GFI
English Deutsch Français Italiano Nederlands Español
Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

SPF causing slow mail traffic

  		Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> SPF causing slow mail traffic Page: [1]
Login
Message << Older Topic   Newer Topic >>
SPF causing slow mail traffic - 3.Apr.2008 1:02:16 PM   
stefan.gillich

 

Posts: 22
Joined: 21.Jun.2006
Status: offline 		Hi All

Today I installed the new ME 12 version (20080326) on Windows Server 2003 SP2.  Exchange 2003 SP2 is running on the same machine.  After installation the Exchange queue "Messages pending submission started filling up.  Playing around with the SPF filters showed that SPF filter is causing this problem.  Disabling SPF filter caused the queue filled with 4000+ mails to get empty in about 5-10 minutes.  Enabling SPF again started filling the queue again.

For testing purpose I installed ME on our perimeter server (using IIS smtp service, not Exchange).  Same issue in this environment.  The mail queue gets filled when SPF enabled.

ME 12 (2001203) didn't show this behaviour.  Looks like something is broken in the new version.

Anyone else discovering the same issue?

Regards
Stefan
Post #: 1
RE: SPF causing slow mail traffic - 4.Apr.2008 4:26:16 AM   
mtate

 

Posts: 10
Joined: 24.Jul.2007
Status: offline 		We've had the same issue with GFI in the past after we enabled SPF. We had to set the SPF level to low/disable to resolve the issue. We did have GFI support look into the matter but they couldn't offer any fix.

(in reply to stefan.gillich)
Post #: 2
RE: SPF causing slow mail traffic - 4.Apr.2008 4:51:52 AM   
stefan.gillich

 

Posts: 22
Joined: 21.Jun.2006
Status: offline 		hi mtate

Thanks for replying.  I tested setting SPF to Low.  Same thing as before when set to Medium.  Immediatly after setting to Low or Medium, the queue starts filling up. :-((

I'm back to disableing SPF by setting to Never.

I still hope somebody from GFI will reply to this.  Users are already complaining about getting more Spam in their inbox.

(in reply to mtate)
Post #: 3
RE: SPF causing slow mail traffic - 4.Apr.2008 9:04:20 AM   
JanZoet

 

Posts: 576
Joined: 20.Feb.2008
Status: offline 		Hello Stefan,

May I ask you to do the following?

- Make sure your debug is enabled (Debug registry key is set to 1).
- Place SPF on Low or Medium.
- Let it run for a while and make sure the issue is reproduced.
- Place SPF back to Never.
- Post (part of) the contents of spf.txt where you can see SPF processing the e-mails (spf.txt can be found in the MailEssentials\DebugLogs folder).

Many thanks in advance.

Kind regards,

_____________________________

Jan Zoet
Technical Support - GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to stefan.gillich)
Post #: 4
RE: SPF causing slow mail traffic - 4.Apr.2008 9:30:13 AM   
stefan.gillich

 

Posts: 22
Joined: 21.Jun.2006
Status: offline 		Hi Jan Zoet

Below the part of spf.txt log file you requested.  Hope this is what you wanted to see.

