Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
31
Installation and Upgrades / No ssl access https://localhost ~ no access
« on: December 02, 2009, 12:08:00 am »
I'm working on my test machine using Ubuntu 910 and ebox 1.35. The intention is to move this machine to production once 9.10 version is stable. The server also hosts web site http://mervyngroves.ath.cx. This works fine and ebox works but somehow I have lost access to the web interface. https://localhost does not connect. I checked ports and found that 445 was listening not 443 but https://localhost:445 does not give access either.
Where should I look to try and discover where port allocations have become mis-aligned?
Where should I look to try and discover where port allocations have become mis-aligned?
32
Installation and Upgrades / Re: P3Scan aborting......
« on: September 27, 2009, 01:12:18 pm »
Thank you... mail flowing again with space check disabled.
33
Installation and Upgrades / P3Scan aborting......
« on: September 25, 2009, 02:58:40 pm »
This was happening some tome ago but installation of 1.2 seemed to clear the problem. Now it's back.
Error message when trying to read mail.
Receiving' reported error (0x800CCC0F) : 'The connection to the server was interrupted. If this problem continues, contact your server administrator or Internet service provider (ISP). The server responded: +OK P3Scan'ing...'
Grep p3scan /var/log/syslog:
Sep 25 08:41:04 ebox12 p3scan[13614]: Not enough space! Available space: 55272
Sep 25 08:41:04 ebox12 p3scan[13614]: Session done (Critial abort). Mails: 1 Bytes: 0
df -k:
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/sda1 236271424 77508264 146855784 35% /
varrun 1032816 264 1032552 1% /var/run
varlock 1032816 0 1032816 0% /var/lock
udev 1032816 28 1032788 1% /dev
devshm 1032816 0 1032816 0% /dev/shm
Plenty of space available!
Disable space checking in p3scan.conf:
bytesfree=0
Restart P3scan and the change is overwritten.
bytesfree= 1000000
Any idea where to turn to next?
Error message when trying to read mail.
Receiving' reported error (0x800CCC0F) : 'The connection to the server was interrupted. If this problem continues, contact your server administrator or Internet service provider (ISP). The server responded: +OK P3Scan'ing...'
Grep p3scan /var/log/syslog:
Sep 25 08:41:04 ebox12 p3scan[13614]: Not enough space! Available space: 55272
Sep 25 08:41:04 ebox12 p3scan[13614]: Session done (Critial abort). Mails: 1 Bytes: 0
df -k:
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/sda1 236271424 77508264 146855784 35% /
varrun 1032816 264 1032552 1% /var/run
varlock 1032816 0 1032816 0% /var/lock
udev 1032816 28 1032788 1% /dev
devshm 1032816 0 1032816 0% /dev/shm
Plenty of space available!
Disable space checking in p3scan.conf:
bytesfree=0
Restart P3scan and the change is overwritten.
bytesfree= 1000000
Any idea where to turn to next?
34
Spanish / Re: Actualizacion de Clamav
« on: September 15, 2009, 11:33:52 pm »
It's not just the clamav warning at boot up but also the report in the antivirus panel that the antivirus database has not been updated since the initial installation. Both the anti-virus and anti-spam protection are essential elements in many network installations.
35
Installation and Upgrades / Mail Filter ~ antispam
« on: August 20, 2009, 07:45:27 pm »
Recently I've been getting mails marked spam because of FORGED_MUA_OUTLOOK scoring over 4.0. I know this was an issue with Spamassassin some time ago but as far as I am aware the bug was resolved. (http://wiki.apache.org/spamassassin/FORGED_MUA_OUTLOOK).
Just in case I added score FORGED_MAIL_OUTLOOK 0 to /etc/spamassassin/local.cf and preV302 as well. But no success an email sent from Outlook Express will without fail be blocked because of FORGED_MUA_OUTLOOK.
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
In general I'm disappointed with the performance of Spamassassin. Some of the ISP's perform much better and I guess they use Spamassassin too?
Just in case I added score FORGED_MAIL_OUTLOOK 0 to /etc/spamassassin/local.cf and preV302 as well. But no success an email sent from Outlook Express will without fail be blocked because of FORGED_MUA_OUTLOOK.
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
In general I'm disappointed with the performance of Spamassassin. Some of the ISP's perform much better and I guess they use Spamassassin too?
36
Installation and Upgrades / Re: Transparent POP Proxy
« on: May 05, 2009, 02:54:45 pm »
Everything worked fine for a while but issue re-appeared again this morning. Re-booted but no change. Eventually had to disable P3Scan to allow mail access.
May 5 06:40:56 ebox3 p3scan[7567]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 06:40:56 ebox3 p3scan[7567]: Exiting now...
May 5 06:50:12 ebox3 p3scan[8051]: USER 'user2@eboxserverxx.com'
May 5 06:50:13 ebox3 p3scan[8051]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 06:50:13 ebox3 p3scan[8051]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 06:50:13 ebox3 p3scan[8051]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 06:50:13 ebox3 p3scan[8051]: Exiting now...
May 5 06:52:26 ebox3 p3scan[9080]: Connection from 192.xxx.xxx.234:3116
May 5 06:52:26 ebox3 p3scan[9080]: Real-server adress is .xxx.xxx.82.11:110
May 5 06:52:26 ebox3 p3scan[9080]: USER 'user3@eboxserverxx.com'
May 5 06:52:26 ebox3 p3scan[9080]: Session done (Clean Exit). Mails: 0 Bytes: 0
May 5 06:52:26 ebox3 p3scan[9081]: Connection from 192.xxx.xxx.234:3117
May 5 06:52:26 ebox3 p3scan[9081]: Real-server adress is .xxx.xxx.169.66:110
May 5 06:52:27 ebox3 p3scan[9081]: USER 'user1@eboxserverxx.com'
May 5 06:52:28 ebox3 p3scan[9081]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 06:52:28 ebox3 p3scan[9081]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 06:52:28 ebox3 p3scan[9081]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 06:52:28 ebox3 p3scan[9081]: Exiting now...
May 5 06:52:28 ebox3 p3scan[9088]: Connection from 192.xxx.xxx.234:3119
May 5 06:52:28 ebox3 p3scan[9088]: Real-server adress is .xxx.xxx.169.66:110
May 5 06:52:29 ebox3 p3scan[9088]: USER 'user2@eboxserverxx.com'
May 5 06:52:30 ebox3 p3scan[9088]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 06:52:30 ebox3 p3scan[9088]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 06:52:30 ebox3 p3scan[9088]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 06:52:30 ebox3 p3scan[9088]: Exiting now...
May 5 06:53:43 ebox3 p3scan[9649]: signalled, doing cleanup
May 5 06:53:43 ebox3 p3scan[9649]: Unable to remove /var/run/p3scan/p3scan.pid
May 5 06:53:43 ebox3 p3scan[9649]: P3Scan terminates now
May 5 06:55:17 ebox3 p3scan[9682]: P3Scan Version 2.1
May 5 06:55:17 ebox3 p3scan[9682]: Selected scannertype: basic (Basic file invocation scanner)
May 5 06:55:17 ebox3 p3scan[9682]: Listen now on 0.0.0.0:8110
May 5 07:00:17 ebox3 p3scan[10634]: Connection from 192.xxx.xxx.234:3178
May 5 07:00:17 ebox3 p3scan[10634]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:00:17 ebox3 p3scan[10634]: Cannot connect to real-server
May 5 07:00:17 ebox3 p3scan[10634]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:00:17 ebox3 p3scan[10635]: Connection from 192.xxx.xxx.234:3179
May 5 07:00:17 ebox3 p3scan[10635]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:00:17 ebox3 p3scan[10635]: Cannot connect to real-server
May 5 07:00:17 ebox3 p3scan[10635]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:00:17 ebox3 p3scan[10636]: Connection from 192.xxx.xxx.234:3180
May 5 07:00:17 ebox3 p3scan[10636]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:00:17 ebox3 p3scan[10636]: Cannot connect to real-server
May 5 07:00:17 ebox3 p3scan[10636]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:05:18 ebox3 p3scan[10857]: Connection from 192.xxx.xxx.234:3225
May 5 07:05:18 ebox3 p3scan[10857]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:05:18 ebox3 p3scan[10857]: Cannot connect to real-server
May 5 07:05:18 ebox3 p3scan[10857]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:05:18 ebox3 p3scan[10858]: Connection from 192.xxx.xxx.234:3226
May 5 07:05:18 ebox3 p3scan[10858]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:05:18 ebox3 p3scan[10858]: Cannot connect to real-server
May 5 07:05:18 ebox3 p3scan[10858]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:05:18 ebox3 p3scan[10859]: Connection from 192.xxx.xxx.234:3227
May 5 07:05:18 ebox3 p3scan[10859]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:05:18 ebox3 p3scan[10859]: Cannot connect to real-server
May 5 07:05:18 ebox3 p3scan[10859]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:10:18 ebox3 p3scan[10892]: Connection from 192.xxx.xxx.234:3232
May 5 07:10:18 ebox3 p3scan[10892]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:10:18 ebox3 p3scan[10892]: Cannot connect to real-server
May 5 07:10:18 ebox3 p3scan[10892]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:10:18 ebox3 p3scan[10893]: Connection from 192.xxx.xxx.234:3233
May 5 07:10:18 ebox3 p3scan[10893]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:10:18 ebox3 p3scan[10893]: Cannot connect to real-server
May 5 07:10:18 ebox3 p3scan[10893]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:10:18 ebox3 p3scan[10894]: Connection from 192.xxx.xxx.234:3234
May 5 07:10:18 ebox3 p3scan[10894]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:10:18 ebox3 p3scan[10894]: Cannot connect to real-server
May 5 07:10:18 ebox3 p3scan[10894]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:15:18 ebox3 p3scan[10918]: Connection from 192.xxx.xxx.234:3239
May 5 07:15:18 ebox3 p3scan[10918]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:15:18 ebox3 p3scan[10918]: Cannot connect to real-server
May 5 07:15:18 ebox3 p3scan[10918]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:15:18 ebox3 p3scan[10919]: Connection from 192.xxx.xxx.234:3240
May 5 07:15:18 ebox3 p3scan[10919]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:15:18 ebox3 p3scan[10919]: Cannot connect to real-server
May 5 07:15:18 ebox3 p3scan[10919]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:15:18 ebox3 p3scan[10920]: Connection from 192.xxx.xxx.234:3241
May 5 07:15:18 ebox3 p3scan[10920]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:15:18 ebox3 p3scan[10920]: Cannot connect to real-server
May 5 07:15:18 ebox3 p3scan[10920]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:16:51 ebox3 p3scan[10928]: Connection from 192.xxx.xxx.234:3244
May 5 07:16:51 ebox3 p3scan[10928]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:16:51 ebox3 p3scan[10928]: Cannot connect to real-server
May 5 07:16:51 ebox3 p3scan[10928]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:16:51 ebox3 p3scan[10929]: Connection from 192.xxx.xxx.234:3245
May 5 07:16:51 ebox3 p3scan[10929]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:16:51 ebox3 p3scan[10929]: Cannot connect to real-server
May 5 07:16:51 ebox3 p3scan[10929]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:16:51 ebox3 p3scan[10930]: Connection from 192.xxx.xxx.234:3246
May 5 07:16:51 ebox3 p3scan[10930]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:16:51 ebox3 p3scan[10930]: Cannot connect to real-server
May 5 07:16:51 ebox3 p3scan[10930]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:20:48 ebox3 p3scan[9648]: P3Scan Version 2.1
May 5 07:20:48 ebox3 p3scan[9648]: Selected scannertype: basic (Basic file invocation scanner)
May 5 07:20:48 ebox3 p3scan[9648]: Listen now on 0.0.0.0:8110
May 5 07:32:44 ebox3 p3scan[10435]: Connection from 192.xxx.xxx.234:1123
May 5 07:32:44 ebox3 p3scan[10435]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:32:44 ebox3 p3scan[10435]: USER 'user3@eboxserverxx.com'
May 5 07:32:44 ebox3 p3scan[10435]: Session done (Clean Exit). Mails: 0 Bytes: 0
May 5 07:32:45 ebox3 p3scan[10436]: Connection from 192.xxx.xxx.234:1124
May 5 07:32:45 ebox3 p3scan[10436]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:32:45 ebox3 p3scan[10436]: USER 'user1@eboxserverxx.com'
May 5 07:32:53 ebox3 p3scan[10436]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 07:32:53 ebox3 p3scan[10436]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 07:32:53 ebox3 p3scan[10436]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 07:32:53 ebox3 p3scan[10436]: Exiting now...
