SPF causing slow mail traffic

SPF causing slow mail traffic (Full Version)

All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP

Message

stefan.gillich -> SPF causing slow mail traffic (3.Apr.2008 1:02:16 PM)
Hi All Today I installed the new ME 12 version (20080326) on Windows Server 2003 SP2. Exchange 2003 SP2 is running on the same machine. After installation the Exchange queue "Messages pending submission started filling up. Playing around with the SPF filters showed that SPF filter is causing this problem. Disabling SPF filter caused the queue filled with 4000+ mails to get empty in about 5-10 minutes. Enabling SPF again started filling the queue again. For testing purpose I installed ME on our perimeter server (using IIS smtp service, not Exchange). Same issue in this environment. The mail queue gets filled when SPF enabled. ME 12 (2001203) didn't show this behaviour. Looks like something is broken in the new version. Anyone else discovering the same issue? Regards Stefan

mtate -> RE: SPF causing slow mail traffic (4.Apr.2008 4:26:16 AM)
We've had the same issue with GFI in the past after we enabled SPF. We had to set the SPF level to low/disable to resolve the issue. We did have GFI support look into the matter but they couldn't offer any fix.

stefan.gillich -> RE: SPF causing slow mail traffic (4.Apr.2008 4:51:52 AM)
hi mtate Thanks for replying. I tested setting SPF to Low. Same thing as before when set to Medium. Immediatly after setting to Low or Medium, the queue starts filling up. :-(( I'm back to disableing SPF by setting to Never. I still hope somebody from GFI will reply to this. Users are already complaining about getting more Spam in their inbox.

JanZoet -> RE: SPF causing slow mail traffic (4.Apr.2008 9:04:20 AM)
Hello Stefan, May I ask you to do the following? - Make sure your debug is enabled (Debug registry key is set to 1). - Place SPF on Low or Medium. - Let it run for a while and make sure the issue is reproduced. - Place SPF back to Never. - Post (part of) the contents of spf.txt where you can see SPF processing the e-mails (spf.txt can be found in the MailEssentials\DebugLogs folder). Many thanks in advance. Kind regards,