Date,Time,Milliseconds,Log Level,Process ID,Thread ID,Event Type,Source,Description
2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info   ","spf","Message ID: <b1b401c8963c$2dd001f0$4cfe2bc9@sigpack.com>"
2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info   ","spf","Rejection level set to NEVER - switching processing off"
2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info   ","spf","ProcessMessage Exiting, rejection level set to never "
2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info   ","spf","Message ID: <0d3b01c89655$66382040$c0a80168@Elba>"
2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info   ","spf","Rejection level set to NEVER - switching processing off"
2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info   ","spf","ProcessMessage Exiting, rejection level set to never "
2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info   ","spf","Message ID: <0d3c01c89655$66467820$c0a80168@Elba>"
2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info   ","spf","Refresh Context"
2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info   ","spf","RefreshContext (0xF054B38)"
2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info   ","spf","Loading settings ..."
2008-04-04,15:11:32,621,3,"#000006dc","#000016b4","info   ","spf","[CSPFSettings::LoadDNSServer] SQL: SELECT dns_server.name, dns_server.use_default FROM dns_server"
2008-04-04,15:11:32,637,3,"#000006dc","#000016b4","info   ","spf","DNS Server: "
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","RefreshContext: loading gateways"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","perimeter ips:"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","  x.x.x.x"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","  y.y.y.y"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","  z.z.z.z"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","RefreshContext Done..."
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","SMTP Recipients [1]"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","match: 88.254.38.62"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","Non-gateway machine: 88.254.38.62"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","Getting Senderemail"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","Processing SPF. IP:88.254.38.62, Helo:, MailFrom:aluluuzrj@sakai.zaq.ne.jp"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","MyDNS ctor"
2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info   ","spf","dns server: () timeout 5 rr 16 <sakai.zaq.ne.jp>"
2008-04-04,15:11:32,996,3,"#000006dc","#000016b4","info   ","spf","dns.Query( qDomain ) = 0 ]1["
2008-04-04,15:11:32,996,3,"#000006dc","#000016b4","info   ","spf","TEXT: v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all [92]"
2008-04-04,15:11:32,996,3,"#000006dc","#000016b4","info   ","spf","found SPF record: v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all"
2008-04-04,15:11:32,996,3,"#000006dc","#000016b4","info   ","spf","MyDNS ctor"
2008-04-04,15:11:32,996,3,"#000006dc","#000016b4","info   ","spf","dns server: () timeout 5 rr 16 <spf-mx.zaq.ne.jp>"
2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info   ","spf","dns.Query( qDomain ) = 0 ]1["
2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info   ","spf","TEXT: v=spf1 ip4:211.124.255.176/28 ip4:211.124.127.0/27 ~all [55]"
2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info   ","spf","found SPF record: v=spf1 ip4:211.124.255.176/28 ip4:211.124.127.0/27 ~all"
2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info   ","spf","include:  getting SPF record:  No errors"
2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info   ","spf","ip_match:  88.254.38.62 == 211.124.255.176  (/28 255.255.255.240):  0"
2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info   ","spf","ip_match:  88.254.38.62 == 211.124.127.0  (/27 255.255.255.224):  0"
2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info   ","spf","include:  executed SPF record:  No errors  result: softfail  reason: mechanism"
2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info   ","spf","MyDNS ctor"
2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info   ","spf","dns server: () timeout 5 rr 16 <spf-poemh.zaq.ne.jp>"
2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info   ","spf","dns.Query( qDomain ) = 0 ]1["
2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info   ","spf","TEXT: v=spf1 ip4:122.197.253.64/28 ip4:122.197.253.80/28 ip4:122.197.253.114/32 ip4:122.197.253.115/32 ip4:122.197.253.98/32 ~all [123]"
2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info   ","spf","found SPF record: v=spf1 ip4:122.197.253.64/28 ip4:122.197.253.80/28 ip4:122.197.253.114/32 ip4:122.197.253.115/32 ip4:122.197.253.98/32 ~all"
2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info   ","spf","include:  getting SPF record:  No errors"
2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.64  (/28 255.255.255.240):  0"
2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.80  (/28 255.255.255.240):  0"
2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.114  (/32 255.255.255.255):  0"
2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.115  (/32 255.255.255.255):  0"
2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.98  (/32 255.255.255.255):  0"
2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info   ","spf","include:  executed SPF record:  No errors  result: softfail  reason: mechanism"
2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info   ","spf","MyDNS ctor"
2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info   ","spf","dns server: () timeout 5 rr 16 <spf-poeml.zaq.ne.jp>"
2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info   ","spf","dns.Query( qDomain ) = 0 ]1["
2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info   ","spf","TEXT: v=spf1 ip4:211.124.255.32/27 ~all [33]"
2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info   ","spf","found SPF record: v=spf1 ip4:211.124.255.32/27 ~all"
