jeff

could you please let me know the cpu details of your machine

is it a dell machine or some other with  intel E5 processor ?

rajesh


----- Original Message -----
From: Jeff Koch [mailto:jeffk...@intersessions.com]
To: qmailtoaster-list@qmailtoaster.com
Sent: Fri, 1 Sep 2017 13:39:37 -0400
Subject:

Eric / Remo / Rajesh - we reported this same problem a number of months
ago and thought we had fixed it. But alas, it's still with us. The good
news is that we haven't had any customer complaints. I'll be very
interested if it can be resolved.

Jeff Koch


On 9/1/2017 12:01 PM, Eric Broch wrote:
>
> I'm not sure what's going on here. Is this a relatively new phenomenon?
>
> I wonder if it's a memory, or even a disk speed, issue since it only
> happens at peak hours?
>
> I think I'll appy Johannes Weberhofer's patch and put it out there for
> you...and cross or fingers.
>
>
> On 9/1/2017 6:28 AM, Rajesh M wrote:
>> remo / eric
>>
>> i have still not being able to resolve the qq soft reject error.
>>
>> these are my findings
>>
>> 1) the errors i see are "error forking qmail-queue" and "ripmime error" 
>> which causes the qq soft reject.
>>
>> 2) the max concurrent connections in the logs is around 35.
>>
>> 3)  These errors come up during peak working hours when the server is under 
>> a  load of 4 - 8, and they increase the load even more to over 10-15.
>>
>> 4) i came across this link (not sure if this is related)
>> https://github.com/qmail/simscan/blob/master/simscan.c
>>
>> 5) i can share with you my live smtp logs with simscan debug.
>>
>> have extracted some lines below
>>
>>
>> Error forking qmail-queue
>>
>> @4000000059a8fa7b0a2ed1b4 tcpserver: status: 31/200
>> @4000000059a8fa7b13162584 simscan: cdb looking up version spam
>> @4000000059a8fa7b13166bd4 simscan: runned_scanners is  attach: 1.4.0 clamav: 
>> 0.98.6/m: spam: 3.3.2
>> @4000000059a8fa7b13166fbc simscan: found 3.3.2
>> @4000000059a8fa7b13168efc simscan:[10757]:CLEAN 
>> (5.00/30.00):9.7712s:-Possible Spam- RE_ REQUIRE BOOKING // 1X20  //
>> ICD TKD TO 
>> BANDARABASS:103.241.181.228:cs....@atlasdecargo.com:rathe...@radiant-india.net
>> @4000000059a8fa7b1316cd7c simscan: done, execing qmail-queue
>> @4000000059a8fa7b1316fc5c simscan: error forking qmail-queue
>> @4000000059a8fa7b13199854 simscan: exit error code: 71
>> @4000000059a8fa7b131c4004 qmail-smtpd: qq soft reject (mail server 
>> temporarily rejected message (#4.3.0)): MAILFROM:<cs....@xxxxx.com>
>> RCPTTO:rathe...@yyyyy.net
>>
>>
>> Error in ripmime
>>
>> @4000000059a8fa98045a4bc4 simscan: pelookup: domain is aissamaritime.in
>> @4000000059a8fa98045a4bc4 simscan: cdb looking up aissamaritime.in
>> @4000000059a8fa98045a4fac simscan: pelookup: local part is shailesh_k_bom
>> @4000000059a8fa98045a4fac simscan: lpart: local part is **
>> @4000000059a8fa98045a5394 simscan: cdb looking 
>> upshailesh_k_...@aissamaritime.in
>> @4000000059a8fa98045a5394 simscan: ripmime error
>> @4000000059a8fa98045a6334 simscan: exit error code: 71
>> @4000000059a8fa98045a95fc qmail-smtpd: qq soft reject (mail server 
>> temporarily rejected message (#4.3.0)):
>> MAILFROM:<imp...@xxxxxxx.in>  RCPTTO:shailesh_k_...@yyyyyy.in
>>
>>
>> Wierd error logs
>>
>> @4000000059a9032f3aa79a24 simscan: clamdscan: ----------- SCAN SUMMARY 
>> -----------
>> @4000000059a9032f3aa7b964 simscan: clamdscan: 
>> /var/qmail/simscan/1504248613.321653.5221: OK
>> @4000000059a9032f3aa86d14 simscan: clamdscan:
>> @4000000059a9032f3aa870fc simscan: clamdscan: ---simscan: cdb looking up 
>> version clamav
>> @4000000059a9032f3aa8a3c4 -------- SCAN simscan: clamdscan: SIUnMfMeAcRtYe 
>> d- -fsimscan: runned_scanners is  attach: 1.4.0 clamav: 0.98.6/m:
>> @4000000059a9032f3aa8c304 -isimscan: found 0.98.6/m:
>> @4000000059a9032f3aa8c6ec -l-e-s-:- -0
>> @4000000059a9032f3aa8f1e4 --simscan: normal clamdscan return code: 0
>> @4000000059a9032f3aa8f1e4
>> @4000000059a9032f3aa8f5cc simscan: clamdscan: Infected fsimscan: clamdscan: 
>> iTliemes::  00
>> @4000000059a9032f3aa93834 .simscan: clamdscan: 1T1i8m es:e c0 .1(002  ms 
>> e0simscan: calling spamc
>> @4000000059a9032f3aa96ee4 c  s(0)simscan: calling /usr/bin/spamc simscan: 
>> clamdscan:
>> @4000000059a9032f3aa999dc  spamcm
>> @4000000059a9032f3aa999dc 0 s)
>> @4000000059a9032f3aa9ad64 /var/qmail/simscan/1simscan: check_spam had an 
>> error ret: -1
>> @4000000059a9032f3aa9e02c 504248613.307311.5215: OK
>> @4000000059a9032f3aaaa37c simscan: clamdscan:
>> @4000000059a9032f3aaaa764 simscan: clamdscan: ----------- SCAN SUMMARY 
>> -----------
>> @4000000059a9032f3aab3fbc simscan: clamdscan: Infected files: 0
>> @4000000059a9032f3aaba164 simscan: clamdscan: Time: 0.135 sec (0 m 0 s)
>> @4000000059a9032f3aac39bc simscan: clamdscan: /var/qmail/simscan/15simscan: 
>> exit error code: 71
>> @4000000059a9032f3aaca334 04248613.308469.5216: OK
>> @4000000059a9032f3aacddcc simscan: clamdscan:
>> @4000000059a9032f3aace984 simscan: clamdscan: ----------- SCAN SUMMARY 
>> -----------
>> @4000000059a9
>>
>>
>> ################
>>
