Rajesh,

I'm still not sure the process limit is being reached.

I'm testing a COS6/QMT server now and haven't been able to bring about 'qq soft reject' or failure of any sort. I'm hitting it with email using a delivery script from two servers with attachment size of 320KB.

try the script below (psmem) to monitor:

<psmem>

#!/bin/bash
ps -C $1 -O rss | gawk '{ count ++; sum += $2 }; END {count --; print "Number of processes =",count; print "Memory usage per process =",sum/1024/count, "MB"; print "Total memory usage =", sum/1024, "MB" ;};'

</psmem>

# chmod 755 psmem

# watch -n 1 ./psmem simscan


Not sure I should change anything until we figure out what's going on.

Eric



On 9/2/2017 12:03 PM, Rajesh M wrote:
eric

i could not get the bash script working with either of the two options. still 
gives error
  line 23: `return-limits': not a valid identifier.



can the limits issue in simscan be fixed ?

thanks,
rajesh

----- Original Message -----
From: Eric Broch [mailto:ebr...@whitehorsetc.com]
To:qmailtoaster-list@qmailtoaster.com
Sent: Fri, 1 Sep 2017 23:46:15 -0600
Subject:

Rajesh,

It has something to do with #!/bin/bash or #!/bin/sh.

At top of script, when I use #!/bin/sh I get the same error you do, but
when I use #!/bin/bash script works fine.


Eric


On 9/1/2017 11:07 PM, Rajesh M wrote:
eric

1) is their any resolution for this issue ?

2) if i run the script it throws error as such
.
/limits.sh: line 23: `return-limits': not a valid identifier

#!/bin/bash
if [ "$#" -ne "1" ]; then
     echo ""
     echo -e "\033[01;32mLimit checker\033[00m"
     echo -e "\033[01;37mUsage:\033[01;33m $0 process_name\033[00m"
     echo ""
     exit 0
fi

return-limits(){
     for process in $@; do
        process_pids=`ps -C $process -o pid --no-headers | cut -d " " -f 2`

        if [ -z $@ ]; then
           echo "[no $process running]"
        else
           for pid in $process_pids; do
              echo "[$process #$pid -- limits]"
              cat /proc/$pid/limits
        done
        fi
     done
}
return-limits $1

rajesh



----- Original Message -----
From: Eric Broch [mailto:ebr...@whitehorsetc.com]
To:qmailtoaster-list@qmailtoaster.com
Sent: Fri, 1 Sep 2017 17:28:40 -0600
Subject:

I sent myself a large file so that I could examine simscan with the
below script (limits.sh). Here's the output:

[root@pet105 simscan-1.4.0]# ./limits simscan
[simscan #31535 -- limits]
Limit                  
   Soft Limit           Hard Limit  
         Units
Max cpu time              unlimited 
unlimited            seconds
Max file size             unlimited 
unlimited            bytes
Max data size             unlimited 
unlimited            bytes
Max stack size 10485760 unlimited            
bytes
Max core file size        0 unlimited     
       bytes
Max resident set          unlimited unlimited  
          bytes
Max processes 1024 31121              
  processes
Max open files            1024 4096   
              files
Max locked memory         65536 65536    
            bytes
Max address space         unlimited unlimited  
          bytes
Max file locks            unlimited 
unlimited            locks
Max pending signals       31121 31121      
          signals
Max msgqueue size         819200 819200    
           bytes
Max nice priority         0       
             0
Max realtime priority     0          
          0
Max realtime timeout      unlimited unlimited     
       us

Notice the 'Max processes' and 'Max stack size', this could very well be
the issue for our simscan failures.

Eric

On 9/1/2017 5:20 PM, Eric Broch wrote:
This looks like a decent script:

<limits.sh>
#!/bin/bash
if [ "$#" -ne "1" ]; then
echo ""
echo -e "\033[01;32mLimit checker\033[00m"
echo -e "\033[01;37mUsage:\033[01;33m $0 process_name\033[00m"
echo ""
exit 0
fi

return-limits(){
for process in $@; do
      process_pids=`ps -C $process -o pid --no-headers | cut -d " " -f 
2`

if [ -z $@ ]; then
echo "[no $process running]"
else
for pid in $process_pids; do
echo "[$process #$pid -- limits]"
            cat /proc/$pid/limits
      done
      fi
   done
}

return-limits $1
</limits.sh>

Example:
# ./limits.sh tcpserver
or
# ./limits.sh simscan

Eric


On 9/1/2017 2:51 PM, Rajesh M wrote:
eric

how do i check the number of user processes being consumed and by which user

rajesh

----- Original Message -----
From: Eric Broch [mailto:ebr...@whitehorsetc.com]
To:qmailtoaster-list@qmailtoaster.com
Sent: Fri, 1 Sep 2017 14:25:36 -0600
Subject:

Number of user processes.


On 9/1/2017 1:57 PM, Rajesh M wrote:
eric

what is RLIMIT ? is it related to memory ?

rajesh

----- Original Message -----
From: Eric Broch [mailto:ebr...@whitehorsetc.com]
To:qmailtoaster-list@qmailtoaster.com
Sent: Fri, 1 Sep 2017 13:25:49 -0600
Subject:

Here's a section of code in simscan.c that controls the number of processes.

#ifdef HAS_ULIMIT_NPROC
       /* Set ulimits to prevent hangs if it forks too many 
processes */
       getrlimit(RLIMIT_NPROC, &limits);
       limits.rlim_cur = 1024;
       setrlimit(RLIMIT_NPROC, &limits);
#endif

The RLIMIT is set to 1024.

I think this may be the issue and would explain why there would be
forking issues with qmail-queue, ripmime, and others. This is in place
to prevent hangs...could be a good thing.


On 9/1/2017 1:04 PM, Remo Mattei wrote:
interesting...

mine was an easy fix by changing the owner and permissions so
underline has some other triggering to the kernel and how it reads
those layers.

On 9/1/17 11:18 AM, Eric Broch wrote:
1)  Problem forking

vfork() is used to execute qmail-queue

The error 'simscan: error forking qmail-queue' will happen for either
of the following reasons:

a) [EAGAIN]
        The system-wide limit on the total number of processes under
        execution would be exceeded, or the system-imposed limit on the
        total number of processes under execution by a single user would
        be exceeded.
b) [ENOMEM]
        There is insufficient swap space for the new process.


On 9/1/2017 11:53 AM, Eric Broch wrote:
Are there any errors in /var/log/messages that correspond?


On 9/1/2017 11:39 AM, Jeff Koch wrote:
Eric / Remo / Rajesh - we reported this same problem a number of
months ago and thought we had fixed it. But alas, it's still with
us. The good news is that we haven't had any customer complaints.
I'll be very interested if it can be resolved.

Jeff Koch


On 9/1/2017 12:01 PM, Eric Broch wrote:
I'm not sure what's going on here. Is this a relatively new
phenomenon?

I wonder if it's a memory, or even a disk speed, issue since it
only happens at peak hours?

I think I'll appy Johannes Weberhofer's patch and put it out there
for you...and cross or fingers.


On 9/1/2017 6:28 AM, Rajesh M wrote:
remo / eric

i have still not being able to resolve the qq soft reject error.

these are my findings

1) the errors i see are "error forking qmail-queue" and "ripmime error" which 
causes the qq soft reject.