2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info   ","spf","include:  getting SPF record:  No errors"
2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info   ","spf","ip_match:  88.254.38.62 == 211.124.255.32  (/27 255.255.255.224):  0"
2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info   ","spf","include:  executed SPF record:  No errors  result: softfail  reason: mechanism"
2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info   ","spf","MyDNS ctor"
2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info   ","spf","dns server: () timeout 5 rr 16 <spf.trusted-forwarder.org>"
2008-04-04,15:11:40,952,3,"#000006dc","#000016b4","info   ","spf","dns.Query( qDomain ) = 0 ]1["
2008-04-04,15:11:40,952,3,"#000006dc","#000016b4","info   ","spf","TEXT: v=spf1 exists:%{ir}.wl.trusted-forwarder.org exists:%{p}.wl.trusted-forwarder.org [81]"
2008-04-04,15:11:40,952,3,"#000006dc","#000016b4","info   ","spf","found SPF record: v=spf1 exists:%{ir}.wl.trusted-forwarder.org exists:%{p}.wl.trusted-forwarder.org"
2008-04-04,15:11:40,952,3,"#000006dc","#000016b4","info   ","spf","include:  getting SPF record:  No errors"
2008-04-04,15:11:40,952,3,"#000006dc","#000016b4","info   ","spf","MyDNS ctor"
2008-04-04,15:11:40,952,3,"#000006dc","#000016b4","info   ","spf","dns server: () timeout 5 rr 1 <62.38.254.88.wl.trusted-forwarder.org>"
2008-04-04,15:11:40,967,3,"#000006dc","#000016b4","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:40,967,3,"#000006dc","#000016b4","info   ","spf","found 0 A records for 62.38.254.88.wl.trusted-forwarder.org  (herrno: 11004)"
2008-04-04,15:11:40,983,3,"#000006dc","#000016b4","info   ","spf","MyDNS ctor"
2008-04-04,15:11:40,983,3,"#000006dc","#000016b4","info   ","spf","dns server: () timeout 5 rr 12 <62.38.254.88.in-addr.arpa>"
2008-04-04,15:11:41,014,3,"#000006dc","#000016b4","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:41,014,3,"#000006dc","#000016b4","info   ","spf","MyDNS ctor"
2008-04-04,15:11:41,014,3,"#000006dc","#000016b4","info   ","spf","dns server: () timeout 5 rr 1 <unknown.wl.trusted-forwarder.org>"
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","found 0 A records for unknown.wl.trusted-forwarder.org  (herrno: 11004)"
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","include:  executed SPF record:  No errors  result: neutral  reason: default"
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","local_policy:  executed SPF record:  No errors  result: neutral  reason: default"
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","SPF header:  version: 1  mech 4/82  mod 0/0  len=86"
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","SPF record:  v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all"
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","Received-SPF: softfail (: transitioning domain of sakai.zaq.ne.jp does not designate 88.254.38.62 as permitted sender) client-ip=88.254.38.62; envelope-from=aluluuzrj@sakai.zaq.ne.jp; helo=;"
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","performing action"
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","SPF tested. [Performing action]"
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","Block Connection"
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","V_ACT_E2K3JUNK"
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","Logging action to D:\GFI\logs\spf.log"
2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info   ","spf","calling WRITECSVRECORDEX"
2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info   ","spf","WRITECSVRECORDEX returned"
2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info   ","spf","Filling DLE properties"
2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info   ","spf","GFI_DLE_AS_Action_ID = 7"
2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info   ","spf","GFI_DLE_AS_Action_Details = "
2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info   ","spf","GFI_DLE_AS_Reason_ID = 60003"
2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info   ","spf","Logging DLE"
2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info   ","spf","writing SpamFlag: -1"
2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","Message ID: <47F62901.5020809@sigpack.com>"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","SMTP Recipients [1]"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","match: 89.1.59.234"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","Non-gateway machine: 89.1.59.234"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","Getting Senderemail"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","Processing SPF. IP:89.1.59.234, Helo:, MailFrom:almws@sigpack.com"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","MyDNS ctor"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","dns server: () timeout 5 rr 16 <sigpack.com>"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","Received-SPF: none (: 89.1.59.234 is neither permitted nor denied by domain of sigpack.com) client-ip=89.1.59.234; envelope-from=almws@sigpack.com; helo=;"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","SPF tested. [Not performing action]"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","writing SpamFlag: 0"
2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","Message ID: <00418883.20080404131132@sigpack.com>"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","SMTP Recipients [1]"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","match: 60.28.45.2"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","Non-gateway machine: 60.28.45.2"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","Getting Senderemail"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","Processing SPF. IP:60.28.45.2, Helo:, MailFrom:ho-shyan@pervalidus.net"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","MyDNS ctor"
