eric no errors in /var/log/messages or dmesg
rajesh ----- Original Message ----- From: Eric Broch [mailto:ebr...@whitehorsetc.com] To: qmailtoaster-list@qmailtoaster.com Sent: Fri, 1 Sep 2017 11:53:45 -0600 Subject: Are there any errors in /var/log/messages that correspond? On 9/1/2017 11:39 AM, Jeff Koch wrote: > > Eric / Remo / Rajesh - we reported this same problem a number of > months ago and thought we had fixed it. But alas, it's still with us. > The good news is that we haven't had any customer complaints. I'll be > very interested if it can be resolved. > > Jeff Koch > > > On 9/1/2017 12:01 PM, Eric Broch wrote: >> >> I'm not sure what's going on here. Is this a relatively new phenomenon? >> >> I wonder if it's a memory, or even a disk speed, issue since it only >> happens at peak hours? >> >> I think I'll appy Johannes Weberhofer's patch and put it out there >> for you...and cross or fingers. >> >> >> On 9/1/2017 6:28 AM, Rajesh M wrote: >>> remo / eric >>> >>> i have still not being able to resolve the qq soft reject error. >>> >>> these are my findings >>> >>> 1) the errors i see are "error forking qmail-queue" and "ripmime error" >>> which causes the qq soft reject. >>> >>> 2) the max concurrent connections in the logs is around 35. >>> >>> 3) These errors come up during peak working hours when the server is under >>> a load of 4 - 8, and they increase the load even more to over 10-15. >>> >>> 4) i came across this link (not sure if this is related) >>> https://github.com/qmail/simscan/blob/master/simscan.c >>> >>> 5) i can share with you my live smtp logs with simscan debug. >>> >>> have extracted some lines below >>> >>> >>> Error forking qmail-queue >>> >>> @4000000059a8fa7b0a2ed1b4 tcpserver: status: 31/200 >>> @4000000059a8fa7b13162584 simscan: cdb looking up version spam >>> @4000000059a8fa7b13166bd4 simscan: runned_scanners is attach: 1.4.0 >>> clamav: 0.98.6/m: spam: 3.3.2 >>> @4000000059a8fa7b13166fbc simscan: found 3.3.2 >>> @4000000059a8fa7b13168efc simscan:[10757]:CLEAN >>> (5.00/30.00):9.7712s:-Possible Spam- RE_ REQUIRE BOOKING // 1X20 // >>> ICD TKD TO >>> BANDARABASS:103.241.181.228:cs....@atlasdecargo.com:rathe...@radiant-india.net >>> @4000000059a8fa7b1316cd7c simscan: done, execing qmail-queue >>> @4000000059a8fa7b1316fc5c simscan: error forking qmail-queue >>> @4000000059a8fa7b13199854 simscan: exit error code: 71 >>> @4000000059a8fa7b131c4004 qmail-smtpd: qq soft reject (mail server >>> temporarily rejected message (#4.3.0)): MAILFROM:<cs....@xxxxx.com> >>> RCPTTO:rathe...@yyyyy.net >>> >>> >>> Error in ripmime >>> >>> @4000000059a8fa98045a4bc4 simscan: pelookup: domain is aissamaritime.in >>> @4000000059a8fa98045a4bc4 simscan: cdb looking up aissamaritime.in >>> @4000000059a8fa98045a4fac simscan: pelookup: local part is shailesh_k_bom >>> @4000000059a8fa98045a4fac simscan: lpart: local part is ** >>> @4000000059a8fa98045a5394 simscan: cdb looking >>> upshailesh_k_...@aissamaritime.in >>> @4000000059a8fa98045a5394 simscan: ripmime error >>> @4000000059a8fa98045a6334 simscan: exit error code: 71 >>> @4000000059a8fa98045a95fc qmail-smtpd: qq soft reject (mail server >>> temporarily rejected message (#4.3.0)): >>> MAILFROM:<imp...@xxxxxxx.in> RCPTTO:shailesh_k_...@yyyyyy.in >>> >>> >>> Wierd error logs >>> >>> @4000000059a9032f3aa79a24 simscan: clamdscan: ----------- SCAN SUMMARY >>> ----------- >>> @4000000059a9032f3aa7b964 simscan: clamdscan: >>> /var/qmail/simscan/1504248613.321653.5221: OK >>> @4000000059a9032f3aa86d14 simscan: clamdscan: >>> @4000000059a9032f3aa870fc simscan: clamdscan: ---simscan: cdb looking up >>> version clamav >>> @4000000059a9032f3aa8a3c4 -------- SCAN simscan: clamdscan: SIUnMfMeAcRtYe >>> d- -fsimscan: runned_scanners is attach: 1.4.0 clamav: 0.98.6/m: >>> @4000000059a9032f3aa8c304 -isimscan: found 0.98.6/m: >>> @4000000059a9032f3aa8c6ec -l-e-s-:- -0 >>> @4000000059a9032f3aa8f1e4 --simscan: normal clamdscan return code: 0 >>> @4000000059a9032f3aa8f1e4 >>> @4000000059a9032f3aa8f5cc simscan: clamdscan: Infected fsimscan: clamdscan: >>> iTliemes:: 00 >>> @4000000059a9032f3aa93834 .simscan: clamdscan: 1T1i8m es:e c0 .1(002 ms >>> e0simscan: calling spamc >>> @4000000059a9032f3aa96ee4 c s(0)simscan: calling /usr/bin/spamc simscan: >>> clamdscan: >>> @4000000059a9032f3aa999dc spamcm >>> @4000000059a9032f3aa999dc 0 s) >>> @4000000059a9032f3aa9ad64 /var/qmail/simscan/1simscan: check_spam had an >>> error ret: -1 >>> @4000000059a9032f3aa9e02c 504248613.307311.5215: OK >>> @4000000059a9032f3aaaa37c simscan: clamdscan: >>> @4000000059a9032f3aaaa764 simscan: clamdscan: ----------- SCAN SUMMARY >>> ----------- >>> @4000000059a9032f3aab3fbc simscan: clamdscan: Infected files: 0 >>> @4000000059a9032f3aaba164 simscan: clamdscan: Time: 0.135 sec (0 m 0 s) >>> @4000000059a9032f3aac39bc simscan: clamdscan: /var/qmail/simscan/15simscan: >>> exit error code: 71 >>> @4000000059a9032f3aaca334 04248613.308469.5216: OK >>> @4000000059a9032f3aacddcc simscan: clamdscan: >>> @4000000059a9032f3aace984 simscan: clamdscan: ----------- SCAN SUMMARY >>> ----------- >>> @4000000059a9 >>> >>> >>> ################ >>> >>> @4000000059a9032f3aa86d14 simscan: clamdscan: >>> @4000000059a9032f3aa870fc simscan: clamdscan: ---simscan: cdb looking up >>> version clamav >>> @4000000059a9032f3aa8a3c4 -------- SCAN simscan: clamdscan: SIUnMfMeAcRtYe >>> d- -fsimscan: runned_scanners is attach: 1.4.0 clamav: 0.98.6/m: >>> @4000000059a9032f3aa8c304 -isimscan: found 0.98.6/m: >>> @4000000059a9032f3aa8c6ec -l-e-s-:- -0 >>> @4000000059a9032f3aa8f1e4 --simscan: normal clamdscan return code: 0 >>> @4000000059a9032f3aa8f1e4 >>> @4000000059a9032f3aa8f5cc simscan: clamdscan: Infected fsimscan: clamdscan: >>> iTliemes:: 00 >>> @4000000059a9032f3aa93834 .simscan: clamdscan: 1T1i8m es:e c0 .1(002 ms >>> e0simscan: calling spamc >>> @4000000059a9032f3aa96ee4 c s(0)simscan: calling /usr/bin/spamc simscan: >>> clamdscan: >>> @4000000059a9032f3aa999dc spamcm >>> @4000000059a9032f3aa999dc 0 s) >>> @4000000059a9032f3aa9ad64 /var/qmail/simscan/1simscan: check_spam had an >>> error ret: -1 >>> @4000000059a9032f3aa9e02c 504248613.307311.5215: OK >>> @4000000059a9032f3aaaa37c simscan: clamdscan: >>> @4000000059a9032f3aaaa764 simscan: clamdscan: ----------- SCAN SUMMARY >>> ----------- >>> @4000000059a9032f3aab3fbc simscan: clamdscan: Infected files: 0 >>> @4000000059a9032f3aaba164 simscan: clamdscan: Time: 0.135 sec (0 m 0 s) >>> @4000000059a9032f3aac39bc simscan: clamdscan: /var/qmail/simscan/15simscan: >>> exit error code: 71 >>> @4000000059a9032f3aaca334 04248613.308469.5216: OK >>> >>> >>> >>> thanks, >>> rajesh >>> >>> >>> >>> ----- Original Message ----- >>> From: Remo Mattei [mailto:r...