Navigation

    Kopano
    • Register
    • Login
    • Search
    • Categories
    • Get Official Kopano Support
    • Recent
    Statement regarding the closure of the Kopano community forum and the end of the community edition

    on domain not recognized by amavis - fetchmail/postfix

    Kopano Groupware Core
    1
    1
    860
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • theodorm
      theodorm last edited by theodorm

      Hi all,

      I have weird problem.
      I was able to setup on my Univention Server UCS 4.2.15 kopan and it’s really great how nice kopano works compared to zarafa.

      Anyway, the goal was that kopano reacts on ucs like outlook and this works perfect except for on thing (I can write down how me made this later, when everything is working).

      I hosting the domains gmail.com and domain.de, if a Mail comes from gmail.com and should be delivered to domain.de the spam recognition is not working for this one user.
      If I change in fetchmail the Account in which the mail should be delivered then it works, as a example user1 wich uses a gmail.com mail gets now the mails, then the spam recognition works.
      If I change back to user2 who works whit domain.de as primary mailadress then it’s not working.
      If I sent from a other domain then gmail.com like gmx.de then it also works.
      Weird?

      Does any one have a idea where the problem can be located?
      Fetchmail? dagen? Postfix? Kopano?

      Here a log of some mails:

      Spam not recogniced:

      May 13 12:05:41 ucs fetchmail[3282]: 317 Nachrichten (316 gesehene) für k147535_1-mail bei pop3.1blu.de (18704221 Bytes).
May 13 12:05:41 ucs postfix/smtpd[6232]: connect from localhost[127.0.0.1]
May 13 12:05:41 ucs postfix/smtpd[6232]: D247E63E761: client=localhost[127.0.0.1]
May 13 12:05:41 ucs postfix/cleanup[6234]: D247E63E761: message-id=<CAGran6=P7VN81_CzaUKR0cBUux8E_zRTi8GH-og3smgwVdpTKA@mail.gmail.com>
May 13 12:05:41 ucs postfix/qmgr[5991]: D247E63E761: from=<theodor.machnich@googlemail.com>, size=3331, nrcpt=1 (queue active)
May 13 12:05:41 ucs fetchmail[3282]: Nachricht k147535_1-mail@pop3.1blu.de:317 von 317 wird gelesen (3012 Bytes) nicht gelöscht
May 13 12:05:41 ucs postfix/smtpd[6232]: disconnect from localhost[127.0.0.1]
May 13 12:05:42 ucs postfix/smtpd[6238]: connect from localhost[127.0.0.1]
May 13 12:05:42 ucs postfix/smtpd[6238]: 8BAC663E762: client=localhost[127.0.0.1], orig_queue_id=D247E63E761, orig_client=localhost[127.0.0.1]
May 13 12:05:42 ucs postfix/cleanup[6234]: 8BAC663E762: message-id=<CAGran6=P7VN81_CzaUKR0cBUux8E_zRTi8GH-og3smgwVdpTKA@mail.gmail.com>
May 13 12:05:42 ucs postfix/qmgr[5991]: 8BAC663E762: from=<theodor.machnich@googlemail.com>, size=3807, nrcpt=1 (queue active)
May 13 12:05:42 ucs postfix/smtpd[6238]: disconnect from localhost[127.0.0.1]
May 13 12:05:42 ucs amavis[5577]: (05577-05) Passed SPAM {RelayedOutbound}, LOCAL [127.0.0.1]:41136 [209.85.218.43] <theodor.machnich@googlemail.com> -> <mail@roger-krebs.de>, Queue-ID: D247E63E761, Message-ID: <CAGran6=P7VN81_CzaUKR0cBUux8E_zRTi8GH-og3smgwVdpTKA@mail.gmail.com>, mail_id: 64D6Zq17o_WI, Hits: 1001.929, size: 3331, queued_as: 8BAC663E762, 691 ms
May 13 12:05:42 ucs postfix/smtp[6235]: D247E63E761: to=<mail@roger-krebs.de>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.76, delays=0.05/0/0.01/0.7, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 8BAC663E762)
May 13 12:05:42 ucs postfix/qmgr[5991]: D247E63E761: removed
May 13 12:05:43 ucs postfix/lmtp[6239]: 8BAC663E762: to=<mail@roger-krebs.de>, relay=127.0.0.1[127.0.0.1]:2003, delay=0.46, delays=0.01/0/0.19/0.25, dsn=2.1.5, status=sent (250 2.1.5 mail@roger-krebs.de Ok)
May 13 12:05:43 ucs postfix/qmgr[5991]: 8BAC663E762: removed