2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info   ","spf","dns server: () timeout 5 rr 16 <pervalidus.net>"
2008-04-04,15:11:41,561,3,"#000006dc","#00000e80","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:41,561,3,"#000006dc","#00000e80","info   ","spf","Received-SPF: none (: 60.28.45.2 is neither permitted nor denied by domain of pervalidus.net) client-ip=60.28.45.2; envelope-from=ho-shyan@pervalidus.net; helo=;"
2008-04-04,15:11:41,561,3,"#000006dc","#00000e80","info   ","spf","SPF tested. [Not performing action]"
2008-04-04,15:11:41,561,3,"#000006dc","#00000e80","info   ","spf","writing SpamFlag: 0"
2008-04-04,15:11:41,561,3,"#000006dc","#00000e80","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","Message ID: <000601c89655$04ed612c$e177d8be@nmodfdli>"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","SMTP Recipients [1]"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","match: 193.92.70.161"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","Non-gateway machine: 193.92.70.161"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","Getting Senderemail"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","Processing SPF. IP:193.92.70.161, Helo:, MailFrom:brefer@cehoo.net"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","MyDNS ctor"
2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info   ","spf","dns server: () timeout 5 rr 16 <cehoo.net>"
2008-04-04,15:11:41,796,3,"#000006dc","#000016b4","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:41,796,3,"#000006dc","#000016b4","info   ","spf","Received-SPF: none (: 193.92.70.161 is neither permitted nor denied by domain of cehoo.net) client-ip=193.92.70.161; envelope-from=brefer@cehoo.net; helo=;"
2008-04-04,15:11:41,796,3,"#000006dc","#000016b4","info   ","spf","SPF tested. [Not performing action]"
2008-04-04,15:11:41,796,3,"#000006dc","#000016b4","info   ","spf","writing SpamFlag: 0"
2008-04-04,15:11:41,796,3,"#000006dc","#000016b4","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","Message ID: <3IX537EJXVWDA849@wikipedia.org>"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","SMTP Recipients [3]"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","match: 41.200.243.123"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","Non-gateway machine: 41.200.243.123"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","Getting Senderemail"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","Processing SPF. IP:41.200.243.123, Helo:, MailFrom:elome@philly.com"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","MyDNS ctor"
2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info   ","spf","dns server: () timeout 5 rr 16 <philly.com>"
2008-04-04,15:11:42,030,3,"#000006dc","#0000064c","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:42,030,3,"#000006dc","#0000064c","info   ","spf","Received-SPF: none (: 41.200.243.123 is neither permitted nor denied by domain of philly.com) client-ip=41.200.243.123; envelope-from=elome@philly.com; helo=;"
2008-04-04,15:11:42,030,3,"#000006dc","#0000064c","info   ","spf","SPF tested. [Not performing action]"
2008-04-04,15:11:42,030,3,"#000006dc","#0000064c","info   ","spf","writing SpamFlag: 0"
2008-04-04,15:11:42,030,3,"#000006dc","#0000064c","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","Message ID: <[email=4D98DEEC-98AB-6988-7B9E-4B280DA4C20B@sigpack.com]4D98DEEC-98AB-6988-7B9E-4B280DA4C20B@sigpack.com[/email]>"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","SMTP Recipients [1]"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","match: 78.169.228.233"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","Non-gateway machine: 78.169.228.233"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","Getting Senderemail"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","Processing SPF. IP:78.169.228.233, Helo:, MailFrom:muguette-pressen@momsinlaw.com"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","MyDNS ctor"
2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info   ","spf","dns server: () timeout 5 rr 16 <momsinlaw.com>"
2008-04-04,15:11:42,343,3,"#000006dc","#00000e80","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:42,343,3,"#000006dc","#00000e80","info   ","spf","Received-SPF: none (: 78.169.228.233 is neither permitted nor denied by domain of momsinlaw.com) client-ip=78.169.228.233; envelope-from=muguette-pressen@momsinlaw.com; helo=;"
2008-04-04,15:11:42,343,3,"#000006dc","#00000e80","info   ","spf","SPF tested. [Not performing action]"
2008-04-04,15:11:42,343,3,"#000006dc","#00000e80","info   ","spf","writing SpamFlag: 0"
2008-04-04,15:11:42,343,3,"#000006dc","#00000e80","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info   ","spf","Message ID: <01c89666$2a442a00$06154d52@endorserdmh25>"
2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info   ","spf","SMTP Recipients [2]"
2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:42,546,3,"#000006dc","#0000064c","info   ","spf","match: 82.77.21.6"
2008-04-04,15:11:42,546,3,"#000006dc","#0000064c","info   ","spf","Non-gateway machine: 82.77.21.6"
2008-04-04,15:11:42,546,3,"#000006dc","#0000064c","info   ","spf","Getting Senderemail"
2008-04-04,15:11:42,546,3,"#000006dc","#0000064c","info   ","spf","Processing SPF. IP:82.77.21.6, Helo:, MailFrom:endorserdmh25@seawall.com"
2008-04-04,15:11:42,546,3,"#000006dc","#0000064c","info   ","spf","MyDNS ctor"
2008-04-04,15:11:42,546,3,"#000006dc","#0000064c","info   ","spf","dns server: () timeout 5 rr 16 <seawall.com>"
2008-04-04,15:11:42,734,3,"#000006dc","#0000064c","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:42,734,3,"#000006dc","#0000064c","info   ","spf","Received-SPF: none (: 82.77.21.6 is neither permitted nor denied by domain of seawall.com) client-ip=82.77.21.6; envelope-from=endorserdmh25@seawall.com; helo=;"
2008-04-04,15:11:42,734,3,"#000006dc","#0000064c","info   ","spf","SPF tested. [Not performing action]"
2008-04-04,15:11:42,734,3,"#000006dc","#0000064c","info   ","spf","writing SpamFlag: 0"
