 
>>>>>>>> against .url
>>>>>>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 
>>>>>>>> against .uu
>>>>>>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 
>>>>>>>> against .uue
>>>>>>>> 2017-08-31 14:48:05.747493500 simscan: checking attachment textfile1 
>>>>>>>> against .vb
>>>>>>>> 2017-08-31 14:48:05.747494500 simscan: checking attachment textfile1 
>>>>>>>> against .vbe
>>>>>>>> 2017-08-31 14:48:05.747494500 simscan: checking attachment textfile1 
>>>>>>>> against .vbs
>>>>>>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 
>>>>>>>> against .wsc
>>>>>>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 
>>>>>>>> against .wsf
>>>>>>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 
>>>>>>>> against .wsh
>>>>>>>> 2017-08-31 14:48:05.747497500 simscan: checking attachment textfile1 
>>>>>>>> against .xxe
>>>>>>>> 2017-08-31 14:48:05.747501500 simscan: checking attachment textfile1 
>>>>>>>> against .docm
>>>>>>>> 2017-08-31 14:48:05.747502500 simscan: checking attachment textfile1 
>>>>>>>> against .z
>>>>>>>> 2017-08-31 14:48:05.747502500 simscan: checking attachment textfile1 
>>>>>>>> against .jar
>>>>>>>> 2017-08-31 14:48:05.747502500 simscan: cdb looking up version attach
>>>>>>>> 2017-08-31 14:48:05.747503500 simscan: runned_scanners is  attach: 
>>>>>>>> 1.4.0
>>>>>>>> 2017-08-31 14:48:05.747503500 simscan: found 1.4.0
>>>>>>>> 2017-08-31 14:48:05.747503500 simscan: calling clamdscan
>>>>>>>> 2017-08-31 14:48:05.753721500 simscan: clamdscan: 
>>>>>>>> /var/qmail/simscan/1504171085.205836.36767: OK
>>>>>>>> 2017-08-31 14:48:05.753754500 simscan: clamdscan:
>>>>>>>> 2017-08-31 14:48:05.753754500 simscan: clamdscan: ----------- SCAN 
>>>>>>>> SUMMARY -----------
>>>>>>>> 2017-08-31 14:48:05.753768500 simscan: clamdscan: Infected files: 0
>>>>>>>> 2017-08-31 14:48:05.753771500 simscan: clamdscan: Time: 0.004 sec (0 m 
>>>>>>>> 0 s)
>>>>>>>> 2017-08-31 14:48:05.753957500 simscan: cdb looking up version clamav
>>>>>>>> 2017-08-31 14:48:05.753968500 simscan: runned_scanners is  attach: 
>>>>>>>> 1.4.0 clamav: 0.98.6/m:
>>>>>>>> 2017-08-31 14:48:05.753969500 simscan: found 0.98.6/m:
>>>>>>>> 2017-08-31 14:48:05.753974500 simscan: normal clamdscan return code: 0
>>>>>>>> 2017-08-31 14:48:05.753994500 simscan: calling spamc
>>>>>>>> 2017-08-31 14:48:05.754001500 simscan: calling /usr/bin/spamc  spamc
>>>>>>>> 2017-08-31 14:48:05.754010500 simscan: check_spam had an error ret: -1
>>>>>>>> 2017-08-31 14:48:05.754101500 simscan: exit error code: 71
>>>>>>>> 2017-08-31 14:48:05.754220500 qmail-smtpd: qq soft reject (mail server 
>>>>>>>> temporarily rejected message (#4.3.0)): 
>>>>>>>> MAILFROM:<sunil.saharan@@yyyy.com> RCPTTO:c...@yyyy.com
>>>>>>>> 2017-08-31 14:48:05.755317500 tcpserver: end 36645 status 0
>>>>>>>>
>>>>>>>> ##################
>>>>>>>>
>>>>>>>>
>>>>>>>> 2017-08-31 14:48:05.956040500 simscan: cdb looking up 
>>>>>>>> sunil.saha...@yyyy.com
>>>>>>>> 2017-08-31 14:48:05.956041500 simscan: pelookup: called with 
>>>>>>>> inv1...@xxxx.net
>>>>>>>> 2017-08-31 14:48:05.956042500 simscan: pelookup: domain is 
>>>>>>>> radiant-india.net
>>>>>>>> 2017-08-31 14:48:05.956042500 simscan: cdb looking up radiant-india.net