stefan.gillich -> RE: SPF causing slow mail traffic (4.Apr.2008 9:30:13 AM)
Hi Jan Zoet Below the part of spf.txt log file you requested. Hope this is what you wanted to see. Date,Time,Milliseconds,Log Level,Process ID,Thread ID,Event Type,Source,Description 2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info ","spf","Message ID: <b1b401c8963c$2dd001f0$4cfe2bc9@sigpack.com>" 2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info ","spf","Rejection level set to NEVER - switching processing off" 2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info ","spf","ProcessMessage Exiting, rejection level set to never " 2008-04-04,15:11:31,793,3,"#000006dc","#000016b4","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info ","spf","Message ID: <0d3b01c89655$66382040$c0a80168@Elba>" 2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info ","spf","Rejection level set to NEVER - switching processing off" 2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info ","spf","ProcessMessage Exiting, rejection level set to never " 2008-04-04,15:11:32,371,3,"#000006dc","#000016b4","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info ","spf","Message ID: <0d3c01c89655$66467820$c0a80168@Elba>" 2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info ","spf","Refresh Context" 2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info ","spf","RefreshContext (0xF054B38)" 2008-04-04,15:11:32,590,3,"#000006dc","#000016b4","info ","spf","Loading settings ..." 2008-04-04,15:11:32,621,3,"#000006dc","#000016b4","info ","spf","[CSPFSettings::LoadDNSServer] SQL: SELECT dns_server.name, dns_server.use_default FROM dns_server" 2008-04-04,15:11:32,637,3,"#000006dc","#000016b4","info ","spf","DNS Server: " 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","RefreshContext: loading gateways" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","perimeter ips:" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf"," x.x.x.x" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf"," y.y.y.y" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf"," z.z.z.z" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","RefreshContext Done..." 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","SMTP Recipients [1]" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","Getting IP from received lines" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","match: 88.254.38.62" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","Non-gateway machine: 88.254.38.62" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","Getting Senderemail" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","Processing SPF. IP:88.254.38.62, Helo:, MailFrom:aluluuzrj@sakai.zaq.ne.jp" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","MyDNS ctor" 2008-04-04,15:11:32,652,3,"#000006dc","#000016b4","info ","spf","dns server: () timeout 5 rr 16 <sakai.zaq.ne.jp>" 2008-04-04,15:11:32,996,3,"#000006dc","#000016b4","info ","spf","dns.Query( qDomain ) = 0 ]1[" 2008-04-04,15:11:32,996,3,"#000006dc","#000016b4","info ","spf","TEXT: v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all [92]" 2008-04-04,15:11:32,996,3,"#000006dc","#000016b4","info ","spf","found SPF record: v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all" 2008-04-04,15:11:32,996,3,"#000006dc","#000016b4","info ","spf","MyDNS ctor" 2008-04-04,15:11:32,996,3,"#000006dc","#000016b4","info ","spf","dns server: () timeout 5 rr 16 <spf-mx.zaq.ne.jp>" 2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info ","spf","dns.Query( qDomain ) = 0 ]1[" 2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info ","spf","TEXT: v=spf1 ip4:211.124.255.176/28 ip4:211.124.127.0/27 ~all [55]" 2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info ","spf","found SPF record: v=spf1 ip4:211.124.255.176/28 ip4:211.124.127.0/27 ~all" 2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info ","spf","include: getting SPF record: No errors" 2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info ","spf","ip_match: 88.254.38.62 == 211.124.255.176 (/28 255.255.255.240): 0" 2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info ","spf","ip_match: 88.254.38.62 == 211.124.127.0 (/27 255.255.255.224): 0" 2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info ","spf","include: executed SPF record: No errors result: softfail reason: mechanism" 2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info ","spf","MyDNS ctor" 2008-04-04,15:11:33,340,3,"#000006dc","#000016b4","info ","spf","dns server: () timeout 5 rr 16 <spf-poemh.zaq.ne.jp>" 2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info ","spf","dns.Query( qDomain ) = 0 ]1[" 2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info ","spf","TEXT: v=spf1 ip4:122.197.253.64/28 ip4:122.197.253.80/28 ip4:122.197.253.114/32 ip4:122.197.253.115/32 ip4:122.197.253.98/32 ~all [123]" 2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info ","spf","found SPF record: v=spf1 ip4:122.197.253.64/28 ip4:122.197.253.80/28 ip4:122.197.253.114/32 ip4:122.197.253.115/32 ip4:122.197.253.98/32 ~all" 2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info ","spf","include: getting SPF record: No errors" 2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info ","spf","ip_match: 88.254.38.62 == 122.197.253.64 (/28 255.255.255.240): 0" 2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info ","spf","ip_match: 88.254.38.62 == 122.197.253.80 (/28 255.255.255.240): 0" 2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info ","spf","ip_match: 88.254.38.62 == 122.197.253.114 (/32 255.255.255.255): 0" 2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info ","spf","ip_match: 88.254.38.62 == 122.197.253.115 (/32 255.255.255.255): 0" 2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info ","spf","ip_match: 88.254.38.62 == 122.197.253.98 (/32 255.255.255.255): 0" 2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info ","spf","include: executed SPF record: No errors result: softfail reason: mechanism" 2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info ","spf","MyDNS ctor" 2008-04-04,15:11:33,684,3,"#000006dc","#000016b4","info ","spf","dns server: () timeout 5 rr 16 <spf-poeml.zaq.ne.jp>" 2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info ","spf","dns.Query( qDomain ) = 0 ]1[" 2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info ","spf","TEXT: v=spf1 ip4:211.124.255.32/27 ~all [33]" 2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info ","spf","found SPF record: v=spf1 ip4:211.124.255.32/27 ~all" 2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info ","spf","include: getting SPF record: No errors" 2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info ","spf","ip_match: 88.254.38.62 == 211.124.255.32 (/27 255.255.255.224): 0" 2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info ","spf","include: executed SPF record: No errors result: softfail