2008-04-04,15:11:42,734,3,"#000006dc","#0000064c","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","Message ID: <47F62903.7020901@sigpack.com>"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","SMTP Recipients [1]"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","match: 211.74.211.23"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","Non-gateway machine: 211.74.211.23"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","Getting Senderemail"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","Processing SPF. IP:211.74.211.23, Helo:, MailFrom:ddssfxr@sigpack.com"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","Received-SPF: none (: 211.74.211.23 is neither permitted nor denied by domain of sigpack.com) client-ip=211.74.211.23; envelope-from=ddssfxr@sigpack.com; helo=;"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","SPF tested. [Not performing action]"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","writing SpamFlag: 0"
2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","Message ID: <01c89698$75773080$a950d8dd@a-annech>"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","SMTP Recipients [1]"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","match: 221.216.80.169"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","Non-gateway machine: 221.216.80.169"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","Getting Senderemail"
2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info   ","spf","Processing SPF. IP:221.216.80.169, Helo:, MailFrom:a-annech@accentalaska.com"
2008-04-04,15:11:42,999,3,"#000006dc","#0000162c","info   ","spf","MyDNS ctor"
2008-04-04,15:11:42,999,3,"#000006dc","#0000162c","info   ","spf","dns server: () timeout 5 rr 16 <accentalaska.com>"
2008-04-04,15:11:43,343,3,"#000006dc","#0000162c","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:43,343,3,"#000006dc","#0000162c","info   ","spf","Received-SPF: none (: 221.216.80.169 is neither permitted nor denied by domain of accentalaska.com) client-ip=221.216.80.169; envelope-from=a-annech@accentalaska.com; helo=;"
2008-04-04,15:11:43,343,3,"#000006dc","#0000162c","info   ","spf","SPF tested. [Not performing action]"
2008-04-04,15:11:43,343,3,"#000006dc","#0000162c","info   ","spf","writing SpamFlag: 0"
2008-04-04,15:11:43,343,3,"#000006dc","#0000162c","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","Message ID: <0d4501c89655$687b8090$c0a80168@Elba>"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","SMTP Recipients [1]"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","match: 88.254.38.62"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","Non-gateway machine: 88.254.38.62"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","Getting Senderemail"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","Processing SPF. IP:88.254.38.62, Helo:, MailFrom:aluluuzrj@sakai.zaq.ne.jp"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","found SPF record: v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","found SPF record: v=spf1 ip4:211.124.255.176/28 ip4:211.124.127.0/27 ~all"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","include:  getting SPF record:  No errors"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 211.124.255.176  (/28 255.255.255.240):  0"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 211.124.127.0  (/27 255.255.255.224):  0"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","include:  executed SPF record:  No errors  result: softfail  reason: mechanism"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","found SPF record: v=spf1 ip4:122.197.253.64/28 ip4:122.197.253.80/28 ip4:122.197.253.114/32 ip4:122.197.253.115/32 ip4:122.197.253.98/32 ~all"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","include:  getting SPF record:  No errors"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.64  (/28 255.255.255.240):  0"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.80  (/28 255.255.255.240):  0"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.114  (/32 255.255.255.255):  0"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.115  (/32 255.255.255.255):  0"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.98  (/32 255.255.255.255):  0"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","include:  executed SPF record:  No errors  result: softfail  reason: mechanism"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","found SPF record: v=spf1 ip4:211.124.255.32/27 ~all"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","include:  getting SPF record:  No errors"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 211.124.255.32  (/27 255.255.255.224):  0"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","include:  executed SPF record:  No errors  result: softfail  reason: mechanism"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","found SPF record: v=spf1 exists:%{ir}.wl.trusted-forwarder.org exists:%{p}.wl.trusted-forwarder.org"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","include:  getting SPF record:  No errors"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","MyDNS ctor"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","dns server: () timeout 5 rr 1 <62.38.254.88.wl.trusted-forwarder.org>"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","found 0 A records for 62.38.254.88.wl.trusted-forwarder.org  (herrno: 11004)"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","MyDNS ctor"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","dns server: () timeout 5 rr 12 <62.38.254.88.in-addr.arpa>"
