From: Rodrigo M. <mro...@gm...> - 2007-02-27 17:15:26
|
When I send an e-mail with the character "=E7" in the subject from my Yahoo e-mail, Amavis scrambles the hole e-mail with confusing characters. For example "teste de formata=E7=E3o" turns "teste de formata=C3=A7=C3=A3o" in the subject and in the body also. I'm using Posrfix 2.3.4 with Amavisd-new 2.4.4 I tryied to bypass the header_checks [@bypass_header_checks_maps =3D (1);] but don't resolve the problem. Here is the postfix log Feb 27 08:43:49 spam postfix/smtpd[18310]: 1CBD3466FA5: client=3Dweb53912.mail.yahoo.com[206.190.38.161] Feb 27 08:43:49 spam postfix/cleanup[18336]: 1CBD3466FA5: message-id=3D<532...@we...> Feb 27 08:43:49 spam postfix/qmgr[18301]: 1CBD3466FA5: from=3D<mro...@ya...>, size=3D2170, nrcpt=3D1 (queue active) Feb 27 08:43:52 spam postfix/smtpd[18317]: 5D5DB466FA6: client=3Dlocalhost.localdomain[127.0.0.1] Feb 27 08:43:52 spam postfix/cleanup[18329]: 5D5DB466FA6: message-id=3D<532...@we...> Feb 27 08:43:52 spam postfix/qmgr[18301]: 5D5DB466FA6: from=3D<mro...@ya...>, size=3D2637, nrcpt=3D1 (queue active) Feb 27 08:43:52 spam amavis[18314]: (18314-04) response to data end: "250 2.0.0 Ok: queued as 5D5DB466FA6" Feb 27 08:43:52 spam amavis[18314]: (18314-04) FWD via SMTP: <mro...@ya...> -> <ro...@ce...>, BODY=3D8BITMIME 250 2.6.0 Ok, id=3D18314-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5D5DB466FA6 Feb 27 08:43:52 spam amavis[18314]: (18314-04) one_response_for_all <mro...@ya...>: success, r=3D0,b=3D0,d=3D0, ndn_needed=3D0, '250 2.6= .0 Ok, id=3D18314-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5D5DB466FA6' Feb 27 08:43:52 spam amavis[18314]: (18314-04) ndn_needed=3D0, exit=3D0, 250 2.6.0 Ok, id=3D18314-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5D5DB466FA6 Feb 27 08:43:52 spam amavis[18314]: (18314-04) Passed CLEAN, [200.164.107.12] <mro...@ya...> -> <ro...@ce...>, Message-ID: <532...@we...>, mail_id: YauwY6wIK6gJ, Hits: -94.897, queued_as: 5D5DB466FA6, 2707 ms Feb 27 08:43:52 spam amavis[18314]: (18314-04) sending SMTP response: "250 2.6.0 Ok, id=3D18314-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5D5DB466FA6" Feb 27 08:43:52 spam amavis[18314]: (18314-04) ESMTP> 250 2.6.0 Ok, id=3D18314-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5D5DB466FA6 Feb 27 08:43:52 spam postfix/smtp[18306]: 1CBD3466FA5: to=3D<ro...@ce...>, relay=3Damavis.localhost[127.0.0.1]:10024, delay=3D5.7, delays=3D3/0/0.01/2.7, dsn=3D2.6.0, status=3Dsent (250 2.6.0 O= k, id=3D18314-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5D5DB466FA6) Feb 27 08:43:52 spam postfix/qmgr[18301]: 1CBD3466FA5: removed Feb 27 08:43:52 spam postfix/smtp[18343]: 5D5DB466FA6: to=3D<ro...@ce...>, relay=3D172.26.2.26[172.26.2.26]:25, delay=3D0.1, delays=3D0.05/0.01/0.01/0.03, dsn=3D2.0.0, status=3Dsent (250 = ok 1172576632 qp 10726) Feb 27 08:43:52 spam postfix/qmgr[18301]: 5D5DB466FA6: removed Here is the full amavis log Feb 27 08:43:49 spam amavis[18314]: (18314-04) SMTP> 220 [127.0.0.1] ESMTP amavisd-new service ready Feb 27 08:43:49 spam amavis[18314]: (18314-04) switch_to_client_time 480 s, smtp response sent Feb 27 08:43:49 spam amavis[18314]: (18314-04) idle_proc, 4: was busy, 3.3 ms, total idle 12.872 s, busy 8.648 s Feb 27 08:43:49 spam amavis[18314]: (18314-04) idle_proc, 5: was idle, 0.3 ms, total idle 12.872 s, busy 8.648 s Feb 27 08:43:49 spam amavis[18314]: (18314-04) SMTP< EHLO spam.sead.ce.gov.br\r\n Feb 27 08:43:49 spam amavis[18314]: (18314-04) switch_to_my_time 