2) the max concurrent connections in the logs is around 35.

3)  These errors come up during peak working hours when the server is under a  
load of 4 - 8, and they increase the load even more to over 10-15.

4) i came across this link (not sure if this is related)
https://github.com/qmail/simscan/blob/master/simscan.c

5) i can share with you my live smtp logs with simscan debug.

have extracted some lines below


Error forking qmail-queue

@4000000059a8fa7b0a2ed1b4 tcpserver: status: 31/200
@4000000059a8fa7b13162584 simscan: cdb looking up version spam
@4000000059a8fa7b13166bd4 simscan: runned_scanners is  attach: 1.4.0 clamav: 
0.98.6/m: spam: 3.3.2
@4000000059a8fa7b13166fbc simscan: found 3.3.2
@4000000059a8fa7b13168efc simscan:[10757]:CLEAN (5.00/30.00):9.7712s:-Possible 
Spam- RE_ REQUIRE BOOKING // 1X20  //
ICD 
TKDTOBANDARABASS:103.241.181.228:cs....@atlasdecargo.com:rathe...@radiant-india.net
@4000000059a8fa7b1316cd7c simscan: done, execing qmail-queue
@4000000059a8fa7b1316fc5c simscan: error forking qmail-queue
@4000000059a8fa7b13199854 simscan: exit error code: 71
@4000000059a8fa7b131c4004 qmail-smtpd: qq soft reject (mail server temporarily 
rejected message (#4.3.0)): MAILFROM:<cs....@xxxxx.com>
RCPTTO:rathe...@yyyyy.net


Error in ripmime

@4000000059a8fa98045a4bc4 simscan: pelookup: domain is aissamaritime.in
@4000000059a8fa98045a4bc4 simscan: cdb looking up aissamaritime.in
@4000000059a8fa98045a4fac simscan: pelookup: local part is shailesh_k_bom
@4000000059a8fa98045a4fac simscan: lpart: local part is **
@4000000059a8fa98045a5394 simscan: cdblookingupshailesh_k_...@aissamaritime.in
@4000000059a8fa98045a5394 simscan: ripmime error
@4000000059a8fa98045a6334 simscan: exit error code: 71
@4000000059a8fa98045a95fc qmail-smtpd: qq soft reject (mail server temporarily 
rejected message (#4.3.0)):
MAILFROM:<imp...@xxxxxxx.in>    RCPTTO:shailesh_k_...@yyyyyy.in


Wierd error logs

@4000000059a9032f3aa79a24 simscan: clamdscan: ----------- SCAN SUMMARY 
-----------
@4000000059a9032f3aa7b964 simscan: clamdscan: 
/var/qmail/simscan/1504248613.321653.5221: OK
@4000000059a9032f3aa86d14 simscan: clamdscan:
@4000000059a9032f3aa870fc simscan: clamdscan: ---simscan: cdb looking up 
version clamav
@4000000059a9032f3aa8a3c4 -------- SCAN simscan: clamdscan: SIUnMfMeAcRtYe d- 
-fsimscan: runned_scanners is  attach: 1.4.0 clamav: 0.98.6/m:
@4000000059a9032f3aa8c304 -isimscan: found 0.98.6/m:
@4000000059a9032f3aa8c6ec -l-e-s-:- -0
@4000000059a9032f3aa8f1e4 --simscan: normal clamdscan return code: 0
@4000000059a9032f3aa8f1e4
@4000000059a9032f3aa8f5cc simscan: clamdscan: Infected fsimscan: clamdscan: 
iTliemes::  00
@4000000059a9032f3aa93834 .simscan: clamdscan: 1T1i8m es:e c0 .1(002  ms 
e0simscan: calling spamc
@4000000059a9032f3aa96ee4 c  s(0)simscan: calling /usr/bin/spamc simscan: 
clamdscan:
@4000000059a9032f3aa999dc  spamcm
@4000000059a9032f3aa999dc 0 s)
@4000000059a9032f3aa9ad64 /var/qmail/simscan/1simscan: check_spam had an error 
ret: -1
@4000000059a9032f3aa9e02c 504248613.307311.5215: OK
@4000000059a9032f3aaaa37c simscan: clamdscan:
@4000000059a9032f3aaaa764 simscan: clamdscan: ----------- SCAN SUMMARY 
-----------
@4000000059a9032f3aab3fbc simscan: clamdscan: Infected files: 0
@4000000059a9032f3aaba164 simscan: clamdscan: Time: 0.135 sec (0 m 0 s)
@4000000059a9032f3aac39bc simscan: clamdscan: /var/qmail/simscan/15simscan: 
exit error code: 71
@4000000059a9032f3aaca334 04248613.308469.5216: OK
@4000000059a9032f3aacddcc simscan: clamdscan:
@4000000059a9032f3aace984 simscan: clamdscan: ----------- SCAN SUMMARY 
-----------
@4000000059a9


################

@4000000059a9032f3aa86d14 simscan: clamdscan:
@4000000059a9032f3aa870fc simscan: clamdscan: ---simscan: cdb looking up 
version clamav
@4000000059a9032f3aa8a3c4 -------- SCAN simscan: clamdscan: SIUnMfMeAcRtYe d- 
-fsimscan: runned_scanners is  attach: 1.4.0 clamav: 0.98.6/m:
@4000000059a9032f3aa8c304 -isimscan: found 0.98.6/m:
@4000000059a9032f3aa8c6ec -l-e-s-:- -0
@4000000059a9032f3aa8f1e4 --simscan: normal clamdscan return code: 0
@4000000059a9032f3aa8f1e4
@4000000059a9032f3aa8f5cc simscan: clamdscan: Infected fsimscan: clamdscan: 
iTliemes::  00
@4000000059a9032f3aa93834 .simscan: clamdscan: 1T1i8m es:e c0 .1(002  ms 
e0simscan: calling spamc
@4000000059a9032f3aa96ee4 c  s(0)simscan: calling /usr/bin/spamc simscan: 
clamdscan:
@4000000059a9032f3aa999dc  spamcm
@4000000059a9032f3aa999dc 0 s)
@4000000059a9032f3aa9ad64 /var/qmail/simscan/1simscan: check_spam had an error 
ret: -1
@4000000059a9032f3aa9e02c 504248613.307311.5215: OK
@4000000059a9032f3aaaa37c simscan: clamdscan:
@4000000059a9032f3aaaa764 simscan: clamdscan: ----------- SCAN SUMMARY 
-----------
@4000000059a9032f3aab3fbc simscan: clamdscan: Infected files: 0
@4000000059a9032f3aaba164 simscan: clamdscan: Time: 0.135 sec (0 m 0 s)
@4000000059a9032f3aac39bc simscan: clamdscan: /var/qmail/simscan/15simscan: 
exit error code: 71
@4000000059a9032f3aaca334 04248613.308469.5216: OK



thanks,
rajesh



----- Original Message -----
From: Remo Mattei [mailto:r...@mattei.org]
To:24x7ser...@24x7server.net
Sent: Thu, 31 Aug 2017 07:58:22 -0700
Subject:

No it reads it everytime.