Header:
Return-Path: <theodor.machnich@googlemail.com>
Received: from ucs.krebs.intranet ([::ffff:127.0.0.1]:45816)
	by ucs (kopano-dagent) with LMTP
	for <mail@roger-krebs.de>; Sat, 13 May 2017 12:05:42 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by ucs.krebs.intranet (Postfix) with ESMTP id 8BAC663E762
	for <mail@roger-krebs.de>; Sat, 13 May 2017 12:05:42 +0200 (CEST)
X-Virus-Scanned: by amavisd-new-2.10.1 (20141025) (Debian) at krebs.intranet
Received: from ucs.krebs.intranet ([127.0.0.1])
	by localhost (ucs.krebs.intranet [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 64D6Zq17o_WI for <mail@roger-krebs.de>;
	Sat, 13 May 2017 12:05:41 +0200 (CEST)
Received: from ucs.krebs.intranet (localhost [127.0.0.1])
	by ucs.krebs.intranet (Postfix) with ESMTP id D247E63E761
	for <mail@roger-krebs.de>; Sat, 13 May 2017 12:05:41 +0200 (CEST)
Delivered-To: <k147535_1-mail@mb-12.1blu.de>
Received: from pop3.1blu.de [178.254.4.110]
	by ucs.krebs.intranet with POP3 (fetchmail-6.3.26)
	for <mail@roger-krebs.de> (single-drop); Sat, 13 May 2017 12:05:41 +0200 (CEST)
Received: from ms-10.1blu.de ([178.254.4.101])
	by mb-12.1blu.de (Dovecot) with LMTP id iRoFBnTaFllUOgAA6PiwCA
	for <k147535_1-mail@mb-12.1blu.de>; Sat, 13 May 2017 12:07:13 +0200
Received: from [209.85.218.43] (helo=mail-oi0-f43.google.com)
	by ms-10.1blu.de with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
	(Exim 4.86_2)
	(envelope-from <theodor.machnich@googlemail.com>)
	id 1d9TxB-0005yf-B9
	for mail@roger-krebs.de; Sat, 13 May 2017 12:07:13 +0200
Received: by mail-oi0-f43.google.com with SMTP id h4so89406609oib.3
        for <mail@roger-krebs.de>; Sat, 13 May 2017 03:07:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=googlemail.com; s=20161025;
        h=mime-version:from:date:message-id:subject:to;
        bh=Eh/HS3DH8vgfoGrFeoHA7u+pV8k7oYKmPbrR7dYTuKI=;
        b=YBqP8ZXHs8waAllYCkMba22S2t8l0+tmcAcjw8H8yUrW33DgbBPjOqS8R/DD7xR+Ay
         Li+r7amkvxeS6vEt5e1CcTzH9wxPY3tJOWmDRUsmehQkYdVE/+1bvGuQp6gaOhZoXucz
         +i2c14iOELImhC8YuPwtuB3OarifFua5KfYQWLpzsREMXDI/bzXdEP/ppVbkkb2G7Nkn
         vj0JHdIAmk/v2+45YxB9fTHH7k3WcXQYqstm8aFGtTc98X9dr9Er4VWBTA5kGGVqZl41
         L/ip2TYBRUMw+UL8CvO4XZ9jr/QcSsEUXg5A7Pi9ZH0A/o70QzNlH9+KLO7VXV/rAMm4
         Tj4w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
        bh=Eh/HS3DH8vgfoGrFeoHA7u+pV8k7oYKmPbrR7dYTuKI=;
        b=Iuk2K1ZR5hxYGxzsoT+KnvIgPCp+qWpeyki/un7mqKQw+Ob9MjdoiWKBPBrRwcF1cR
         bpRDpIeG4sWkXTOWxzL3buvwCBL4GxV6avsN0S3dXfkZ7Ffa8/W7tfu3A7H/4WROTt15
         lSEHfnVcPnEyhPEgIpmim4EJnS0rn9i1hZChZkCVcsFDLJ3M71SqadyP8BbS6aYpnZik
         qlv+pAt2Eb1AW5zop0gVdlMleWRGjVqB/0H7W1BILb1CtieoYggbR1uqydnruRKrsa21
         AKSoF6WJv3rxYmRQGudNV77Xi0hBeq68qKp02an607BNo8szrkaXLLNJJpO/8L56S2tK
         F3Cg==
X-Gm-Message-State: AODbwcBCbEAv6AG0iPxbePBy3cZbCRrtIIt3Y811cF2IeL27+Qj1gwgM
	J/rfg3GTQU0Tt3RqEZZhD+yceuBdVwqd6fM=
X-Received: by 10.202.171.203 with SMTP id u194mr3011030oie.26.1494670032074;
 Sat, 13 May 2017 03:07:12 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.157.43.75 with HTTP; Sat, 13 May 2017 03:07:11 -0700 (PDT)
From: Theodor Machnich <theodor.machnich@googlemail.com>
Date: Sat, 13 May 2017 12:07:11 +0200
Message-ID: <CAGran6=P7VN81_CzaUKR0cBUux8E_zRTi8GH-og3smgwVdpTKA@mail.gmail.com>
Subject: 881234
To: Roger Krebs <mail@roger-krebs.de>
Content-Type: multipart/alternative; boundary="001a113cc7ec517cc0054f64fc9d"
X-Envelope-To: mail@roger-krebs.de