@mattei.org] >>> To:24x7ser...@24x7server.net >>> Sent: Thu, 31 Aug 2017 07:58:22 -0700 >>> Subject: >>> >>> No it reads it everytime. >>> >>> Yes permissions are good >>> >>> Remo >>> >>> On 8/31/17 7:48 AM, Rajesh M wrote: >>>> thank for sharing your experience remo, >>>> >>>> so would the following be correct ? >>>> >>>> chmod 2750 simscan >>>> chown clamav.clamav simscan >>>> >>>> do i need to stop qmail while applying this ? >>>> >>>> rajesh >>>> >>>> >>>> ----- Original Message ----- >>>> From: Remo Mattei [mailto:r...@mattei.org] >>>> To:qmailtoaster-list@qmailtoaster.com,24x7ser...@24x7server.net >>>> Sent: Thu, 31 Aug 2017 07:23:20 -0700 >>>> Subject: >>>> >>>> I had the same issue with qq. >>>> >>>> I changed the permissions and all good. I also raised the value of the >>>> softlimits exec /usr/bin/softlimit -m 1040000000 >>>> >>>> and my permissions are drwxr-s---  2 clamav clamav 4096 Aug 31 07:19 >>>> simscan >>>> >>>> So hopefully this helps. >>>> >>>> Remo >>>> >>>> >>>> On 8/31/17 6:51 AM, Rajesh M wrote: >>>>> eric >>>>> >>>>> on my qmailtoaster server (centos 6 64 bit) there are several domains >>>>> --- high traffic >>>>> >>>>> about 80 percent of them are routed via the sophos antispam filter and >>>>> then passed on to the mailserver with spamassassin/clam disabled by >>>>> adding the ip of the sophos server to the tcp.smtp file to exclude the >>>>> line /var/qmail/bin/simscan >>>>> >>>>> the balance 20 are directly reaching the mailserver ie mx pointed to >>>>> mailserver instead of sophos server and are scanned with clam / >>>>> spamassassin. >>>>> >>>>> today i turned on the spamassassin / clam for the above 80 percent >>>>> domains too and this started throwing qq reject errors on a large scale >>>>> but randomly. >>>>> >>>>> spamassassin child-processes was set to 20 to handle the load >>>>> >>>>> i checked the log files for the last 30 days till yesterday and found >>>>> that the same qq reject errors were present but very rarely ie 3 to 4 >>>>> times on a single day (occasional high load ??) >>>>> so it seems that this error comes up only when the load on the server is >>>>> high, all take place when there are attachments. >>>>> >>>>> reading the thread you sent me, i am not sure whether it applies to my >>>>> case but i can try out. >>>>> >>>>> ############# >>>>> drwxr-x--- 2 clamav root 6 May 6 17:57 simscan/ >>>>> >>>>> changing this to the following fixed the problem: >>>>> drwxr-s--- 2 clamav clamav 6 May 6 17:57 simscan/ >>>>> ########### >>>>> >>>>> should i just >>>>> chown clamav.clamav simscan >>>>> >>>>> >>>>> thanks >>>>> rajesh >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> ----- Original Message ----- >>>>> From: Eric Broch [mailto:ebr...@whitehorsetc.com] >>>>> To:24x7ser...@24x7server.net >>>>> Sent: Thu, 31 Aug 2017 06:42:08 -0600 >>>>> Subject: >>>>> >>>>> Have a look here, Rajesh, I'm not sure if it will help: >>>>> >>>>> https://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg40456.html >>>>> >>>>> >>>>> On 8/31/2017 4:51 AM, Rajesh M wrote: >>>>>> hi >>>>>> >>>>>> centos 6 64 bit >>>>>> SpamAssassin version 3.3.2 >>>>>> ClamAV 0.98.6/23745/Thu Aug 31 14:07:08 2017 >>>>>> >>>>>> we have a sophos antispam firewall which receives our emails and then >>>>>> routes them to our mail server (qmailtoaster, dovecot, spamassassin, >>>>>> clam) >>>>>> >>>>>> in the mail server we had stopped spamassassin >>>>>> >>>>>> however due to some custom requirements by our clients we enabled the >>>>>> same >>>>>> >>>>>> however we get the following error when the load on the server is high >>>>>> on a random basis. >>>>>> >>>>>> 2017-08-31 14:48:05.753994500 simscan: calling spamc >>>>>> 2017-08-31 14:48:05.754001500 simscan: calling /usr/bin/spamc spamc >>>>>> 2017-08-31 14:48:05.754010500 simscan: check_spam had an error ret: -1 >>>>>> 2017-08-31 14:48:05.754101500 simscan: exit error code: 71 >>>>>> 2017-08-31 14:48:05.754220500 qmail-smtpd: qq soft reject (mail server >>>>>> temporarily rejected message (#4.3.0)): >>>>>> MAILFROM:<sunil.saharan@@yyyy.com> RCPTTO:c...@yyyy.com >>>>>> >>>>>> >>>>>> 2017-08-31 14:48:05.956137500 simscan: ripmime error >>>>>> qmail-smtpd: qq soft reject (mail server temporarily rejected message >>>>>> >>>>>> >>>>>> >>>>>> if i disable simscan in tcp.smtp then errors do not take place. >>>>>> >>>>>> i enabled simscan debug and this is the result. >>>>>> >>>>>> 2017-08-31 14:48:05.956144500 qmail-smtpd: qq soft reject (mail server >>>>>> temporarily rejected message (#4.3.0)): >>>>>> MAILFROM:<sunil.saha...@yyyy.com> RCPTTO:inv1...@xxxx.net >>>>>> >>>>>> >>>>>> clam=yes,spam=yes,spam_hits=30,spam_passthru=yes,attach=.