Yes permissions are good

Remo

On 8/31/17 7:48 AM, Rajesh M wrote:
thank for sharing your experience remo,

so would the following be correct ?

chmod 2750  simscan
chown clamav.clamav simscan

do i need to stop qmail while applying this ?

rajesh


----- Original Message -----
From: Remo Mattei [mailto:r...@mattei.org]
To:qmailtoaster-list@qmailtoaster.com,24x7ser...@24x7server.net
Sent: Thu, 31 Aug 2017 07:23:20 -0700
Subject:

I had the same issue with qq.

I changed the permissions and all good. I also raised the value of the
softlimits exec /usr/bin/softlimit -m 1040000000

and my permissions are drwxr-s--- 
  2 clamav clamav 4096 Aug 31 07:19
simscan

So hopefully this helps.

Remo


On 8/31/17 6:51 AM, Rajesh M wrote:
eric

on my qmailtoaster server (centos 6 64 bit)  there are several domains --- high 
traffic

about 80 percent of them are routed via the sophos antispam filter and then 
passed on to the mailserver with spamassassin/clam disabled by adding the ip of 
the sophos server to the tcp.smtp file to exclude the line 
/var/qmail/bin/simscan

the balance 20 are directly reaching the mailserver ie mx pointed to mailserver 
instead of sophos server and are scanned with clam / spamassassin.

today i turned on the spamassassin / clam for the above 80 percent domains too 
and this started throwing qq reject errors on  a large scale but randomly.

spamassassin child-processes was set to 20 to handle the load

i checked the log files for the last 30 days till yesterday and found that the 
same qq reject errors were present but very rarely ie 3 to 4 times on a single 
day (occasional high load ??)
so it seems that this error comes up only when the load on the server is high, 
all take place when there are attachments.

reading the thread you sent me, i am not sure whether it applies to my case but 
i can try out.

#############
drwxr-x---  2 clamav root     6 May  6 17:57 simscan/

changing this to the following fixed the problem:
drwxr-s---  2 clamav clamav     6 May  6 17:57 simscan/
###########

should i just
chown clamav.clamav simscan


thanks
rajesh





----- Original Message -----
From: Eric Broch [mailto:ebr...@whitehorsetc.com]
To:24x7ser...@24x7server.net
Sent: Thu, 31 Aug 2017 06:42:08 -0600
Subject:

Have a look here, Rajesh, I'm not sure if it will help:

https://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg40456.html


On 8/31/2017 4:51 AM, Rajesh M wrote:
hi

centos 6 64 bit
SpamAssassin version 3.3.2
ClamAV 0.98.6/23745/Thu Aug 31 14:07:08 2017

we have a sophos antispam firewall which receives our emails and then routes 
them to our mail server (qmailtoaster, dovecot, spamassassin, clam)

in the mail server we had stopped spamassassin

however due to some custom requirements by our clients we enabled the same

however we get the following error when the load on the server is high on a 
random basis.

2017-08-31 14:48:05.753994500 simscan: calling spamc
2017-08-31 14:48:05.754001500 simscan: calling /usr/bin/spamc  spamc
2017-08-31 14:48:05.754010500 simscan: check_spam had an error ret: -1
2017-08-31 14:48:05.754101500 simscan: exit error code: 71
2017-08-31 14:48:05.754220500 qmail-smtpd: qq soft reject (mail server temporarily 
rejected message (#4.3.0)): MAILFROM:<sunil.saharan@@yyyy.com>    
RCPTTO:c...@yyyy.com


2017-08-31 14:48:05.956137500 simscan: ripmime error
qmail-smtpd: qq soft reject (mail server temporarily rejected message



if i disable simscan in tcp.smtp then errors do not take place.

i enabled simscan debug and this is the result.

2017-08-31 14:48:05.956144500 qmail-smtpd: qq soft reject (mail server temporarily 
rejected message (#4.3.0)): MAILFROM:<sunil.saha...@yyyy.com>    
RCPTTO:inv1...@xxxx.net