>> @4000000059a9032f3aa86d14 simscan: clamdscan:
>> @4000000059a9032f3aa870fc simscan: clamdscan: ---simscan: cdb looking up 
>> version clamav
>> @4000000059a9032f3aa8a3c4 -------- SCAN simscan: clamdscan: SIUnMfMeAcRtYe 
>> d- -fsimscan: runned_scanners is  attach: 1.4.0 clamav: 0.98.6/m:
>> @4000000059a9032f3aa8c304 -isimscan: found 0.98.6/m:
>> @4000000059a9032f3aa8c6ec -l-e-s-:- -0
>> @4000000059a9032f3aa8f1e4 --simscan: normal clamdscan return code: 0
>> @4000000059a9032f3aa8f1e4
>> @4000000059a9032f3aa8f5cc simscan: clamdscan: Infected fsimscan: clamdscan: 
>> iTliemes::  00
>> @4000000059a9032f3aa93834 .simscan: clamdscan: 1T1i8m es:e c0 .1(002  ms 
>> e0simscan: calling spamc
>> @4000000059a9032f3aa96ee4 c  s(0)simscan: calling /usr/bin/spamc simscan: 
>> clamdscan:
>> @4000000059a9032f3aa999dc  spamcm
>> @4000000059a9032f3aa999dc 0 s)
>> @4000000059a9032f3aa9ad64 /var/qmail/simscan/1simscan: check_spam had an 
>> error ret: -1
>> @4000000059a9032f3aa9e02c 504248613.307311.5215: OK
>> @4000000059a9032f3aaaa37c simscan: clamdscan:
>> @4000000059a9032f3aaaa764 simscan: clamdscan: ----------- SCAN SUMMARY 
>> -----------
>> @4000000059a9032f3aab3fbc simscan: clamdscan: Infected files: 0
>> @4000000059a9032f3aaba164 simscan: clamdscan: Time: 0.135 sec (0 m 0 s)
>> @4000000059a9032f3aac39bc simscan: clamdscan: /var/qmail/simscan/15simscan: 
>> exit error code: 71
>> @4000000059a9032f3aaca334 04248613.308469.5216: OK
>>
>>
>>
>> thanks,
>> rajesh
>>
>>
>>
>> ----- Original Message -----
>> From: Remo Mattei [mailto:r...@mattei.org]
>> To:24x7ser...@24x7server.net
>> Sent: Thu, 31 Aug 2017 07:58:22 -0700
>> Subject:
>>
>> No it reads it everytime.
>>
>> Yes permissions are good
>>
>> Remo
>>
>> On 8/31/17 7:48 AM, Rajesh M wrote:
>>> thank for sharing your experience remo,
>>>
>>> so would the following be correct ?
>>>
>>> chmod 2750  simscan
>>> chown clamav.clamav simscan
>>>
>>> do i need to stop qmail while applying this ?
>>>
>>> rajesh
>>>
>>>
>>> ----- Original Message -----
>>> From: Remo Mattei [mailto:r...@mattei.org]
>>> To:qmailtoaster-list@qmailtoaster.com,24x7ser...@24x7server.net
>>> Sent: Thu, 31 Aug 2017 07:23:20 -0700
>>> Subject:
>>>
>>> I had the same issue with qq.
>>>
>>> I changed the permissions and all good. I also raised the value of the
>>> softlimits exec /usr/bin/softlimit -m 1040000000
>>>
>>> and my permissions are drwxr-s---Â Â  2 clamav clamav 4096 Aug 31 07:19
>>> simscan
>>>
>>> So hopefully this helps.
>>>
>>> Remo
>>>
>>>
>>> On 8/31/17 6:51 AM, Rajesh M wrote:
>>>> eric
>>>>
>>>> on my qmailtoaster server (centos 6 64 bit)  there are several domains --- 
>>>> high traffic
>>>>
>>>> about 80 percent of them are routed via the sophos antispam filter and 
>>>> then passed on to the mailserver with spamassassin/clam disabled by adding 
>>>> the ip of the sophos server to the tcp.smtp file to exclude the line 
>>>> /var/qmail/bin/simscan
>>>>
>>>> the balance 20 are directly reaching the mailserver ie mx pointed to 
>>>> mailserver instead of sophos server and are scanned with clam / 
>>>> spamassassin.
>>>>
>>>> today i turned on the spamassassin / clam for the above 80 percent domains 
>>>> too and this started throwing qq reject errors on  a large scale but 
>>>> randomly.
>>>>
>>>> spamassassin child-processes was set to 20 to handle the load
>>>>
>>>> i checked the log files for the last 30 days till yesterday and found that 
>>>> the same qq reject errors were present but very rarely ie 3 to 4 times on 
>>>> a single day (occasional high load ??)
>>>> so it seems that this error comes up only when the load on the server is 
>>>> high, all take place when there are attachments.
>>>>
>>>> reading the thread you sent me, i am not sure whether it applies to my 
>>>> case but i can try out.
>>>>
>>>> #############
>>>> drwxr-x---  2 clamav root     6 May  6 17:57 simscan/
>>>>
>>>> changing this to the following fixed the problem:
>>>> drwxr-s---  2 clamav clamav     6 May  6 17:57 simscan/
>>>> ###########
>>>>
>>>> should i just
>>>> chown clamav.clamav simscan
>>>>
>>>>
>>>> thanks
>>>> rajesh
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> ----- Original Message -----
>>>> From: Eric Broch [mailto:ebr...@whitehorsetc.com]
>>>> To:24x7ser...@24x7server.net
>>>> Sent: Thu, 31 Aug 2017 06:42:08 -0600
>>>> Subject:
>>>>
>>>> Have a look here, Rajesh, I'm not sure if it will help:
>>>>
>>>> https://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg40456.html
>>>>
>>>>
>>>> On 8/31/2017 4:51 AM, Rajesh M wrote:
>>>>> hi
>>>>>
>>>>> centos 6 64 bit
>>>>> SpamAssassin version 3.3.2
>>>>> ClamAV 0.98.6/23745/Thu Aug 31 14:07:08 2017
>>>>>
>>>>> we have a sophos antispam firewall which receives our emails and then 
>>>>> routes them to our mail server (qmailtoaster, dovecot, spamassassin, clam)
>>>>>
>>>>> in the mail server we had stopped spamassassin
>>>>>
>>>>> however due to some custom requirements by our clients we enabled the same
>>>>>
>>>>> however we get the following error when the load on the server is high on 
>>>>> a random basis.