480 s, SMTP EHLO received Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP> 250-[127.0.0.1] Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP> 250-VRFY Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP> 250-PIPELINING Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP> 250-SIZE Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP> 250-ENHANCEDSTATUSCOD= ES Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP> 250-8BITMIME Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP> 250-DSN Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP> 250 XFORWARD NAME ADDR PROTO HELO Feb 27 08:43:49 spam amavis[18314]: (18314-04) switch_to_client_time 480 s, smtp response sent Feb 27 08:43:49 spam amavis[18314]: (18314-04) idle_proc, 6: was busy, 2.1 ms, total idle 12.872 s, busy 8.650 s Feb 27 08:43:49 spam amavis[18314]: (18314-04) idle_proc, 5: was idle, 0.2 ms, total idle 12.873 s, busy 8.650 s Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP< MAIL FROM:<mro...@ya...> SIZE=3D2170 BODY=3D8BITMIME\r\n Feb 27 08:43:49 spam amavis[18314]: (18314-04) switch_to_my_time 480 s, SMTP MAIL received Feb 27 08:43:49 spam amavis[18314]: (18314-04) check_mail_begin_task: task_count=3D4 Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (debug_sender) =3D> undef, "mro...@ya..." does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP> 250 2.1.0 Sender <mro...@ya...> OK Feb 27 08:43:49 spam amavis[18314]: (18314-04) switch_to_client_time 480 s, smtp response sent Feb 27 08:43:49 spam amavis[18314]: (18314-04) idle_proc, 6: was busy, 2.2 ms, total idle 12.873 s, busy 8.652 s Feb 27 08:43:49 spam amavis[18314]: (18314-04) idle_proc, 5: was idle, 0.2 ms, total idle 12.873 s, busy 8.652 s Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP< RCPT TO:<ro...@ce...> ORCPT=3Drfc822;ro...@ce...\r\n Feb 27 08:43:49 spam amavis[18314]: (18314-04) switch_to_my_time 480 s, SMTP RCPT received Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP> 250 2.1.5 Recipient <ro...@ce...> OK Feb 27 08:43:49 spam amavis[18314]: (18314-04) switch_to_client_time 480 s, smtp response sent Feb 27 08:43:49 spam amavis[18314]: (18314-04) idle_proc, 6: was busy, 1.3 ms, total idle 12.873 s, busy 8.653 s Feb 27 08:43:49 spam amavis[18314]: (18314-04) idle_proc, 5: was idle, 0.2 ms, total idle 12.873 s, busy 8.653 s Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP< DATA\r\n Feb 27 08:43:49 spam amavis[18314]: (18314-04) switch_to_my_time 480 s, SMTP DATA received Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP::10024 /var/amavis/tmp/amavis-20070227T084328-18314: <mro...@ya...> -> <ro...@ce...> SIZE=3D2170 BODY=3D8BITMIME Received: from spam.sead.ce.gov.br ([127.0.0.1]) by localhost (spam.sead.ce.gov.br [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <ro...@ce...>; Tue, 27 Feb 2007 08:43:49 -0300 (BRT) Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP> 354 End data with <CR><LF>.<CR><LF> Feb 27 08:43:49 spam amavis[18314]: (18314-04) switch_to_client_time 480 s, smtp response sent Feb 27 08:43:49 spam amavis[18314]: (18314-04) switch_to_client_time 480 s, receiving data Feb 27 08:43:49 spam amavis[18314]: (18314-04) switch_to_my_time 480 s, data-end received Feb 27 08:43:49 spam amavis[18314]: (18314-04) ESMTP< .<CR><LF> Feb 27 08:43:49 spam amavis[18314]: (18314-04) Actual message size 2166 B, declared 2170 B Feb 27 08:43:49 spam amavis[18314]: (18314-04) body hash: edc9c8416ad840ef4ce974ad1d8b3d90 Feb 27 08:43:49 spam amavis[18314]: (18314-04) Original mail size: 2166; quota set to: 1083000 bytes Feb 27 08:43:49 spam amavis[18314]: (18314-04) Checking: YauwY6wIK6gJ <mro...