clam=yes,spam=yes,spam_hits=30,spam_passthru=yes,attach=.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
2017-08-31 14:48:05.746592500 simscan: pelookup clam = yes
2017-08-31 14:48:05.746593500 simscan: pelookup spam = yes
2017-08-31 14:48:05.746593500 simscan: pelookup spam_hits = 30
2017-08-31 14:48:05.746595500 simscan: Per Domain Hits set to : 30.000000
2017-08-31 14:48:05.746595500 simscan: pelookup spam_passthru = yes
2017-08-31 14:48:05.746596500 simscan: unimplemented flag spam_passthru = yes
2017-08-31 14:48:05.746596500 simscan: pelookup attach = 
.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
2017-08-31 14:48:05.746599500 simscan: attachment flag attach = 
.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
2017-08-31 14:48:05.746602500 simscan: add_attach called with 
.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
2017-08-31 14:48:05.746606500 simscan: .ace is attachment number 0
2017-08-31 14:48:05.746607500 simscan: .arc is attachment number 1
2017-08-31 14:48:05.746607500 simscan: .arj is attachment number 2
2017-08-31 14:48:05.746607500 simscan: .b64 is attachment number 3
2017-08-31 14:48:05.746610500 simscan: .bat is attachment number 4
2017-08-31 14:48:05.746610500 simscan: .bhx is attachment number 5
2017-08-31 14:48:05.746610500 simscan: .cab is attachment number 6
2017-08-31 14:48:05.746611500 simscan: .chm is attachment number 7
2017-08-31 14:48:05.746611500 simscan: .com is attachment number 8
2017-08-31 14:48:05.746611500 simscan: .cpl is attachment number 9
2017-08-31 14:48:05.746611500 simscan: .dll is attachment number 10
2017-08-31 14:48:05.746612500 simscan: .exe is attachment number 11
2017-08-31 14:48:05.746614500 simscan: .gz is attachment number 12
2017-08-31 14:48:05.746614500 simscan: .hqx is attachment number 13
2017-08-31 14:48:05.746614500 simscan: .hta is attachment number 14
2017-08-31 14:48:05.746615500 simscan: .inf is attachment number 15
2017-08-31 14:48:05.746615500 simscan: .ins is attachment number 16
2017-08-31 14:48:05.746615500 simscan: .iso is attachment number 17
2017-08-31 14:48:05.746616500 simscan: .isp is attachment number 18
2017-08-31 14:48:05.746616500 simscan: .jse is attachment number 19
2017-08-31 14:48:05.746618500 simscan: .lib is attachment number 20
2017-08-31 14:48:05.746618500 simscan: .lnk is attachment number 21
2017-08-31 14:48:05.746619500 simscan: .lzh is attachment number 22
2017-08-31 14:48:05.746622500 simscan: .mim is attachment number 23
2017-08-31 14:48:05.746622500 simscan: .msp is attachment number 24
2017-08-31 14:48:05.746623500 simscan: .mst is attachment number 25
2017-08-31 14:48:05.746623500 simscan: .pif is attachment number 26
2017-08-31 14:48:05.746623500 simscan: .reg is attachment number 27
2017-08-31 14:48:05.746624500 simscan: .scf is attachment number 28
2017-08-31 14:48:05.746624500 simscan: .scr is attachment number 29
2017-08-31 14:48:05.746624500 simscan: .sct is attachment number 30
2017-08-31 14:48:05.746630500 simscan: .shb is attachment number 31
2017-08-31 14:48:05.746630500 simscan: .shs is attachment number 32
2017-08-31 14:48:05.746631500 simscan: .sys is attachment number 33
2017-08-31 14:48:05.746631500 simscan: .taz is attachment number 34
2017-08-31 14:48:05.746631500 simscan: .tgz is attachment number 35
2017-08-31 14:48:05.746632500 simscan: .tz is attachment number 36
2017-08-31 14:48:05.746632500 simscan: .url is attachment number 37
2017-08-31 14:48:05.746632500 simscan: .uu is attachment number 38
2017-08-31 14:48:05.746635500 simscan: .uue is attachment number 39
2017-08-31 14:48:05.746635500 simscan: .vb is attachment number 40
2017-08-31 14:48:05.746635500 simscan: .vbe is attachment number 41
2017-08-31 14:48:05.746636500 simscan: .vbs is attachment number 42
2017-08-31 14:48:05.746636500 simscan: .wsc is attachment number 43
2017-08-31 14:48:05.746636500 simscan: .wsf is attachment number 44
2017-08-31 14:48:05.746637500 simscan: .wsh is attachment number 45
2017-08-31 14:48:05.746637500 simscan: .xxe is attachment number 46
2017-08-31 14:48:05.746639500 simscan: .docm is attachment number 47
2017-08-31 14:48:05.746639500 simscan: .z is attachment number 48
2017-08-31 14:48:05.746640500 simscan: .jar is attachment number 49
2017-08-31 14:48:05.746643500 simscan: pelookup: local part is cs2
2017-08-31 14:48:05.746643500 simscan: lpart: local part is **
2017-08-31 14:48:05.746644500 simscan: cdblookingup...@yyyy.com
2017-08-31 14:48:05.747114500 simscan: checking attachment textfile2 against 
.ace
2017-08-31 14:48:05.747123500 simscan: checking attachment textfile2 against 
.arc
2017-08-31 14:48:05.747124500 simscan: checking attachment textfile2 against 
.arj
2017-08-31 14:48:05.747124500 simscan: checking attachment textfile2 against 
.b64
2017-08-31 14:48:05.747125500 simscan: checking attachment textfile2 against 
.bat
2017-08-31 14:48:05.747126500 simscan: checking attachment textfile2 against 
.bhx
2017-08-31 14:48:05.747132500 simscan: checking attachment textfile2 against 
.cab
2017-08-31 14:48:05.747133500 simscan: checking attachment textfile2 against 
.chm
2017-08-31 14:48:05.747134500 simscan: checking attachment textfile2 against 
.com
2017-08-31 14:48:05.747134500 simscan: checking attachment textfile2 against 
.cpl
2017-08-31 14:48:05.747135500 simscan: checking attachment textfile2 against 
.dll
2017-08-31 14:48:05.747135500 simscan: checking attachment textfile2 against 
.exe
2017-08-31 14:48:05.747136500 simscan: checking attachment textfile2 against .gz
2017-08-31 14:48:05.747140500 simscan: checking attachment textfile2 against 
.hqx
2017-08-31 14:48:05.747146500 simscan: checking attachment textfile2 against 
.hta
2017-08-31 14:48:05.747147500 simscan: checking attachment textfile2 against 
.inf
2017-08-31 14:48:05.747147500 simscan: checking attachment textfile2 against 
.ins
2017-08-31 14:48:05.747148500 simscan: checking attachment textfile2 against 
.iso
2017-08-31 14:48:05.747149500 simscan: checking attachment textfile2 against 
.isp
2017-08-31 14:48:05.747149500 simscan: checking attachment textfile2 against 
.jse
2017-08-31 14:48:05.747150500 simscan: checking attachment textfile2 against 
.lib
2017-08-31 14:48:05.747162500 simscan: checking attachment textfile2 against 
.lnk
2017-08-31 14:48:05.747162500 simscan: checking attachment textfile2 against 
.lzh
2017-08-31 14:48:05.747163500 simscan: checking attachment textfile2 against 
.mim
2017-08-31 14:48:05.747164500 simscan: checking attachment textfile2 against 
.msp
2017-08-31 14:48:05.747164500 simscan: checking attachment textfile2 against 
.mst
2017-08-31 14:48:05.747171500 simscan: checking attachment textfile2 against 
.pif
2017-08-31 14:48:05.747171500 simscan: checking attachment textfile2 against 
.reg
2017-08-31 14:48:05.747172500 simscan: checking attachment textfile2 against 
.scf
2017-08-31 14:48:05.747173500 simscan: checking attachment textfile2 against 
.scr
2017-08-31 14:48:05.747173500 simscan: checking attachment textfile2 against 
.sct
2017-08-31 14:48:05.747174500 simscan: checking attachment textfile2 against 