May 5 07:32:54 ebox3 p3scan[10444]: Connection from 192.xxx.xxx.234:1125
May 5 07:32:54 ebox3 p3scan[10444]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:32:55 ebox3 p3scan[10444]: USER 'user2@eboxserverxx.com'
May 5 07:32:59 ebox3 p3scan[10444]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 07:32:59 ebox3 p3scan[10444]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 07:32:59 ebox3 p3scan[10444]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 07:32:59 ebox3 p3scan[10444]: Exiting now...
May 5 07:38:00 ebox3 p3scan[10473]: Connection from 192.xxx.xxx.234:1149
May 5 07:38:00 ebox3 p3scan[10473]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:38:00 ebox3 p3scan[10473]: USER 'user3@eboxserverxx.com'
May 5 07:38:00 ebox3 p3scan[10473]: Session done (Clean Exit). Mails: 0 Bytes: 0
May 5 07:38:00 ebox3 p3scan[10474]: Connection from 192.xxx.xxx.234:1150
May 5 07:38:00 ebox3 p3scan[10474]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:38:00 ebox3 p3scan[10474]: USER 'user1@eboxserverxx.com'
May 5 07:38:19 ebox3 p3scan[10474]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 07:38:19 ebox3 p3scan[10474]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 07:38:19 ebox3 p3scan[10474]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 07:38:19 ebox3 p3scan[10474]: Exiting now...
May 5 07:38:21 ebox3 p3scan[10483]: Connection from 192.xxx.xxx.234:1152
May 5 07:38:21 ebox3 p3scan[10483]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:38:21 ebox3 p3scan[10483]: USER 'user2@eboxserverxx.com'
May 5 07:38:33 ebox3 p3scan[10483]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 07:38:33 ebox3 p3scan[10483]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 07:38:33 ebox3 p3scan[10483]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 07:38:33 ebox3 p3scan[10483]: Exiting now...
May 5 07:39:48 ebox3 p3scan[10506]: Connection from 192.xxx.xxx.234:1195
May 5 07:39:48 ebox3 p3scan[10506]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:39:48 ebox3 p3scan[10506]: USER 'user3@eboxserverxx.com'
May 5 07:39:49 ebox3 p3scan[10506]: Session done (Clean Exit). Mails: 0 Bytes: 0
May 5 07:39:49 ebox3 p3scan[10507]: Connection from 192.xxx.xxx.234:1196
May 5 07:39:49 ebox3 p3scan[10507]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:39:49 ebox3 p3scan[10507]: USER 'user1@eboxserverxx.com'
May 5 07:39:52 ebox3 p3scan[10507]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 07:39:52 ebox3 p3scan[10507]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 07:39:52 ebox3 p3scan[10507]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 07:39:52 ebox3 p3scan[10507]: Exiting now...
May 5 07:39:52 ebox3 p3scan[10515]: Connection from 192.xxx.xxx.234:1197
May 5 07:39:52 ebox3 p3scan[10515]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:39:52 ebox3 p3scan[10515]: USER 'user2@eboxserverxx.com'
May 5 07:39:53 ebox3 p3scan[10515]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 07:39:53 ebox3 p3scan[10515]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 07:39:53 ebox3 p3scan[10515]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 07:39:53 ebox3 p3scan[10515]: Exiting now...
May 5 07:43:15 ebox3 p3scan[9649]: signalled, doing cleanup
May 5 07:43:15 ebox3 p3scan[9649]: Unable to remove /var/run/p3scan/p3scan.pid
May 5 07:43:15 ebox3 p3scan[9649]: P3Scan terminates now
May 5 06:40:56 ebox3 p3scan[7567]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 06:40:56 ebox3 p3scan[7567]: Exiting now...
May 5 06:50:12 ebox3 p3scan[8051]: USER 'user2@eboxserverxx.com'
May 5 06:50:13 ebox3 p3scan[8051]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 06:50:13 ebox3 p3scan[8051]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 06:50:13 ebox3 p3scan[8051]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 06:50:13 ebox3 p3scan[8051]: Exiting now...
May 5 06:52:26 ebox3 p3scan[9080]: Connection from 192.xxx.xxx.234:3116
May 5 06:52:26 ebox3 p3scan[9080]: Real-server adress is .xxx.xxx.82.11:110
May 5 06:52:26 ebox3 p3scan[9080]: USER 'user3@eboxserverxx.com'
May 5 06:52:26 ebox3 p3scan[9080]: Session done (Clean Exit). Mails: 0 Bytes: 0
May 5 06:52:26 ebox3 p3scan[9081]: Connection from 192.xxx.xxx.234:3117
May 5 06:52:26 ebox3 p3scan[9081]: Real-server adress is .xxx.xxx.169.66:110
May 5 06:52:27 ebox3 p3scan[9081]: USER 'user1@eboxserverxx.com'
May 5 06:52:28 ebox3 p3scan[9081]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 06:52:28 ebox3 p3scan[9081]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 06:52:28 ebox3 p3scan[9081]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 06:52:28 ebox3 p3scan[9081]: Exiting now...
May 5 06:52:28 ebox3 p3scan[9088]: Connection from 192.xxx.xxx.234:3119
May 5 06:52:28 ebox3 p3scan[9088]: Real-server adress is .xxx.xxx.169.66:110
May 5 06:52:29 ebox3 p3scan[9088]: USER 'user2@eboxserverxx.com'
May 5 06:52:30 ebox3 p3scan[9088]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 06:52:30 ebox3 p3scan[9088]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 06:52:30 ebox3 p3scan[9088]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 06:52:30 ebox3 p3scan[9088]: Exiting now...