>>>>>
>>>>> 2017-08-31 14:48:05.753994500 simscan: calling spamc
>>>>> 2017-08-31 14:48:05.754001500 simscan: calling /usr/bin/spamc  spamc
>>>>> 2017-08-31 14:48:05.754010500 simscan: check_spam had an error ret: -1
>>>>> 2017-08-31 14:48:05.754101500 simscan: exit error code: 71
>>>>> 2017-08-31 14:48:05.754220500 qmail-smtpd: qq soft reject (mail server 
>>>>> temporarily rejected message (#4.3.0)): 
>>>>> MAILFROM:<sunil.saharan@@yyyy.com>  RCPTTO:c...@yyyy.com
>>>>>
>>>>>
>>>>> 2017-08-31 14:48:05.956137500 simscan: ripmime error
>>>>> qmail-smtpd: qq soft reject (mail server temporarily rejected message
>>>>>
>>>>>
>>>>>
>>>>> if i disable simscan in tcp.smtp then errors do not take place.
>>>>>
>>>>> i enabled simscan debug and this is the result.
>>>>>
>>>>> 2017-08-31 14:48:05.956144500 qmail-smtpd: qq soft reject (mail server 
>>>>> temporarily rejected message (#4.3.0)): MAILFROM:<sunil.saha...@yyyy.com> 
>>>>>  RCPTTO:inv1...@xxxx.net
>>>>>
>>>>>
>>>>> clam=yes,spam=yes,spam_hits=30,spam_passthru=yes,attach=.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>> 2017-08-31 14:48:05.746592500 simscan: pelookup clam = yes
>>>>> 2017-08-31 14:48:05.746593500 simscan: pelookup spam = yes
>>>>> 2017-08-31 14:48:05.746593500 simscan: pelookup spam_hits = 30
>>>>> 2017-08-31 14:48:05.746595500 simscan: Per Domain Hits set to : 30.000000
>>>>> 2017-08-31 14:48:05.746595500 simscan: pelookup spam_passthru = yes
>>>>> 2017-08-31 14:48:05.746596500 simscan: unimplemented flag spam_passthru = 
>>>>> yes
>>>>> 2017-08-31 14:48:05.746596500 simscan: pelookup attach = 
>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>> 2017-08-31 14:48:05.746599500 simscan: attachment flag attach = 
>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>> 2017-08-31 14:48:05.746602500 simscan: add_attach called with 
>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>> 2017-08-31 14:48:05.746606500 simscan: .ace is attachment number 0
>>>>> 2017-08-31 14:48:05.746607500 simscan: .arc is attachment number 1
>>>>> 2017-08-31 14:48:05.746607500 simscan: .arj is attachment number 2
>>>>> 2017-08-31 14:48:05.746607500 simscan: .b64 is attachment number 3
>>>>> 2017-08-31 14:48:05.746610500 simscan: .bat is attachment number 4
>>>>> 2017-08-31 14:48:05.746610500 simscan: .bhx is attachment number 5
>>>>> 2017-08-31 14:48:05.746610500 simscan: .cab is attachment number 6
>>>>> 2017-08-31 14:48:05.746611500 simscan: .chm is attachment number 7
>>>>> 2017-08-31 14:48:05.746611500 simscan: .com is attachment number 8
>>>>> 2017-08-31 14:48:05.746611500 simscan: .cpl is attachment number 9
>>>>> 2017-08-31 14:48:05.746611500 simscan: .dll is attachment number 10
>>>>> 2017-08-31 14:48:05.746612500 simscan: .exe is attachment number 11
>>>>> 2017-08-31 14:48:05.746614500 simscan: .gz is attachment number 12
>>>>> 2017-08-31 14:48:05.746614500 simscan: .hqx is attachment number 13
>>>>> 2017-08-31 14:48:05.746614500 simscan: .hta is attachment number 14
>>>>> 2017-08-31 14:48:05.746615500 simscan: .inf is attachment number 15
>>>>> 2017-08-31 14:48:05.746615500 simscan: .ins is attachment number 16
>>>>> 2017-08-31 14:48:05.746615500 simscan: .iso is attachment number 17
>>>>> 2017-08-31 14:48:05.746616500 simscan: .isp is attachment number 18
>>>>> 2017-08-31 14:48:05.746616500 simscan: .jse is attachment number 19
>>>>> 2017-08-31 14:48:05.746618500 simscan: .lib is attachment number 20
>>>>> 2017-08-31 14:48:05.746618500 simscan: .lnk is attachment number 21
>>>>> 2017-08-31 14:48:05.746619500 simscan: .lzh is attachment number 22
>>>>> 2017-08-31 14:48:05.746622500 simscan: .mim is attachment number 23
>>>>> 2017-08-31 14:48:05.746622500 simscan: .msp is attachment number 24
>>>>> 2017-08-31 14:48:05.746623500 simscan: .mst is attachment number 25
>>>>> 2017-08-31 14:48:05.746623500 simscan: .pif is attachment number 26
>>>>> 2017-08-31 14:48:05.746623500 simscan: .reg is attachment number 27
>>>>> 2017-08-31 14:48:05.746624500 simscan: .scf is attachment number 28
>>>>> 2017-08-31 14:48:05.746624500 simscan: .scr is attachment number 29
>>>>> 2017-08-31 14:48:05.746624500 simscan: .sct is attachment number 30
>>>>> 2017-08-31 14:48:05.746630500 simscan: .shb is attachment number 31
>>>>> 2017-08-31 14:48:05.746630500 simscan: .shs is attachment number 32
>>>>> 2017-08-31 14:48:05.746631500 simscan: .sys is attachment number 33
>>>>> 2017-08-31 14:48:05.746631500 simscan: .taz is attachment number 34
>>>>> 2017-08-31 14:48:05.746631500 simscan: .tgz is attachment number 35
>>>>> 2017-08-31 14:48:05.746632500 simscan: .tz is attachment number 36
>>>>> 2017-08-31 14:48:05.746632500 simscan: .url is attachment number 37
>>>>> 2017-08-31 14:48:05.746632500 simscan: .uu is attachment number 38
>>>>> 2017-08-31 14:48:05.746635500 simscan: .uue is attachment number 39
>>>>> 2017-08-31 14:48:05.746635500 simscan: .vb is attachment number 40
>>>>> 2017-08-31 14:48:05.746635500 simscan: .vbe is attachment number 41
>>>>> 2017-08-31 14:48:05.746636500 simscan: .vbs is attachment number 42
>>>>> 2017-08-31 14:48:05.746636500 simscan: .wsc is attachment number 43
>>>>> 2017-08-31 14:48:05.746636500 simscan: .wsf is attachment number 44
>>>>> 2017-08-31 14:48:05.746637500 simscan: .wsh is attachment number 45
>>>>> 2017-08-31 14:48:05.746637500 simscan: .xxe is attachment number 46
>>>>> 2017-08-31 14:48:05.746639500 simscan: .docm is attachment number 47
>>>>> 2017-08-31 14:48:05.746639500 simscan: .z is attachment number 48
>>>>> 2017-08-31 14:48:05.746640500 simscan: .jar is attachment number 49
>>>>> 2017-08-31 14:48:05.746643500 simscan: pelookup: local part is cs2
>>>>> 2017-08-31 14:48:05.746643500 simscan: lpart: local part is **
>>>>> 2017-08-31 14:48:05.746644500 simscan: cdb looking up...@yyyy.com
>>>>> 2017-08-31 14:48:05.747114500 simscan: checking attachment textfile2 
>>>>> against .ace
>>>>> 2017-08-31 14:48:05.747123500 simscan: checking attachment textfile2 
>>>>> against .arc
>>>>> 2017-08-31 14:48:05.747124500 simscan: checking attachment textfile2 
>>>>> against .arj
>>>>> 2017-08-31 14:48:05.747124500 simscan: checking attachment textfile2 