.shb
2017-08-31 14:48:05.747175500 simscan: checking attachment textfile2 against 
.shs
2017-08-31 14:48:05.747189500 simscan: checking attachment textfile2 against 
.sys
2017-08-31 14:48:05.747189500 simscan: checking attachment textfile2 against 
.taz
2017-08-31 14:48:05.747190500 simscan: checking attachment textfile2 against 
.tgz
2017-08-31 14:48:05.747191500 simscan: checking attachment textfile2 against .tz
2017-08-31 14:48:05.747191500 simscan: checking attachment textfile2 against 
.url
2017-08-31 14:48:05.747192500 simscan: checking attachment textfile2 against .uu
2017-08-31 14:48:05.747195500 simscan: checking attachment textfile2 against 
.uue
2017-08-31 14:48:05.747196500 simscan: checking attachment textfile2 against .vb
2017-08-31 14:48:05.747197500 simscan: checking attachment textfile2 against 
.vbe
2017-08-31 14:48:05.747197500 simscan: checking attachment textfile2 against 
.vbs
2017-08-31 14:48:05.747198500 simscan: checking attachment textfile2 against 
.wsc
2017-08-31 14:48:05.747198500 simscan: checking attachment textfile2 against 
.wsf
2017-08-31 14:48:05.747202500 simscan: checking attachment textfile2 against 
.wsh
2017-08-31 14:48:05.747208500 simscan: checking attachment textfile2 against 
.xxe
2017-08-31 14:48:05.747209500 simscan: checking attachment textfile2 against 
.docm
2017-08-31 14:48:05.747209500 simscan: checking attachment textfile2 against .z
2017-08-31 14:48:05.747210500 simscan: checking attachment textfile2 against 
.jar
2017-08-31 14:48:05.747210500 simscan: checking attachment 
msg.1504171085.205836.36767 against .ace
2017-08-31 14:48:05.747211500 simscan: checking attachment 
msg.1504171085.205836.36767 against .arc
2017-08-31 14:48:05.747215500 simscan: checking attachment 
msg.1504171085.205836.36767 against .arj
2017-08-31 14:48:05.747215500 simscan: checking attachment 
msg.1504171085.205836.36767 against .b64
2017-08-31 14:48:05.747216500 simscan: checking attachment 
msg.1504171085.205836.36767 against .bat
2017-08-31 14:48:05.747217500 simscan: checking attachment 
msg.1504171085.205836.36767 against .bhx
2017-08-31 14:48:05.747218500 simscan: checking attachment 
msg.1504171085.205836.36767 against .cab
2017-08-31 14:48:05.747221500 simscan: checking attachment 
msg.1504171085.205836.36767 against .chm
2017-08-31 14:48:05.747222500 simscan: checking attachment 
msg.1504171085.205836.36767 against .com
2017-08-31 14:48:05.747223500 simscan: checking attachment 
msg.1504171085.205836.36767 against .cpl
2017-08-31 14:48:05.747224500 simscan: checking attachment 
msg.1504171085.205836.36767 against .dll
2017-08-31 14:48:05.747224500 simscan: checking attachment 
msg.1504171085.205836.36767 against .exe
2017-08-31 14:48:05.747230500 simscan: checking attachment 
msg.1504171085.205836.36767 against .gz
2017-08-31 14:48:05.747231500 simscan: checking attachment 
msg.1504171085.205836.36767 against .hqx
2017-08-31 14:48:05.747231500 simscan: checking attachment 
msg.1504171085.205836.36767 against .hta
2017-08-31 14:48:05.747232500 simscan: checking attachment 
msg.1504171085.205836.36767 against .inf
2017-08-31 14:48:05.747233500 simscan: checking attachment 
msg.1504171085.205836.36767 against .ins
2017-08-31 14:48:05.747237500 simscan: checking attachment 
msg.1504171085.205836.36767 against .iso
2017-08-31 14:48:05.747238500 simscan: checking attachment 
msg.1504171085.205836.36767 against .isp
2017-08-31 14:48:05.747238500 simscan: checking attachment 
msg.1504171085.205836.36767 against .jse
2017-08-31 14:48:05.747239500 simscan: checking attachment 
msg.1504171085.205836.36767 against .lib
2017-08-31 14:48:05.747240500 simscan: checking attachment 
msg.1504171085.205836.36767 against .lnk
2017-08-31 14:48:05.747243500 simscan: checking attachment 
msg.1504171085.205836.36767 against .lzh
2017-08-31 14:48:05.747244500 simscan: checking attachment 
msg.1504171085.205836.36767 against .mim
2017-08-31 14:48:05.747245500 simscan: checking attachment 
msg.1504171085.205836.36767 against .msp
2017-08-31 14:48:05.747246500 simscan: checking attachment 
msg.1504171085.205836.36767 against .mst
2017-08-31 14:48:05.747246500 simscan: checking attachment 
msg.1504171085.205836.36767 against .pif
2017-08-31 14:48:05.747257500 simscan: checking attachment 
msg.1504171085.205836.36767 against .reg
2017-08-31 14:48:05.747258500 simscan: checking attachment 
msg.1504171085.205836.36767 against .scf
2017-08-31 14:48:05.747259500 simscan: checking attachment 
msg.1504171085.205836.36767 against .scr
2017-08-31 14:48:05.747260500 simscan: checking attachment 
msg.1504171085.205836.36767 against .sct
2017-08-31 14:48:05.747260500 simscan: checking attachment 
msg.1504171085.205836.36767 against .shb
2017-08-31 14:48:05.747264500 simscan: checking attachment 
msg.1504171085.205836.36767 against .shs
2017-08-31 14:48:05.747265500 simscan: checking attachment 
msg.1504171085.205836.36767 against .sys
2017-08-31 14:48:05.747266500 simscan: checking attachment 
msg.1504171085.205836.36767 against .taz
2017-08-31 14:48:05.747266500 simscan: checking attachment 
msg.1504171085.205836.36767 against .tgz
2017-08-31 14:48:05.747267500 simscan: checking attachment 
msg.1504171085.205836.36767 against .tz
2017-08-31 14:48:05.747271500 simscan: checking attachment 
msg.1504171085.205836.36767 against .url
2017-08-31 14:48:05.747271500 simscan: checking attachment 
msg.1504171085.205836.36767 against .uu
2017-08-31 14:48:05.747272500 simscan: checking attachment 
msg.1504171085.205836.36767 against .uue
2017-08-31 14:48:05.747273500 simscan: checking attachment 
msg.1504171085.205836.36767 against .vb
2017-08-31 14:48:05.747279500 simscan: checking attachment 
msg.1504171085.205836.36767 against .vbe
2017-08-31 14:48:05.747280500 simscan: checking attachment 
msg.1504171085.205836.36767 against .vbs
2017-08-31 14:48:05.747280500 simscan: checking attachment 
msg.1504171085.205836.36767 against .wsc
2017-08-31 14:48:05.747281500 simscan: checking attachment 
msg.1504171085.205836.36767 against .wsf
2017-08-31 14:48:05.747282500 simscan: checking attachment 
msg.1504171085.205836.36767 against .wsh
2017-08-31 14:48:05.747285500 simscan: checking attachment 
msg.1504171085.205836.36767 against .xxe
2017-08-31 14:48:05.747286500 simscan: checking attachment 
msg.1504171085.205836.36767 against .docm
2017-08-31 14:48:05.747287500 simscan: checking attachment 
msg.1504171085.205836.36767 against .z
2017-08-31 14:48:05.747288500 simscan: checking attachment 
msg.1504171085.205836.36767 against .jar
2017-08-31 14:48:05.747289500 simscan: checking attachment textfile0 against 
.ace
2017-08-31 14:48:05.747292500 simscan: checking attachment textfile0 against 
.arc
2017-08-31 14:48:05.747293500 simscan: checking attachment textfile0 against 
.arj
2017-08-31 14:48:05.747294500 simscan: checking attachment textfile0 against 
.b64
2017-08-31 14:48:05.747294500 simscan: checking attachment textfile0 against 
.bat
2017-08-31 14:48:05.747295500 simscan: checking attachment textfile0 against 
.bhx