@ya...> -> <ro...@ce...> Feb 27 08:43:49 spam amavis[18314]: (18314-04) query_keys: ro...@ce..., rodrigo@, ceara.gov.br, .ceara.gov.br, .gov.br, .br, . Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_hash(ro...@ce...), no matches Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (bypass_virus_checks) =3D> undef, "ro...@ce..." does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) Extracting mime components Feb 27 08:43:49 spam amavis[18314]: (18314-04) Issued a new file name: p001 Feb 27 08:43:49 spam amavis[18314]: (18314-04) Issued a new file name: p002 Feb 27 08:43:49 spam amavis[18314]: (18314-04) Issued a new pseudo part: p0= 03 Feb 27 08:43:49 spam amavis[18314]: (18314-04) p003 1 Content-Type: multipart/alternative Feb 27 08:43:49 spam amavis[18314]: (18314-04) Charging 142 bytes to remaining quota 1083000 (out of 1083000, (0%)) - by mime_decode Feb 27 08:43:49 spam amavis[18314]: (18314-04) p001 1/1 Content-Type: text/plain, size: 142 B, name: Feb 27 08:43:49 spam amavis[18314]: (18314-04) reparenting p001 from p000 to p003 Feb 27 08:43:49 spam amavis[18314]: (18314-04) Charging 450 bytes to remaining quota 1082858 (out of 1083000, (0%)) - by mime_decode Feb 27 08:43:49 spam amavis[18314]: (18314-04) p002 1/2 Content-Type: text/html, size: 450 B, name: Feb 27 08:43:49 spam amavis[18314]: (18314-04) reparenting p002 from p000 to p003 Feb 27 08:43:49 spam amavis[18314]: (18314-04) prolong_timer mime_decode-1: remaining time =3D 480 s Feb 27 08:43:49 spam amavis[18314]: (18314-04) decode_parts: level=3D1, #parts=3D3 : p001, p002, p003 Feb 27 08:43:49 spam amavis[18314]: (18314-04) run_command: [18342] /usr/bin/file p001 p002 </dev/null 2>&1 Feb 27 08:43:49 spam amavis[18342]: (18314-04) open_on_specific_fd: target fd0 closing, to become < /dev/null Feb 27 08:43:49 spam amavis[18342]: (18314-04) open_on_specific_fd: target fd2 closing, to become > &1 Feb 27 08:43:49 spam amavis[18342]: (18314-04) open_on_specific_fd: target fd2 dup2 from fd1 > &1 Feb 27 08:43:49 spam amavis[18314]: (18314-04) result line from file(1): p001: ISO-8859 English text\n Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_re("ISO-8859 English text") matches key "(?-xism:^ISO-8859.*\btext\b)", result=3D"txt" Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (map_full_type_to_short_type) =3D> true, "ISO-8859 English text" matches, result=3D"txt", matching_key=3D"(?-xism:^ISO-8859.*\\btext\\b)" Feb 27 08:43:49 spam amavis[18314]: (18314-04) File-type of p001: ISO-8859 English text; (txt) Feb 27 08:43:49 spam amavis[18314]: (18314-04) result line from file(1): p002: ISO-8859 text\n Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_re("ISO-8859 text") matches key "(?-xism:^ISO-8859.*\btext\b)", result=3D"txt" Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (map_full_type_to_short_type) =3D> true, "ISO-8859 text" matches, result=3D"txt", matching_key=3D"(?-xism:^ISO-8859.*\\btext\\b)" Feb 27 08:43:49 spam amavis[18314]: (18314-04) File-type of p002: ISO-8859 text; (txt) Feb 27 08:43:49 spam amavis[18314]: (18314-04) decompose_part: p001 - atomi= c Feb 27 08:43:49 spam amavis[18314]: (18314-04) decompose_part: p002 - atomi= c Feb 27 08:43:49 spam amavis[18314]: (18314-04) prolong_timer parts_decode: remaining time =3D 480 s Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup: (scalar) matches, result=3D"1" Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (bypass_header_checks) =3D> true, "ro...