>>>>> against .b64
>>>>> 2017-08-31 14:48:05.747125500 simscan: checking attachment textfile2 
>>>>> against .bat
>>>>> 2017-08-31 14:48:05.747126500 simscan: checking attachment textfile2 
>>>>> against .bhx
>>>>> 2017-08-31 14:48:05.747132500 simscan: checking attachment textfile2 
>>>>> against .cab
>>>>> 2017-08-31 14:48:05.747133500 simscan: checking attachment textfile2 
>>>>> against .chm
>>>>> 2017-08-31 14:48:05.747134500 simscan: checking attachment textfile2 
>>>>> against .com
>>>>> 2017-08-31 14:48:05.747134500 simscan: checking attachment textfile2 
>>>>> against .cpl
>>>>> 2017-08-31 14:48:05.747135500 simscan: checking attachment textfile2 
>>>>> against .dll
>>>>> 2017-08-31 14:48:05.747135500 simscan: checking attachment textfile2 
>>>>> against .exe
>>>>> 2017-08-31 14:48:05.747136500 simscan: checking attachment textfile2 
>>>>> against .gz
>>>>> 2017-08-31 14:48:05.747140500 simscan: checking attachment textfile2 
>>>>> against .hqx
>>>>> 2017-08-31 14:48:05.747146500 simscan: checking attachment textfile2 
>>>>> against .hta
>>>>> 2017-08-31 14:48:05.747147500 simscan: checking attachment textfile2 
>>>>> against .inf
>>>>> 2017-08-31 14:48:05.747147500 simscan: checking attachment textfile2 
>>>>> against .ins
>>>>> 2017-08-31 14:48:05.747148500 simscan: checking attachment textfile2 
>>>>> against .iso
>>>>> 2017-08-31 14:48:05.747149500 simscan: checking attachment textfile2 
>>>>> against .isp
>>>>> 2017-08-31 14:48:05.747149500 simscan: checking attachment textfile2 
>>>>> against .jse
>>>>> 2017-08-31 14:48:05.747150500 simscan: checking attachment textfile2 
>>>>> against .lib
>>>>> 2017-08-31 14:48:05.747162500 simscan: checking attachment textfile2 
>>>>> against .lnk
>>>>> 2017-08-31 14:48:05.747162500 simscan: checking attachment textfile2 
>>>>> against .lzh
>>>>> 2017-08-31 14:48:05.747163500 simscan: checking attachment textfile2 
>>>>> against .mim
>>>>> 2017-08-31 14:48:05.747164500 simscan: checking attachment textfile2 
>>>>> against .msp
>>>>> 2017-08-31 14:48:05.747164500 simscan: checking attachment textfile2 
>>>>> against .mst
>>>>> 2017-08-31 14:48:05.747171500 simscan: checking attachment textfile2 
>>>>> against .pif
>>>>> 2017-08-31 14:48:05.747171500 simscan: checking attachment textfile2 
>>>>> against .reg
>>>>> 2017-08-31 14:48:05.747172500 simscan: checking attachment textfile2 
>>>>> against .scf
>>>>> 2017-08-31 14:48:05.747173500 simscan: checking attachment textfile2 
>>>>> against .scr
>>>>> 2017-08-31 14:48:05.747173500 simscan: checking attachment textfile2 
>>>>> against .sct
>>>>> 2017-08-31 14:48:05.747174500 simscan: checking attachment textfile2 
>>>>> against .shb
>>>>> 2017-08-31 14:48:05.747175500 simscan: checking attachment textfile2 
>>>>> against .shs
>>>>> 2017-08-31 14:48:05.747189500 simscan: checking attachment textfile2 
>>>>> against .sys
>>>>> 2017-08-31 14:48:05.747189500 simscan: checking attachment textfile2 
>>>>> against .taz
>>>>> 2017-08-31 14:48:05.747190500 simscan: checking attachment textfile2 
>>>>> against .tgz
>>>>> 2017-08-31 14:48:05.747191500 simscan: checking attachment textfile2 
>>>>> against .tz
>>>>> 2017-08-31 14:48:05.747191500 simscan: checking attachment textfile2 
>>>>> against .url
>>>>> 2017-08-31 14:48:05.747192500 simscan: checking attachment textfile2 
>>>>> against .uu
>>>>> 2017-08-31 14:48:05.747195500 simscan: checking attachment textfile2 
>>>>> against .uue
>>>>> 2017-08-31 14:48:05.747196500 simscan: checking attachment textfile2 
>>>>> against .vb
>>>>> 2017-08-31 14:48:05.747197500 simscan: checking attachment textfile2 
>>>>> against .vbe
>>>>> 2017-08-31 14:48:05.747197500 simscan: checking attachment textfile2 
>>>>> against .vbs
>>>>> 2017-08-31 14:48:05.747198500 simscan: checking attachment textfile2 
>>>>> against .wsc
>>>>> 2017-08-31 14:48:05.747198500 simscan: checking attachment textfile2 
>>>>> against .wsf
>>>>> 2017-08-31 14:48:05.747202500 simscan: checking attachment textfile2 
>>>>> against .wsh
>>>>> 2017-08-31 14:48:05.747208500 simscan: checking attachment textfile2 
>>>>> against .xxe
>>>>> 2017-08-31 14:48:05.747209500 simscan: checking attachment textfile2 
>>>>> against .docm
>>>>> 2017-08-31 14:48:05.747209500 simscan: checking attachment textfile2 
>>>>> against .z
>>>>> 2017-08-31 14:48:05.747210500 simscan: checking attachment textfile2 
>>>>> against .jar
>>>>> 2017-08-31 14:48:05.747210500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .ace
>>>>> 2017-08-31 14:48:05.747211500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .arc
>>>>> 2017-08-31 14:48:05.747215500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .arj
>>>>> 2017-08-31 14:48:05.747215500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .b64
>>>>> 2017-08-31 14:48:05.747216500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .bat
>>>>> 2017-08-31 14:48:05.747217500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .bhx
>>>>> 2017-08-31 14:48:05.747218500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .cab
>>>>> 2017-08-31 14:48:05.747221500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .chm
>>>>> 2017-08-31 14:48:05.747222500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .com
>>>>> 2017-08-31 14:48:05.747223500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .cpl
>>>>> 2017-08-31 14:48:05.747224500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .dll
>>>>> 2017-08-31 14:48:05.747224500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .exe
>>>>> 2017-08-31 14:48:05.747230500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .gz
>>>>> 2017-08-31 14:48:05.747231500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .hqx
>>>>> 2017-08-31 14:48:05.747231500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .hta
>>>>> 2017-08-31 14:48:05.747232500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .inf
>>>>> 2017-08-31 14:48:05.747233500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .ins
>>>>> 2017-08-31 14:48:05.747237500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .iso