2017-08-31 14:48:05.747296500 simscan: checking attachment textfile0 against 
.cab
2017-08-31 14:48:05.747299500 simscan: checking attachment textfile0 against 
.chm
2017-08-31 14:48:05.747305500 simscan: checking attachment textfile0 against 
.com
2017-08-31 14:48:05.747305500 simscan: checking attachment textfile0 against 
.cpl
2017-08-31 14:48:05.747306500 simscan: checking attachment textfile0 against 
.dll
2017-08-31 14:48:05.747307500 simscan: checking attachment textfile0 against 
.exe
2017-08-31 14:48:05.747307500 simscan: checking attachment textfile0 against .gz
2017-08-31 14:48:05.747308500 simscan: checking attachment textfile0 against 
.hqx
2017-08-31 14:48:05.747311500 simscan: checking attachment textfile0 against 
.hta
2017-08-31 14:48:05.747312500 simscan: checking attachment textfile0 against 
.inf
2017-08-31 14:48:05.747312500 simscan: checking attachment textfile0 against 
.ins
2017-08-31 14:48:05.747313500 simscan: checking attachment textfile0 against 
.iso
2017-08-31 14:48:05.747314500 simscan: checking attachment textfile0 against 
.isp
2017-08-31 14:48:05.747314500 simscan: checking attachment textfile0 against 
.jse
2017-08-31 14:48:05.747318500 simscan: checking attachment textfile0 against 
.lib
2017-08-31 14:48:05.747318500 simscan: checking attachment textfile0 against 
.lnk
2017-08-31 14:48:05.747319500 simscan: checking attachment textfile0 against 
.lzh
2017-08-31 14:48:05.747320500 simscan: checking attachment textfile0 against 
.mim
2017-08-31 14:48:05.747320500 simscan: checking attachment textfile0 against 
.msp
2017-08-31 14:48:05.747321500 simscan: checking attachment textfile0 against 
.mst
2017-08-31 14:48:05.747328500 simscan: checking attachment textfile0 against 
.pif
2017-08-31 14:48:05.747329500 simscan: checking attachment textfile0 against 
.reg
2017-08-31 14:48:05.747335500 simscan: checking attachment textfile0 against 
.scf
2017-08-31 14:48:05.747336500 simscan: checking attachment textfile0 against 
.scr
2017-08-31 14:48:05.747336500 simscan: checking attachment textfile0 against 
.sct
2017-08-31 14:48:05.747337500 simscan: checking attachment textfile0 against 
.shb
2017-08-31 14:48:05.747338500 simscan: checking attachment textfile0 against 
.shs
2017-08-31 14:48:05.747338500 simscan: checking attachment textfile0 against 
.sys
2017-08-31 14:48:05.747342500 simscan: checking attachment textfile0 against 
.taz
2017-08-31 14:48:05.747342500 simscan: checking attachment textfile0 against 
.tgz
2017-08-31 14:48:05.747343500 simscan: checking attachment textfile0 against .tz
2017-08-31 14:48:05.747344500 simscan: checking attachment textfile0 against 
.url
2017-08-31 14:48:05.747344500 simscan: checking attachment textfile0 against .uu
2017-08-31 14:48:05.747345500 simscan: checking attachment textfile0 against 
.uue
2017-08-31 14:48:05.747349500 simscan: checking attachment textfile0 against .vb
2017-08-31 14:48:05.747349500 simscan: checking attachment textfile0 against 
.vbe
2017-08-31 14:48:05.747350500 simscan: checking attachment textfile0 against 
.vbs
2017-08-31 14:48:05.747350500 simscan: checking attachment textfile0 against 
.wsc
2017-08-31 14:48:05.747351500 simscan: checking attachment textfile0 against 
.wsf
2017-08-31 14:48:05.747352500 simscan: checking attachment textfile0 against 
.wsh
2017-08-31 14:48:05.747355500 simscan: checking attachment textfile0 against 
.xxe
2017-08-31 14:48:05.747361500 simscan: checking attachment textfile0 against 
.docm
2017-08-31 14:48:05.747362500 simscan: checking attachment textfile0 against .z
2017-08-31 14:48:05.747363500 simscan: checking attachment textfile0 against 
.jar
2017-08-31 14:48:05.747363500 simscan: checking attachment 
addr.1504171085.205836.36767 against .ace
2017-08-31 14:48:05.747364500 simscan: checking attachment 
addr.1504171085.205836.36767 against .arc
2017-08-31 14:48:05.747365500 simscan: checking attachment 
addr.1504171085.205836.36767 against .arj
2017-08-31 14:48:05.747368500 simscan: checking attachment 
addr.1504171085.205836.36767 against .b64
2017-08-31 14:48:05.747369500 simscan: checking attachment 
addr.1504171085.205836.36767 against .bat
2017-08-31 14:48:05.747370500 simscan: checking attachment 
addr.1504171085.205836.36767 against .bhx
2017-08-31 14:48:05.747371500 simscan: checking attachment 
addr.1504171085.205836.36767 against .cab
2017-08-31 14:48:05.747372500 simscan: checking attachment 
addr.1504171085.205836.36767 against .chm
2017-08-31 14:48:05.747375500 simscan: checking attachment 
addr.1504171085.205836.36767 against .com
2017-08-31 14:48:05.747376500 simscan: checking attachment 
addr.1504171085.205836.36767 against .cpl
2017-08-31 14:48:05.747376500 simscan: checking attachment 
addr.1504171085.205836.36767 against .dll
2017-08-31 14:48:05.747377500 simscan: checking attachment 
addr.1504171085.205836.36767 against .exe
2017-08-31 14:48:05.747378500 simscan: checking attachment 
addr.1504171085.205836.36767 against .gz
2017-08-31 14:48:05.747384500 simscan: checking attachment 
addr.1504171085.205836.36767 against .hqx
2017-08-31 14:48:05.747385500 simscan: checking attachment 
addr.1504171085.205836.36767 against .hta
2017-08-31 14:48:05.747385500 simscan: checking attachment 
addr.1504171085.205836.36767 against .inf
2017-08-31 14:48:05.747386500 simscan: checking attachment 
addr.1504171085.205836.36767 against .ins
2017-08-31 14:48:05.747387500 simscan: checking attachment 
addr.1504171085.205836.36767 against .iso
2017-08-31 14:48:05.747391500 simscan: checking attachment 
addr.1504171085.205836.36767 against .isp
2017-08-31 14:48:05.747392500 simscan: checking attachment 
addr.1504171085.205836.36767 against .jse
2017-08-31 14:48:05.747392500 simscan: checking attachment 
addr.1504171085.205836.36767 against .lib
2017-08-31 14:48:05.747393500 simscan: checking attachment 
addr.1504171085.205836.36767 against .lnk
2017-08-31 14:48:05.747394500 simscan: checking attachment 
addr.1504171085.205836.36767 against .lzh
2017-08-31 14:48:05.747402500 simscan: checking attachment 
addr.1504171085.205836.36767 against .mim
2017-08-31 14:48:05.747403500 simscan: checking attachment 
addr.1504171085.205836.36767 against .msp
2017-08-31 14:48:05.747403500 simscan: checking attachment 
addr.1504171085.205836.36767 against .mst
2017-08-31 14:48:05.747404500 simscan: checking attachment 
addr.1504171085.205836.36767 against .pif
2017-08-31 14:48:05.747410500 simscan: checking attachment 
addr.1504171085.205836.36767 against .reg
2017-08-31 14:48:05.747411500 simscan: checking attachment 
addr.1504171085.205836.36767 against .scf
2017-08-31 14:48:05.747412500 simscan: checking attachment 
addr.1504171085.205836.36767 against .scr
2017-08-31 14:48:05.747412500 simscan: checking attachment 
addr.1504171085.205836.36767 against .sct
2017-08-31 14:48:05.747413500 simscan: checking attachment 
addr.1504171085.205836.36767 against .shb
2017-08-31 14:48:05.747417500 simscan: checking attachment 
addr.1504171085.205836.36767 against .shs
2017-08-31 14:48:05.747418500 simscan: checking attachment 
addr.1504171085.205836.36767 against .sys