@ce..." matches, result=3D"1", matching_key=3D"(constant:1)" Feb 27 08:43:49 spam amavis[18314]: (18314-04) Checking for banned types and filenames Feb 27 08:43:49 spam amavis[18314]: (18314-04) query_keys: ro...@ce..., rodrigo@, ceara.gov.br, .ceara.gov.br, .gov.br, .br, . Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_hash(ro...@ce...), no matches Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (bypass_banned_checks) =3D> undef, "ro...@ce..." does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup: (scalar) matches, result=3D"DEFAULT" Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (banned_filename), 1 matches for "ro...@ce...", results: "(constant:DEFAULT)"=3D>"DEFAULT" Feb 27 08:43:49 spam amavis[18314]: (18314-04) collect banned table[0]: ro...@ce..., tables: DEFAULT=3D>Amavis::Lookup::RE=3DARRAY(0x114eb390) Feb 27 08:43:49 spam amavis[18314]: (18314-04) starting banned checks - traversing message structure tree Feb 27 08:43:49 spam amavis[18314]: (18314-04) check_for_banned (p003,p001) multipart/alternative | text/plain,.txt Feb 27 08:43:49 spam amavis[18314]: (18314-04) doing banned check for ro...@ce... on multipart/alternative | text/plain,.txt Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_re(["multipart/alternative","text/plain",".txt"]), no matches Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (check_bann:ro...@ce...) =3D> undef, ["multipart/alternative","text/plain",".txt"] does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) p.path ro...@ce...: "P=3Dp003,L=3D1,M=3Dmultipart/alternative | P=3Dp001,L=3D1/1,M=3Dtext/plain,T=3Dtxt" Feb 27 08:43:49 spam amavis[18314]: (18314-04) check_for_banned (p003,p002) multipart/alternative | text/html,.txt Feb 27 08:43:49 spam amavis[18314]: (18314-04) doing banned check for ro...@ce... on multipart/alternative | text/html,.txt Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_re(["multipart/alternative","text/html",".txt"]), no matches Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (check_bann:ro...@ce...) =3D> undef, ["multipart/alternative","text/html",".txt"] does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) p.path ro...@ce...: "P=3Dp003,L=3D1,M=3Dmultipart/alternative | P=3Dp002,L=3D1/2,M=3Dtext/html,T=3Dtxt" Feb 27 08:43:49 spam amavis[18314]: (18314-04) banned check: any=3D0, all= =3DN (1) Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_re("MAIL"), no matche= s Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (keep_decoded_original) =3D> undef, "MAIL" does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) Using ClamAV-clamd: (built-in interface) Feb 27 08:43:49 spam amavis[18314]: (18314-04) ask_av (ClamAV-clamd): query template1: CONTSCAN {}\n Feb 27 08:43:49 spam amavis[18314]: (18314-04) Using (ClamAV-clamd) on dir: CONTSCAN /var/amavis/tmp/amavis-20070227T084328-18314/parts\n Feb 27 08:43:49 spam amavis[18314]: (18314-04) ClamAV-clamd: Connecting to socket /tmp/clamd Feb 27 08:43:49 spam amavis[18314]: (18314-04) ClamAV-clamd: Sending CONTSCAN /var/amavis/tmp/amavis-20070227T084328-18314/parts\n to UNIX socket /tmp/clamd Feb 27 08:43:49 spam amavis[18314]: (18314-04) ask_av (ClamAV-clamd) result: /var/amavis/tmp/amavis-20070227T084328-18314/parts: OK\n Feb 27 08:43:49 spam amavis[18314]: (18314-04) ask_av (ClamAV-clamd): /var/amavis/tmp/amavis-20070227T084328-18314/parts CLEAN Feb 27 08:43:49 spam amavis[18314]: (18314-04) ClamAV-clamd result: clean Feb 27 08:43:49 spam amavis[18314]: (18314-04) query_keys: ro...