2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","MyDNS ctor"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","dns server: () timeout 5 rr 1 <unknown.wl.trusted-forwarder.org>"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","found 0 A records for unknown.wl.trusted-forwarder.org  (herrno: 11004)"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","include:  executed SPF record:  No errors  result: neutral  reason: default"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","local_policy:  executed SPF record:  No errors  result: neutral  reason: default"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","SPF header:  version: 1  mech 4/82  mod 0/0  len=86"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","SPF record:  v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","Received-SPF: softfail (: transitioning domain of sakai.zaq.ne.jp does not designate 88.254.38.62 as permitted sender) client-ip=88.254.38.62; envelope-from=aluluuzrj@sakai.zaq.ne.jp; helo=;"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","performing action"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","SPF tested. [Performing action]"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","Block Connection"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","V_ACT_E2K3JUNK"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","Logging action to D:\GFI\logs\spf.log"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","calling WRITECSVRECORDEX"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","WRITECSVRECORDEX returned"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","Filling DLE properties"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","GFI_DLE_AS_Action_ID = 7"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","GFI_DLE_AS_Action_Details = "
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","GFI_DLE_AS_Reason_ID = 60003"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","Logging DLE"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","writing SpamFlag: -1"
2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","Message ID: <GMUFIUJVUTCCRBJXVRULNAY@clo.com>"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","SMTP Recipients [2]"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","match: 124.60.236.15"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","Non-gateway machine: 124.60.236.15"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","Getting Senderemail"
2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info   ","spf","Processing SPF. IP:124.60.236.15, Helo:, MailFrom:xmhtvolxzjwxrb@dti.net"
2008-04-04,15:11:43,609,3,"#000006dc","#00000e80","info   ","spf","MyDNS ctor"
2008-04-04,15:11:43,609,3,"#000006dc","#00000e80","info   ","spf","dns server: () timeout 5 rr 16 <dti.net>"
2008-04-04,15:11:43,796,3,"#000006dc","#00000e80","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:43,796,3,"#000006dc","#00000e80","info   ","spf","Received-SPF: none (: 124.60.236.15 is neither permitted nor denied by domain of dti.net) client-ip=124.60.236.15; envelope-from=xmhtvolxzjwxrb@dti.net; helo=;"
2008-04-04,15:11:43,796,3,"#000006dc","#00000e80","info   ","spf","SPF tested. [Not performing action]"
2008-04-04,15:11:43,796,3,"#000006dc","#00000e80","info   ","spf","writing SpamFlag: 0"
2008-04-04,15:11:43,796,3,"#000006dc","#00000e80","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","Message ID: <000a01c89655$04ebee4a$ae3235b7@yrchwhu>"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","SMTP Recipients [1]"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","match: 24.236.203.178"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","Non-gateway machine: 24.236.203.178"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","Getting Senderemail"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","Processing SPF. IP:24.236.203.178, Helo:, MailFrom:reyesrreyes@edapi.cl"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","MyDNS ctor"
2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info   ","spf","dns server: () timeout 5 rr 16 <edapi.cl>"
2008-04-04,15:11:44,281,3,"#000006dc","#0000162c","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:44,281,3,"#000006dc","#0000162c","info   ","spf","Received-SPF: none (: 24.236.203.178 is neither permitted nor denied by domain of edapi.cl) client-ip=24.236.203.178; envelope-from=reyesrreyes@edapi.cl; helo=;"
2008-04-04,15:11:44,281,3,"#000006dc","#0000162c","info   ","spf","SPF tested. [Not performing action]"
2008-04-04,15:11:44,281,3,"#000006dc","#0000162c","info   ","spf","writing SpamFlag: 0"
2008-04-04,15:11:44,281,3,"#000006dc","#0000162c","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","Message ID: <0d4601c89655$687b8090$c0a80168@Elba>"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","SMTP Recipients [1]"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","match: 88.254.38.62"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","Non-gateway machine: 88.254.38.62"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","Getting Senderemail"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","Processing SPF. IP:88.254.38.62, Helo:, MailFrom:aluluuzrj@sakai.zaq.ne.jp"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","found SPF record: v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","found SPF record: v=spf1 ip4:211.124.255.176/28 ip4:211.124.127.0/27 ~all"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","include:  getting SPF record:  No errors"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 211.124.255.176  (/28 255.255.255.240):  0"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 211.124.127.0  (/27 255.255.255.224):  0"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","include:  executed SPF record:  No errors  result: softfail  reason: mechanism"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","found SPF record: v=spf1 ip4:122.197.253.64/28 ip4:122.197.253.80/28 ip4:122.197.253.114/32 ip4:122.197.253.115/32 ip4:122.197.253.98/32 ~all"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","include:  getting SPF record:  No errors"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.64  (/28 255.255.255.240):  0"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.80  (/28 255.255.255.240):  0"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.114  (/32 255.255.255.255):  0"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.115  (/32 255.255.255.255):  0"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 122.197.253.98  (/32 255.255.255.255):  0"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","include:  executed SPF record:  No errors  result: softfail  reason: mechanism"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","found SPF record: v=spf1 ip4:211.124.255.32/27 ~all"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","include:  getting SPF record:  No errors"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","ip_match:  88.254.38.62 == 211.124.255.32  (/27 255.255.255.224):  0"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","include:  executed SPF record:  No errors  result: softfail  reason: mechanism"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","found SPF record: v=spf1 exists:%{ir}.wl.trusted-forwarder.org exists:%{p}.wl.trusted-forwarder.org"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","include:  getting SPF record:  No errors"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","MyDNS ctor"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","dns server: () timeout 5 rr 1 <62.38.254.88.wl.trusted-forwarder.org>"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","found 0 A records for 62.38.254.88.wl.trusted-forwarder.org  (herrno: 11004)"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","MyDNS ctor"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","dns server: () timeout 5 rr 12 <62.38.254.88.in-addr.arpa>"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","MyDNS ctor"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","dns server: () timeout 5 rr 1 <unknown.wl.trusted-forwarder.org>"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","found 0 A records for unknown.wl.trusted-forwarder.org  (herrno: 11004)"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","include:  executed SPF record:  No errors  result: neutral  reason: default"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","local_policy:  executed SPF record:  No errors  result: neutral  reason: default"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","SPF header:  version: 1  mech 4/82  mod 0/0  len=86"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","SPF record:  v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","Received-SPF: softfail (: transitioning domain of sakai.zaq.ne.jp does not designate 88.254.38.62 as permitted sender) client-ip=88.254.38.62; envelope-from=aluluuzrj@sakai.zaq.ne.jp; helo=;"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","performing action"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","SPF tested. [Performing action]"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","Block Connection"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","V_ACT_E2K3JUNK"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","Logging action to D:\GFI\logs\spf.log"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","calling WRITECSVRECORDEX"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","WRITECSVRECORDEX returned"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","Filling DLE properties"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","GFI_DLE_AS_Action_ID = 7"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","GFI_DLE_AS_Action_Details = "
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","GFI_DLE_AS_Reason_ID = 60003"
2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info   ","spf","Logging DLE"
2008-04-04,15:11:44,390,3,"#000006dc","#0000064c","info   ","spf","writing SpamFlag: -1"
2008-04-04,15:11:44,390,3,"#000006dc","#0000064c","info   ","spf","UnInitMessage (0x290F6DC8)"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","InitMessage (0x290F6DC8)"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","Message ID: eb8201c89655$7175ef00$1900000a@pakistan422ee1"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","---------------------------------------------------------"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","InitMessage Exiting - checking expiry status..."
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","ProcessMessage (0x290F6DC8)"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","Getting SMTP recipients"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","SMTP Recipients [4]"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","Getting IP from received lines"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","[GetRecievedLines] stream retrieved"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","extracting the last of the remote IPs"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x|y.y.y.y|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","match: 117.102.24.130"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","Non-gateway machine: 117.102.24.130"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","Getting Senderemail"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","Processing SPF. IP:117.102.24.130, Helo:, MailFrom:charmainesnakelikeroot@tornadoair.com"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","MyDNS ctor"
2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info   ","spf","dns server: () timeout 5 rr 16 <tornadoair.com>"
2008-04-04,15:11:44,687,3,"#000006dc","#000016b4","info   ","spf","dns.Query( qDomain ) = 0 ]0["
2008-04-04,15:11:44,687,3,"#000006dc","#000016b4","info   ","spf","Received-SPF: none (: 117.102.24.130 is neither permitted nor denied by domain of tornadoair.com) client-ip=117.102.24.130; envelope-from=charmainesnakelikeroot@tornadoair.com; helo=;"
2008-04-04,15:11:44,687,3,"#000006dc","#000016b4","info   ","spf","SPF tested. [Not performing action]"
2008-04-04,15:11:44,687,3,"#000006dc","#000016b4","info   ","spf","writing SpamFlag: 0"
2008-04-04,15:11:44,687,3,"#000006dc","#000016b4","info   ","spf","UnInitMessage (0x290F6DC8)"