>>>>> 2017-08-31 14:48:05.747238500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .isp
>>>>> 2017-08-31 14:48:05.747238500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .jse
>>>>> 2017-08-31 14:48:05.747239500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .lib
>>>>> 2017-08-31 14:48:05.747240500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .lnk
>>>>> 2017-08-31 14:48:05.747243500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .lzh
>>>>> 2017-08-31 14:48:05.747244500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .mim
>>>>> 2017-08-31 14:48:05.747245500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .msp
>>>>> 2017-08-31 14:48:05.747246500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .mst
>>>>> 2017-08-31 14:48:05.747246500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .pif
>>>>> 2017-08-31 14:48:05.747257500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .reg
>>>>> 2017-08-31 14:48:05.747258500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .scf
>>>>> 2017-08-31 14:48:05.747259500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .scr
>>>>> 2017-08-31 14:48:05.747260500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .sct
>>>>> 2017-08-31 14:48:05.747260500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .shb
>>>>> 2017-08-31 14:48:05.747264500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .shs
>>>>> 2017-08-31 14:48:05.747265500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .sys
>>>>> 2017-08-31 14:48:05.747266500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .taz
>>>>> 2017-08-31 14:48:05.747266500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .tgz
>>>>> 2017-08-31 14:48:05.747267500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .tz
>>>>> 2017-08-31 14:48:05.747271500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .url
>>>>> 2017-08-31 14:48:05.747271500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .uu
>>>>> 2017-08-31 14:48:05.747272500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .uue
>>>>> 2017-08-31 14:48:05.747273500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .vb
>>>>> 2017-08-31 14:48:05.747279500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .vbe
>>>>> 2017-08-31 14:48:05.747280500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .vbs
>>>>> 2017-08-31 14:48:05.747280500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .wsc
>>>>> 2017-08-31 14:48:05.747281500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .wsf
>>>>> 2017-08-31 14:48:05.747282500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .wsh
>>>>> 2017-08-31 14:48:05.747285500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .xxe
>>>>> 2017-08-31 14:48:05.747286500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .docm
>>>>> 2017-08-31 14:48:05.747287500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .z
>>>>> 2017-08-31 14:48:05.747288500 simscan: checking attachment 
>>>>> msg.1504171085.205836.36767 against .jar
>>>>> 2017-08-31 14:48:05.747289500 simscan: checking attachment textfile0 
>>>>> against .ace
>>>>> 2017-08-31 14:48:05.747292500 simscan: checking attachment textfile0 
>>>>> against .arc
>>>>> 2017-08-31 14:48:05.747293500 simscan: checking attachment textfile0 
>>>>> against .arj
>>>>> 2017-08-31 14:48:05.747294500 simscan: checking attachment textfile0 
>>>>> against .b64
>>>>> 2017-08-31 14:48:05.747294500 simscan: checking attachment textfile0 
>>>>> against .bat
>>>>> 2017-08-31 14:48:05.747295500 simscan: checking attachment textfile0 
>>>>> against .bhx
>>>>> 2017-08-31 14:48:05.747296500 simscan: checking attachment textfile0 
>>>>> against .cab
>>>>> 2017-08-31 14:48:05.747299500 simscan: checking attachment textfile0 
>>>>> against .chm
>>>>> 2017-08-31 14:48:05.747305500 simscan: checking attachment textfile0 
>>>>> against .com
>>>>> 2017-08-31 14:48:05.747305500 simscan: checking attachment textfile0 
>>>>> against .cpl
>>>>> 2017-08-31 14:48:05.747306500 simscan: checking attachment textfile0 
>>>>> against .dll
>>>>> 2017-08-31 14:48:05.747307500 simscan: checking attachment textfile0 
>>>>> against .exe
>>>>> 2017-08-31 14:48:05.747307500 simscan: checking attachment textfile0 
>>>>> against .gz
>>>>> 2017-08-31 14:48:05.747308500 simscan: checking attachment textfile0 
>>>>> against .hqx
>>>>> 2017-08-31 14:48:05.747311500 simscan: checking attachment textfile0 
>>>>> against .hta
>>>>> 2017-08-31 14:48:05.747312500 simscan: checking attachment textfile0 
>>>>> against .inf
>>>>> 2017-08-31 14:48:05.747312500 simscan: checking attachment textfile0 
>>>>> against .ins
>>>>> 2017-08-31 14:48:05.747313500 simscan: checking attachment textfile0 
>>>>> against .iso
>>>>> 2017-08-31 14:48:05.747314500 simscan: checking attachment textfile0 
>>>>> against .isp
>>>>> 2017-08-31 14:48:05.747314500 simscan: checking attachment textfile0 
>>>>> against .jse
>>>>> 2017-08-31 14:48:05.747318500 simscan: checking attachment textfile0 
>>>>> against .lib
>>>>> 2017-08-31 14:48:05.747318500 simscan: checking attachment textfile0 
>>>>> against .lnk
>>>>> 2017-08-31 14:48:05.747319500 simscan: checking attachment textfile0 
>>>>> against .lzh
>>>>> 2017-08-31 14:48:05.747320500 simscan: checking attachment textfile0 
>>>>> against .mim
>>>>> 2017-08-31 14:48:05.747320500 simscan: checking attachment textfile0 
>>>>> against .msp
>>>>> 2017-08-31 14:48:05.747321500 simscan: checking attachment textfile0 
>>>>> against .mst
>>>>> 2017-08-31 14:48:05.747328500 simscan: checking attachment textfile0 
>>>>> against .pif
>>>>> 2017-08-31 14:48:05.747329500 simscan: checking attachment textfile0 
>>>>> against .reg
>>>>> 2017-08-31 14:48:05.747335500 simscan: checking attachment textfile0 
>>>>> against .scf
>>>>> 2017-08-31 14:48:05.747336500 simscan: checking attachment textfile0 
>>>>> against .scr
>>>>> 2017-08-31 14:48:05.747336500 simscan: checking attachment textfile0 
>>>>> against .sct
>>>>> 2017-08-31 14:48:05.747337500 simscan: checking attachment textfile0 
>>>>> against .shb
>>>>> 2017-08-31 14:48:05.747338500 simscan: checking attachment textfile0 
>>>>> against .shs