2017-08-31 14:48:05.747418500 simscan: checking attachment 
addr.1504171085.205836.36767 against .taz
2017-08-31 14:48:05.747419500 simscan: checking attachment 
addr.1504171085.205836.36767 against .tgz
2017-08-31 14:48:05.747420500 simscan: checking attachment 
addr.1504171085.205836.36767 against .tz
2017-08-31 14:48:05.747424500 simscan: checking attachment 
addr.1504171085.205836.36767 against .url
2017-08-31 14:48:05.747425500 simscan: checking attachment 
addr.1504171085.205836.36767 against .uu
2017-08-31 14:48:05.747426500 simscan: checking attachment 
addr.1504171085.205836.36767 against .uue
2017-08-31 14:48:05.747426500 simscan: checking attachment 
addr.1504171085.205836.36767 against .vb
2017-08-31 14:48:05.747432500 simscan: checking attachment 
addr.1504171085.205836.36767 against .vbe
2017-08-31 14:48:05.747433500 simscan: checking attachment 
addr.1504171085.205836.36767 against .vbs
2017-08-31 14:48:05.747434500 simscan: checking attachment 
addr.1504171085.205836.36767 against .wsc
2017-08-31 14:48:05.747435500 simscan: checking attachment 
addr.1504171085.205836.36767 against .wsf
2017-08-31 14:48:05.747435500 simscan: checking attachment 
addr.1504171085.205836.36767 against .wsh
2017-08-31 14:48:05.747439500 simscan: checking attachment 
addr.1504171085.205836.36767 against .xxe
2017-08-31 14:48:05.747440500 simscan: checking attachment 
addr.1504171085.205836.36767 against .docm
2017-08-31 14:48:05.747441500 simscan: checking attachment 
addr.1504171085.205836.36767 against .z
2017-08-31 14:48:05.747442500 simscan: checking attachment 
addr.1504171085.205836.36767 against .jar
2017-08-31 14:48:05.747442500 simscan: checking attachment textfile1 against 
.ace
2017-08-31 14:48:05.747446500 simscan: checking attachment textfile1 against 
.arc
2017-08-31 14:48:05.747446500 simscan: checking attachment textfile1 against 
.arj
2017-08-31 14:48:05.747447500 simscan: checking attachment textfile1 against 
.b64
2017-08-31 14:48:05.747447500 simscan: checking attachment textfile1 against 
.bat
2017-08-31 14:48:05.747448500 simscan: checking attachment textfile1 against 
.bhx
2017-08-31 14:48:05.747449500 simscan: checking attachment textfile1 against 
.cab
2017-08-31 14:48:05.747452500 simscan: checking attachment textfile1 against 
.chm
2017-08-31 14:48:05.747458500 simscan: checking attachment textfile1 against 
.com
2017-08-31 14:48:05.747459500 simscan: checking attachment textfile1 against 
.cpl
2017-08-31 14:48:05.747460500 simscan: checking attachment textfile1 against 
.dll
2017-08-31 14:48:05.747460500 simscan: checking attachment textfile1 against 
.exe
2017-08-31 14:48:05.747461500 simscan: checking attachment textfile1 against .gz
2017-08-31 14:48:05.747461500 simscan: checking attachment textfile1 against 
.hqx
2017-08-31 14:48:05.747465500 simscan: checking attachment textfile1 against 
.hta
2017-08-31 14:48:05.747466500 simscan: checking attachment textfile1 against 
.inf
2017-08-31 14:48:05.747467500 simscan: checking attachment textfile1 against 
.ins
2017-08-31 14:48:05.747467500 simscan: checking attachment textfile1 against 
.iso
2017-08-31 14:48:05.747468500 simscan: checking attachment textfile1 against 
.isp
2017-08-31 14:48:05.747469500 simscan: checking attachment textfile1 against 
.jse
2017-08-31 14:48:05.747477500 simscan: checking attachment textfile1 against 
.lib
2017-08-31 14:48:05.747477500 simscan: checking attachment textfile1 against 
.lnk
2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 against 
.lzh
2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 against 
.mim
2017-08-31 14:48:05.747478500 simscan: checking attachment textfile1 against 
.msp
2017-08-31 14:48:05.747479500 simscan: checking attachment textfile1 against 
.mst
2017-08-31 14:48:05.747481500 simscan: checking attachment textfile1 against 
.pif
2017-08-31 14:48:05.747482500 simscan: checking attachment textfile1 against 
.reg
2017-08-31 14:48:05.747485500 simscan: checking attachment textfile1 against 
.scf
2017-08-31 14:48:05.747486500 simscan: checking attachment textfile1 against 
.scr
2017-08-31 14:48:05.747486500 simscan: checking attachment textfile1 against 
.sct
2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 against 
.shb
2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 against 
.shs
2017-08-31 14:48:05.747487500 simscan: checking attachment textfile1 against 
.sys
2017-08-31 14:48:05.747489500 simscan: checking attachment textfile1 against 
.taz
2017-08-31 14:48:05.747490500 simscan: checking attachment textfile1 against 
.tgz
2017-08-31 14:48:05.747490500 simscan: checking attachment textfile1 against .tz
2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 against 
.url
2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 against .uu
2017-08-31 14:48:05.747491500 simscan: checking attachment textfile1 against 
.uue
2017-08-31 14:48:05.747493500 simscan: checking attachment textfile1 against .vb
2017-08-31 14:48:05.747494500 simscan: checking attachment textfile1 against 
.vbe
2017-08-31 14:48:05.747494500 simscan: checking attachment textfile1 against 
.vbs
2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 against 
.wsc
2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 against 
.wsf
2017-08-31 14:48:05.747495500 simscan: checking attachment textfile1 against 
.wsh
2017-08-31 14:48:05.747497500 simscan: checking attachment textfile1 against 
.xxe
2017-08-31 14:48:05.747501500 simscan: checking attachment textfile1 against 
.docm
2017-08-31 14:48:05.747502500 simscan: checking attachment textfile1 against .z
2017-08-31 14:48:05.747502500 simscan: checking attachment textfile1 against 
.jar
2017-08-31 14:48:05.747502500 simscan: cdb looking up version attach
2017-08-31 14:48:05.747503500 simscan: runned_scanners is  attach: 1.4.0
2017-08-31 14:48:05.747503500 simscan: found 1.4.0
2017-08-31 14:48:05.747503500 simscan: calling clamdscan
2017-08-31 14:48:05.753721500 simscan: clamdscan: 
/var/qmail/simscan/1504171085.205836.36767: OK
2017-08-31 14:48:05.753754500 simscan: clamdscan:
2017-08-31 14:48:05.753754500 simscan: clamdscan: ----------- SCAN SUMMARY 
-----------
2017-08-31 14:48:05.753768500 simscan: clamdscan: Infected files: 0
2017-08-31 14:48:05.753771500 simscan: clamdscan: Time: 0.004 sec (0 m 0 s)
2017-08-31 14:48:05.753957500 simscan: cdb looking up version clamav
2017-08-31 14:48:05.753968500 simscan: runned_scanners is  attach: 1.4.0 
clamav: 0.98.6/m:
2017-08-31 14:48:05.753969500 simscan: found 0.98.6/m:
2017-08-31 14:48:05.753974500 simscan: normal clamdscan return code: 0
2017-08-31 14:48:05.753994500 simscan: calling spamc
2017-08-31 14:48:05.754001500 simscan: calling /usr/bin/spamc  spamc
2017-08-31 14:48:05.754010500 simscan: check_spam had an error ret: -1
2017-08-31 14:48:05.754101500 simscan: exit error code: 71
2017-08-31 14:48:05.754220500 qmail-smtpd: qq soft reject (mail server temporarily 
rejected message (#4.3.0)): MAILFROM:<sunil.saharan@@yyyy.com>    
RCPTTO:c...@yyyy.com
2017-08-31 14:48:05.755317500 tcpserver: end 36645 status 0

