I'm hoping someone is seeing something I'm missing. This is an all day occurrence. This made it to my inbox Source server is blacklisted I'm (apparently not) querying the same RBLs. Message makes it through. Some smtpd_main capture below. 2019-05-16 11:50:13.749 [3803] SMTP connection from [69.162.123.246]:17419 I=[mywanip]:25 (TCP/IP connection count = 1) 2019-05-16 11:50:13.949 [7670] [69.162.123.246] F= R= Accepted: upstream host 2019-05-16 11:50:14.073 [7670] 1hRIe5-0001zi-Ud DKIM: d=accupackindia.com s=zs9pu c=relaxed/relaxed a=rsa-sha1 b=1024 i=smartshopper@accupackindia.com [verification succeeded] 2019-05-16 11:50:14.095 [7670] 1hRIe5-0001zi-Ud for userulkin@mydomain.com MSG May 16 11:50:14 [ T_SMTPD-M]: new mail queued, add to inqueue '1hRIe5-0001zi-Ud-D' MSG May 16 11:50:14 [ T_SMTPD-W]: Mail assigned to 'MS-16658' for scanning '1hRIe5-0001zi-Ud-D' MSG May 16 11:50:14 [ MS-16658]: scan request 1hRIe5-0001zi-Ud-D MSG May 16 11:50:14 [ MS-16658]: S='smartshopper@accupackindia.com' R='userulkin@mydomain.com' Subject='Tired of fighting over the thermostat?' Size='24516' Status='Mail has been queued for delivery.' src_ip='69.162.123.246' src_port=17419 MSG May 16 11:50:14 [1hRIe5-0001zi-Ud]: spam scanning result: 'bulk spam' MSG May 16 11:50:14 [1hRIe5-0001zi-Ud]: [0x9fafe38](userulkin@mydomain.com)SF Policy Action: QUARANTINE MSG May 16 11:50:14 [ MS-16658]: move 'hwAkeS-oqE601-7Z' to quarantine MSG May 16 11:50:14 [ MS-16658]: do_post_policy_stuff: q_path = /sdisk/spool//quarantine/0/Z/ MSG May 16 11:50:14 [1hRIe5-0001zi-Ud]: hwAkeS-oqE601-7Z R= Accepted: upstream host 2019-05-16 11:50:18.021 [3803] SMTP connection from [69.162.123.246]:57855 I=[mywanip]:25 (TCP/IP connection count = 2) 2019-05-16 11:50:18.177 [7687] 1hRIe9-0001zz-OF DKIM: validation error: error:04091068:rsa routines:INT_RSA_VERIFY:bad signature 2019-05-16 11:50:18.177 [7687] 1hRIe9-0001zz-OF DKIM: d=wildlittlebear.com s=8bww c=relaxed/relaxed a=rsa-sha1 b=1024 i=everything.camping@wildlittlebear.com [verification failed - signature did not verify (headers probably modified in transit)] 2019-05-16 11:50:18.180 [7693] [69.162.123.246] F= R= Accepted: upstream host 2019-05-16 11:50:18.200 [7687] 1hRIe9-0001zz-OF for users@mydomain.com MSG May 16 11:50:18 [ T_SMTPD-M]: new mail queued, add to inqueue '1hRIe9-0001zz-OF-D' 2019-05-16 11:50:18.312 [7693] 1hRIeA-000205-5o DKIM: d=accupackindia.com s=zs9pu c=relaxed/relaxed a=rsa-sha1 b=1024 i=thrifty.home@accupackindia.com [verification succeeded] 2019-05-16 11:50:18.316 [7687] [69.162.123.245] F= R= Accepted: upstream host 2019-05-16 11:50:18.331 [7693] 1hRIeA-000205-5o for user@mydomain.com MSG May 16 11:50:18 [ T_SMTPD-M]: new mail queued, add to inqueue '1hRIeA-000205-5o-D' 2019-05-16 11:50:18.398 [7687] 1hRIeA-0001zz-AC DKIM: d=wildlittlebear.com s=8bww c=relaxed/relaxed a=rsa-sha1 b=1024 i=thrifty.home@wildlittlebear.com [verification succeeded] 2019-05-16 11:50:18.418 [7687] 1hRIeA-0001zz-AC for user@mydomain.com MSG May 16 11:50:18 [ T_SMTPD-M]: new mail queued, add to inqueue '1hRIeA-0001zz-AC-D' MSG May 16 11:50:18 [ T_SMTPD-W]: Mail assigned to 'MS-16658' for scanning '1hRIe9-0001zz-OF-D' MSG May 16 11:50:18 [ MS-16658]: scan request 1hRIe9-0001zz-OF-D MSG May 16 11:50:18 [ T_SMTPD-W]: Mail assigned to 'MS-3790' for scanning '1hRIeA-000205-5o-D' MSG May 16 11:50:18 [ T_SMTPD-W]: Mail assigned to 'MS-3793' for scanning '1hRIeA-0001zz-AC-D' MSG May 16 11:50:18 [ MS-3790]: scan request 1hRIeA-000205-5o-D MSG May 16 11:50:18 [ MS-3790]: S='thrifty.home@accupackindia.com' R='user@mydomain.com' Subject='Air cooling device that travels with you' Size='24520' Status='Mail has been queued for delivery.' src_ip='69.162.123.246' src_port=57855 