>>>>> 2017-08-31 14:48:05.747338500 simscan: checking attachment textfile0 
>>>>> against .sys
>>>>> 2017-08-31 14:48:05.747342500 simscan: checking attachment textfile0 
>>>>> against .taz
>>>>> 2017-08-31 14:48:05.747342500 simscan: checking attachment textfile0 
>>>>> against .tgz
>>>>> 2017-08-31 14:48:05.747343500 simscan: checking attachment textfile0 
>>>>> against .tz
>>>>> 2017-08-31 14:48:05.747344500 simscan: checking attachment textfile0 
>>>>> against .url
>>>>> 2017-08-31 14:48:05.747344500 simscan: checking attachment textfile0 
>>>>> against .uu
>>>>> 2017-08-31 14:48:05.747345500 simscan: checking attachment textfile0 
>>>>> against .uue
>>>>> 2017-08-31 14:48:05.747349500 simscan: checking attachment textfile0 
>>>>> against .vb
>>>>> 2017-08-31 14:48:05.747349500 simscan: checking attachment textfile0 
>>>>> against .vbe
>>>>> 2017-08-31 14:48:05.747350500 simscan: checking attachment textfile0 
>>>>> against .vbs
>>>>> 2017-08-31 14:48:05.747350500 simscan: checking attachment textfile0 
>>>>> against .wsc
>>>>> 2017-08-31 14:48:05.747351500 simscan: checking attachment textfile0 
>>>>> against .wsf
>>>>> 2017-08-31 14:48:05.747352500 simscan: checking attachment textfile0 
>>>>> against .wsh
>>>>> 2017-08-31 14:48:05.747355500 simscan: checking attachment textfile0 
>>>>> against .xxe
>>>>> 2017-08-31 14:48:05.747361500 simscan: checking attachment textfile0 
>>>>> against .docm
>>>>> 2017-08-31 14:48:05.747362500 simscan: checking attachment textfile0 
>>>>> against .z
>>>>> 2017-08-31 14:48:05.747363500 simscan: checking attachment textfile0 
>>>>> against .jar
>>>>> 2017-08-31 14:48:05.747363500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .ace
>>>>> 2017-08-31 14:48:05.747364500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .arc
>>>>> 2017-08-31 14:48:05.747365500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .arj
>>>>> 2017-08-31 14:48:05.747368500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .b64
>>>>> 2017-08-31 14:48:05.747369500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .bat
>>>>> 2017-08-31 14:48:05.747370500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .bhx
>>>>> 2017-08-31 14:48:05.747371500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .cab
>>>>> 2017-08-31 14:48:05.747372500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .chm
>>>>> 2017-08-31 14:48:05.747375500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .com
>>>>> 2017-08-31 14:48:05.747376500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .cpl
>>>>> 2017-08-31 14:48:05.747376500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .dll
>>>>> 2017-08-31 14:48:05.747377500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .exe
>>>>> 2017-08-31 14:48:05.747378500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .gz
>>>>> 2017-08-31 14:48:05.747384500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .hqx
>>>>> 2017-08-31 14:48:05.747385500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .hta
>>>>> 2017-08-31 14:48:05.747385500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .inf
>>>>> 2017-08-31 14:48:05.747386500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .ins
>>>>> 2017-08-31 14:48:05.747387500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .iso
>>>>> 2017-08-31 14:48:05.747391500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .isp
>>>>> 2017-08-31 14:48:05.747392500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .jse
>>>>> 2017-08-31 14:48:05.747392500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .lib
>>>>> 2017-08-31 14:48:05.747393500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .lnk
>>>>> 2017-08-31 14:48:05.747394500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .lzh
>>>>> 2017-08-31 14:48:05.747402500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .mim
>>>>> 2017-08-31 14:48:05.747403500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .msp
>>>>> 2017-08-31 14:48:05.747403500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .mst
>>>>> 2017-08-31 14:48:05.747404500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .pif
>>>>> 2017-08-31 14:48:05.747410500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .reg
>>>>> 2017-08-31 14:48:05.747411500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .scf
>>>>> 2017-08-31 14:48:05.747412500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .scr
>>>>> 2017-08-31 14:48:05.747412500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .sct
>>>>> 2017-08-31 14:48:05.747413500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .shb
>>>>> 2017-08-31 14:48:05.747417500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .shs
>>>>> 2017-08-31 14:48:05.747418500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .sys
>>>>> 2017-08-31 14:48:05.747418500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .taz
>>>>> 2017-08-31 14:48:05.747419500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .tgz
>>>>> 2017-08-31 14:48:05.747420500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .tz
>>>>> 2017-08-31 14:48:05.747424500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .url
>>>>> 2017-08-31 14:48:05.747425500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .uu
>>>>> 2017-08-31 14:48:05.747426500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .uue
>>>>> 2017-08-31 14:48:05.747426500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .vb
>>>>> 2017-08-31 14:48:05.747432500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .vbe
>>>>> 2017-08-31 14:48:05.747433500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .vbs
>>>>> 2017-08-31 14:48:05.747434500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .wsc
>>>>> 2017-08-31 14:48:05.747435500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .wsf
>>>>> 2017-08-31 14:48:05.747435500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .wsh
>>>>> 2017-08-31 14:48:05.747439500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .xxe
>>>>> 2017-08-31 14:48:05.747440500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .docm
>>>>> 2017-08-31 14:48:05.747441500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .z