May 5 06:53:43 ebox3 p3scan[9649]: signalled, doing cleanup
May 5 06:53:43 ebox3 p3scan[9649]: Unable to remove /var/run/p3scan/p3scan.pid
May 5 06:53:43 ebox3 p3scan[9649]: P3Scan terminates now
May 5 06:55:17 ebox3 p3scan[9682]: P3Scan Version 2.1
May 5 06:55:17 ebox3 p3scan[9682]: Selected scannertype: basic (Basic file invocation scanner)
May 5 06:55:17 ebox3 p3scan[9682]: Listen now on 0.0.0.0:8110
May 5 07:00:17 ebox3 p3scan[10634]: Connection from 192.xxx.xxx.234:3178
May 5 07:00:17 ebox3 p3scan[10634]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:00:17 ebox3 p3scan[10634]: Cannot connect to real-server
May 5 07:00:17 ebox3 p3scan[10634]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:00:17 ebox3 p3scan[10635]: Connection from 192.xxx.xxx.234:3179
May 5 07:00:17 ebox3 p3scan[10635]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:00:17 ebox3 p3scan[10635]: Cannot connect to real-server
May 5 07:00:17 ebox3 p3scan[10635]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:00:17 ebox3 p3scan[10636]: Connection from 192.xxx.xxx.234:3180
May 5 07:00:17 ebox3 p3scan[10636]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:00:17 ebox3 p3scan[10636]: Cannot connect to real-server
May 5 07:00:17 ebox3 p3scan[10636]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:05:18 ebox3 p3scan[10857]: Connection from 192.xxx.xxx.234:3225
May 5 07:05:18 ebox3 p3scan[10857]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:05:18 ebox3 p3scan[10857]: Cannot connect to real-server
May 5 07:05:18 ebox3 p3scan[10857]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:05:18 ebox3 p3scan[10858]: Connection from 192.xxx.xxx.234:3226
May 5 07:05:18 ebox3 p3scan[10858]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:05:18 ebox3 p3scan[10858]: Cannot connect to real-server
May 5 07:05:18 ebox3 p3scan[10858]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:05:18 ebox3 p3scan[10859]: Connection from 192.xxx.xxx.234:3227
May 5 07:05:18 ebox3 p3scan[10859]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:05:18 ebox3 p3scan[10859]: Cannot connect to real-server
May 5 07:05:18 ebox3 p3scan[10859]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:10:18 ebox3 p3scan[10892]: Connection from 192.xxx.xxx.234:3232
May 5 07:10:18 ebox3 p3scan[10892]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:10:18 ebox3 p3scan[10892]: Cannot connect to real-server
May 5 07:10:18 ebox3 p3scan[10892]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:10:18 ebox3 p3scan[10893]: Connection from 192.xxx.xxx.234:3233
May 5 07:10:18 ebox3 p3scan[10893]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:10:18 ebox3 p3scan[10893]: Cannot connect to real-server
May 5 07:10:18 ebox3 p3scan[10893]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:10:18 ebox3 p3scan[10894]: Connection from 192.xxx.xxx.234:3234
May 5 07:10:18 ebox3 p3scan[10894]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:10:18 ebox3 p3scan[10894]: Cannot connect to real-server
May 5 07:10:18 ebox3 p3scan[10894]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:15:18 ebox3 p3scan[10918]: Connection from 192.xxx.xxx.234:3239
May 5 07:15:18 ebox3 p3scan[10918]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:15:18 ebox3 p3scan[10918]: Cannot connect to real-server
May 5 07:15:18 ebox3 p3scan[10918]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:15:18 ebox3 p3scan[10919]: Connection from 192.xxx.xxx.234:3240
May 5 07:15:18 ebox3 p3scan[10919]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:15:18 ebox3 p3scan[10919]: Cannot connect to real-server
May 5 07:15:18 ebox3 p3scan[10919]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:15:18 ebox3 p3scan[10920]: Connection from 192.xxx.xxx.234:3241
May 5 07:15:18 ebox3 p3scan[10920]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:15:18 ebox3 p3scan[10920]: Cannot connect to real-server
May 5 07:15:18 ebox3 p3scan[10920]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:16:51 ebox3 p3scan[10928]: Connection from 192.xxx.xxx.234:3244
May 5 07:16:51 ebox3 p3scan[10928]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:16:51 ebox3 p3scan[10928]: Cannot connect to real-server
May 5 07:16:51 ebox3 p3scan[10928]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:16:51 ebox3 p3scan[10929]: Connection from 192.xxx.xxx.234:3245
May 5 07:16:51 ebox3 p3scan[10929]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:16:51 ebox3 p3scan[10929]: Cannot connect to real-server
May 5 07:16:51 ebox3 p3scan[10929]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:16:51 ebox3 p3scan[10930]: Connection from 192.xxx.xxx.234:3246
May 5 07:16:51 ebox3 p3scan[10930]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:16:51 ebox3 p3scan[10930]: Cannot connect to real-server
May 5 07:16:51 ebox3 p3scan[10930]: Session done (Critial abort). Mails: 0 Bytes: 0
May 5 07:20:48 ebox3 p3scan[9648]: P3Scan Version 2.1
May 5 07:20:48 ebox3 p3scan[9648]: Selected scannertype: basic (Basic file invocation scanner)
May 5 07:20:48 ebox3 p3scan[9648]: Listen now on 0.0.0.0:8110
May 5 07:32:44 ebox3 p3scan[10435]: Connection from 192.xxx.xxx.234:1123
May 5 07:32:44 ebox3 p3scan[10435]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:32:44 ebox3 p3scan[10435]: USER 'user3@eboxserverxx.com'
May 5 07:32:44 ebox3 p3scan[10435]: Session done (Clean Exit). Mails: 0 Bytes: 0
May 5 07:32:45 ebox3 p3scan[10436]: Connection from 192.xxx.xxx.234:1124
May 5 07:32:45 ebox3 p3scan[10436]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:32:45 ebox3 p3scan[10436]: USER 'user1@eboxserverxx.com'
May 5 07:32:53 ebox3 p3scan[10436]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 07:32:53 ebox3 p3scan[10436]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 07:32:53 ebox3 p3scan[10436]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 07:32:53 ebox3 p3scan[10436]: Exiting now...
May 5 07:32:54 ebox3 p3scan[10444]: Connection from 192.xxx.xxx.234:1125
May 5 07:32:54 ebox3 p3scan[10444]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:32:55 ebox3 p3scan[10444]: USER 'user2@eboxserverxx.com'
May 5 07:32:59 ebox3 p3scan[10444]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 07:32:59 ebox3 p3scan[10444]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 07:32:59 ebox3 p3scan[10444]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 07:32:59 ebox3 p3scan[10444]: Exiting now...
May 5 07:38:00 ebox3 p3scan[10473]: Connection from 192.xxx.xxx.234:1149
May 5 07:38:00 ebox3 p3scan[10473]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:38:00 ebox3 p3scan[10473]: USER 'user3@eboxserverxx.com'
May 5 07:38:00 ebox3 p3scan[10473]: Session done (Clean Exit). Mails: 0 Bytes: 0
May 5 07:38:00 ebox3 p3scan[10474]: Connection from 192.xxx.xxx.234:1150
May 5 07:38:00 ebox3 p3scan[10474]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:38:00 ebox3 p3scan[10474]: USER 'user1@eboxserverxx.com'
May 5 07:38:19 ebox3 p3scan[10474]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 07:38:19 ebox3 p3scan[10474]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 07:38:19 ebox3 p3scan[10474]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 07:38:19 ebox3 p3scan[10474]: Exiting now...
May 5 07:38:21 ebox3 p3scan[10483]: Connection from 192.xxx.xxx.234:1152
May 5 07:38:21 ebox3 p3scan[10483]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:38:21 ebox3 p3scan[10483]: USER 'user2@eboxserverxx.com'
May 5 07:38:33 ebox3 p3scan[10483]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 07:38:33 ebox3 p3scan[10483]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 07:38:33 ebox3 p3scan[10483]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 07:38:33 ebox3 p3scan[10483]: Exiting now...
May 5 07:39:48 ebox3 p3scan[10506]: Connection from 192.xxx.xxx.234:1195
May 5 07:39:48 ebox3 p3scan[10506]: Real-server adress is .xxx.xxx.82.11:110
May 5 07:39:48 ebox3 p3scan[10506]: USER 'user3@eboxserverxx.com'
May 5 07:39:49 ebox3 p3scan[10506]: Session done (Clean Exit). Mails: 0 Bytes: 0
May 5 07:39:49 ebox3 p3scan[10507]: Connection from 192.xxx.xxx.234:1196
May 5 07:39:49 ebox3 p3scan[10507]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:39:49 ebox3 p3scan[10507]: USER 'user1@eboxserverxx.com'
May 5 07:39:52 ebox3 p3scan[10507]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 07:39:52 ebox3 p3scan[10507]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 07:39:52 ebox3 p3scan[10507]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 07:39:52 ebox3 p3scan[10507]: Exiting now...
May 5 07:39:52 ebox3 p3scan[10515]: Connection from 192.xxx.xxx.234:1197
May 5 07:39:52 ebox3 p3scan[10515]: Real-server adress is .xxx.xxx.169.66:110
May 5 07:39:52 ebox3 p3scan[10515]: USER 'user2@eboxserverxx.com'
May 5 07:39:53 ebox3 p3scan[10515]: WARNING: Your scanner returned neither 0 nor a viruscode, but 2
May 5 07:39:53 ebox3 p3scan[10515]: We can't say if it is a virus! So we have to give the client the mail! You should check your configuration/system
May 5 07:39:53 ebox3 p3scan[10515]: Scanner returned unexpected error code. You should check your configuration/system.
May 5 07:39:53 ebox3 p3scan[10515]: Exiting now...
May 5 07:43:15 ebox3 p3scan[9649]: signalled, doing cleanup
May 5 07:43:15 ebox3 p3scan[9649]: Unable to remove /var/run/p3scan/p3scan.pid
May 5 07:43:15 ebox3 p3scan[9649]: P3Scan terminates now
37
Installation and Upgrades / Re: Transparent POP Proxy
« on: April 21, 2009, 05:41:48 pm »
Doubt if disk space was an issue, at least 800Gb free space but whatever changed it's been working since. Long may it continue. Thanks for the help.
38
Installation and Upgrades / Re: Transparent POP Proxy
« on: April 06, 2009, 01:14:46 am »
Something strange but helpful happened while browsing the various .conf files this afternoon. Without changing ANYTHING mail started to be delivered and since then there seems to be no issue with mail recepit even with p3scan enabled. Anyway the syslog:
Apr 5 17:08:30 ebox3 p3scan[6016]: USER 'm.groves@xxxxx.net'
Apr 5 17:08:30 ebox3 p3scan[6016]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:08:30 ebox3 p3scan[6017]: Connection from 192.168.55.242:1618
Apr 5 17:08:30 ebox3 p3scan[6017]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:08:31 ebox3 p3scan[6017]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:08:32 ebox3 p3scan[6017]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:15:41 ebox3 p3scan[6059]: Connection from 192.168.55.242:1683
Apr 5 17:15:41 ebox3 p3scan[6059]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:15:41 ebox3 p3scan[6059]: USER 'm.groves@xxxxx.net'
Apr 5 17:15:42 ebox3 p3scan[6059]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:15:42 ebox3 p3scan[6060]: Connection from 192.168.55.242:1687
Apr 5 17:15:42 ebox3 p3scan[6060]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:15:42 ebox3 p3scan[6060]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:15:43 ebox3 spamd[4348]: spamd: setuid to p3scan succeeded
Apr 5 17:15:43 ebox3 spamd[4348]: spamd: processing message <42814ED30DC74C19990B7F92766B6EDC@MervynMobile> for p3scan:105
Apr 5 17:15:48 ebox3 spamd[4348]: spamd: clean message (-98.0/5.0) for p3scan:105 in 4.5 seconds, 4420 bytes.
Apr 5 17:15:48 ebox3 spamd[4348]: spamd: result: . -97 - AWL,FORGED_MUA_OUTLOOK,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,USER_IN_WHITELIST scantime=4.5,size=4420,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=40890,mid=<42814ED30DC74C19990B7F92766B6EDC@MervynMobile>,autolearn=no
Apr 5 17:15:48 ebox3 p3scan[6060]: Session done (Clean Exit). Mails: 1 Bytes: 4430
Apr 5 17:49:36 ebox3 p3scan[6384]: Connection from 192.168.55.242:1813
Apr 5 17:49:36 ebox3 p3scan[6384]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:49:36 ebox3 p3scan[6384]: USER 'm.groves@xxxxx.net'
Apr 5 17:49:36 ebox3 p3scan[6384]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:49:36 ebox3 p3scan[6385]: Connection from 192.168.55.242:1814
Apr 5 17:49:36 ebox3 p3scan[6385]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:49:37 ebox3 p3scan[6385]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:49:38 ebox3 spamd[4348]: spamd: setuid to p3scan succeeded
Apr 5 17:49:38 ebox3 spamd[4348]: spamd: processing message <1195075560.209324@marketwatchmail.com> for p3scan:105
Apr 5 17:49:42 ebox3 spamd[4348]: spamd: clean message (1.0/5.0) for p3scan:105 in 4.0 seconds, 9107 bytes.