      Spam recongized:

      May 13 12:04:35 ucs fetchmail[3282]: 1 Nachricht für mailtestsystem152 bei pop.gmail.com (5120 Bytes).
May 13 12:04:35 ucs postfix/smtpd[6232]: connect from localhost[127.0.0.1]
May 13 12:04:35 ucs postfix/smtpd[6232]: EB3B763E761: client=localhost[127.0.0.1]
May 13 12:04:36 ucs postfix/cleanup[6234]: EB3B763E761: message-id=<CAGran6kwfa6KHJMd_yNJw+OYo8u=5_b0yHJ2vEMp6fRoeAF9zg@mail.gmail.com>
May 13 12:04:36 ucs fetchmail[3282]: Nachricht mailtestsystem152@gmail-pop.l.google.com:1 von 1 wird gelesen (5120 Bytes) gelöscht
May 13 12:04:36 ucs postfix/qmgr[5991]: EB3B763E761: from=<theodor.machnich@googlemail.com>, size=5467, nrcpt=1 (queue active)
May 13 12:04:36 ucs postfix/smtpd[6232]: disconnect from localhost[127.0.0.1]
May 13 12:04:36 ucs postfix/smtpd[6238]: connect from localhost[127.0.0.1]
May 13 12:04:36 ucs postfix/smtpd[6238]: D4CF463E762: client=localhost[127.0.0.1], orig_queue_id=EB3B763E761, orig_client=localhost[127.0.0.1]
May 13 12:04:36 ucs postfix/cleanup[6234]: D4CF463E762: message-id=<CAGran6kwfa6KHJMd_yNJw+OYo8u=5_b0yHJ2vEMp6fRoeAF9zg@mail.gmail.com>
May 13 12:04:36 ucs postfix/qmgr[5991]: D4CF463E762: from=<theodor.machnich@googlemail.com>, size=6373, nrcpt=1 (queue active)
May 13 12:04:36 ucs postfix/smtpd[6238]: disconnect from localhost[127.0.0.1]
May 13 12:04:36 ucs amavis[5707]: (05707-04) Passed SPAM {RelayedTaggedInternal}, LOCAL [127.0.0.1]:40936 [66.102.1.109] <theodor.machnich@googlemail.com> -> <mailtestsystem152@gmail.com>, Queue-ID: EB3B763E761, Message-ID: <CAGran6kwfa6KHJMd_yNJw+OYo8u=5_b0yHJ2vEMp6fRoeAF9zg@mail.gmail.com>, mail_id: fCk8bwGNR-2a, Hits: 999.202, size: 5464, queued_as: D4CF463E762, 849 ms
May 13 12:04:36 ucs postfix/smtp[6235]: EB3B763E761: to=<mailtestsystem152@gmail.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.96, delays=0.07/0.04/0.01/0.85, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as D4CF463E762)
May 13 12:04:36 ucs postfix/qmgr[5991]: EB3B763E761: removed
May 13 12:04:37 ucs postfix/lmtp[6239]: D4CF463E762: to=<mailtestsystem152@gmail.com>, relay=127.0.0.1[127.0.0.1]:2003, delay=0.55, delays=0.01/0.02/0.17/0.34, dsn=2.1.5, status=sent (250 2.1.5 mailtestsystem152@gmail.com Ok)
May 13 12:04:37 ucs postfix/qmgr[5991]: D4CF463E762: removed