>>>>> 2017-08-31 14:48:05.747442500 simscan: checking attachment 
>>>>> addr.1504171085.205836.36767 against .jar
>>>>> 2017-08-31 14:48:05.747442500 simscan: checking attachment textfile1 
>>>>> against .ace
>>>>> 2017-08-31 14:48:05.747446500 simscan: checking attachment textfile1 
>>>>> against .arc
>>>>> 2017-08-31 14:48:05.747446500 simscan: checking attachment textfile1 
>>>>> against .arj
>>>>> 2017-08-31 14:48:05.747447500 simscan: checking attachment textfile1 
>>>>> against .b64
>>>>> 2017-08-31 14:48:05.747447500 simscan: checking attachment textfile1 
>>>>> against .bat
>>>>> 2017-08-31 14:48:05.747448500 simscan: checking attachment textfile1 
>>>>> against .bhx
>>>>> 2017-08-31 14:48:05.747449500 simscan: checking attachment textfile1 
>>>>> against .cab
>>>>> 2017-08-31 14:48:05.747452500 simscan: checking attachment textfile1 
>>>>> against .chm
>>>>> 2017-08-31 14:48:05.747458500 simscan: checking attachment textfile1 
>>>>> against .com
>>>>> 2017-08-31 14:48:05.747459500 simscan: checking attachment textfile1 
>>>>> against .cpl
>>>>> 2017-08-31 14:48:05.747460500 simscan: checking attachment textfile1 
>>>>> against .dll
>>>>> 2017-08-31 14:48:05.747460500 simscan: checking attachment textfile1 
>>>>> against .exe
>>>>> 2017-08-31 14:48:05.747461500 simscan: checking attachment textfile1 
>>>>> against .gz
>>>>> 2017-08-31 14:48:05.747461500 simscan: checking attachment textfile1 
>>>>> against .hqx
>>>>> 2017-08-31 14:48:05.747465500 simscan: checking attachment textfile1 
>>>>> against .hta
>>>>> 2017-08-31 14:48:05.747466500 simscan: checking attachment textfile1 
>>>>> against .inf
>>>>> 2017-08-31 14:48:05.747467500 simscan: checking attachment textfile1 
>>>>> against .ins
>>>>> 2017-08-31 14:48:05.747467500 simscan: checking attachment textfile1 
>>>>> against .iso
>>>>> 2017-08-31 14:48:05.747468500 simscan: checking attachment textfile1 
>>>>> against .isp
>>>>> 2017-08-31 14:48:05.747469500 simscan: checking attachment textfile1 
>>>>> against .jse
>>>>> 2017-08-31 14:48:05.747477500 simscan: checking attachment textfile1 
>>>>> against .lib
>>>>> 2017-08-31 14:48:05.747477500 simscan: checking attachment textfile1 
>>>>> against .lnk
>>>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 
>>>>> against .lzh
>>>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 
>>>>> against .mim
>>>>> 2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 
>>>>> against .msp
>>>>> 2017-08-31 14:48:05.747479500 simscan: checking attachment textfile1 
>>>>> against .mst
>>>>> 2017-08-31 14:48:05.747481500 simscan: checking attachment textfile1 
>>>>> against .pif
>>>>> 2017-08-31 14:48:05.747482500 simscan: checking attachment textfile1 
>>>>> against .reg
>>>>> 2017-08-31 14:48:05.747485500 simscan: checking attachment textfile1 
>>>>> against .scf
>>>>> 2017-08-31 14:48:05.747486500 simscan: checking attachment textfile1 
>>>>> against .scr
>>>>> 2017-08-31 14:48:05.747486500 simscan: checking attachment textfile1 
>>>>> against .sct
>>>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 
>>>>> against .shb
>>>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 
>>>>> against .shs
>>>>> 2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 
>>>>> against .sys
>>>>> 2017-08-31 14:48:05.747489500 simscan: checking attachment textfile1 
>>>>> against .taz
>>>>> 2017-08-31 14:48:05.747490500 simscan: checking attachment textfile1 
>>>>> against .tgz
>>>>> 2017-08-31 14:48:05.747490500 simscan: checking attachment textfile1 
>>>>> against .tz
>>>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 
>>>>> against .url
>>>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 
>>>>> against .uu
>>>>> 2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 
>>>>> against .uue
>>>>> 2017-08-31 14:48:05.747493500 simscan: checking attachment textfile1 
>>>>> against .vb
>>>>> 2017-08-31 14:48:05.747494500 simscan: checking attachment textfile1 
>>>>> against .vbe
>>>>> 2017-08-31 14:48:05.747494500 simscan: checking attachment textfile1 
>>>>> against .vbs
>>>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 
>>>>> against .wsc
>>>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 
>>>>> against .wsf
>>>>> 2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 
>>>>> against .wsh
>>>>> 2017-08-31 14:48:05.747497500 simscan: checking attachment textfile1 
>>>>> against .xxe
>>>>> 2017-08-31 14:48:05.747501500 simscan: checking attachment textfile1 
>>>>> against .docm
>>>>> 2017-08-31 14:48:05.747502500 simscan: checking attachment textfile1 
>>>>> against .z
>>>>> 2017-08-31 14:48:05.747502500 simscan: checking attachment textfile1 
>>>>> against .jar
>>>>> 2017-08-31 14:48:05.747502500 simscan: cdb looking up version attach
>>>>> 2017-08-31 14:48:05.747503500 simscan: runned_scanners is  attach: 1.4.0
>>>>> 2017-08-31 14:48:05.747503500 simscan: found 1.4.0
>>>>> 2017-08-31 14:48:05.747503500 simscan: calling clamdscan
>>>>> 2017-08-31 14:48:05.753721500 simscan: clamdscan: 
>>>>> /var/qmail/simscan/1504171085.205836.36767: OK
>>>>> 2017-08-31 14:48:05.753754500 simscan: clamdscan:
>>>>> 2017-08-31 14:48:05.753754500 simscan: clamdscan: ----------- SCAN 
>>>>> SUMMARY -----------
>>>>> 2017-08-31 14:48:05.753768500 simscan: clamdscan: Infected files: 0
>>>>> 2017-08-31 14:48:05.753771500 simscan: clamdscan: Time: 0.004 sec (0 m 0 
>>>>> s)
>>>>> 2017-08-31 14:48:05.753957500 simscan: cdb looking up version clamav
>>>>> 2017-08-31 14:48:05.753968500 simscan: runned_scanners is  attach: 1.4.0 
>>>>> clamav: 0.98.6/m:
>>>>> 2017-08-31 14:48:05.753969500 simscan: found 0.98.6/m:
>>>>> 2017-08-31 14:48:05.753974500 simscan: normal clamdscan return code: 0
>>>>> 2017-08-31 14:48:05.753994500 simscan: calling spamc
>>>>> 2017-08-31 14:48:05.754001500 simscan: calling /usr/bin/spamc  spamc
>>>>> 2017-08-31 14:48:05.754010500 simscan: check_spam had an error ret: -1
>>>>> 2017-08-31 14:48:05.754101500 simscan: exit error code: 71
>>>>> 2017-08-31 14:48:05.754220500 qmail-smtpd: qq soft reject (mail server 
>>>>> temporarily rejected message (#4.3.0)): 