MSG May 16 11:50:18 [ MS-16658]: S='everything.camping@wildlittlebear.com' R='users@mydomain.com' Subject='Save on cooling costs this summer with an evaporative air cooler.' Size='24597' Status='Mail has been queued for delivery.' src_ip='69.162.123.245' src_port=19777 MSG May 16 11:50:18 [ MS-3793]: scan request 1hRIeA-0001zz-AC-D MSG May 16 11:50:18 [ MS-3793]: S='thrifty.home@wildlittlebear.com' R='user@mydomain.com' Subject='Staying cool this summer the smart way' Size='24558' Status='Mail has been queued for delivery.' src_ip='69.162.123.245' src_port=19777 MSG May 16 11:50:18 [1hRIeA-000205-5o]: spam scanning result: 'not spam' MSG May 16 11:50:18 [1hRIeA-0001zz-AC]: spam scanning result: 'not spam' MSG May 16 11:50:18 [1hRIe9-0001zz-OF]: spam scanning result: 'not spam' MSG May 16 11:50:18 [1hRIeA-000205-5o]: Sophos Antivirus Scanned result: Clean (file number:-1) MSG May 16 11:50:18 [1hRIeA-000205-5o]: Avira Antivirus Scanned result: Clean (file number:-1) CRT May 16 11:50:18 [ MS-3790]: missing filename in this MIME part !!! CRT May 16 11:50:18 [ MS-3790]: missing filename in this MIME part !!! MSG May 16 11:50:18 [1hRIeA-000205-5o]: [0x9c239b80] FROM: thrifty.home@accupackindia.com , TO: user@mydomain.com MSG May 16 11:50:18 [1hRIeA-000205-5o]: [0x9c239b80](user@mydomain.com)SF Policy Action: ACCEPT MSG May 16 11:50:18 [1hRIeA-000205-5o]: move 'bG21Bl-VoKH2a-uO' to forwarder queue MSG May 16 11:50:18 [1hRIeA-000205-5o]: bG21Bl-VoKH2a-uO <= thrifty.home@accupackindia.com R=1hRIeA-000205-5o MSG May 16 11:50:18 [ MS-3790]: processing for 1hRIeA-000205-5o completed MSG May 16 11:50:18 [ T_SMTPD-W]: [SMTPD] mail '1hRIeA-000205-5o-D' processed sucessfully MSG May 16 11:50:18 [1hRIeA-0001zz-AC]: Sophos Antivirus Scanned result: Clean (file number:-1) MSG May 16 11:50:18 [1hRIeA-0001zz-AC]: Avira Antivirus Scanned result: Clean (file number:-1) CRT May 16 11:50:18 [ MS-3793]: missing filename in this MIME part !!! CRT May 16 11:50:18 [ MS-3793]: missing filename in this MIME part !!! MSG May 16 11:50:18 [1hRIeA-0001zz-AC]: [0x9b985b80] FROM: thrifty.home@wildlittlebear.com , TO: user@mydomain.com MSG May 16 11:50:18 [1hRIeA-0001zz-AC]: [0x9b985b80](user@mydomain.com)SF Policy Action: ACCEPT MSG May 16 11:50:18 [1hRIeA-0001zz-AC]: move 'z3zqlP-FlUFrx-YH' to forwarder queue MSG May 16 11:50:18 [1hRIeA-0001zz-AC]: z3zqlP-FlUFrx-YH <= thrifty.home@wildlittlebear.com R=1hRIeA-0001zz-AC MSG May 16 11:50:18 [1hRIe9-0001zz-OF]: Sophos Antivirus Scanned result: Clean (file number:-1) MSG May 16 11:50:18 [1hRIe9-0001zz-OF]: Avira Antivirus Scanned result: Clean (file number:-1) CRT May 16 11:50:18 [ MS-16658]: missing filename in this MIME part !!! CRT May 16 11:50:18 [ MS-16658]: missing filename in this MIME part !!! MSG May 16 11:50:18 [1hRIe9-0001zz-OF]: [0x9f816000] FROM: everything.camping@wildlittlebear.com , TO: users@mydomain.com MSG May 16 11:50:18 [1hRIe9-0001zz-OF]: [0x9f816000](users@mydomain.com)SF Policy Action: ACCEPT MSG May 16 11:50:18 [1hRIe9-0001zz-OF]: move '3pJlzF-RAsATs-8E' to forwarder queue MSG May 16 11:50:18 [1hRIe9-0001zz-OF]: 3pJlzF-RAsATs-8E <= everything.camping@wildlittlebear.com R=1hRIe9-0001zz-OF MSG May 16 11:50:18 [ MS-3793]: processing for 1hRIeA-0001zz-AC completed MSG May 16 11:50:18 [ T_SMTPD-W]: [SMTPD] mail '1hRIeA-0001zz-AC-D' processed sucessfully MSG May 16 11:50:18 [ MS-16658]: processing for 1hRIe9-0001zz-OF completed MSG May 16 11:50:18 [ T_SMTPD-W]: [SMTPD] mail '1hRIe9-0001zz-OF-D' processed sucessfully 2019-05-16 11:50:19.074 [7693] SMTP connection from tealeaf.accupackindia.com [69.162.123.246]:57855 I=[mywanip]:25 closed by QUIT Does anyone have any recommendations on how to diagnose this? Thanks much Gary
↧