Header:
Return-Path: <theodor.machnich@googlemail.com>
Received: from ucs.krebs.intranet ([::ffff:127.0.0.1]:45618)
	by ucs (kopano-dagent) with LMTP
	for <mailtestsystem152@gmail.com>; Sat, 13 May 2017 12:04:37 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by ucs.krebs.intranet (Postfix) with ESMTP id D4CF463E762
	for <mailtestsystem152@gmail.com>; Sat, 13 May 2017 12:04:36 +0200 (CEST)
X-Virus-Scanned: by amavisd-new-2.10.1 (20141025) (Debian) at krebs.intranet
X-Spam-Flag: YES
X-Spam-Score: 999.202
X-Spam-Level: ****************************************************************
X-Spam-Status: Yes, score=999.202 tagged_above=-1000 required=5
	tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
	FREEMAIL_FROM=0.001, GTUBE=1000, HTML_MESSAGE=0.001,
	RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, TVD_SPACE_RATIO=0.001]
	autolearn=no autolearn_force=no
Received: from ucs.krebs.intranet ([127.0.0.1])
	by localhost (ucs.krebs.intranet [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id fCk8bwGNR-2a for <mailtestsystem152@gmail.com>;
	Sat, 13 May 2017 12:04:36 +0200 (CEST)
Received: from ucs.krebs.intranet (localhost [127.0.0.1])
	by ucs.krebs.intranet (Postfix) with ESMTP id EB3B763E761
	for <mailtestsystem152@gmail.com>; Sat, 13 May 2017 12:04:35 +0200 (CEST)
Delivered-To: mailtestsystem152@gmail.com
Received: from gmail-pop.l.google.com [66.102.1.109]
	by ucs.krebs.intranet with POP3 (fetchmail-6.3.26)
	for <mailtestsystem152@gmail.com> (single-drop); Sat, 13 May 2017 12:04:35 +0200 (CEST)
Received: by 10.140.43.135 with SMTP id e7csp676864qga;
        Sat, 13 May 2017 03:05:36 -0700 (PDT)
X-Received: by 10.157.8.3 with SMTP id 3mr3759518oty.69.1494669936764;
        Sat, 13 May 2017 03:05:36 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1494669936; cv=none;
        d=google.com; s=arc-20160816;
        b=O65OQoiVIeHEx0MmmtC3VF4g2rrZR2yHhP5cjRlhzDSOHOeLylzqlTanRyQz72QMhI
         BNrm6TxnEs0eQwBncUgxxZeWfaWfGRKGTUNVOYHVgmVVk/YJ0kxIAvMkquwE4A4aBjgJ
         PU4OC97vTwXcaIei2qH9oGv4rl5m1NJnRt31AERifAjFFS8EXQt2mA6h4h40HGUYECTv
         ksGGtIBe224/QuEcwEieOGzX0qsJbHMwJm7KxVDK+BUfeMpLaav8IZp9Svs62/9P4a+v
         i+cPki8k0v+wuGGPIfONA7LunFLUpORALbuxMl5Dl4VPNqZY81y0Km51y8MHHV4ZKQ/w
         9DZg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:subject:message-id:date:from:mime-version:dkim-signature
         :arc-authentication-results;
        bh=ayeoX3kQirIJBCO6zkA7N7IIbixW0byLogMRpkrbmJc=;
        b=TlRmdr6ZQPPwIfcLuwd67EQZhpnjQF6Iv5NnS9OAZjMt+uGeoMVbUwe+uF6OoTD5AH
         uZTvlZ0Kjn0JwzkBm4MMb1aTtzDrdC/dEIh20K/fvKuQkC+vLyy72SICUYGCJjglPBv4
         ZHvcJA9fNFul566n/UGtJDlQQGn00+MvUfC1U1TlOhWwJ1GLAJlFV+ZBp3k1j+reLM2d
         7KMclWF5vlTzZFL5ofZ1PXO8LOsbhQH3vYUE8ZiIRmvOScACP1f6Q5a6LtfFPTerJgfx
         JVnvRGvHj2bX8mh6AjQ+cU1ozg1RX0TFpeT157xFQFFOJ5A+BIZ7HICgjvro+ywmtWvj
         1dSA==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@googlemail.com;