@ce..., rodrigo@, ceara.gov.br, .ceara.gov.br, .gov.br, .br, . Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_hash(ro...@ce...), no matches Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (bypass_virus_checks) =3D> undef, "ro...@ce..." does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) query_keys: ro...@ce..., rodrigo@, ceara.gov.br, .ceara.gov.br, .gov.br, .br, . Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_hash(ro...@ce...), no matches Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (bypass_spam_checks) =3D> undef, "ro...@ce..." does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) wbl: checking sender <mro...@ya...> Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (blacklist_recip<ro...@ce...>) =3D> undef, "ro...@ce..." does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) query_keys: mro...@ya..., mrodrigox@, yahoo.com, .yahoo.com, .com, . Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_hash(mro...@ya...), no matches Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (blacklist_sender) =3D> undef, "mro...@ya..." does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (whitelist_recip<ro...@ce...>) =3D> undef, "ro...@ce..." does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) query_keys: mro...@ya..., mrodrigox@, yahoo.com, .yahoo.com, .com, . Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_hash(mro...@ya...), no matches Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (whitelist_sender) =3D> undef, "mro...@ya..." does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) query_keys: ro...@ce..., rodrigo@, ceara.gov.br, .ceara.gov.br, .gov.br, .br, . Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_hash(ro...@ce...) matches keys: "."=3D>ARRAY(0x114eb8f0) Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (score_sender), 1 matches for "ro...@ce...", results: "."=3D>[Amavis::Lookup::RE=3DARRAY(0x114eb630),HASH(0x114eb6c0)] Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_re("mro...@ya..."), no matches Feb 27 08:43:49 spam amavis[18314]: (18314-04) query_keys: mro...@ya..., mrodrigox@, yahoo.com, .yahoo.com, .com, . Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup_hash(mro...@ya...), no matches Feb 27 08:43:49 spam amavis[18314]: (18314-04) lookup (score_sender<mro...@ya...>) =3D> undef, "mro...@ya..." does not match Feb 27 08:43:49 spam amavis[18314]: (18314-04) SpamControl: calling spam sc= anner Feb 27 08:43:49 spam amavis[18314]: (18314-04) spam_scan: DSPAM not available, skipping it Feb 27 08:43:49 spam amavis[18314]: (18314-04) timer set to 320 s for SA (was 480 s) Feb 27 08:43:49 spam amavis[18314]: (18314-04) calling SA parse, SA version 3.1.7 Feb 27 08:43:49 spam amavis[18314]: (18314-04) CALLING SA check Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer spam_scan_sa_finish: timer set to =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) spam_scan: score=3D-94.897 tests=3D[AWL=3D0.067,BAYES_00=3D-2.599,DNS_FROM_RFC_ABUSE= =3D0.2,DNS_FROM_RFC_POST=3D1.708,DNS_FROM_RFC_WHOIS=3D1.447,HTML_MESSAGE=3D= 0.001,SUBJ_ILLEGAL_CHARS=3D4.279,USER_IN_WHITELIST=3D-100] Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer spam_scan: remaining time =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) enqueue: stat is not numeric= : "" Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup: (scalar) matches, result=3D"2" Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup (spam_tag_level) =3D> true, "ro...