Apr 5 17:49:42 ebox3 spamd[4348]: spamd: result: . 0 - HTML_MESSAGE,SPF_FAIL scantime=4.0,size=9107,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=54432,mid=<1195075560.209324@marketwatchmail.com>,autolearn=no
Apr 5 17:49:43 ebox3 p3scan[6385]: Session done (Clean Exit). Mails: 1 Bytes: 9000
Apr 5 17:51:12 ebox3 p3scan[6404]: Connection from 192.168.55.242:1818
Apr 5 17:51:12 ebox3 p3scan[6404]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:51:12 ebox3 p3scan[6404]: USER 'm.groves@xxxxx.net'
Apr 5 17:51:12 ebox3 p3scan[6404]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:51:12 ebox3 p3scan[6405]: Connection from 192.168.55.242:1819
Apr 5 17:51:12 ebox3 p3scan[6405]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:51:13 ebox3 p3scan[6405]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:51:14 ebox3 p3scan[6405]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:51:14 ebox3 p3scan[6406]: Connection from 192.168.55.242:1820
Apr 5 17:51:14 ebox3 p3scan[6406]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:51:14 ebox3 p3scan[6406]: USER 'mervyn@xxxxx.com'
Apr 5 17:51:15 ebox3 spamd[4348]: spamd: setuid to p3scan succeeded
Apr 5 17:51:15 ebox3 spamd[4348]: spamd: processing message <COL101-W31E28248E8A37500B280D4AA870@phx.gbl> for p3scan:105
Apr 5 17:51:16 ebox3 spamd[4348]: spamd: clean message (3.9/5.0) for p3scan:105 in 0.5 seconds, 2997 bytes.
Apr 5 17:51:16 ebox3 spamd[4348]: spamd: result: . 3 - FROM_LOCAL_NOVOWEL,HTML_MESSAGE,SPF_SOFTFAIL scantime=0.5,size=2997,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=54436,mid=<COL101-W31E28248E8A37500B280D4AA870@phx.gbl>,autolearn=no
Apr 5 17:51:16 ebox3 p3scan[6406]: Session done (Clean Exit). Mails: 1 Bytes: 2926
Apr 5 17:51:33 ebox3 p3scan[6419]: Connection from 192.168.55.242:1822
Apr 5 17:51:33 ebox3 p3scan[6419]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:51:33 ebox3 p3scan[6419]: USER 'm.groves@xxxxx.net'
Apr 5 17:51:34 ebox3 p3scan[6419]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:51:34 ebox3 p3scan[6420]: Connection from 192.168.55.242:1823
Apr 5 17:51:34 ebox3 p3scan[6420]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:51:34 ebox3 p3scan[6420]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:51:35 ebox3 p3scan[6420]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:51:35 ebox3 p3scan[6421]: Connection from 192.168.55.242:1824
Apr 5 17:51:35 ebox3 p3scan[6421]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:51:38 ebox3 p3scan[6421]: USER 'mervyn@xxxxx.com'
Apr 5 17:51:39 ebox3 p3scan[6421]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:54:56 ebox3 p3scan[6438]: Connection from 192.168.55.242:1918
Apr 5 17:54:56 ebox3 p3scan[6438]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:54:56 ebox3 p3scan[6438]: USER 'm.groves@xxxxx.net'
Apr 5 17:54:57 ebox3 p3scan[6438]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:54:57 ebox3 p3scan[6439]: Connection from 192.168.55.242:1919
Apr 5 17:54:57 ebox3 p3scan[6439]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:54:57 ebox3 p3scan[6439]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:54:58 ebox3 p3scan[6439]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:54:58 ebox3 p3scan[6440]: Connection from 192.168.55.242:1920
Apr 5 17:54:58 ebox3 p3scan[6440]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:54:58 ebox3 p3scan[6440]: USER 'mervyn@xxxxx.com'
Apr 5 17:54:59 ebox3 p3scan[6440]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:56:49 ebox3 p3scan[6449]: Connection from 192.168.55.242:1938
Apr 5 17:56:49 ebox3 p3scan[6449]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:56:49 ebox3 p3scan[6449]: USER 'm.groves@xxxxx.net'
Apr 5 17:56:50 ebox3 p3scan[6449]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:56:50 ebox3 p3scan[6450]: Connection from 192.168.55.242:1939
Apr 5 17:56:50 ebox3 p3scan[6450]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:56:50 ebox3 p3scan[6450]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:56:51 ebox3 p3scan[6450]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:56:51 ebox3 p3scan[6451]: Connection from 192.168.55.242:1940
Apr 5 17:56:51 ebox3 p3scan[6451]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:56:51 ebox3 p3scan[6451]: USER 'mervyn@xxxxx.com'
Apr 5 17:56:52 ebox3 p3scan[6451]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:57:09 ebox3 p3scan[6453]: Connection from 192.168.55.242:1941
Apr 5 17:57:09 ebox3 p3scan[6453]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:57:09 ebox3 p3scan[6453]: USER 'm.groves@xxxxx.net'
Apr 5 17:57:10 ebox3 p3scan[6453]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:57:10 ebox3 p3scan[6454]: Connection from 192.168.55.242:1942
Apr 5 17:57:10 ebox3 p3scan[6454]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:57:10 ebox3 p3scan[6454]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:57:11 ebox3 p3scan[6454]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:57:11 ebox3 p3scan[6455]: Connection from 192.168.55.242:1943
Apr 5 17:57:11 ebox3 p3scan[6455]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:57:11 ebox3 p3scan[6455]: USER 'mervyn@xxxxx.com'
Apr 5 17:57:12 ebox3 p3scan[6455]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:01:05 ebox3 p3scan[6474]: Connection from 192.168.55.242:2000
Apr 5 18:01:05 ebox3 p3scan[6474]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:01:05 ebox3 p3scan[6474]: USER 'm.groves@xxxxx.net'
Apr 5 18:01:05 ebox3 p3scan[6474]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:01:05 ebox3 p3scan[6475]: Connection from 192.168.55.242:2001
Apr 5 18:01:05 ebox3 p3scan[6475]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:01:06 ebox3 p3scan[6475]: USER 'm.groves@otherxxxxx.net'
Apr 5 18:01:07 ebox3 p3scan[6475]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:01:07 ebox3 p3scan[6476]: Connection from 192.168.55.242:2002
Apr 5 18:01:07 ebox3 p3scan[6476]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:01:07 ebox3 p3scan[6476]: USER 'mervyn@xxxxx.com'
Apr 5 18:01:08 ebox3 p3scan[6476]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:01:51 ebox3 p3scan[6480]: Connection from 192.168.55.242:2007
Apr 5 18:01:51 ebox3 p3scan[6480]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:01:51 ebox3 p3scan[6480]: USER 'm.groves@xxxxx.net'
Apr 5 18:01:52 ebox3 p3scan[6480]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:01:52 ebox3 p3scan[6481]: Connection from 192.168.55.242:2008
Apr 5 18:01:52 ebox3 p3scan[6481]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:01:52 ebox3 p3scan[6481]: USER 'm.groves@otherxxxxx.net'
Apr 5 18:01:53 ebox3 p3scan[6481]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:01:53 ebox3 p3scan[6482]: Connection from 192.168.55.242:2009
Apr 5 18:01:53 ebox3 p3scan[6482]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:01:53 ebox3 p3scan[6482]: USER 'mervyn@xxxxx.com'
Apr 5 18:01:54 ebox3 p3scan[6482]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:07:09 ebox3 p3scan[6509]: Connection from 192.168.55.239:58620
Apr 5 18:07:09 ebox3 p3scan[6509]: Real-server adress is 75.180.132.63:110
Apr 5 18:07:09 ebox3 p3scan[6510]: Connection from 192.168.55.239:58619
Apr 5 18:07:09 ebox3 p3scan[6510]: Real-server adress is 67.199.147.25:110
Apr 5 18:07:09 ebox3 p3scan[6511]: Connection from 192.168.55.239:58621
Apr 5 18:07:09 ebox3 p3scan[6511]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:07:09 ebox3 p3scan[6509]: USER 'another'
Apr 5 18:07:09 ebox3 p3scan[6511]: USER 'another@ xxxx.com'
Apr 5 18:07:09 ebox3 p3scan[6510]: USER 'another2@ xxxx.com'
Apr 5 18:07:10 ebox3 p3scan[6511]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:07:10 ebox3 spamd[4348]: spamd: setuid to p3scan succeeded
Apr 5 18:07:10 ebox3 spamd[4348]: spamd: processing message <294392204.1238964545644.JavaMail.root@p2-ws601.ad.prodcc.net> for p3scan:105
Apr 5 18:07:10 ebox3 p3scan[6521]: Connection from 192.168.55.239:58623
Apr 5 18:07:10 ebox3 p3scan[6521]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:07:10 ebox3 spamd[4349]: spamd: setuid to p3scan succeeded
Apr 5 18:07:10 ebox3 spamd[4349]: spamd: processing message <20090405210006.8645.3781@spamkiller.enlightek.com> for p3scan:105
Apr 5 18:07:10 ebox3 p3scan[6521]: USER 'another3@ xxxx.com'
Apr 5 18:07:14 ebox3 spamd[4349]: spamd: clean message (2.8/5.0) for p3scan:105 in 3.9 seconds, 8333 bytes.
Apr 5 18:07:14 ebox3 spamd[4349]: spamd: result: . 2 - EXTRA_MPART_TYPE,HTML_MESSAGE,MIME_QP_LONG_LINE scantime=3.9,size=8333,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=43633,mid=<20090405210006.8645.3781@spamkiller.enlightek.com>,autolearn=no
Apr 5 18:07:14 ebox3 spamd[4349]: spamd: setuid to p3scan succeeded
Apr 5 18:07:14 ebox3 spamd[4349]: spamd: processing message <3D6BA4ED62A04A5A84AB35A90D1E1AE1@MervynMobile> for p3scan:105
Apr 5 18:07:14 ebox3 spamd[4348]: spamd: clean message (0.1/5.0) for p3scan:105 in 4.4 seconds, 43903 bytes.