>>>>>>>> 2017-08-31 14:48:05.956043500 simscan: cdb for radiant-india.net found 
>>>>>>>> clam=yes,spam=yes,spam_hits=30,spam_passthru=yes,attach=.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>>>>> 2017-08-31 14:48:05.956049500 simscan: pelookup clam = yes
>>>>>>>> 2017-08-31 14:48:05.956049500 simscan: pelookup spam = yes
>>>>>>>> 2017-08-31 14:48:05.956050500 simscan: pelookup spam_hits = 30
>>>>>>>> 2017-08-31 14:48:05.956053500 simscan: Per Domain Hits set to : 
>>>>>>>> 30.000000
>>>>>>>> 2017-08-31 14:48:05.956053500 simscan: pelookup spam_passthru = yes
>>>>>>>> 2017-08-31 14:48:05.956059500 simscan: unimplemented flag 
>>>>>>>> spam_passthru = yes
>>>>>>>> 2017-08-31 14:48:05.956060500 simscan: pelookup attach = 
>>>>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>>>>> 2017-08-31 14:48:05.956062500 simscan: attachment flag attach = 
>>>>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>>>>> 2017-08-31 14:48:05.956074500 simscan: add_attach called with 
>>>>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>>>>> 2017-08-31 14:48:05.956079500 simscan: .ace is attachment number 0
>>>>>>>> 2017-08-31 14:48:05.956080500 simscan: .arc is attachment number 1
>>>>>>>> 2017-08-31 14:48:05.956081500 simscan: .arj is attachment number 2
>>>>>>>> 2017-08-31 14:48:05.956081500 simscan: .b64 is attachment number 3
>>>>>>>> 2017-08-31 14:48:05.956087500 simscan: .bat is attachment number 4
>>>>>>>> 2017-08-31 14:48:05.956087500 simscan: .bhx is attachment number 5
>>>>>>>> 2017-08-31 14:48:05.956088500 simscan: .cab is attachment number 6
>>>>>>>> 2017-08-31 14:48:05.956088500 simscan: .chm is attachment number 7
>>>>>>>> 2017-08-31 14:48:05.956089500 simscan: .com is attachment number 8
>>>>>>>> 2017-08-31 14:48:05.956089500 simscan: .cpl is attachment number 9
>>>>>>>> 2017-08-31 14:48:05.956090500 simscan: .dll is attachment number 10
>>>>>>>> 2017-08-31 14:48:05.956090500 simscan: .exe is attachment number 11
>>>>>>>> 2017-08-31 14:48:05.956094500 simscan: .gz is attachment number 12
>>>>>>>> 2017-08-31 14:48:05.956094500 simscan: .hqx is attachment number 13
>>>>>>>> 2017-08-31 14:48:05.956095500 simscan: .hta is attachment number 14
>>>>>>>> 2017-08-31 14:48:05.956095500 simscan: .inf is attachment number 15
>>>>>>>> 2017-08-31 14:48:05.956096500 simscan: .ins is attachment number 16
>>>>>>>> 2017-08-31 14:48:05.956096500 simscan: .iso is attachment number 17
>>>>>>>> 2017-08-31 14:48:05.956097500 simscan: .isp is attachment number 18
>>>>>>>> 2017-08-31 14:48:05.956097500 simscan: .jse is attachment number 19
>>>>>>>> 2017-08-31 14:48:05.956106500 simscan: .lib is attachment number 20
>>>>>>>> 2017-08-31 14:48:05.956106500 simscan: .lnk is attachment number 21
>>>>>>>> 2017-08-31 14:48:05.956107500 simscan: .lzh is attachment number 22
>>>>>>>> 2017-08-31 14:48:05.956107500 simscan: .mim is attachment number 23
>>>>>>>> 2017-08-31 14:48:05.956108500 simscan: .msp is attachment number 24
>>>>>>>> 2017-08-31 14:48:05.956108500 simscan: .mst is attachment number 25
>>>>>>>> 2017-08-31 14:48:05.956109500 simscan: .pif is attachment number 26
>>>>>>>> 2017-08-31 14:48:05.956109500 simscan: .reg is attachment number 27
>>>>>>>> 2017-08-31 14:48:05.956113500 simscan: .scf is attachment number 28