@ce..." matches, result=3D"2", matching_key=3D"(constant:2)" Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup: (scalar) matches, result=3D"6.31" Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup (spam_tag2_level) =3D> true, "ro...@ce..." matches, result=3D"6.31", matching_key=3D"(constant:6.31)" Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup (spam_tag3_level) =3D> undef, "ro...@ce..." does not match Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup: (scalar) matches, result=3D"6.31" Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup (spam_kill_level) =3D> true, "ro...@ce..." matches, result=3D"6.31", matching_key=3D"(constant:6.31)" Feb 27 08:43:52 spam amavis[18314]: (18314-04) query_keys: ro...@ce..., rodrigo@, ceara.gov.br, .ceara.gov.br, .gov.br, .br, . Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup_hash(ro...@ce...), no matches Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup (bypass_spam_checks) =3D> undef, "ro...@ce..." does not match Feb 27 08:43:52 spam amavis[18314]: (18314-04) final_destiny PASS, recip ro...@ce... Feb 27 08:43:52 spam amavis[18314]: (18314-04) do_notify_and_quar: ccat=3DClean (1,0) ("1":Clean, "0":CatchAll), q_mth=3D, qar_mth=3D Feb 27 08:43:52 spam amavis[18314]: (18314-04) skip admin notification, no administrators Feb 27 08:43:52 spam amavis[18314]: (18314-04) do_notify_and_quarantine - d= one Feb 27 08:43:52 spam amavis[18314]: (18314-04) defang? ccat "0": Feb 27 08:43:52 spam amavis[18314]: (18314-04) header: Received: from spam.sead.ce.gov.br ([127.0.0.1])\n\tby localhost (spam.sead.ce.gov.br [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id YauwY6wIK6gJ for <ro...@ce...>;\n\tTue, 27 Feb 2007 08:43:49 -0300 (BRT)\n Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup_acl(ro...@ce...), no match Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup (local_domains) =3D> undef, "ro...@ce..." does not match Feb 27 08:43:52 spam amavis[18314]: (18314-04) query_keys: ro...@ce..., rodrigo@, ceara.gov.br, .ceara.gov.br, .gov.br, .br, . Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup_hash(ro...@ce...), no matches Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup (bypass_spam_checks) =3D> undef, "ro...@ce..." does not match Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup: (scalar) matches, result=3D"2" Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup (spam_tag_level) =3D> true, "ro...@ce..." matches, result=3D"2", matching_key=3D"(constant:2)" Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup: (scalar) matches, result=3D"6.31" Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup (spam_tag2_level) =3D> true, "ro...@ce..." matches, result=3D"6.31", matching_key=3D"(constant:6.31)" Feb 27 08:43:52 spam amavis[18314]: (18314-04) headers CLUSTERING: NEW CLUSTER <ro...@ce...>: score=3D-94.897, tag=3D0, tag2=3D0, local= =3D0, bl=3D, s=3D Feb 27 08:43:52 spam amavis[18314]: (18314-04) header: X-Virus-Scanned: amavisd-new at sead.ce.gov.br\n Feb 27 08:43:52 spam amavis[18314]: (18314-04) headers CLUSTERING: done all 1 recips in one go Feb 27 08:43:52 spam amavis[18314]: (18314-04) (about to connect to [127.0.0.1]:10025) FWD via SMTP: <mro...@ya...> -> <ro...@ce...> Feb 27 08:43:52 spam amavis[18314]: (18314-04) Remote host presents itself as: spam.sead.ce.gov.br, handles DSN, ORCPT Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer fwd-connect: timer set to =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) AUTH not needed, user=3D'', MTA offers '' Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer fwd-mail-from: remaining time =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) sending RCPT TO:<ro...