Apr 5 18:07:14 ebox3 spamd[4348]: spamd: result: . 0 - HTML_MESSAGE,RCVD_IN_IADB_LISTED,RCVD_IN_IADB_SPF,RDNS_NONE scantime=4.4,size=43903,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=43631,mid=<294392204.1238964545644.JavaMail.root@p2-ws601.ad.prodcc.net>,autolearn=no
Apr 5 18:07:18 ebox3 spamd[4349]: spamd: clean message (-97.3/5.0) for p3scan:105 in 4.1 seconds, 4957 bytes.
Apr 5 18:07:18 ebox3 spamd[4349]: spamd: result: . -97 - AWL,FORGED_MUA_OUTLOOK,HTML_MESSAGE,RDNS_NONE,USER_IN_WHITELIST scantime=4.1,size=4957,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=43634,mid=<3D6BA4ED62A04A5A84AB35A90D1E1AE1@MervynMobile>,autolearn=no
Apr 5 18:07:26 ebox3 p3scan[6521]: Session done (Clean Exit). Mails: 1 Bytes: 5069
Apr 5 18:07:26 ebox3 p3scan[6509]: Session done (Clean Exit). Mails: 1 Bytes: 43449
Apr 5 18:07:29 ebox3 spamd[4348]: spamd: setuid to p3scan succeeded
Apr 5 18:07:29 ebox3 spamd[4348]: spamd: processing message <10381787.1238965620536.JavaMail.oracle@relay.web.aol.com> for p3scan:105
Apr 5 18:07:33 ebox3 spamd[4348]: spamd: clean message (0.0/5.0) for p3scan:105 in 3.7 seconds, 3218 bytes.
Apr 5 18:07:33 ebox3 spamd[4348]: spamd: result: . 0 - UNPARSEABLE_RELAY scantime=3.7,size=3218,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=43635,mid=<10381787.1238965620536.JavaMail.oracle@relay.web.aol.com>,autolearn=no
Apr 5 18:07:35 ebox3 p3scan[6510]: Session done (Clean Exit). Mails: 2 Bytes: 11657
Apr 5 18:18:05 ebox3 p3scan[6769]: Connection from 192.168.55.239:58758
Apr 5 18:18:05 ebox3 p3scan[6769]: Real-server adress is 67.199.147.25:110
Apr 5 18:18:05 ebox3 p3scan[6770]: Connection from 192.168.55.239:58759
Apr 5 18:18:05 ebox3 p3scan[6770]: Real-server adress is 75.180.132.63:110
Apr 5 18:18:05 ebox3 p3scan[6770]: USER 'another'
Apr 5 18:18:05 ebox3 p3scan[6771]: Connection from 192.168.55.239:58761
Apr 5 18:18:05 ebox3 p3scan[6771]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:18:05 ebox3 p3scan[6771]: USER 'another@ xxxx.com'
Apr 5 18:18:05 ebox3 p3scan[6769]: USER 'another2@ xxxx.com'
Apr 5 18:18:06 ebox3 p3scan[6770]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:18:06 ebox3 p3scan[6769]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:18:06 ebox3 spamd[4348]: spamd: setuid to p3scan succeeded
Apr 5 18:18:06 ebox3 spamd[4348]: spamd: processing message <545617.42075.qm@web53008.mail.re2.yahoo.com> for p3scan:105
Apr 5 18:18:07 ebox3 spamd[4348]: spamd: clean message (0.1/5.0) for p3scan:105 in 0.4 seconds, 4186 bytes.
Apr 5 18:18:07 ebox3 spamd[4348]: spamd: result: . 0 - HTML_MESSAGE,RDNS_NONE scantime=0.4,size=4186,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=36146,mid=<545617.42075.qm@web53008.mail.re2.yahoo.com>,autolearn=no
Apr 5 18:18:09 ebox3 p3scan[6771]: Session done (Clean Exit). Mails: 1 Bytes: 4283
Apr 5 18:18:09 ebox3 p3scan[6783]: Connection from 192.168.55.239:58765
Apr 5 18:18:09 ebox3 p3scan[6783]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:18:10 ebox3 p3scan[6783]: USER 'another3@ xxxx.com'
Apr 5 18:18:10 ebox3 p3scan[6783]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:21:24 ebox3 p3scan[6799]: Connection from 192.168.55.239:58814
Apr 5 18:21:24 ebox3 p3scan[6799]: Real-server adress is 67.199.147.25:110
Apr 5 18:21:24 ebox3 p3scan[6800]: Connection from 192.168.55.239:58813
Apr 5 18:21:24 ebox3 p3scan[6800]: Real-server adress is 75.180.132.63:110
Apr 5 18:21:24 ebox3 p3scan[6801]: Connection from 192.168.55.239:58812
Apr 5 18:21:24 ebox3 p3scan[6801]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:21:24 ebox3 p3scan[6800]: USER 'another'
Apr 5 18:21:24 ebox3 p3scan[6801]: USER 'another@ xxxx.com'
Apr 5 18:21:24 ebox3 p3scan[6800]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:21:24 ebox3 p3scan[6799]: USER 'another2@ xxxx.com'
Apr 5 18:21:25 ebox3 p3scan[6801]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:21:25 ebox3 p3scan[6799]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:21:25 ebox3 p3scan[6802]: Connection from 192.168.55.239:58817
Apr 5 18:21:25 ebox3 p3scan[6802]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:21:25 ebox3 p3scan[6802]: USER 'another3@ xxxx.com'
Apr 5 18:21:25 ebox3 p3scan[6802]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:29:44 ebox3 p3scan[6841]: Connection from 192.168.55.239:58972
Apr 5 18:29:44 ebox3 p3scan[6841]: Real-server adress is 67.199.147.25:110
Apr 5 18:29:44 ebox3 p3scan[6842]: Connection from 192.168.55.239:58971
Apr 5 18:29:44 ebox3 p3scan[6842]: Real-server adress is 75.180.132.63:110
Apr 5 18:29:44 ebox3 p3scan[6843]: Connection from 192.168.55.239:58973
Apr 5 18:29:44 ebox3 p3scan[6843]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:29:44 ebox3 p3scan[6842]: USER 'another'
Apr 5 18:29:44 ebox3 p3scan[6843]: USER 'another@ xxxx.com'
Apr 5 18:29:45 ebox3 p3scan[6841]: USER 'another2@ xxxx.com'
Apr 5 18:29:46 ebox3 p3scan[6842]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:29:46 ebox3 p3scan[6843]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:29:47 ebox3 p3scan[6841]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:29:47 ebox3 p3scan[6844]: Connection from 192.168.55.239:58975
Apr 5 18:29:47 ebox3 p3scan[6844]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:29:47 ebox3 p3scan[6844]: USER 'another3@ xxxx.com'
Apr 5 18:29:47 ebox3 p3scan[6844]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:56:21 ebox3 p3scan[6978]: Connection from 192.168.55.242:2120
Apr 5 18:56:21 ebox3 p3scan[6978]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:56:21 ebox3 p3scan[6978]: USER 'm.groves@xxxxx.net'
Apr 5 18:56:21 ebox3 p3scan[6978]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:56:21 ebox3 p3scan[6979]: Connection from 192.168.55.242:2121
Apr 5 18:56:21 ebox3 p3scan[6979]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:56:22 ebox3 p3scan[6979]: USER 'm.groves@otherxxxxx.net'
Apr 5 18:56:23 ebox3 p3scan[6979]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:56:23 ebox3 p3scan[6980]: Connection from 192.168.55.242:2122
Apr 5 18:56:23 ebox3 p3scan[6980]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:56:23 ebox3 p3scan[6980]: USER 'mervyn@xxxxx.com'
Apr 5 18:56:24 ebox3 p3scan[6980]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:57:57 ebox3 p3scan[7005]: Connection from 192.168.55.242:2140
Apr 5 18:57:57 ebox3 p3scan[7005]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:57:57 ebox3 p3scan[7005]: USER 'm.groves@xxxxx.net'
Apr 5 18:57:57 ebox3 p3scan[7005]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:57:57 ebox3 p3scan[7006]: Connection from 192.168.55.242:2141
Apr 5 18:57:57 ebox3 p3scan[7006]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:57:58 ebox3 p3scan[7006]: USER 'm.groves@otherxxxxx.net'
Apr 5 18:57:59 ebox3 p3scan[7006]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:57:59 ebox3 p3scan[7007]: Connection from 192.168.55.242:2142
Apr 5 18:57:59 ebox3 p3scan[7007]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:57:59 ebox3 p3scan[7007]: USER 'mervyn@xxxxx.com'
Apr 5 18:57:59 ebox3 p3scan[7007]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:08:30 ebox3 p3scan[6016]: USER 'm.groves@xxxxx.net'
Apr 5 17:08:30 ebox3 p3scan[6016]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:08:30 ebox3 p3scan[6017]: Connection from 192.168.55.242:1618
Apr 5 17:08:30 ebox3 p3scan[6017]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:08:31 ebox3 p3scan[6017]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:08:32 ebox3 p3scan[6017]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:15:41 ebox3 p3scan[6059]: Connection from 192.168.55.242:1683
Apr 5 17:15:41 ebox3 p3scan[6059]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:15:41 ebox3 p3scan[6059]: USER 'm.groves@xxxxx.net'
Apr 5 17:15:42 ebox3 p3scan[6059]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:15:42 ebox3 p3scan[6060]: Connection from 192.168.55.242:1687
Apr 5 17:15:42 ebox3 p3scan[6060]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:15:42 ebox3 p3scan[6060]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:15:43 ebox3 spamd[4348]: spamd: setuid to p3scan succeeded
Apr 5 17:15:43 ebox3 spamd[4348]: spamd: processing message <42814ED30DC74C19990B7F92766B6EDC@MervynMobile> for p3scan:105
Apr 5 17:15:48 ebox3 spamd[4348]: spamd: clean message (-98.0/5.0) for p3scan:105 in 4.5 seconds, 4420 bytes.