>>>>>>>> 2017-08-31 14:48:05.956113500 simscan: .scr is attachment number 29
>>>>>>>> 2017-08-31 14:48:05.956114500 simscan: .sct is attachment number 30
>>>>>>>> 2017-08-31 14:48:05.956120500 simscan: .shb is attachment number 31
>>>>>>>> 2017-08-31 14:48:05.956121500 simscan: .shs is attachment number 32
>>>>>>>> 2017-08-31 14:48:05.956121500 simscan: .sys is attachment number 33
>>>>>>>> 2017-08-31 14:48:05.956122500 simscan: .taz is attachment number 34
>>>>>>>> 2017-08-31 14:48:05.956122500 simscan: .tgz is attachment number 35
>>>>>>>> 2017-08-31 14:48:05.956123500 simscan: .tz is attachment number 36
>>>>>>>> 2017-08-31 14:48:05.956123500 simscan: .url is attachment number 37
>>>>>>>> 2017-08-31 14:48:05.956124500 simscan: .uu is attachment number 38
>>>>>>>> 2017-08-31 14:48:05.956127500 simscan: .uue is attachment number 39
>>>>>>>> 2017-08-31 14:48:05.956128500 simscan: .vb is attachment number 40
>>>>>>>> 2017-08-31 14:48:05.956128500 simscan: .vbe is attachment number 41
>>>>>>>> 2017-08-31 14:48:05.956129500 simscan: .vbs is attachment number 42
>>>>>>>> 2017-08-31 14:48:05.956129500 simscan: .wsc is attachment number 43
>>>>>>>> 2017-08-31 14:48:05.956130500 simscan: .wsf is attachment number 44
>>>>>>>> 2017-08-31 14:48:05.956130500 simscan: .wsh is attachment number 45
>>>>>>>> 2017-08-31 14:48:05.956131500 simscan: .xxe is attachment number 46
>>>>>>>> 2017-08-31 14:48:05.956134500 simscan: .docm is attachment number 47
>>>>>>>> 2017-08-31 14:48:05.956134500 simscan: .z is attachment number 48
>>>>>>>> 2017-08-31 14:48:05.956135500 simscan: .jar is attachment number 49
>>>>>>>> 2017-08-31 14:48:05.956136500 simscan: pelookup: local part is inv1mum
>>>>>>>> 2017-08-31 14:48:05.956136500 simscan: lpart: local part is **
>>>>>>>> 2017-08-31 14:48:05.956137500 simscan: cdb looking up inv1...@xxxx.net
>>>>>>>> 2017-08-31 14:48:05.956137500 simscan: ripmime error
>>>>>>>> 2017-08-31 14:48:05.956138500 simscan: exit error code: 71
>>>>>>>> 2017-08-31 14:48:05.956144500 qmail-smtpd: qq soft reject (mail server 
>>>>>>>> temporarily rejected message (#4.3.0)): 
>>>>>>>> MAILFROM:<sunil.saha...@yyyy.com> RCPTTO:inv1...@xxxx.net
>>>>>>>>
>>>>>>>>
>>>>>>>> thanks
>>>>>>>> rajesh
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> ---------------------------------------------------------------------
>>>>>>>> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>>>>>> For additional commands, e-mail: 
>>>>>>>> qmailtoaster-list-h...@qmailtoaster.com
>>>>>>> ---------------------------------------------------------------------
>>>>>>> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>>>>> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>>>>>> ---------------------------------------------------------------------
>>>>>> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>>>> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>>>>>
>>>>>
>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>>> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>>>>
>>>> -- 
>>>> Eric Broch
>>>> White Horse Technical Consulting (WHTC)
>>>
>>
>> -- 
>> Eric Broch
>> White Horse Technical Consulting (WHTC)
>
> -- 
> Eric Broch
> White Horse Technical Consulting (WHTC)

Reply via email to