>>>>> MAILFROM:<sunil.saharan@@yyyy.com>  RCPTTO:c...@yyyy.com
>>>>> 2017-08-31 14:48:05.755317500 tcpserver: end 36645 status 0
>>>>>
>>>>> ##################
>>>>>
>>>>>
>>>>> 2017-08-31 14:48:05.956040500 simscan: cdb looking 
>>>>> upsunil.saha...@yyyy.com
>>>>> 2017-08-31 14:48:05.956041500 simscan: pelookup: called 
>>>>> withinv1...@xxxx.net
>>>>> 2017-08-31 14:48:05.956042500 simscan: pelookup: domain is 
>>>>> radiant-india.net
>>>>> 2017-08-31 14:48:05.956042500 simscan: cdb looking up radiant-india.net
>>>>> 2017-08-31 14:48:05.956043500 simscan: cdb for radiant-india.net found 
>>>>> clam=yes,spam=yes,spam_hits=30,spam_passthru=yes,attach=.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>> 2017-08-31 14:48:05.956049500 simscan: pelookup clam = yes
>>>>> 2017-08-31 14:48:05.956049500 simscan: pelookup spam = yes
>>>>> 2017-08-31 14:48:05.956050500 simscan: pelookup spam_hits = 30
>>>>> 2017-08-31 14:48:05.956053500 simscan: Per Domain Hits set to : 30.000000
>>>>> 2017-08-31 14:48:05.956053500 simscan: pelookup spam_passthru = yes
>>>>> 2017-08-31 14:48:05.956059500 simscan: unimplemented flag spam_passthru = 
>>>>> yes
>>>>> 2017-08-31 14:48:05.956060500 simscan: pelookup attach = 
>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>> 2017-08-31 14:48:05.956062500 simscan: attachment flag attach = 
>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>> 2017-08-31 14:48:05.956074500 simscan: add_attach called with 
>>>>> .ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
>>>>> 2017-08-31 14:48:05.956079500 simscan: .ace is attachment number 0
>>>>> 2017-08-31 14:48:05.956080500 simscan: .arc is attachment number 1
>>>>> 2017-08-31 14:48:05.956081500 simscan: .arj is attachment number 2
>>>>> 2017-08-31 14:48:05.956081500 simscan: .b64 is attachment number 3
>>>>> 2017-08-31 14:48:05.956087500 simscan: .bat is attachment number 4
>>>>> 2017-08-31 14:48:05.956087500 simscan: .bhx is attachment number 5
>>>>> 2017-08-31 14:48:05.956088500 simscan: .cab is attachment number 6
>>>>> 2017-08-31 14:48:05.956088500 simscan: .chm is attachment number 7
>>>>> 2017-08-31 14:48:05.956089500 simscan: .com is attachment number 8
>>>>> 2017-08-31 14:48:05.956089500 simscan: .cpl is attachment number 9
>>>>> 2017-08-31 14:48:05.956090500 simscan: .dll is attachment number 10
>>>>> 2017-08-31 14:48:05.956090500 simscan: .exe is attachment number 11
>>>>> 2017-08-31 14:48:05.956094500 simscan: .gz is attachment number 12
>>>>> 2017-08-31 14:48:05.956094500 simscan: .hqx is attachment number 13
>>>>> 2017-08-31 14:48:05.956095500 simscan: .hta is attachment number 14
>>>>> 2017-08-31 14:48:05.956095500 simscan: .inf is attachment number 15
>>>>> 2017-08-31 14:48:05.956096500 simscan: .ins is attachment number 16
>>>>> 2017-08-31 14:48:05.956096500 simscan: .iso is attachment number 17
>>>>> 2017-08-31 14:48:05.956097500 simscan: .isp is attachment number 18
>>>>> 2017-08-31 14:48:05.956097500 simscan: .jse is attachment number 19
>>>>> 2017-08-31 14:48:05.956106500 simscan: .lib is attachment number 20
>>>>> 2017-08-31 14:48:05.956106500 simscan: .lnk is attachment number 21
>>>>> 2017-08-31 14:48:05.956107500 simscan: .lzh is attachment number 22
>>>>> 2017-08-31 14:48:05.956107500 simscan: .mim is attachment number 23
>>>>> 2017-08-31 14:48:05.956108500 simscan: .msp is attachment number 24
>>>>> 2017-08-31 14:48:05.956108500 simscan: .mst is attachment number 25
>>>>> 2017-08-31 14:48:05.956109500 simscan: .pif is attachment number 26
>>>>> 2017-08-31 14:48:05.956109500 simscan: .reg is attachment number 27
>>>>> 2017-08-31 14:48:05.956113500 simscan: .scf is attachment number 28
>>>>> 2017-08-31 14:48:05.956113500 simscan: .scr is attachment number 29
>>>>> 2017-08-31 14:48:05.956114500 simscan: .sct is attachment number 30
>>>>> 2017-08-31 14:48:05.956120500 simscan: .shb is attachment number 31
>>>>> 2017-08-31 14:48:05.956121500 simscan: .shs is attachment number 32
>>>>> 2017-08-31 14:48:05.956121500 simscan: .sys is attachment number 33
>>>>> 2017-08-31 14:48:05.956122500 simscan: .taz is attachment number 34
>>>>> 2017-08-31 14:48:05.956122500 simscan: .tgz is attachment number 35
>>>>> 2017-08-31 14:48:05.956123500 simscan: .tz is attachment number 36
>>>>> 2017-08-31 14:48:05.956123500 simscan: .url is attachment number 37
>>>>> 2017-08-31 14:48:05.956124500 simscan: .uu is attachment number 38
>>>>> 2017-08-31 14:48:05.956127500 simscan: .uue is attachment number 39
>>>>> 2017-08-31 14:48:05.956128500 simscan: .vb is attachment number 40
>>>>> 2017-08-31 14:48:05.956128500 simscan: .vbe is attachment number 41
>>>>> 2017-08-31 14:48:05.956129500 simscan: .vbs is attachment number 42
>>>>> 2017-08-31 14:48:05.956129500 simscan: .wsc is attachment number 43
>>>>> 2017-08-31 14:48:05.956130500 simscan: .wsf is attachment number 44
>>>>> 2017-08-31 14:48:05.956130500 simscan: .wsh is attachment number 45
>>>>> 2017-08-31 14:48:05.956131500 simscan: .xxe is attachment number 46
>>>>> 2017-08-31 14:48:05.956134500 simscan: .docm is attachment number 47
>>>>> 2017-08-31 14:48:05.956134500 simscan: .z is attachment number 48
>>>>> 2017-08-31 14:48:05.956135500 simscan: .jar is attachment number 49
>>>>> 2017-08-31 14:48:05.956136500 simscan: pelookup: local part is inv1mum
>>>>> 2017-08-31 14:48:05.956136500 simscan: lpart: local part is **
>>>>> 2017-08-31 14:48:05.956137500 simscan: cdb looking upinv1...@xxxx.net
>>>>> 2017-08-31 14:48:05.956137500 simscan: ripmime error
>>>>> 2017-08-31 14:48:05.956138500 simscan: exit error code: 71
>>>>> 2017-08-31 14:48:05.956144500 qmail-smtpd: qq soft reject (mail server 
>>>>> temporarily rejected message (#4.3.0)): MAILFROM:<sunil.saha...@yyyy.com> 
>>>>>  RCPTTO:inv1...@xxxx.net
>>>>>
>>>>>
>>>>> thanks
>>>>> rajesh
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>>> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
>>> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
>> For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com
>
> --
> Eric Broch
> White Horse Technical Consulting (WHTC)


---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Reply via email to