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>> 2017-08-31 14:48:05.746592500 simscan: pelookup clam = yes >>>>>> 2017-08-31 14:48:05.746593500 simscan: pelookup spam = yes >>>>>> 2017-08-31 14:48:05.746593500 simscan: pelookup spam_hits = 30 >>>>>> 2017-08-31 14:48:05.746595500 simscan: Per Domain Hits set to : 30.000000 >>>>>> 2017-08-31 14:48:05.746595500 simscan: pelookup spam_passthru = yes >>>>>> 2017-08-31 14:48:05.746596500 simscan: unimplemented flag spam_passthru >>>>>> = yes >>>>>> 2017-08-31 14:48:05.746596500 simscan: pelookup attach = >>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>> 2017-08-31 14:48:05.746599500 simscan: attachment flag attach = >>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>> 2017-08-31 14:48:05.746602500 simscan: add_attach called with >>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>> 2017-08-31 14:48:05.746606500 simscan: .ace is attachment number 0 >>>>>> 2017-08-31 14:48:05.746607500 simscan: .arc is attachment number 1 >>>>>> 2017-08-31 14:48:05.746607500 simscan: .arj is attachment number 2 >>>>>> 2017-08-31 14:48:05.746607500 simscan: .b64 is attachment number 3 >>>>>> 2017-08-31 14:48:05.746610500 simscan: .bat is attachment number 4 >>>>>> 2017-08-31 14:48:05.746610500 simscan: .bhx is attachment number 5 >>>>>> 2017-08-31 14:48:05.746610500 simscan: .cab is attachment number 6 >>>>>> 2017-08-31 14:48:05.746611500 simscan: .chm is attachment number 7 >>>>>> 2017-08-31 14:48:05.746611500 simscan: .com is attachment number 8 >>>>>> 2017-08-31 14:48:05.746611500 simscan: .cpl is attachment number 9 >>>>>> 2017-08-31 14:48:05.746611500 simscan: .dll is attachment number 10 >>>>>> 2017-08-31 14:48:05.746612500 simscan: .exe is attachment number 11 >>>>>> 2017-08-31 14:48:05.746614500 simscan: .gz is attachment number 12 >>>>>> 2017-08-31 14:48:05.746614500 simscan: .hqx is attachment number 13 >>>>>> 2017-08-31 14:48:05.746614500 simscan: .hta is attachment number 14 >>>>>> 2017-08-31 14:48:05.746615500 simscan: .inf is attachment number 15 >>>>>> 2017-08-31 14:48:05.746615500 simscan: .ins is attachment number 16 >>>>>> 2017-08-31 14:48:05.746615500 simscan: .iso is attachment number 17 >>>>>> 2017-08-31 14:48:05.746616500 simscan: .isp is attachment number 18 >>>>>> 2017-08-31 14:48:05.746616500 simscan: .jse is attachment number 19 >>>>>> 2017-08-31 14:48:05.746618500 simscan: .lib is attachment number 20 >>>>>> 2017-08-31 14:48:05.746618500 simscan: .lnk is attachment number 21 >>>>>> 2017-08-31 14:48:05.746619500 simscan: .lzh is attachment number 22 >>>>>> 2017-08-31 14:48:05.746622500 simscan: .mim is attachment number 23 >>>>>> 2017-08-31 14:48:05.746622500 simscan: .msp is attachment number 24 >>>>>> 2017-08-31 14:48:05.746623500 simscan: .mst is attachment number 25 >>>>>> 2017-08-31 14:48:05.746623500 simscan: .pif is attachment number 26 >>>>>> 2017-08-31 14:48:05.746623500 simscan: .reg is attachment number 27 >>>>>> 2017-08-31 14:48:05.746624500 simscan: .scf is attachment number 28 >>>>>> 2017-08-31 14:48:05.746624500 simscan: .scr is attachment number 29 >>>>>> 2017-08-31 14:48:05.746624500 simscan: .sct is attachment number 30 >>>>>> 2017-08-31 14:48:05.746630500 simscan: .shb is attachment number 31 >>>>>> 2017-08-31 14:48:05.746630500 simscan: .shs is attachment number 32 >>>>>> 2017-08-31 14:48:05.746631500 simscan: .sys is attachment number 33 >>>>>> 2017-08-31 14:48:05.746631500 simscan: .taz is attachment number 34 >>>>>> 2017-08-31 14:48:05.746631500 simscan: .tgz is attachment number 35 >>>>>> 2017-08-31 14:48:05.746632500 simscan: .tz is attachment number 36 >>>>>> 2017-08-31 14:48:05.746632500 simscan: .url is attachment number 37 >>>>>> 2017-08-31 14:48:05.746632500 simscan: .uu is attachment number 38 >>>>>> 2017-08-31 14:48:05.746635500 simscan: .uue is attachment number 39 >>>>>> 2017-08-31 14:48:05.746635500 simscan: .vb is attachment number 40 >>>>>> 2017-08-31 14:48:05.746635500 simscan: .vbe is attachment number 41 >>>>>> 2017-08-31 14:48:05.746636500 simscan: .vbs is attachment number 42 >>>>>> 2017-08-31 14:48:05.746636500 simscan: .wsc is attachment number 43 >>>>>> 2017-08-31 14:48:05.746636500 simscan: .wsf is attachment number 44 >>>>>> 2017-08-31 14:48:05.746637500 simscan: .wsh is attachment number 45 >>>>>> 2017-08-31 14:48:05.746637500 simscan: .xxe is attachment number 46 >>>>>> 2017-08-31 14:48:05.746639500 simscan: .docm is attachment number 47 >>>>>> 2017-08-31 14:48:05.746639500 simscan: .z is attachment number 48 >>>>>> 2017-08-31 14:48:05.746640500 simscan: .jar is attachment number 49 >>>>>> 2017-08-31 14:48:05.746643500 simscan: pelookup: local part is cs2 >>>>>> 2017-08-31 14:48:05.746643500 simscan: lpart: local part is ** >>>>>> 2017-08-31 14:48:05.746644500 simscan: cdb looking up...@yyyy.com >>>>>> 2017-08-31 14:48:05.747114500 simscan: checking attachment textfile2 >>>>>> against .ace >>>>>> 2017-08-31 14:48:05.747123500 simscan: checking attachment textfile2 >>>>>> against .arc >>>>>> 2017-08-31 14:48:05.747124500 simscan: checking attachment textfile2 >>>>>> against .arj >>>>>> 2017-08-31 14:48:05.747124500 simscan: checking attachment textfile2 >>>>>> against .b64 >>>>>> 2017-08-31 14:48:05.747125500 simscan: checking attachment textfile2 >>>>>> against .bat >>>>>> 2017-08-31 14:48:05.747126500 simscan: checking attachment textfile2 >>>>>> against .bhx >>>>>> 2017-08-31 14:48:05.747132500 simscan: checking attachment textfile2 >>>>>> against .cab >>>>>> 2017-08-31 14:48:05.747133500 simscan: checking attachment textfile2 >>>>>> against .chm >>>>>> 2017-08-31 14:48:05.747134500 simscan: checking attachment textfile2 >>>>>> against .com >>>>>> 2017-08-31 14:48:05.747134500 simscan: checking attachment textfile2 >>>>>> against .cpl >>>>>> 2017-08-31 14:48:05.747135500 simscan: checking attachment textfile2 >>>>>> against .dll >>>>>> 2017-08-31 14:48:05.747135500 simscan: checking attachment textfile2 >>>>>> against .exe >>>>>> 2017-08-31 14:48:05.747136500 simscan: checking attachment textfile2 >>>>>> against .gz >>>>>> 2017-08-31 14:48:05.747140500 simscan: checking attachment textfile2 >>>>>> against .hqx >>>>>> 2017-08-31 14:48:05.747146500 simscan: checking attachment textfile2 >>>>>> against .hta >>>>>> 2017-08-31 14:48:05.747147500 simscan: checking attachment textfile2 >>>>>> against .inf >>>>>> 2017-08-31 14:48:05.747147500 simscan: checking attachment textfile2 >>>>>> against .ins >>>>>> 2017-08-31 14:48:05.747148500 simscan: checking attachment textfile2 >>>>>> against .iso >>>>>> 2017-08-31 14:48:05.747149500 simscan: checking