       spf=pass (google.com: domain of theodor.machnich@googlemail.com designates 2607:f8b0:4003:c06::236 as permitted sender) smtp.mailfrom=theodor.machnich@googlemail.com;
       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=googlemail.com
Received: from mail-oi0-x236.google.com (mail-oi0-x236.google.com. [2607:f8b0:4003:c06::236])
        by mx.google.com with ESMTPS id d77si473795oig.223.2017.05.13.03.05.36
        for <mailtestsystem152@gmail.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Sat, 13 May 2017 03:05:36 -0700 (PDT)
Received-SPF: pass (google.com: domain of theodor.machnich@googlemail.com designates 2607:f8b0:4003:c06::236 as permitted sender) client-ip=2607:f8b0:4003:c06::236;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@googlemail.com;
       spf=pass (google.com: domain of theodor.machnich@googlemail.com designates 2607:f8b0:4003:c06::236 as permitted sender) smtp.mailfrom=theodor.machnich@googlemail.com;
       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=googlemail.com
Received: by mail-oi0-x236.google.com with SMTP id h4so44636609oib.3
        for <mailtestsystem152@gmail.com>; Sat, 13 May 2017 03:05:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=googlemail.com; s=20161025;
        h=mime-version:from:date:message-id:subject:to;
        bh=ayeoX3kQirIJBCO6zkA7N7IIbixW0byLogMRpkrbmJc=;
        b=VjrKiyXBKfEqCgrHcrOhvi6Q4o87shC4FFEtwtHe73UQOnyNC5/z0leeYDA3LEVm58
         ZNS+K5kEAIu0FE9J+/fWBd3mxXlUMGJgRPw+Zk8ymmR03M8QdW8x+B1ZVJU7WuFg2jWx
         zfiQT13WhoIiLx61kp8SiCdiFsrna7qA3BryjyVVne0wc5qQdVz1IqaVuKd1Wz4xvK9X
         qnkPteYVeMahwMrb0FlDqrnahn5MXXMGHGqa2J5cDHLxwpe/w3H9c/Qo6ifuyaekHNVx
         HynVvfem8upfWFoNHHZbagbL6xENWzJ1sG3TUHdBGc2lBDqghd3FNWHENH3bPjq/0eUK
         H4Gw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
        bh=ayeoX3kQirIJBCO6zkA7N7IIbixW0byLogMRpkrbmJc=;
        b=B2dQdZW76IIa//Vk5wF+nMdIhFFzhIr/R6O+ExQmcl0uWwy6nRRviV+vy1MOGdpLVR
         LqdmgDIlZe3fVmRkrwHmT/WMFSZXmo9jGmuJRDhooCSN+nps+Ya2GDCOy0oIYjaCrF7M
         nWbQtxjsdyXgHzf20HWQgZtWLVG6lsfsWQyffVfzqJKVSLzlHa0aAp8zD4sEQeDecY9n
         PbBbKbM0R4NrClg44IxRZ/3tusvNQWtcuXCYDIAvp8HrBMKqlqZdMRBGhWQ4LIOwcsGh
         e3WgMUJBRI6bgV8dYpRgJ/9DH9lh4U/ujvVhgTNTskFExh6F6L2EyuBi2f/LJhJUDFi0
         HK5g==
X-Gm-Message-State: AODbwcBBJdTH3/ad7ALB6ReAcHorIMEPageCWp4WTZMds+UFUFhLrLWR
	1CzVlrecyfUQIZAidql2zd6dzHSImp+Bm40=
X-Received: by 10.157.56.151 with SMTP id p23mr4313428otc.239.1494669936403;
 Sat, 13 May 2017 03:05:36 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.157.43.75 with HTTP; Sat, 13 May 2017 03:05:36 -0700 (PDT)
From: Theodor Machnich <theodor.machnich@googlemail.com>
Date: Sat, 13 May 2017 12:05:36 +0200
Message-ID: <CAGran6kwfa6KHJMd_yNJw+OYo8u=5_b0yHJ2vEMp6fRoeAF9zg@mail.gmail.com>
Subject: ***SPAM***777723111
To: gmailsend <mailtestsystem152@gmail.com>
Content-Type: multipart/alternative; boundary="001a11c044329dab42054f64f6f7"