Apr 5 17:15:48 ebox3 spamd[4348]: spamd: result: . -97 - AWL,FORGED_MUA_OUTLOOK,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,USER_IN_WHITELIST scantime=4.5,size=4420,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=40890,mid=<42814ED30DC74C19990B7F92766B6EDC@MervynMobile>,autolearn=no
Apr 5 17:15:48 ebox3 p3scan[6060]: Session done (Clean Exit). Mails: 1 Bytes: 4430
Apr 5 17:49:36 ebox3 p3scan[6384]: Connection from 192.168.55.242:1813
Apr 5 17:49:36 ebox3 p3scan[6384]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:49:36 ebox3 p3scan[6384]: USER 'm.groves@xxxxx.net'
Apr 5 17:49:36 ebox3 p3scan[6384]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:49:36 ebox3 p3scan[6385]: Connection from 192.168.55.242:1814
Apr 5 17:49:36 ebox3 p3scan[6385]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:49:37 ebox3 p3scan[6385]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:49:38 ebox3 spamd[4348]: spamd: setuid to p3scan succeeded
Apr 5 17:49:38 ebox3 spamd[4348]: spamd: processing message <1195075560.209324@marketwatchmail.com> for p3scan:105
Apr 5 17:49:42 ebox3 spamd[4348]: spamd: clean message (1.0/5.0) for p3scan:105 in 4.0 seconds, 9107 bytes.
Apr 5 17:49:42 ebox3 spamd[4348]: spamd: result: . 0 - HTML_MESSAGE,SPF_FAIL scantime=4.0,size=9107,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=54432,mid=<1195075560.209324@marketwatchmail.com>,autolearn=no
Apr 5 17:49:43 ebox3 p3scan[6385]: Session done (Clean Exit). Mails: 1 Bytes: 9000
Apr 5 17:51:12 ebox3 p3scan[6404]: Connection from 192.168.55.242:1818
Apr 5 17:51:12 ebox3 p3scan[6404]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:51:12 ebox3 p3scan[6404]: USER 'm.groves@xxxxx.net'
Apr 5 17:51:12 ebox3 p3scan[6404]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:51:12 ebox3 p3scan[6405]: Connection from 192.168.55.242:1819
Apr 5 17:51:12 ebox3 p3scan[6405]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:51:13 ebox3 p3scan[6405]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:51:14 ebox3 p3scan[6405]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:51:14 ebox3 p3scan[6406]: Connection from 192.168.55.242:1820
Apr 5 17:51:14 ebox3 p3scan[6406]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:51:14 ebox3 p3scan[6406]: USER 'mervyn@xxxxx.com'
Apr 5 17:51:15 ebox3 spamd[4348]: spamd: setuid to p3scan succeeded
Apr 5 17:51:15 ebox3 spamd[4348]: spamd: processing message <COL101-W31E28248E8A37500B280D4AA870@phx.gbl> for p3scan:105
Apr 5 17:51:16 ebox3 spamd[4348]: spamd: clean message (3.9/5.0) for p3scan:105 in 0.5 seconds, 2997 bytes.
Apr 5 17:51:16 ebox3 spamd[4348]: spamd: result: . 3 - FROM_LOCAL_NOVOWEL,HTML_MESSAGE,SPF_SOFTFAIL scantime=0.5,size=2997,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=54436,mid=<COL101-W31E28248E8A37500B280D4AA870@phx.gbl>,autolearn=no
Apr 5 17:51:16 ebox3 p3scan[6406]: Session done (Clean Exit). Mails: 1 Bytes: 2926
Apr 5 17:51:33 ebox3 p3scan[6419]: Connection from 192.168.55.242:1822
Apr 5 17:51:33 ebox3 p3scan[6419]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:51:33 ebox3 p3scan[6419]: USER 'm.groves@xxxxx.net'
Apr 5 17:51:34 ebox3 p3scan[6419]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:51:34 ebox3 p3scan[6420]: Connection from 192.168.55.242:1823
Apr 5 17:51:34 ebox3 p3scan[6420]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:51:34 ebox3 p3scan[6420]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:51:35 ebox3 p3scan[6420]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:51:35 ebox3 p3scan[6421]: Connection from 192.168.55.242:1824
Apr 5 17:51:35 ebox3 p3scan[6421]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:51:38 ebox3 p3scan[6421]: USER 'mervyn@xxxxx.com'
Apr 5 17:51:39 ebox3 p3scan[6421]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:54:56 ebox3 p3scan[6438]: Connection from 192.168.55.242:1918
Apr 5 17:54:56 ebox3 p3scan[6438]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:54:56 ebox3 p3scan[6438]: USER 'm.groves@xxxxx.net'
Apr 5 17:54:57 ebox3 p3scan[6438]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:54:57 ebox3 p3scan[6439]: Connection from 192.168.55.242:1919
Apr 5 17:54:57 ebox3 p3scan[6439]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:54:57 ebox3 p3scan[6439]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:54:58 ebox3 p3scan[6439]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:54:58 ebox3 p3scan[6440]: Connection from 192.168.55.242:1920
Apr 5 17:54:58 ebox3 p3scan[6440]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:54:58 ebox3 p3scan[6440]: USER 'mervyn@xxxxx.com'
Apr 5 17:54:59 ebox3 p3scan[6440]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:56:49 ebox3 p3scan[6449]: Connection from 192.168.55.242:1938
Apr 5 17:56:49 ebox3 p3scan[6449]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:56:49 ebox3 p3scan[6449]: USER 'm.groves@xxxxx.net'
Apr 5 17:56:50 ebox3 p3scan[6449]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:56:50 ebox3 p3scan[6450]: Connection from 192.168.55.242:1939
Apr 5 17:56:50 ebox3 p3scan[6450]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:56:50 ebox3 p3scan[6450]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:56:51 ebox3 p3scan[6450]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:56:51 ebox3 p3scan[6451]: Connection from 192.168.55.242:1940
Apr 5 17:56:51 ebox3 p3scan[6451]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:56:51 ebox3 p3scan[6451]: USER 'mervyn@xxxxx.com'
Apr 5 17:56:52 ebox3 p3scan[6451]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:57:09 ebox3 p3scan[6453]: Connection from 192.168.55.242:1941
Apr 5 17:57:09 ebox3 p3scan[6453]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 17:57:09 ebox3 p3scan[6453]: USER 'm.groves@xxxxx.net'
Apr 5 17:57:10 ebox3 p3scan[6453]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:57:10 ebox3 p3scan[6454]: Connection from 192.168.55.242:1942
Apr 5 17:57:10 ebox3 p3scan[6454]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:57:10 ebox3 p3scan[6454]: USER 'm.groves@otherxxxxx.net'
Apr 5 17:57:11 ebox3 p3scan[6454]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 17:57:11 ebox3 p3scan[6455]: Connection from 192.168.55.242:1943
Apr 5 17:57:11 ebox3 p3scan[6455]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 17:57:11 ebox3 p3scan[6455]: USER 'mervyn@xxxxx.com'
Apr 5 17:57:12 ebox3 p3scan[6455]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:01:05 ebox3 p3scan[6474]: Connection from 192.168.55.242:2000
Apr 5 18:01:05 ebox3 p3scan[6474]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:01:05 ebox3 p3scan[6474]: USER 'm.groves@xxxxx.net'
Apr 5 18:01:05 ebox3 p3scan[6474]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:01:05 ebox3 p3scan[6475]: Connection from 192.168.55.242:2001
Apr 5 18:01:05 ebox3 p3scan[6475]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:01:06 ebox3 p3scan[6475]: USER 'm.groves@otherxxxxx.net'
Apr 5 18:01:07 ebox3 p3scan[6475]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:01:07 ebox3 p3scan[6476]: Connection from 192.168.55.242:2002
Apr 5 18:01:07 ebox3 p3scan[6476]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:01:07 ebox3 p3scan[6476]: USER 'mervyn@xxxxx.com'
Apr 5 18:01:08 ebox3 p3scan[6476]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:01:51 ebox3 p3scan[6480]: Connection from 192.168.55.242:2007
Apr 5 18:01:51 ebox3 p3scan[6480]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:01:51 ebox3 p3scan[6480]: USER 'm.groves@xxxxx.net'
Apr 5 18:01:52 ebox3 p3scan[6480]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:01:52 ebox3 p3scan[6481]: Connection from 192.168.55.242:2008
Apr 5 18:01:52 ebox3 p3scan[6481]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:01:52 ebox3 p3scan[6481]: USER 'm.groves@otherxxxxx.net'
Apr 5 18:01:53 ebox3 p3scan[6481]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:01:53 ebox3 p3scan[6482]: Connection from 192.168.55.242:2009
Apr 5 18:01:53 ebox3 p3scan[6482]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:01:53 ebox3 p3scan[6482]: USER 'mervyn@xxxxx.com'
Apr 5 18:01:54 ebox3 p3scan[6482]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:07:09 ebox3 p3scan[6509]: Connection from 192.168.55.239:58620
Apr 5 18:07:09 ebox3 p3scan[6509]: Real-server adress is 75.180.132.63:110
Apr 5 18:07:09 ebox3 p3scan[6510]: Connection from 192.168.55.239:58619
Apr 5 18:07:09 ebox3 p3scan[6510]: Real-server adress is 67.199.147.25:110
Apr 5 18:07:09 ebox3 p3scan[6511]: Connection from 192.168.55.239:58621
Apr 5 18:07:09 ebox3 p3scan[6511]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:07:09 ebox3 p3scan[6509]: USER 'another'
Apr 5 18:07:09 ebox3 p3scan[6511]: USER 'another@ xxxx.com'
Apr 5 18:07:09 ebox3 p3scan[6510]: USER 'another2@ xxxx.com'
Apr 5 18:07:10 ebox3 p3scan[6511]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:07:10 ebox3 spamd[4348]: spamd: setuid to p3scan succeeded
Apr 5 18:07:10 ebox3 spamd[4348]: spamd: processing message <294392204.1238964545644.JavaMail.root@p2-ws601.ad.prodcc.net> for p3scan:105
Apr 5 18:07:10 ebox3 p3scan[6521]: Connection from 192.168.55.239:58623
Apr 5 18:07:10 ebox3 p3scan[6521]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:07:10 ebox3 spamd[4349]: spamd: setuid to p3scan succeeded
Apr 5 18:07:10 ebox3 spamd[4349]: spamd: processing message <20090405210006.8645.3781@spamkiller.enlightek.com> for p3scan:105
Apr 5 18:07:10 ebox3 p3scan[6521]: USER 'another3@ xxxx.com'
Apr 5 18:07:14 ebox3 spamd[4349]: spamd: clean message (2.8/5.0) for p3scan:105 in 3.9 seconds, 8333 bytes.