(in reply to stefan.gillich)
Post #: 5
RE: SPF causing slow mail traffic - 7.Apr.2008 3:26:15 AM   
stefan.gillich

 

Posts: 22
Joined: 21.Jun.2006
Status: offline 		Hi

In the meantime I did some more tesing.  Disableing the "Use the Trusted Forwarder SPF Global Whitelist" option improved the behaviour (tested friday to sunday).  The number of mails in the "Messages pending submission" queue droped to <200 compared to some thousands last week (still increasing).  Does this point to a performance problem on trusted-forwarder.org?

Since yesterday, we are down to <5 mails in the "Messages pending submission" with option "Use the Trusted Forwarder SPF Global Whitelist" disabled and <100 with these option enabled.

Does anybody know about problems on trusted-forwarder.org side?

Update:

In the meantime the number of mails in the queue is growing again with option "Use the Trusted Forwarder SPF Global Whitelist" enabled.  Much slower than last week but growing.  To me it really looks like an performance issue.  Is there an alternative to trusted-forwarder.org?

< Message edited by stefan.gillich -- 7.Apr.2008 5:27:37 AM >

(in reply to stefan.gillich)
Post #: 6
RE: SPF causing slow mail traffic - 7.Apr.2008 9:09:45 AM   
JanZoet

 

Posts: 576
Joined: 20.Feb.2008
Status: offline 		Hello Stefan,

Looking at your logging abstract I see that the SPF check sometimes takes rather long.
Somehow the DNS query does not receive a reply in a timely fashion.
I would advise you to go through http://kbase.gfi.com/showarticle.asp?id=KBID001770 and follow the DNS troubleshooting steps.
Configuring MailEssentials to use a different DSN server might help as well (Anti Spam > Properties > DNS Server tab). If you select a different server for MailEssentials to use I would advise you to restart the MailEssentials services together with the IIS Admin service after the change and to make sure the 'Test' option gives a successful result quickly.

Kind regards,

_____________________________

Jan Zoet
Technical Support - GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to stefan.gillich)
Post #: 7
RE: SPF causing slow mail traffic - 8.Apr.2008 9:44:11 AM   
stefan.gillich

 

Posts: 22
Joined: 21.Jun.2006
Status: offline 		Hi Jan

I tested DNS and can't find any problem.  No event log entries, all gfi tests successful (DNSBL, Header Checking, SPF, Spam URI Realtime Blacklist), nslookup and dcdiag.  DNS is running on the same machine than ME.

Same behaviour on test installation in DMZ using an other DNS server (installed on the test server, also).  Same thing.  Enabling SPF fills the queue.

(in reply to JanZoet)