@ce...> ORCPT=3Drfc822;ro...@ce... Feb 27 08:43:52 spam amavis[18314]: (18314-04) response to RCPT TO for <ro...@ce...>: "250 2.1.5 Ok" Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer fwd-rcpt-to: remaining time =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer fwd-data-cmd: remaining time =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) response to DATA: "354 End data with <CR><LF>.<CR><LF>" Feb 27 08:43:52 spam amavis[18314]: (18314-04) write_header: 0, Amavis::Out::SMTP=3DHASH(0x1447c650) Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer fwd-data-contents: remaining time =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer fwd-data-end: remaining time =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) response to data end: "250 2.0.0 Ok: queued as 5D5DB466FA6" Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer fwd-rundown-1: remaining time =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) FWD via SMTP: <mro...@ya...> -> <ro...@ce...>, BODY=3D8BITMIME 250 2.6.0 Ok, id=3D18314-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5D5DB466FA6 Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer forwarding: remaining time =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) one_response_for_all <mro...@ya...>: success, r=3D0,b=3D0,d=3D0, ndn_needed=3D0, '250 2.6= .0 Ok, id=3D18314-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5D5DB466FA6' Feb 27 08:43:52 spam amavis[18314]: (18314-04) ndn_needed=3D0, exit=3D0, 250 2.6.0 Ok, id=3D18314-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5D5DB466FA6 Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup: (scalar) matches, result=3D"10" Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup (spam_dsn_cutoff_level_bysender) =3D> true, "mro...@ya..." matches, result=3D"10", matching_key=3D"(constant:10)" Feb 27 08:43:52 spam amavis[18314]: (18314-04) dsn: from MTA 250 Clean <mro...@ya...> -> <ro...@ce...>: on_succ=3D0, on_dly=3D1, on_fail=3D1, never=3D0, warn_sender=3D, DSN_passed_on=3D1 Feb 27 08:43:52 spam amavis[18314]: (18314-04) DSN: SUCC from MTA 250 Clean, no DSN requested: <mro...@ya...> -> <ro...@ce...> Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer delivery-notification: remaining time =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) parse_received: from =3D [200.164.107.12] /[200.164.107.12]// Feb 27 08:43:52 spam amavis[18314]: (18314-04) parse_received: by =3D web53912.mail.yahoo.com /web53912.mail.yahoo.com// Feb 27 08:43:52 spam amavis[18314]: (18314-04) parse_received: via =3D HTTP= /HTTP// Feb 27 08:43:52 spam amavis[18314]: (18314-04) parse_received: ; =3D Tue, 27 Feb 2007 03:43:44 PST/Tue, 27 Feb 2007 03:43:44 PST// Feb 27 08:43:52 spam amavis[18314]: (18314-04) fish_out_ip_from_received: 200.164.107.12, [200.164.107.12] Feb 27 08:43:52 spam amavis[18314]: (18314-04) lookup_ip_acl (publicnetworks): key=3D"200.164.107.12" matches "::FFFF:0:0/96", result=3D1 Feb 27 08:43:52 spam amavis[18314]: (18314-04) best_try_originator_ip: 200.164.107.12 Feb 27 08:43:52 spam amavis[18314]: (18314-04) Passed CLEAN, [200.164.107.12] <mro...@ya...> -> <ro...@ce...>, Message-ID: <532...@we...