Apr 5 18:07:14 ebox3 spamd[4349]: spamd: result: . 2 - EXTRA_MPART_TYPE,HTML_MESSAGE,MIME_QP_LONG_LINE scantime=3.9,size=8333,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=43633,mid=<20090405210006.8645.3781@spamkiller.enlightek.com>,autolearn=no
Apr 5 18:07:14 ebox3 spamd[4349]: spamd: setuid to p3scan succeeded
Apr 5 18:07:14 ebox3 spamd[4349]: spamd: processing message <3D6BA4ED62A04A5A84AB35A90D1E1AE1@MervynMobile> for p3scan:105
Apr 5 18:07:14 ebox3 spamd[4348]: spamd: clean message (0.1/5.0) for p3scan:105 in 4.4 seconds, 43903 bytes.
Apr 5 18:07:14 ebox3 spamd[4348]: spamd: result: . 0 - HTML_MESSAGE,RCVD_IN_IADB_LISTED,RCVD_IN_IADB_SPF,RDNS_NONE scantime=4.4,size=43903,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=43631,mid=<294392204.1238964545644.JavaMail.root@p2-ws601.ad.prodcc.net>,autolearn=no
Apr 5 18:07:18 ebox3 spamd[4349]: spamd: clean message (-97.3/5.0) for p3scan:105 in 4.1 seconds, 4957 bytes.
Apr 5 18:07:18 ebox3 spamd[4349]: spamd: result: . -97 - AWL,FORGED_MUA_OUTLOOK,HTML_MESSAGE,RDNS_NONE,USER_IN_WHITELIST scantime=4.1,size=4957,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=43634,mid=<3D6BA4ED62A04A5A84AB35A90D1E1AE1@MervynMobile>,autolearn=no
Apr 5 18:07:26 ebox3 p3scan[6521]: Session done (Clean Exit). Mails: 1 Bytes: 5069
Apr 5 18:07:26 ebox3 p3scan[6509]: Session done (Clean Exit). Mails: 1 Bytes: 43449
Apr 5 18:07:29 ebox3 spamd[4348]: spamd: setuid to p3scan succeeded
Apr 5 18:07:29 ebox3 spamd[4348]: spamd: processing message <10381787.1238965620536.JavaMail.oracle@relay.web.aol.com> for p3scan:105
Apr 5 18:07:33 ebox3 spamd[4348]: spamd: clean message (0.0/5.0) for p3scan:105 in 3.7 seconds, 3218 bytes.
Apr 5 18:07:33 ebox3 spamd[4348]: spamd: result: . 0 - UNPARSEABLE_RELAY scantime=3.7,size=3218,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=43635,mid=<10381787.1238965620536.JavaMail.oracle@relay.web.aol.com>,autolearn=no
Apr 5 18:07:35 ebox3 p3scan[6510]: Session done (Clean Exit). Mails: 2 Bytes: 11657
Apr 5 18:18:05 ebox3 p3scan[6769]: Connection from 192.168.55.239:58758
Apr 5 18:18:05 ebox3 p3scan[6769]: Real-server adress is 67.199.147.25:110
Apr 5 18:18:05 ebox3 p3scan[6770]: Connection from 192.168.55.239:58759
Apr 5 18:18:05 ebox3 p3scan[6770]: Real-server adress is 75.180.132.63:110
Apr 5 18:18:05 ebox3 p3scan[6770]: USER 'another'
Apr 5 18:18:05 ebox3 p3scan[6771]: Connection from 192.168.55.239:58761
Apr 5 18:18:05 ebox3 p3scan[6771]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:18:05 ebox3 p3scan[6771]: USER 'another@ xxxx.com'
Apr 5 18:18:05 ebox3 p3scan[6769]: USER 'another2@ xxxx.com'
Apr 5 18:18:06 ebox3 p3scan[6770]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:18:06 ebox3 p3scan[6769]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:18:06 ebox3 spamd[4348]: spamd: setuid to p3scan succeeded
Apr 5 18:18:06 ebox3 spamd[4348]: spamd: processing message <545617.42075.qm@web53008.mail.re2.yahoo.com> for p3scan:105
Apr 5 18:18:07 ebox3 spamd[4348]: spamd: clean message (0.1/5.0) for p3scan:105 in 0.4 seconds, 4186 bytes.
Apr 5 18:18:07 ebox3 spamd[4348]: spamd: result: . 0 - HTML_MESSAGE,RDNS_NONE scantime=0.4,size=4186,user=p3scan,uid=105,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=36146,mid=<545617.42075.qm@web53008.mail.re2.yahoo.com>,autolearn=no
Apr 5 18:18:09 ebox3 p3scan[6771]: Session done (Clean Exit). Mails: 1 Bytes: 4283
Apr 5 18:18:09 ebox3 p3scan[6783]: Connection from 192.168.55.239:58765
Apr 5 18:18:09 ebox3 p3scan[6783]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:18:10 ebox3 p3scan[6783]: USER 'another3@ xxxx.com'
Apr 5 18:18:10 ebox3 p3scan[6783]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:21:24 ebox3 p3scan[6799]: Connection from 192.168.55.239:58814
Apr 5 18:21:24 ebox3 p3scan[6799]: Real-server adress is 67.199.147.25:110
Apr 5 18:21:24 ebox3 p3scan[6800]: Connection from 192.168.55.239:58813
Apr 5 18:21:24 ebox3 p3scan[6800]: Real-server adress is 75.180.132.63:110
Apr 5 18:21:24 ebox3 p3scan[6801]: Connection from 192.168.55.239:58812
Apr 5 18:21:24 ebox3 p3scan[6801]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:21:24 ebox3 p3scan[6800]: USER 'another'
Apr 5 18:21:24 ebox3 p3scan[6801]: USER 'another@ xxxx.com'
Apr 5 18:21:24 ebox3 p3scan[6800]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:21:24 ebox3 p3scan[6799]: USER 'another2@ xxxx.com'
Apr 5 18:21:25 ebox3 p3scan[6801]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:21:25 ebox3 p3scan[6799]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:21:25 ebox3 p3scan[6802]: Connection from 192.168.55.239:58817
Apr 5 18:21:25 ebox3 p3scan[6802]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:21:25 ebox3 p3scan[6802]: USER 'another3@ xxxx.com'
Apr 5 18:21:25 ebox3 p3scan[6802]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:29:44 ebox3 p3scan[6841]: Connection from 192.168.55.239:58972
Apr 5 18:29:44 ebox3 p3scan[6841]: Real-server adress is 67.199.147.25:110
Apr 5 18:29:44 ebox3 p3scan[6842]: Connection from 192.168.55.239:58971
Apr 5 18:29:44 ebox3 p3scan[6842]: Real-server adress is 75.180.132.63:110
Apr 5 18:29:44 ebox3 p3scan[6843]: Connection from 192.168.55.239:58973
Apr 5 18:29:44 ebox3 p3scan[6843]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:29:44 ebox3 p3scan[6842]: USER 'another'
Apr 5 18:29:44 ebox3 p3scan[6843]: USER 'another@ xxxx.com'
Apr 5 18:29:45 ebox3 p3scan[6841]: USER 'another2@ xxxx.com'
Apr 5 18:29:46 ebox3 p3scan[6842]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:29:46 ebox3 p3scan[6843]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:29:47 ebox3 p3scan[6841]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:29:47 ebox3 p3scan[6844]: Connection from 192.168.55.239:58975
Apr 5 18:29:47 ebox3 p3scan[6844]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:29:47 ebox3 p3scan[6844]: USER 'another3@ xxxx.com'
Apr 5 18:29:47 ebox3 p3scan[6844]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:56:21 ebox3 p3scan[6978]: Connection from 192.168.55.242:2120
Apr 5 18:56:21 ebox3 p3scan[6978]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:56:21 ebox3 p3scan[6978]: USER 'm.groves@xxxxx.net'
Apr 5 18:56:21 ebox3 p3scan[6978]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:56:21 ebox3 p3scan[6979]: Connection from 192.168.55.242:2121
Apr 5 18:56:21 ebox3 p3scan[6979]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:56:22 ebox3 p3scan[6979]: USER 'm.groves@otherxxxxx.net'
Apr 5 18:56:23 ebox3 p3scan[6979]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:56:23 ebox3 p3scan[6980]: Connection from 192.168.55.242:2122
Apr 5 18:56:23 ebox3 p3scan[6980]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:56:23 ebox3 p3scan[6980]: USER 'mervyn@xxxxx.com'
Apr 5 18:56:24 ebox3 p3scan[6980]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:57:57 ebox3 p3scan[7005]: Connection from 192.168.55.242:2140
Apr 5 18:57:57 ebox3 p3scan[7005]: Real-server adress is nn.nnn.nn.nn:110
Apr 5 18:57:57 ebox3 p3scan[7005]: USER 'm.groves@xxxxx.net'
Apr 5 18:57:57 ebox3 p3scan[7005]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:57:57 ebox3 p3scan[7006]: Connection from 192.168.55.242:2141
Apr 5 18:57:57 ebox3 p3scan[7006]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:57:58 ebox3 p3scan[7006]: USER 'm.groves@otherxxxxx.net'
Apr 5 18:57:59 ebox3 p3scan[7006]: Session done (Clean Exit). Mails: 0 Bytes: 0
Apr 5 18:57:59 ebox3 p3scan[7007]: Connection from 192.168.55.242:2142
Apr 5 18:57:59 ebox3 p3scan[7007]: Real-server adress is xx.nnn.nn.nn:110
Apr 5 18:57:59 ebox3 p3scan[7007]: USER 'mervyn@xxxxx.com'
Apr 5 18:57:59 ebox3 p3scan[7007]: Session done (Clean Exit). Mails: 0 Bytes: 0
39
Installation and Upgrades / Re: Transparent POP Proxy
« on: April 05, 2009, 08:02:02 pm »
Some changes since the initial post:
We are running 2 test boxes each with a different issue all related to p3scan. However we will concentrate on providing a solution on one machine.
Ebox ver 1.0
P3scan is running, disable it and no problem receiving mail. We added a service enabling ports 110, 25 and 2525 and added it to the firewall in internal networks/internet and in rules coming out of ebox. However when transparent pop proxy is enabled we get the following error message: Task 'Mervyn (Chapel Hill, NC) - Receiving' reported error (0x800CCC0F) : 'The connection to the server was interrupted. If this problem continues, contact your server administrator or Internet service provider (ISP). The server responded: +OK P3Scan'ing...'. Server time was increased but this error message is immediate.