attachment textfile2 >>>>>> against .isp >>>>>> 2017-08-31 14:48:05.747149500 simscan: checking attachment textfile2 >>>>>> against .jse >>>>>> 2017-08-31 14:48:05.747150500 simscan: checking attachment textfile2 >>>>>> against .lib >>>>>> 2017-08-31 14:48:05.747162500 simscan: checking attachment textfile2 >>>>>> against .lnk >>>>>> 2017-08-31 14:48:05.747162500 simscan: checking attachment textfile2 >>>>>> against .lzh >>>>>> 2017-08-31 14:48:05.747163500 simscan: checking attachment textfile2 >>>>>> against .mim >>>>>> 2017-08-31 14:48:05.747164500 simscan: checking attachment textfile2 >>>>>> against .msp >>>>>> 2017-08-31 14:48:05.747164500 simscan: checking attachment textfile2 >>>>>> against .mst >>>>>> 2017-08-31 14:48:05.747171500 simscan: checking attachment textfile2 >>>>>> against .pif >>>>>> 2017-08-31 14:48:05.747171500 simscan: checking attachment textfile2 >>>>>> against .reg >>>>>> 2017-08-31 14:48:05.747172500 simscan: checking attachment textfile2 >>>>>> against .scf >>>>>> 2017-08-31 14:48:05.747173500 simscan: checking attachment textfile2 >>>>>> against .scr >>>>>> 2017-08-31 14:48:05.747173500 simscan: checking attachment textfile2 >>>>>> against .sct >>>>>> 2017-08-31 14:48:05.747174500 simscan: checking attachment textfile2 >>>>>> against .shb >>>>>> 2017-08-31 14:48:05.747175500 simscan: checking attachment textfile2 >>>>>> against .shs >>>>>> 2017-08-31 14:48:05.747189500 simscan: checking attachment textfile2 >>>>>> against .sys >>>>>> 2017-08-31 14:48:05.747189500 simscan: checking attachment textfile2 >>>>>> against .taz >>>>>> 2017-08-31 14:48:05.747190500 simscan: checking attachment textfile2 >>>>>> against .tgz >>>>>> 2017-08-31 14:48:05.747191500 simscan: checking attachment textfile2 >>>>>> against .tz >>>>>> 2017-08-31 14:48:05.747191500 simscan: checking attachment textfile2 >>>>>> against .url >>>>>> 2017-08-31 14:48:05.747192500 simscan: checking attachment textfile2 >>>>>> against .uu >>>>>> 2017-08-31 14:48:05.747195500 simscan: checking attachment textfile2 >>>>>> against .uue >>>>>> 2017-08-31 14:48:05.747196500 simscan: checking attachment textfile2 >>>>>> against .vb >>>>>> 2017-08-31 14:48:05.747197500 simscan: checking attachment textfile2 >>>>>> against .vbe >>>>>> 2017-08-31 14:48:05.747197500 simscan: checking attachment textfile2 >>>>>> against .vbs >>>>>> 2017-08-31 14:48:05.747198500 simscan: checking attachment textfile2 >>>>>> against .wsc >>>>>> 2017-08-31 14:48:05.747198500 simscan: checking attachment textfile2 >>>>>> against .wsf >>>>>> 2017-08-31 14:48:05.747202500 simscan: checking attachment textfile2 >>>>>> against .wsh >>>>>> 2017-08-31 14:48:05.747208500 simscan: checking attachment textfile2 >>>>>> against .xxe >>>>>> 2017-08-31 14:48:05.747209500 simscan: checking attachment textfile2 >>>>>> against .docm >>>>>> 2017-08-31 14:48:05.747209500 simscan: checking attachment textfile2 >>>>>> against .z >>>>>> 2017-08-31 14:48:05.747210500 simscan: checking attachment textfile2 >>>>>> against .jar >>>>>> 2017-08-31 14:48:05.747210500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .ace >>>>>> 2017-08-31 14:48:05.747211500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .arc >>>>>> 2017-08-31 14:48:05.747215500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .arj >>>>>> 2017-08-31 14:48:05.747215500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .b64 >>>>>> 2017-08-31 14:48:05.747216500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .bat >>>>>> 2017-08-31 14:48:05.747217500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .bhx >>>>>> 2017-08-31 14:48:05.747218500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .cab >>>>>> 2017-08-31 14:48:05.747221500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .chm >>>>>> 2017-08-31 14:48:05.747222500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .com >>>>>> 2017-08-31 14:48:05.747223500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .cpl >>>>>> 2017-08-31 14:48:05.747224500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .dll >>>>>> 2017-08-31 14:48:05.747224500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .exe >>>>>> 2017-08-31 14:48:05.747230500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .gz >>>>>> 2017-08-31 14:48:05.747231500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .hqx >>>>>> 2017-08-31 14:48:05.747231500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .hta >>>>>> 2017-08-31 14:48:05.747232500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .inf >>>>>> 2017-08-31 14:48:05.747233500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .ins >>>>>> 2017-08-31 14:48:05.747237500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .iso >>>>>> 2017-08-31 14:48:05.747238500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .isp >>>>>> 2017-08-31 14:48:05.747238500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .jse >>>>>> 2017-08-31 14:48:05.747239500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .lib >>>>>> 2017-08-31 14:48:05.747240500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .lnk >>>>>> 2017-08-31 14:48:05.747243500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .lzh >>>>>> 2017-08-31 14:48:05.747244500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .mim >>>>>> 2017-08-31 14:48:05.747245500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .msp >>>>>> 2017-08-31 14:48:05.747246500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .mst >>>>>> 2017-08-31 14:48:05.747246500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .pif >>>>>> 2017-08-31 14:48:05.747257500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .reg >>>>>> 2017-08-31 14:48:05.747258500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .scf >>>>>> 2017-08-31 14:48:05.747259500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .scr >>>>>> 2017-08-31 14:48:05.747260500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .sct >>>>>> 2017-08-31 14:48:05.747260500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .shb >>>>>> 2017-08-31 14:48:05.747264500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .shs >>>>>> 2017-08-31 14:48:05.747265500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .sys >>>>>> 2017-08-31 14:48:05.747266500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .taz >>>>>> 2017-08-31 14:48:05.747266500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .tgz >>>>>> 2017-08-31 14:48:05.747267500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .tz >>>>>> 2017-08-31 14:48:05.747271500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .url >>>>>> 2017-08-31 14:48:05.747271500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .uu >>>>>> 2017-08-31 14:48:05.747272500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .uue >>>>>> 2017-08-31 14:48:05.747273500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .vb >>>>>> 2017-08-31 14:48:05.747279500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .vbe >>>>>> 2017-08-31 14:48:05.747280500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .vbs >>>>>> 2017-08-31 14:48:05.747280500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .wsc >>>>>> 2017-08-31 14:48:05.747281500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .wsf >>>>>> 2017-08-31 14:48:05.747282500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .wsh >>>>>> 2017-08-31 14:48:05.747285500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .xxe >>>>>> 2017-08-31 14:48:05.747286500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .docm >>>>>> 2017-08-31 14:48:05.747287500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .z >>>>>> 2017-08-31 14:48:05.747288500 simscan: checking attachment >>>>>> msg.1504171085.205836.36767 against .jar >>>>>> 2017-08-31 14:48:05.747289500 simscan: checking attachment textfile0 >>>>>> against .ace >>>>>> 2017-08-31 14:48:05.747292500 simscan: checking attachment textfile0 >>>>>> against .arc >>>>>> 2017-08-31 14:48:05.747293500 simscan: checking attachment textfile0 >>>>>> against .arj >>>>>> 2017-08-31 14:48:05.747294500 simscan: checking attachment textfile0 >>>>>> against .b64 >>>>>> 2017-08-31 14:48:05.747294500 simscan: checking attachment textfile0 >>>>>> against .bat >>>>>> 2017-08-31 14:48:05.747295500 simscan: checking attachment textfile0 >>>>>> against .bhx >>>>>> 2017-08-31 14:48:05.747296500 simscan: checking attachment textfile0 >>>>>> against .cab >>>>>> 2017-08-31 14:48:05.747299500 simscan: checking attachment textfile0 >>>>>> against .chm >>>>>> 2017-08-31 14:48:05.747305500 simscan: checking attachment textfile0 >>>>>> against .com >>>>>> 2017-08-31 14:48:05.747305500 simscan: checking attachment textfile0 >>>>>> against .cpl >>>>>> 2017-08-31 14:48:05.747306500 simscan: checking attachment textfile0 >>>>>> against .dll >>>>>> 2017-08-31 14:48:05.747307500 simscan: checking attachment textfile0 >>>>>> against .exe >>>>>> 2017-08-31 14:48:05.747307500 simscan: checking attachment textfile0 >>>>>> against .gz >>>>>> 2017-08-31 14:48:05.747308500 simscan: checking attachment textfile0 >>>>>> against .hqx >>>>>> 2017-08-31 14:48:05.747311500 simscan: checking attachment textfile0 >>>>>> against .hta >>>>>> 2017-08-31 14:48:05.747312500 simscan: checking attachment textfile0 >>>>>> against .inf >>>>>> 2017-08-31 14:48:05.747312500 simscan: checking attachment textfile0 >>>>>> against .ins >>>>>> 2017-08-31 14:48:05.747313500 simscan: checking attachment textfile0 >>>>>> against .iso >>>>>> 2017-08-31 14:48:05.747314500 simscan: checking attachment textfile0 >>>>>> against .isp >>>>>> 2017-08-31 14:48:05.747314500 simscan: checking attachment textfile0 >>>>>> against .jse >>>>>> 2017-08-31 14:48:05.747318500 simscan: checking attachment textfile0 >>>>>> against .lib >>>>>> 2017-08-31 14:48:05.747318500 simscan: checking attachment textfile0 >>>>>> against .lnk >>>>>> 2017-08-31 14:48:05.747319500 simscan: checking attachment textfile0 >>>>>> against .lzh >>>>>> 2017-08-31 14:48:05.747320500 simscan: checking attachment textfile0 >>>>>> against .mim >>>>>> 2017-08-31 14:48:05.747320500 simscan: checking attachment textfile0 >>>>>> against .msp >>>>>> 2017-08-31 14:48:05.747321500 simscan: checking attachment textfile0 >>>>>> against .mst >>>>>> 2017-08-31 14:48:05.747328500 simscan: checking attachment textfile0 >>>>>> against .pif >>>>>> 2017-08-31 14:48:05.747329500 simscan: checking attachment textfile0 >>>>>> against .reg >>>>>> 2017-08-31 14:48:05.747335500 simscan: checking attachment textfile0 >>>>>> against .scf >>>>>> 2017-08-31 14:48:05.747336500 simscan: checking attachment textfile0 >>>>>> against .scr >>>>>> 2017-08-31 14:48:05.747336500 simscan: checking attachment textfile0 >>>>>> against .sct >>>>>> 2017-08-31 14:48:05.747337500 simscan: checking attachment textfile0 >>>>>> against .shb >>>>>> 2017-08-31 14:48:05.747338500 simscan: checking attachment textfile0 >>>>>> against .shs >>>>>> 2017-08-31 14:48:05.747338500 simscan: checking attachment textfile0 >>>>>> against .sys >>>>>> 2017-08-31 14:48:05.747342500 simscan: checking attachment textfile0 >>>>>> against .taz >>>>>> 2017-08-31 14:48:05.747342500 simscan: checking attachment textfile0 >>>>>> against .tgz >>>>>> 2017-08-31 14:48:05.747343500 simscan: checking attachment textfile0 >>>>>> against .tz >>>>>> 2017-08-31 14:48:05.747344500 simscan: checking attachment textfile0 >>>>>> against .url >>>>>> 2017-08-31 14:48:05.747344500 simscan: checking attachment textfile0 >>>>>> against .uu >>>>>> 2017-08-31 14:48:05.747345500 simscan: checking attachment textfile0 >>>>>> against .uue >>>>>> 2017-08-31 14:48:05.747349500 simscan: checking attachment textfile0 >>>>>> against .vb >>>>>> 2017-08-31 14:48:05.747349500 simscan: checking attachment textfile0 >>>>>> against .vbe >>>>>> 2017-08-31 14:48:05.747350500 simscan: checking attachment textfile0 >>>>>> against .vbs >>>>>> 2017-08-31 14:48:05.747350500 simscan: checking attachment textfile0 >>>>>> against .wsc >>>>>> 2017-08-31 14:48:05.747351500 