>, mail_id: YauwY6wIK6gJ, Hits: -94.897, queued_as: 5D5DB466FA6, 2707 ms Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer main_log_entry: remaining time =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) updating snmp variables Feb 27 08:43:52 spam amavis[18314]: (18314-04) prolong_timer check done: remaining time =3D 477 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) sending SMTP response: "250 2.6.0 Ok, id=3D18314-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5D5DB466FA6" Feb 27 08:43:52 spam amavis[18314]: (18314-04) ESMTP> 250 2.6.0 Ok, id=3D18314-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5D5DB466FA6 Feb 27 08:43:52 spam amavis[18314]: (18314-04) switch_to_client_time 480 s, smtp response sent Feb 27 08:43:52 spam amavis[18314]: (18314-04) TempDir::strip: /var/amavis/tmp/amavis-20070227T084328-18314 Feb 27 08:43:52 spam amavis[18314]: (18314-04) rmdir_recursively: /var/amavis/tmp/amavis-20070227T084328-18314/parts, excl=3D1 Feb 27 08:43:52 spam amavis[18314]: (18314-04) TIMING [total 2713 ms] - SMTP greeting: 3 (0%)0, SMTP EHLO: 1 (0%)0, SMTP pre-MAIL: 2 (0%)0, SMTP pre-DATA-flush: 5 (0%)0, SMTP DATA: 37 (1%)2, check_init: 1 (0%)2, digest_hdr: 1 (0%)2, digest_body: 0 (0%)2, gen_mail_id: 1 (0%)2, mime_decode: 17 (1%)2, get-file-type2: 28 (1%)4, parts_decode: 1 (0%)4, AV-scan-1: 13 (0%)4, spam-wb-list: 6 (0%)4, SA msg read: 1 (0%)4, SA parse: 3 (0%)4, SA check: 2500 (92%)97, SA finish: 4 (0%)97, update_cache: 2 (0%)97, decide_mail_destiny: 3 (0%)97, fwd-connect: 9 (0%)97, fwd-mail-from: 1 (0%)97, fwd-rcpt-to: 3 (0%)97, fwd-data-cmd: 1 (0%)97, write-header: 1 (0%)97, fwd-data-contents: 1 (0%)97, fwd-data-end: 48 (2%)99, fwd-rundown: 2 (0%)99, prepare-dsn: 2 (0%)99, main_log_entry: 13 (0%)100, update_snmp: 2 (0%)100, SMTP pre-response: 1 (0%)100, SMTP response: 1 (0%)100, unlink-2-files: 1 (0%)100, rundown: 0 (0%)100 Feb 27 08:43:52 spam amavis[18314]: (18314-04) idle_proc, 6: was busy, 2704.4 ms, total idle 12.873 s, busy 11.358 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) idle_proc, 5: was idle, 0.2 ms, total idle 12.873 s, busy 11.358 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) ESMTP< QUIT\r\n Feb 27 08:43:52 spam amavis[18314]: (18314-04) switch_to_my_time 480 s, SMTP QUIT received Feb 27 08:43:52 spam amavis[18314]: (18314-04) ESMTP> 221 2.0.0 [127.0.0.1] amavisd-new closing transmission channel Feb 27 08:43:52 spam amavis[18314]: (18314-04) switch_to_client_time 480 s, smtp response sent Feb 27 08:43:52 spam amavis[18314]: (18314-04) SMTP session over, timer sto= pped Feb 27 08:43:52 spam amavis[18314]: (18314-04) exiting process_request Feb 27 08:43:52 spam amavis[18314]: (18314-04) post_process_request_hook: timer was not running Feb 27 08:43:52 spam amavis[18314]: (18314-04) idle_proc, bye: was busy, 3.0 ms, total idle 12.873 s, busy 11.361 s Feb 27 08:43:52 spam amavis[18314]: (18314-04) load: 47 %, total idle 12.873 s, busy 11.361 s Feb 27 08:43:53 spam amavis[18314]: (18314-04) idle_proc, hi : was idle, 1441.3 ms, total idle 14.314 s, busy 11.361 s Feb 27 08:43:53 spam amavis[18314]: (18314-04) loaded base policy bank Feb 27 08:43:53 spam amavis[18314]: (18314-04) lookup_ip_acl (inet_acl): key=3D"127.0.0.1" matches "127.0.0.1", result=3D1 Feb 27 08:43:53 spam amavis[18314]: (18314-04) process_request: fileno sock=3D11, STDIN=3D0, STDOUT=3D1 Feb 27 08:43:53 spam amavis[18314]: (18314-04) switch_to_my_time 480 s, new request Feb 27 08:43:53 spam amavis[18314]: (18314-04) process_request: suggested_protocol=3D"" on TCP Hope that someone know what's going on... (It's something related to the RFC 2822?) Thanks in advance, Rodrigo. |