      Account for Mailadress changed in fetchmail:

      May 13 12:42:38 ucs fetchmail[6973]: 1 Nachricht für krebs.ro bei pop.gmail.com (6170 Bytes).
May 13 12:42:39 ucs postfix/smtpd[6975]: connect from localhost[127.0.0.1]
May 13 12:42:39 ucs postfix/smtpd[6975]: 2E87963E761: client=localhost[127.0.0.1]
May 13 12:42:39 ucs postfix/cleanup[6977]: 2E87963E761: message-id=<CAGran6nmapfMrLPQyGyoUHs_X_aH8q1ihwLyzo0bc01Y1L7DaA@mail.gmail.com>
May 13 12:42:39 ucs postfix/qmgr[5991]: 2E87963E761: from=<theodor.machnich@googlemail.com>, size=6517, nrcpt=1 (queue active)
May 13 12:42:39 ucs fetchmail[6973]: Nachricht krebs.ro@gmail-pop.l.google.com:1 von 1 wird gelesen (6170 Bytes) nicht gelöscht
May 13 12:42:39 ucs postfix/smtpd[6975]: disconnect from localhost[127.0.0.1]
May 13 12:42:40 ucs postfix/smtpd[6981]: connect from localhost[127.0.0.1]
May 13 12:42:40 ucs postfix/smtpd[6981]: 0A6DB63E762: client=localhost[127.0.0.1], orig_queue_id=2E87963E761, orig_client=localhost[127.0.0.1]
May 13 12:42:40 ucs postfix/cleanup[6977]: 0A6DB63E762: message-id=<CAGran6nmapfMrLPQyGyoUHs_X_aH8q1ihwLyzo0bc01Y1L7DaA@mail.gmail.com>
May 13 12:42:40 ucs postfix/smtpd[6981]: disconnect from localhost[127.0.0.1]
May 13 12:42:40 ucs postfix/qmgr[5991]: 0A6DB63E762: from=<theodor.machnich@googlemail.com>, size=7531, nrcpt=1 (queue active)
May 13 12:42:40 ucs amavis[5707]: (05707-08) Passed SPAM {RelayedTaggedInternal}, LOCAL [127.0.0.1]:46260 [64.233.166.109] <theodor.machnich@googlemail.com> -> <mailtestsystem15@gmail.com>, Queue-ID: 2E87963E761, Message-ID: <CAGran6nmapfMrLPQyGyoUHs_X_aH8q1ihwLyzo0bc01Y1L7DaA@mail.gmail.com>, mail_id: zhATLjOUC6s6, Hits: 1002.004, size: 6514, queued_as: 0A6DB63E762, 793 ms
May 13 12:42:40 ucs postfix/smtp[6978]: 2E87963E761: to=<mailtestsystem15@gmail.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.91, delays=0.06/0.04/0.01/0.8, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 0A6DB63E762)
May 13 12:42:40 ucs postfix/qmgr[5991]: 2E87963E761: removed
May 13 12:42:40 ucs postfix/lmtp[6982]: 0A6DB63E762: to=<mailtestsystem15@gmail.com>, relay=127.0.0.1[127.0.0.1]:2003, delay=0.47, delays=0.01/0.01/0.17/0.27, dsn=2.1.5, status=sent (250 2.1.5 mailtestsystem15@gmail.com Ok)