simscan: checking attachment textfile0 >>>>>> against .wsf >>>>>> 2017-08-31 14:48:05.747352500 simscan: checking attachment textfile0 >>>>>> against .wsh >>>>>> 2017-08-31 14:48:05.747355500 simscan: checking attachment textfile0 >>>>>> against .xxe >>>>>> 2017-08-31 14:48:05.747361500 simscan: checking attachment textfile0 >>>>>> against .docm >>>>>> 2017-08-31 14:48:05.747362500 simscan: checking attachment textfile0 >>>>>> against .z >>>>>> 2017-08-31 14:48:05.747363500 simscan: checking attachment textfile0 >>>>>> against .jar >>>>>> 2017-08-31 14:48:05.747363500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .ace >>>>>> 2017-08-31 14:48:05.747364500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .arc >>>>>> 2017-08-31 14:48:05.747365500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .arj >>>>>> 2017-08-31 14:48:05.747368500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .b64 >>>>>> 2017-08-31 14:48:05.747369500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .bat >>>>>> 2017-08-31 14:48:05.747370500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .bhx >>>>>> 2017-08-31 14:48:05.747371500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .cab >>>>>> 2017-08-31 14:48:05.747372500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .chm >>>>>> 2017-08-31 14:48:05.747375500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .com >>>>>> 2017-08-31 14:48:05.747376500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .cpl >>>>>> 2017-08-31 14:48:05.747376500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .dll >>>>>> 2017-08-31 14:48:05.747377500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .exe >>>>>> 2017-08-31 14:48:05.747378500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .gz >>>>>> 2017-08-31 14:48:05.747384500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .hqx >>>>>> 2017-08-31 14:48:05.747385500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .hta >>>>>> 2017-08-31 14:48:05.747385500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .inf >>>>>> 2017-08-31 14:48:05.747386500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .ins >>>>>> 2017-08-31 14:48:05.747387500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .iso >>>>>> 2017-08-31 14:48:05.747391500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .isp >>>>>> 2017-08-31 14:48:05.747392500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .jse >>>>>> 2017-08-31 14:48:05.747392500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .lib >>>>>> 2017-08-31 14:48:05.747393500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .lnk >>>>>> 2017-08-31 14:48:05.747394500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .lzh >>>>>> 2017-08-31 14:48:05.747402500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .mim >>>>>> 2017-08-31 14:48:05.747403500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .msp >>>>>> 2017-08-31 14:48:05.747403500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .mst >>>>>> 2017-08-31 14:48:05.747404500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .pif >>>>>> 2017-08-31 14:48:05.747410500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .reg >>>>>> 2017-08-31 14:48:05.747411500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .scf >>>>>> 2017-08-31 14:48:05.747412500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .scr >>>>>> 2017-08-31 14:48:05.747412500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .sct >>>>>> 2017-08-31 14:48:05.747413500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .shb >>>>>> 2017-08-31 14:48:05.747417500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .shs >>>>>> 2017-08-31 14:48:05.747418500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .sys >>>>>> 2017-08-31 14:48:05.747418500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .taz >>>>>> 2017-08-31 14:48:05.747419500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .tgz >>>>>> 2017-08-31 14:48:05.747420500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .tz >>>>>> 2017-08-31 14:48:05.747424500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .url >>>>>> 2017-08-31 14:48:05.747425500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .uu >>>>>> 2017-08-31 14:48:05.747426500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .uue >>>>>> 2017-08-31 14:48:05.747426500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .vb >>>>>> 2017-08-31 14:48:05.747432500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .vbe >>>>>> 2017-08-31 14:48:05.747433500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .vbs >>>>>> 2017-08-31 14:48:05.747434500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .wsc >>>>>> 2017-08-31 14:48:05.747435500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .wsf >>>>>> 2017-08-31 14:48:05.747435500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .wsh >>>>>> 2017-08-31 14:48:05.747439500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .xxe >>>>>> 2017-08-31 14:48:05.747440500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .docm >>>>>> 2017-08-31 14:48:05.747441500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .z >>>>>> 2017-08-31 14:48:05.747442500 simscan: checking attachment >>>>>> addr.1504171085.205836.36767 against .jar >>>>>> 2017-08-31 14:48:05.747442500 simscan: checking attachment textfile1 >>>>>> against .ace >>>>>> 2017-08-31 14:48:05.747446500 simscan: checking attachment textfile1 >>>>>> against .arc >>>>>> 2017-08-31 14:48:05.747446500 simscan: checking attachment textfile1 >>>>>> against .arj >>>>>> 2017-08-31 14:48:05.747447500 simscan: checking attachment textfile1 >>>>>> against .b64 >>>>>> 2017-08-31 14:48:05.747447500 simscan: checking attachment textfile1 >>>>>> against .bat >>>>>> 2017-08-31 14:48:05.747448500 simscan: checking attachment textfile1 >>>>>> against .bhx >>>>>> 2017-08-31 14:48:05.747449500 simscan: checking attachment textfile1 >>>>>> against .cab >>>>>> 2017-08-31 14:48:05.747452500 simscan: checking attachment textfile1 >>>>>> against .chm >>>>>> 2017-08-31 14:48:05.747458500 simscan: checking attachment textfile1 >>>>>> against .com >>>>>> 2017-08-31 14:48:05.747459500 simscan: checking attachment textfile1 >>>>>> against .cpl >>>>>> 2017-08-31 14:48:05.747460500 simscan: checking attachment textfile1 >>>>>> against .dll >>>>>> 2017-08-31 14:48:05.747460500 simscan: checking attachment textfile1 >>>>>> against .exe >>>>>> 2017-08-31 14:48:05.747461500 simscan: checking attachment textfile1 >>>>>> against .gz >>>>>> 2017-08-31 14:48:05.747461500 simscan: checking attachment textfile1 >>>>>> against .hqx >>>>>> 2017-08-31 14:48:05.747465500 simscan: checking attachment textfile1 >>>>>> against .hta >>>>>> 2017-08-31 14:48:05.747466500 simscan: checking attachment textfile1 >>>>>> against .inf >>>>>> 2017-08-31 14:48:05.747467500 simscan: checking attachment textfile1 >>>>>> against .ins >>>>>> 2017-08-31 14:48:05.747467500 simscan: checking attachment textfile1 >>>>>> against .iso >>>>>> 2017-08-31 14:48:05.747468500 simscan: checking attachment textfile1 >>>>>> against .isp >>>>>> 2017-08-31 14:48:05.747469500 simscan: checking attachment textfile1 >>>>>> against .jse >>>>>> 2017-08-31 14:48:05.747477500 simscan: checking attachment textfile1 >>>>>> against .lib >>>>>> 2017-08-31 14:48:05.747477500 simscan: checking attachment textfile1 >>>>>> against .lnk >>>>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 >>>>>> against .lzh >>>>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 >>>>>> against .mim >>>>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 >>>>>> against .msp >>>>>> 2017-08-31 14:48:05.747479500 simscan: checking attachment textfile1 >>>>>> against .mst >>>>>> 2017-08-31 14:48:05.747481500 simscan: checking attachment textfile1 >>>>>> against .pif >>>>>> 2017-08-31 14:48:05.747482500 simscan: checking attachment textfile1 >>>>>> against .reg >>>>>> 2017-08-31 14:48:05.747485500 simscan: checking attachment textfile1 >>>>>> against .scf >>>>>> 2017-08-31 14:48:05.747486500 simscan: checking attachment textfile1 >>>>>> against .scr >>>>>> 2017-08-31 14:48:05.747486500 simscan: checking attachment textfile1 >>>>>> against .sct >>>>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 >>>>>> against .shb >>>>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 >>>>>> against .shs >>>>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 >>>>>> against .sys >>>>>> 2017-08-31 14:48:05.747489500 simscan: checking attachment textfile1 >>>>>> against .taz >>>>>> 2017-08-31 14:48:05.747490500 simscan: checking attachment textfile1 >>>>>> against .tgz >>>>>> 2017-08-31 14:48:05.747490500 simscan: checking attachment textfile1 >>>>>> against .tz >>>>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 >>>>>> against .url >>>>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 >>>>>> against .uu >>>>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 >>>>>> against .uue >>>>>> 2017-08-31 14:48:05.747493500 simscan: checking attachment textfile1 >>>>>> against .vb >>>>>> 2017-08-31 14:48:05.747494500 simscan: checking attachment textfile1 >>>>>> against .vbe >>>>>> 2017-08-31 14:48:05.747494500 simscan: checking attachment textfile1 >>>>>> against .vbs >>>>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 >>>>>> against .wsc >>>>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 >>>>>> against .wsf >>>>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 >>>>>> against .wsh >>>>>> 2017-08-31 14:48:05.747497500 simscan: checking attachment textfile1 >>>>>> against .xxe >>>>>> 2017-08-31 14:48:05.747501500 simscan: checking attachment textfile1 >>>>>> against .docm >>>>>> 2017-08-31 14:48:05.747502500 simscan: checking attachment textfile1 >>>>>> against .z >>>>>> 2017-08-31 14:48:05.747502500 simscan: checking attachment textfile1 >>>>>> against .jar >>>>>> 2017-08-31 14:48:05.747502500 simscan: cdb looking up version attach >>>>>> 2017-08-31 14:48:05.747503500 simscan: runned_scanners is attach: 1.4.0 >>>>>> 2017-08-31 14:48:05.747503500 simscan: found 1.4.0 >>>>>> 2017-08-31 14:48:05.747503500 simscan: calling clamdscan >>>>>> 2017-08-31 14:48:05.753721500 simscan: clamdscan: >>>>>> /var/qmail/simscan/1504171085.205836.36767: OK >>>>>> 2017-08-31 14:48:05.753754500 simscan: clamdscan: >>>>>> 2017-08-31 14:48:05.753754500 simscan: clamdscan: ----------- SCAN >>>>>> SUMMARY ----------- >>>>>> 2017-08-31 14:48:05.753768500 simscan: clamdscan: Infected files: 0 >>>>>> 2017-08-31 14:48:05.753771500 simscan: clamdscan: Time: 0.004 sec (0 m 0 >>>>>> s) >>>>>> 2017-08-31 14:48:05.753957500 simscan: cdb looking up version clamav >>>>>> 2017-08-31 14:48:05.753968500 simscan: runned_scanners is attach: 1.4.0 >>>>>> clamav: 0.98.6/m: >>>>>> 2017-08-31 14:48:05.753969500 simscan: found 0.98.6/m: >>>>>> 2017-08-31 14:48:05.753974500 simscan: normal clamdscan return code: 0 >>>>>> 2017-08-31 14:48:05.753994500 simscan: calling spamc >>>>>> 2017-08-31 14:48:05.754001500 simscan: calling /usr/bin/spamc spamc >>>>>> 2017-08-31 14:48:05.754010500 simscan: check_spam had an error ret: -1 >>>>>> 2017-08-31 14:48:05.754101500 simscan: exit error code: 71 >>>>>> 2017-08-31 14:48:05.754220500 qmail-smtpd: qq soft reject (mail server >>>>>> temporarily rejected message (#4.3.0)): >>>>>> MAILFROM:<sunil.saharan@@yyyy.com> RCPTTO:c...@yyyy.com >>>>>> 2017-08-31 14:48:05.755317500 tcpserver: end 36645 status 0 >>>>>> >>>>>> ################## >>>>>> >>>>>> >>>>>> 2017-08-31 14:48:05.956040500 simscan: cdb looking >>>>>> upsunil.saha...@yyyy.com >>>>>> 2017-08-31 14:48:05.956041500 simscan: pelookup: called >>>>>> withinv1...@xxxx.net >>>>>> 2017-08-31 14:48:05.956042500 simscan: pelookup: domain is >>>>>> radiant-india.net >>>>>> 2017-08-31 14:48:05.956042500 simscan: cdb looking up radiant-india.net >>>>>> 2017-08-31 14:48:05.956043500 simscan: cdb for radiant-india.net found >>>>>> clam=yes,spam=yes,spam_hits=30,spam_passthru=yes,attach=.