Syslog entries:
Apr 5 13:45:30 ebox3 last message repeated 3 times
Apr 5 13:45:32 ebox3 kernel: [24943.317529] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:45:34 ebox3 kernel: [24945.217443] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=70 TOS=0x00 PREC=0x00 TTL=127 ID=$
Apr 5 13:45:38 ebox3 kernel: [24949.428712] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:45:42 ebox3 kernel: [24952.559708] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=106 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:45:44 ebox3 kernel: [24955.234969] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=70 TOS=0x00 PREC=0x00 TTL=127 ID=$
Apr 5 13:45:45 ebox3 kernel: [24955.531099] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:45:51 ebox3 kernel: [24961.633038] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:45:52 ebox3 kernel: [24963.224087] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=106 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:45:54 ebox3 kernel: [24965.223058] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=70 TOS=0x00 PREC=0x00 TTL=127 ID=$
Apr 5 13:45:55 ebox3 dhcpd: DHCPINFORM from 192.168.55.244 via eth1: not authoritative for subnet 192.168.55.0
Apr 5 13:45:55 ebox3 dhcpd: DHCPINFORM from 192.168.55.244 via eth1: not authoritative for subnet 192.168.55.0
Apr 5 13:45:57 ebox3 kernel: [24967.732939] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:45:59 ebox3 dhcpd: DHCPINFORM from 192.168.55.244 via eth1: not authoritative for subnet 192.168.55.0
Apr 5 13:45:59 ebox3 dhcpd: DHCPINFORM from 192.168.55.244 via eth1: not authoritative for subnet 192.168.55.0
Apr 5 13:46:02 ebox3 kernel: [24973.211017] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=106 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:46:03 ebox3 kernel: [24973.834981] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:04 ebox3 kernel: [24975.190802] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=140 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:46:09 ebox3 kernel: [24979.935890] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:12 ebox3 kernel: [24983.189452] ebox-firewall drop IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:e0:61:0f:ff:42:08:00 SRC=192.168.55.244 DST=192.168.55$
Apr 5 13:46:12 ebox3 kernel: [24983.190034] ebox-firewall drop IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:e0:61:0f:ff:42:08:00 SRC=192.168.55.244 DST=192.168.55$
Apr 5 13:46:14 ebox3 kernel: [24985.194447] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=140 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:46:15 ebox3 kernel: [24986.047197] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:17 ebox3 kernel: [24988.419463] MD5 Hash NOT expected but found (192.168.55.244, 1176)->(192.168.55.11, 80)
Apr 5 13:46:20 ebox3 kernel: [24991.375178] MD5 Hash NOT expected but found (192.168.55.244, 1176)->(192.168.55.11, 80)
Apr 5 13:46:21 ebox3 kernel: [24992.148500] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:22 ebox3 kernel: [24993.412358] MD5 Hash NOT expected but found (192.168.55.244, 1211)->(192.168.55.11, 3128)
Apr 5 13:46:24 ebox3 kernel: [24995.180871] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=140 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:46:25 ebox3 kernel: [24996.293346] MD5 Hash NOT expected but found (192.168.55.244, 1211)->(192.168.55.11, 3128)
Apr 5 13:46:27 ebox3 kernel: [24998.250921] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:27 ebox3 kernel: [24998.404917] MD5 Hash NOT expected but found (192.168.55.244, 1230)->(192.168.55.11, 3128)
Apr 5 13:46:31 ebox3 kernel: [25001.516370] MD5 Hash NOT expected but found (192.168.55.244, 1230)->(192.168.55.11, 3128)
Apr 5 13:46:32 ebox3 slapd[4713]: <= bdb_equality_candidates: (uid) not indexed
Apr 5 13:46:32 ebox3 slapd[4713]: <= bdb_equality_candidates: (uid) not indexed
Apr 5 13:46:32 ebox3 slapd[4713]: <= bdb_equality_candidates: (memberUid) not indexed
Apr 5 13:46:33 ebox3 kernel: [25004.352965] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:34 ebox3 kernel: [25005.167345] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=145 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:46:40 ebox3 kernel: [25010.452846] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:42 ebox3 kernel: [25012.476530] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=106 TOS=0x00 PREC=0x00 TTL=127 ID$
IP addresses are all internal.....
We are running 2 test boxes each with a different issue all related to p3scan. However we will concentrate on providing a solution on one machine.
Ebox ver 1.0
P3scan is running, disable it and no problem receiving mail. We added a service enabling ports 110, 25 and 2525 and added it to the firewall in internal networks/internet and in rules coming out of ebox. However when transparent pop proxy is enabled we get the following error message: Task 'Mervyn (Chapel Hill, NC) - Receiving' reported error (0x800CCC0F) : 'The connection to the server was interrupted. If this problem continues, contact your server administrator or Internet service provider (ISP). The server responded: +OK P3Scan'ing...'. Server time was increased but this error message is immediate.
Syslog entries:
Apr 5 13:45:30 ebox3 last message repeated 3 times
Apr 5 13:45:32 ebox3 kernel: [24943.317529] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:45:34 ebox3 kernel: [24945.217443] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=70 TOS=0x00 PREC=0x00 TTL=127 ID=$
Apr 5 13:45:38 ebox3 kernel: [24949.428712] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:45:42 ebox3 kernel: [24952.559708] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=106 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:45:44 ebox3 kernel: [24955.234969] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=70 TOS=0x00 PREC=0x00 TTL=127 ID=$
Apr 5 13:45:45 ebox3 kernel: [24955.531099] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:45:51 ebox3 kernel: [24961.633038] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:45:52 ebox3 kernel: [24963.224087] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=106 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:45:54 ebox3 kernel: [24965.223058] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=70 TOS=0x00 PREC=0x00 TTL=127 ID=$
Apr 5 13:45:55 ebox3 dhcpd: DHCPINFORM from 192.168.55.244 via eth1: not authoritative for subnet 192.168.55.0
Apr 5 13:45:55 ebox3 dhcpd: DHCPINFORM from 192.168.55.244 via eth1: not authoritative for subnet 192.168.55.0
Apr 5 13:45:57 ebox3 kernel: [24967.732939] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:45:59 ebox3 dhcpd: DHCPINFORM from 192.168.55.244 via eth1: not authoritative for subnet 192.168.55.0
Apr 5 13:45:59 ebox3 dhcpd: DHCPINFORM from 192.168.55.244 via eth1: not authoritative for subnet 192.168.55.0
Apr 5 13:46:02 ebox3 kernel: [24973.211017] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=106 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:46:03 ebox3 kernel: [24973.834981] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:04 ebox3 kernel: [24975.190802] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=140 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:46:09 ebox3 kernel: [24979.935890] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:12 ebox3 kernel: [24983.189452] ebox-firewall drop IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:e0:61:0f:ff:42:08:00 SRC=192.168.55.244 DST=192.168.55$
Apr 5 13:46:12 ebox3 kernel: [24983.190034] ebox-firewall drop IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:e0:61:0f:ff:42:08:00 SRC=192.168.55.244 DST=192.168.55$
Apr 5 13:46:14 ebox3 kernel: [24985.194447] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=140 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:46:15 ebox3 kernel: [24986.047197] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:17 ebox3 kernel: [24988.419463] MD5 Hash NOT expected but found (192.168.55.244, 1176)->(192.168.55.11, 80)
Apr 5 13:46:20 ebox3 kernel: [24991.375178] MD5 Hash NOT expected but found (192.168.55.244, 1176)->(192.168.55.11, 80)
Apr 5 13:46:21 ebox3 kernel: [24992.148500] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:22 ebox3 kernel: [24993.412358] MD5 Hash NOT expected but found (192.168.55.244, 1211)->(192.168.55.11, 3128)
Apr 5 13:46:24 ebox3 kernel: [24995.180871] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=140 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:46:25 ebox3 kernel: [24996.293346] MD5 Hash NOT expected but found (192.168.55.244, 1211)->(192.168.55.11, 3128)
Apr 5 13:46:27 ebox3 kernel: [24998.250921] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:27 ebox3 kernel: [24998.404917] MD5 Hash NOT expected but found (192.168.55.244, 1230)->(192.168.55.11, 3128)
Apr 5 13:46:31 ebox3 kernel: [25001.516370] MD5 Hash NOT expected but found (192.168.55.244, 1230)->(192.168.55.11, 3128)
Apr 5 13:46:32 ebox3 slapd[4713]: <= bdb_equality_candidates: (uid) not indexed
Apr 5 13:46:32 ebox3 slapd[4713]: <= bdb_equality_candidates: (uid) not indexed
Apr 5 13:46:32 ebox3 slapd[4713]: <= bdb_equality_candidates: (memberUid) not indexed
Apr 5 13:46:33 ebox3 kernel: [25004.352965] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:34 ebox3 kernel: [25005.167345] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=145 TOS=0x00 PREC=0x00 TTL=127 ID$
Apr 5 13:46:40 ebox3 kernel: [25010.452846] ebox-firewall drop IN=eth0 OUT= MAC=00:24:8c:b8:8b:5d:00:14:6c:2e:dd:1d:08:00 SRC=10.212.55.11 DST=10.212.55.22$
Apr 5 13:46:42 ebox3 kernel: [25012.476530] ebox-firewall drop IN=eth1 OUT=eth0 SRC=192.168.55.239 DST=192.168.65.102 LEN=106 TOS=0x00 PREC=0x00 TTL=127 ID$
IP addresses are all internal.....
40
Installation and Upgrades / Transparent POP Proxy
« on: March 31, 2009, 11:35:25 pm »
Currently using Untangle but testing Ebox.
All working to plan so far except for accessing mail with POP Proxy enabled. With Pop Proxy enabled we cannot receive mail. Access to the external servers seems to be mis-directed.
What might I be doing wrong?
We do not intend to enable EBox mail servers just to get the Pop Proxy process working would get to the next stage of testing.
All working to plan so far except for accessing mail with POP Proxy enabled. With Pop Proxy enabled we cannot receive mail. Access to the external servers seems to be mis-directed.
What might I be doing wrong?
We do not intend to enable EBox mail servers just to get the Pop Proxy process working would get to the next stage of testing.