Header:
Return-Path: <theodor.machnich@googlemail.com>
Received: from ucs.krebs.intranet ([::ffff:127.0.0.1]:50938)
	by ucs (kopano-dagent) with LMTP
	for <mailtestsystem15@gmail.com>; Sat, 13 May 2017 12:42:40 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by ucs.krebs.intranet (Postfix) with ESMTP id 0A6DB63E762
	for <mailtestsystem15@gmail.com>; Sat, 13 May 2017 12:42:40 +0200 (CEST)
X-Virus-Scanned: by amavisd-new-2.10.1 (20141025) (Debian) at krebs.intranet
X-Spam-Flag: YES
X-Spam-Score: 1002.004
X-Spam-Level: ****************************************************************
X-Spam-Status: Yes, score=1002.004 tagged_above=-1000 required=5
	tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
	FREEMAIL_FROM=0.001, GTUBE=1000, HTML_IMAGE_ONLY_12=1.629,
	HTML_MESSAGE=0.001, HTML_NONELEMENT_30_40=0.001,
	HTML_OBFUSCATE_10_20=1.162, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001,
	TVD_SPACE_RATIO=0.001, T_REMOTE_IMAGE=0.01]
	autolearn=no autolearn_force=no
Received: from ucs.krebs.intranet ([127.0.0.1])
	by localhost (ucs.krebs.intranet [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id zhATLjOUC6s6 for <mailtestsystem15@gmail.com>;
	Sat, 13 May 2017 12:42:39 +0200 (CEST)
Received: from ucs.krebs.intranet (localhost [127.0.0.1])
	by ucs.krebs.intranet (Postfix) with ESMTP id 2E87963E761
	for <mailtestsystem15@gmail.com>; Sat, 13 May 2017 12:42:39 +0200 (CEST)
Delivered-To: krebs.ro@gmail.com
Received: from gmail-pop.l.google.com [64.233.166.109]
	by ucs.krebs.intranet with POP3 (fetchmail-6.3.26)
	for <mailtestsystem15@gmail.com> (single-drop); Sat, 13 May 2017 12:42:39 +0200 (CEST)
Received: by 10.100.144.215 with SMTP id b23csp694167pje;
        Sat, 13 May 2017 03:43:58 -0700 (PDT)
X-Received: by 10.157.6.130 with SMTP id 2mr4593477otx.130.1494672238432;
        Sat, 13 May 2017 03:43:58 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1494672238; cv=none;
        d=google.com; s=arc-20160816;
        b=pUdaTNfaXk7dZOrw0WogP4ZyYP29ssxZZOZq2n5uMeTKev6mNq1KY4GSUy1oqvGrgE
         noMIL8PLAbZ4ujUQYRZUTU34b6Z3gAw7Roi3CJHSaSeqrW+KoTCQvAI7dVm7MHUVetpU
         lquGA1ibE1ztfF5ycyZPAjkU3TcUSGQodRNZrUrnGs3A3KjzJWvM2IPnt0/J4r93uDpV
         ROc3fN8oRLiMNtrprU6Ad6lnxWi8riMwRwgrocCHVmvSTRK8Y9vp4sq34xHDT/Vh8IQy
         cDZQ9fYVb8QscbevhhbboM/zbHumxyw65vXNZlD67NA25+M1AkzafqXe6QOWM8pvRUo4
         ObnQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:subject:message-id:date:from:mime-version:dkim-signature
         :arc-authentication-results;
        bh=15v7lh2HbYoblnCPpbPR2kJ1c/Vt5OW1MwNix/KhFKo=;
        b=YlWrDA2VRbiCvNUVDPi3oy9cDKwiLLAC/hCxIISgC3iJHBZRaiff5Pa0/zanTwNsQR
         T+6AZVjtpsW1hnflb9wQr+N60cEuPDZRVZMZXy4BDiT5iqjdpBoXyZFxdjBDvc23crAf
         cM2WHf/ueLTcbxjZHd504qik9xZ19D/Or2cWY7TEGH9NcFvGJhQuV0PCaetSPyNfWzbg
         7Qqvq0EdH76XYTjoZWRBYmn/AKVwR7H9cC0iu57P8Amc2lMcbks3kdQ3HS3Uhz2xjOab
         gou3UrE1SWDH38GFWReFNqLTOKUCVH6FdVGH72Fz3rELfpwEFbMggd+8J8F6bgxU6tFV
         ep6Q==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@googlemail.com;