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>> 2017-08-31 14:48:05.956049500 simscan: pelookup clam = yes >>>>>> 2017-08-31 14:48:05.956049500 simscan: pelookup spam = yes >>>>>> 2017-08-31 14:48:05.956050500 simscan: pelookup spam_hits = 30 >>>>>> 2017-08-31 14:48:05.956053500 simscan: Per Domain Hits set to : 30.000000 >>>>>> 2017-08-31 14:48:05.956053500 simscan: pelookup spam_passthru = yes >>>>>> 2017-08-31 14:48:05.956059500 simscan: unimplemented flag spam_passthru >>>>>> = yes >>>>>> 2017-08-31 14:48:05.956060500 simscan: pelookup attach = >>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>> 2017-08-31 14:48:05.956062500 simscan: attachment flag attach = >>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>> 2017-08-31 14:48:05.956074500 simscan: add_attach called with >>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar >>>>>> 2017-08-31 14:48:05.956079500 simscan: .ace is attachment number 0 >>>>>> 2017-08-31 14:48:05.956080500 simscan: .arc is attachment number 1 >>>>>> 2017-08-31 14:48:05.956081500 simscan: .arj is attachment number 2 >>>>>> 2017-08-31 14:48:05.956081500 simscan: .b64 is attachment number 3 >>>>>> 2017-08-31 14:48:05.956087500 simscan: .bat is attachment number 4 >>>>>> 2017-08-31 14:48:05.956087500 simscan: .bhx is attachment number 5 >>>>>> 2017-08-31 14:48:05.956088500 simscan: .cab is attachment number 6 >>>>>> 2017-08-31 14:48:05.956088500 simscan: .chm is attachment number 7 >>>>>> 2017-08-31 14:48:05.956089500 simscan: .com is attachment number 8 >>>>>> 2017-08-31 14:48:05.956089500 simscan: .cpl is attachment number 9 >>>>>> 2017-08-31 14:48:05.956090500 simscan: .dll is attachment number 10 >>>>>> 2017-08-31 14:48:05.956090500 simscan: .exe is attachment number 11 >>>>>> 2017-08-31 14:48:05.956094500 simscan: .gz is attachment number 12 >>>>>> 2017-08-31 14:48:05.956094500 simscan: .hqx is attachment number 13 >>>>>> 2017-08-31 14:48:05.956095500 simscan: .hta is attachment number 14 >>>>>> 2017-08-31 14:48:05.956095500 simscan: .inf is attachment number 15 >>>>>> 2017-08-31 14:48:05.956096500 simscan: .ins is attachment number 16 >>>>>> 2017-08-31 14:48:05.956096500 simscan: .iso is attachment number 17 >>>>>> 2017-08-31 14:48:05.956097500 simscan: .isp is attachment number 18 >>>>>> 2017-08-31 14:48:05.956097500 simscan: .jse is attachment number 19 >>>>>> 2017-08-31 14:48:05.956106500 simscan: .lib is attachment number 20 >>>>>> 2017-08-31 14:48:05.956106500 simscan: .lnk is attachment number 21 >>>>>> 2017-08-31 14:48:05.956107500 simscan: .lzh is attachment number 22 >>>>>> 2017-08-31 14:48:05.956107500 simscan: .mim is attachment number 23 >>>>>> 2017-08-31 14:48:05.956108500 simscan: .msp is attachment number 24 >>>>>> 2017-08-31 14:48:05.956108500 simscan: .mst is attachment number 25 >>>>>> 2017-08-31 14:48:05.956109500 simscan: .pif is attachment number 26 >>>>>> 2017-08-31 14:48:05.956109500 simscan: .reg is attachment number 27 >>>>>> 2017-08-31 14:48:05.956113500 simscan: .scf is attachment number 28 >>>>>> 2017-08-31 14:48:05.956113500 simscan: .scr is attachment number 29 >>>>>> 2017-08-31 14:48:05.956114500 simscan: .sct is attachment number 30 >>>>>> 2017-08-31 14:48:05.956120500 simscan: .shb is attachment number 31 >>>>>> 2017-08-31 14:48:05.956121500 simscan: .shs is attachment number 32 >>>>>> 2017-08-31 14:48:05.956121500 simscan: .sys is attachment number 33 >>>>>> 2017-08-31 14:48:05.956122500 simscan: .taz is attachment number 34 >>>>>> 2017-08-31 14:48:05.956122500 simscan: .tgz is attachment number 35 >>>>>> 2017-08-31 14:48:05.956123500 simscan: .tz is attachment number 36 >>>>>> 2017-08-31 14:48:05.956123500 simscan: .url is attachment number 37 >>>>>> 2017-08-31 14:48:05.956124500 simscan: .uu is attachment number 38 >>>>>> 2017-08-31 14:48:05.956127500 simscan: .uue is attachment number 39 >>>>>> 2017-08-31 14:48:05.956128500 simscan: .vb is attachment number 40 >>>>>> 2017-08-31 14:48:05.956128500 simscan: .vbe is attachment number 41 >>>>>> 2017-08-31 14:48:05.956129500 simscan: .vbs is attachment number 42 >>>>>> 2017-08-31 14:48:05.956129500 simscan: .wsc is attachment number 43 >>>>>> 2017-08-31 14:48:05.956130500 simscan: .wsf is attachment number 44 >>>>>> 2017-08-31 14:48:05.956130500 simscan: .wsh is attachment number 45 >>>>>> 2017-08-31 14:48:05.956131500 simscan: .xxe is attachment number 46 >>>>>> 2017-08-31 14:48:05.956134500 simscan: .docm is attachment number 47 >>>>>> 2017-08-31 14:48:05.956134500 simscan: .z is attachment number 48 >>>>>> 2017-08-31 14:48:05.956135500 simscan: .jar is attachment number 49 >>>>>> 2017-08-31 14:48:05.956136500 simscan: pelookup: local part is inv1mum >>>>>> 2017-08-31 14:48:05.956136500 simscan: lpart: local part is ** >>>>>> 2017-08-31 14:48:05.956137500 simscan: cdb looking upinv1...@xxxx.net >>>>>> 2017-08-31 14:48:05.956137500 simscan: ripmime error >>>>>> 2017-08-31 14:48:05.956138500 simscan: exit error code: 71 >>>>>> 2017-08-31 14:48:05.956144500 qmail-smtpd: qq soft reject (mail server >>>>>> temporarily rejected message (#4.3.0)): >>>>>> MAILFROM:<sunil.saha...@yyyy.com> RCPTTO:inv1...@xxxx.net >>>>>> >>>>>> >>>>>> thanks >>>>>> rajesh >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> --------------------------------------------------------------------- >>>>>> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>>>>> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com >>>>> --------------------------------------------------------------------- >>>>> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>>>> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>>> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com >>> >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com >>> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com >> >> -- >> Eric Broch >> White Horse Technical Consulting (WHTC) > -- Eric Broch White Horse Technical Consulting (WHTC)
--------------------------------------------------------------------- To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