##################


2017-08-31 14:48:05.956040500 simscan: cdblookingupsunil.saha...@yyyy.com
2017-08-31 14:48:05.956041500 simscan: pelookup:calledwithinv1...@xxxx.net
2017-08-31 14:48:05.956042500 simscan: pelookup: domain is radiant-india.net
2017-08-31 14:48:05.956042500 simscan: cdb looking up radiant-india.net
2017-08-31 14:48:05.956043500 simscan: cdb for radiant-india.net found 
clam=yes,spam=yes,spam_hits=30,spam_passthru=yes,attach=.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
2017-08-31 14:48:05.956049500 simscan: pelookup clam = yes
2017-08-31 14:48:05.956049500 simscan: pelookup spam = yes
2017-08-31 14:48:05.956050500 simscan: pelookup spam_hits = 30
2017-08-31 14:48:05.956053500 simscan: Per Domain Hits set to : 30.000000
2017-08-31 14:48:05.956053500 simscan: pelookup spam_passthru = yes
2017-08-31 14:48:05.956059500 simscan: unimplemented flag spam_passthru = yes
2017-08-31 14:48:05.956060500 simscan: pelookup attach = 
.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
2017-08-31 14:48:05.956062500 simscan: attachment flag attach = 
.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
2017-08-31 14:48:05.956074500 simscan: add_attach called with 
.ace:.arc:.arj:.b64:.bat:.bhx:.cab:.chm:.com:.cpl:.dll:.exe:.gz:.hqx:.hta:.inf:.ins:.iso:.isp:.jse:.lib:.lnk:.lzh:.mim:.msp:.mst:.pif:.reg:.scf:.scr:.sct:.shb:.shs:.sys:.taz:.tgz:.tz:.url:.uu:.uue:.vb:.vbe:.vbs:.wsc:.wsf:.wsh:.xxe:.docm:.z:.jar
2017-08-31 14:48:05.956079500 simscan: .ace is attachment number 0
2017-08-31 14:48:05.956080500 simscan: .arc is attachment number 1
2017-08-31 14:48:05.956081500 simscan: .arj is attachment number 2
2017-08-31 14:48:05.956081500 simscan: .b64 is attachment number 3
2017-08-31 14:48:05.956087500 simscan: .bat is attachment number 4
2017-08-31 14:48:05.956087500 simscan: .bhx is attachment number 5
2017-08-31 14:48:05.956088500 simscan: .cab is attachment number 6
2017-08-31 14:48:05.956088500 simscan: .chm is attachment number 7
2017-08-31 14:48:05.956089500 simscan: .com is attachment number 8
2017-08-31 14:48:05.956089500 simscan: .cpl is attachment number 9
2017-08-31 14:48:05.956090500 simscan: .dll is attachment number 10
2017-08-31 14:48:05.956090500 simscan: .exe is attachment number 11
2017-08-31 14:48:05.956094500 simscan: .gz is attachment number 12
2017-08-31 14:48:05.956094500 simscan: .hqx is attachment number 13
2017-08-31 14:48:05.956095500 simscan: .hta is attachment number 14
2017-08-31 14:48:05.956095500 simscan: .inf is attachment number 15
2017-08-31 14:48:05.956096500 simscan: .ins is attachment number 16
2017-08-31 14:48:05.956096500 simscan: .iso is attachment number 17
2017-08-31 14:48:05.956097500 simscan: .isp is attachment number 18
2017-08-31 14:48:05.956097500 simscan: .jse is attachment number 19
2017-08-31 14:48:05.956106500 simscan: .lib is attachment number 20
2017-08-31 14:48:05.956106500 simscan: .lnk is attachment number 21
2017-08-31 14:48:05.956107500 simscan: .lzh is attachment number 22
2017-08-31 14:48:05.956107500 simscan: .mim is attachment number 23
2017-08-31 14:48:05.956108500 simscan: .msp is attachment number 24
2017-08-31 14:48:05.956108500 simscan: .mst is attachment number 25
2017-08-31 14:48:05.956109500 simscan: .pif is attachment number 26
2017-08-31 14:48:05.956109500 simscan: .reg is attachment number 27
2017-08-31 14:48:05.956113500 simscan: .scf is attachment number 28
2017-08-31 14:48:05.956113500 simscan: .scr is attachment number 29
2017-08-31 14:48:05.956114500 simscan: .sct is attachment number 30
2017-08-31 14:48:05.956120500 simscan: .shb is attachment number 31
2017-08-31 14:48:05.956121500 simscan: .shs is attachment number 32
2017-08-31 14:48:05.956121500 simscan: .sys is attachment number 33
2017-08-31 14:48:05.956122500 simscan: .taz is attachment number 34
2017-08-31 14:48:05.956122500 simscan: .tgz is attachment number 35
2017-08-31 14:48:05.956123500 simscan: .tz is attachment number 36
2017-08-31 14:48:05.956123500 simscan: .url is attachment number 37
2017-08-31 14:48:05.956124500 simscan: .uu is attachment number 38
2017-08-31 14:48:05.956127500 simscan: .uue is attachment number 39
2017-08-31 14:48:05.956128500 simscan: .vb is attachment number 40
2017-08-31 14:48:05.956128500 simscan: .vbe is attachment number 41
2017-08-31 14:48:05.956129500 simscan: .vbs is attachment number 42
2017-08-31 14:48:05.956129500 simscan: .wsc is attachment number 43
2017-08-31 14:48:05.956130500 simscan: .wsf is attachment number 44
2017-08-31 14:48:05.956130500 simscan: .wsh is attachment number 45
2017-08-31 14:48:05.956131500 simscan: .xxe is attachment number 46
2017-08-31 14:48:05.956134500 simscan: .docm is attachment number 47
2017-08-31 14:48:05.956134500 simscan: .z is attachment number 48
2017-08-31 14:48:05.956135500 simscan: .jar is attachment number 49
2017-08-31 14:48:05.956136500 simscan: pelookup: local part is inv1mum
2017-08-31 14:48:05.956136500 simscan: lpart: local part is **
2017-08-31 14:48:05.956137500 simscan: cdblookingupinv1...@xxxx.net
2017-08-31 14:48:05.956137500 simscan: ripmime error
2017-08-31 14:48:05.956138500 simscan: exit error code: 71
2017-08-31 14:48:05.956144500 qmail-smtpd: qq soft reject (mail server temporarily 
rejected message (#4.3.0)): MAILFROM:<sunil.saha...@yyyy.com>    
RCPTTO:inv1...@xxxx.net


thanks
rajesh







---------------------------------------------------------------------
To unsubscribe,e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands,e-mail:qmailtoaster-list-h...@qmailtoaster.com
---------------------------------------------------------------------
To unsubscribe,e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands,e-mail:qmailtoaster-list-h...@qmailtoaster.com
---------------------------------------------------------------------
To unsubscribe,e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands,e-mail:qmailtoaster-list-h...@qmailtoaster.com
---------------------------------------------------------------------
To unsubscribe,e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands,e-mail:qmailtoaster-list-h...@qmailtoaster.com
--
Eric Broch
White Horse Technical Consulting (WHTC)
--
Eric Broch
White Horse Technical Consulting (WHTC)
--
Eric Broch
White Horse Technical Consulting (WHTC)
---------------------------------------------------------------------
To unsubscribe,e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands,e-mail:qmailtoaster-list-h...@qmailtoaster.com
---------------------------------------------------------------------
To unsubscribe,e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands,e-mail:qmailtoaster-list-h...@qmailtoaster.com
--
Eric Broch
White Horse Technical Consulting (WHTC)
---------------------------------------------------------------------
To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com


---------------------------------------------------------------------
To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com

--
Eric Broch
White Horse Technical Consulting (WHTC)

Reply via email to