       spf=pass (google.com: domain of theodor.machnich@googlemail.com designates 2607:f8b0:4003:c06::22b as permitted sender) smtp.mailfrom=theodor.machnich@googlemail.com;
       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=googlemail.com
Received: from mail-oi0-x22b.google.com (mail-oi0-x22b.google.com. [2607:f8b0:4003:c06::22b])
        by mx.google.com with ESMTPS id i54si316166ote.14.2017.05.13.03.43.58
        for <krebs.ro@gmail.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Sat, 13 May 2017 03:43:58 -0700 (PDT)
Received-SPF: pass (google.com: domain of theodor.machnich@googlemail.com designates 2607:f8b0:4003:c06::22b as permitted sender) client-ip=2607:f8b0:4003:c06::22b;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@googlemail.com;
       spf=pass (google.com: domain of theodor.machnich@googlemail.com designates 2607:f8b0:4003:c06::22b as permitted sender) smtp.mailfrom=theodor.machnich@googlemail.com;
       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=googlemail.com
Received: by mail-oi0-x22b.google.com with SMTP id b204so39311572oii.1
        for <krebs.ro@gmail.com>; Sat, 13 May 2017 03:43:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=googlemail.com; s=20161025;
        h=mime-version:from:date:message-id:subject:to;
        bh=15v7lh2HbYoblnCPpbPR2kJ1c/Vt5OW1MwNix/KhFKo=;
        b=kuuxK/8vIMuB4T1wZjAS8QALRFhd6XCDiEpOFrVYHUAV4rAaFKtPRBAuU+hJk4Gd/z
         8mE5VaFMceAz6o0i9viL2hdRs30RNZjXmLN4v2sUeQCg9uN7Yz+gGoduVEhFDQjroRuk
         8W69+z0XUdaAJtoGD6OCK+mS1JchVj1mzOZgW9TUMiaOrp7MGgQEh8imlVRBwKpdw7q/
         HvlLWJ1++4zkmtajmxhQLW7fzzHQO3UrJnMVhSLEsfhXvJpXy4QGC8W/gq4oRtX2PKE4
         lbpAg+d9BtXhfCI9NfArThb69yYb4DUEK7DFwpUwyeQDd6uF3NP47k7wk7Nnb0Ugeqbg
         6icw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
        bh=15v7lh2HbYoblnCPpbPR2kJ1c/Vt5OW1MwNix/KhFKo=;
        b=BSAmV+0E6K7ckxAGBpumnsmCRdgNFpzzyrXgZDQoDtOBBzaD1kjzC32+Sx08rhUzOv
         Iq5gPTbTb+CMPWSX7HyMRfLFngI/h/BPoEeEK9iJQcgPO+goQIMUSWc3xUdc2lxpUMef
         a/A7BLzjmTkISTuU1mJ8mO9pY4+OBShUDzFkU+hgPV3xNdhq3tCSfZe/8sWiJdh1QHvi
         QoMsCa21FctZwCAurGqQvS1ZDt6+3zAGG/nN/r5rgQfmxBw4Iw0xctF111GkiXM6+CQv
         fPQUeePJ6AWrEBS6JvdSZ5ryym68Bx9MrdJwEbm1R/1dbJRohZQ0ylue9kFh3cmxHXx5
         E4iQ==
X-Gm-Message-State: AODbwcC7vrH8abNboABiuWETA4a3UiRQ/yxXRcMAzEdUT1TKCpoH6EcV
	ee4DK2ku3ZBPe7IcQ8vNmft+locjbx+1XO8=
X-Received: by 10.202.51.9 with SMTP id z9mr3394751oiz.25.1494672238115; Sat,
 13 May 2017 03:43:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.157.43.75 with HTTP; Sat, 13 May 2017 03:43:57 -0700 (PDT)
From: Theodor Machnich <theodor.machnich@googlemail.com>
Date: Sat, 13 May 2017 12:43:57 +0200
Message-ID: <CAGran6nmapfMrLPQyGyoUHs_X_aH8q1ihwLyzo0bc01Y1L7DaA@mail.gmail.com>
Subject: ***SPAM***632946
To: Roger Krebs <krebs.ro@gmail.com>
Content-Type: multipart/alternative; boundary="001a113cf4decf0430054f657ffc"```

Any ideas....best Theo
      1 Reply Last reply Reply Quote 1
      • First post
        Last post