reason: mechanism" 2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info ","spf","MyDNS ctor" 2008-04-04,15:11:37,185,3,"#000006dc","#000016b4","info ","spf","dns server: () timeout 5 rr 16 <spf.trusted-forwarder.org>" 2008-04-04,15:11:40,952,3,"#000006dc","#000016b4","info ","spf","dns.Query( qDomain ) = 0 ]1[" 2008-04-04,15:11:40,952,3,"#000006dc","#000016b4","info ","spf","TEXT: v=spf1 exists:%{ir}.wl.trusted-forwarder.org exists:%{p}.wl.trusted-forwarder.org [81]" 2008-04-04,15:11:40,952,3,"#000006dc","#000016b4","info ","spf","found SPF record: v=spf1 exists:%{ir}.wl.trusted-forwarder.org exists:%{p}.wl.trusted-forwarder.org" 2008-04-04,15:11:40,952,3,"#000006dc","#000016b4","info ","spf","include: getting SPF record: No errors" 2008-04-04,15:11:40,952,3,"#000006dc","#000016b4","info ","spf","MyDNS ctor" 2008-04-04,15:11:40,952,3,"#000006dc","#000016b4","info ","spf","dns server: () timeout 5 rr 1 <62.38.254.88.wl.trusted-forwarder.org>" 2008-04-04,15:11:40,967,3,"#000006dc","#000016b4","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:40,967,3,"#000006dc","#000016b4","info ","spf","found 0 A records for 62.38.254.88.wl.trusted-forwarder.org (herrno: 11004)" 2008-04-04,15:11:40,983,3,"#000006dc","#000016b4","info ","spf","MyDNS ctor" 2008-04-04,15:11:40,983,3,"#000006dc","#000016b4","info ","spf","dns server: () timeout 5 rr 12 <62.38.254.88.in-addr.arpa>" 2008-04-04,15:11:41,014,3,"#000006dc","#000016b4","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:41,014,3,"#000006dc","#000016b4","info ","spf","MyDNS ctor" 2008-04-04,15:11:41,014,3,"#000006dc","#000016b4","info ","spf","dns server: () timeout 5 rr 1 <unknown.wl.trusted-forwarder.org>" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","found 0 A records for unknown.wl.trusted-forwarder.org (herrno: 11004)" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","include: executed SPF record: No errors result: neutral reason: default" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","local_policy: executed SPF record: No errors result: neutral reason: default" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","SPF header: version: 1 mech 4/82 mod 0/0 len=86" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","SPF record: v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","Received-SPF: softfail (: transitioning domain of sakai.zaq.ne.jp does not designate 88.254.38.62 as permitted sender) client-ip=88.254.38.62; envelope-from=aluluuzrj@sakai.zaq.ne.jp; helo=;" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","performing action" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","SPF tested. [Performing action]" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","Block Connection" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","V_ACT_E2K3JUNK" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","Logging action to D:\GFI\logs\spf.log" 2008-04-04,15:11:41,046,3,"#000006dc","#000016b4","info ","spf","calling WRITECSVRECORDEX" 2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info ","spf","WRITECSVRECORDEX returned" 2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info ","spf","Filling DLE properties" 2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info ","spf","GFI_DLE_AS_Action_ID = 7" 2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info ","spf","GFI_DLE_AS_Action_Details = " 2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info ","spf","GFI_DLE_AS_Reason_ID = 60003" 2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info ","spf","Logging DLE" 2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info ","spf","writing SpamFlag: -1" 2008-04-04,15:11:41,061,3,"#000006dc","#000016b4","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","Message ID: <47F62901.5020809@sigpack.com>" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","SMTP Recipients [1]" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","Getting IP from received lines" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","match: 89.1.59.234" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","Non-gateway machine: 89.1.59.234" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","Getting Senderemail" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","Processing SPF. IP:89.1.59.234, Helo:, MailFrom:almws@sigpack.com" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","MyDNS ctor" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","dns server: () timeout 5 rr 16 <sigpack.com>" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","Received-SPF: none (: 89.1.59.234 is neither permitted nor denied by domain of sigpack.com) client-ip=89.1.59.234; envelope-from=almws@sigpack.com; helo=;" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","SPF tested. [Not performing action]" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","writing SpamFlag: 0" 2008-04-04,15:11:41,139,3,"#000006dc","#0000064c","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","Message ID: <00418883.20080404131132@sigpack.com>" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","SMTP Recipients [1]" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","Getting IP from received lines" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","match: 60.28.45.2" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","Non-gateway machine: 60.28.45.2" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","Getting Senderemail" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","Processing SPF. IP:60.28.45.2, Helo:, MailFrom:ho-shyan@pervalidus.net" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","MyDNS ctor" 2008-04-04,15:11:41,342,3,"#000006dc","#00000e80","info ","spf","dns server: () timeout 5 rr 16 <pervalidus.net>" 2008-04-04,15:11:41,561,3,"#000006dc","#00000e80","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:41,561,3,"#000006dc","#00000e80","info ","spf","Received-SPF: none (: 60.28.45.2 is neither permitted nor denied by domain of pervalidus.net) client-ip=60.28.45.2; envelope-from=ho-shyan@pervalidus.net; helo=;" 2008-04-04,15:11:41,561,3,"#000006dc","#00000e80","info ","spf","SPF tested. [Not performing action]" 2008-04-04,15:11:41,561,3,"#000006dc","#00000e80","info ","spf","writing SpamFlag: 0" 2008-04-04,15:11:41,561,3,"#000006dc","#00000e80","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","Message ID: <000601c89655$04ed612c$e177d8be@nmodfdli>" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","SMTP Recipients [1]" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","Getting IP from received lines" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","match: 193.92.70.161" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","Non-gateway machine: 193.92.70.161" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","Getting Senderemail" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","Processing SPF. IP:193.92.70.161, Helo:, MailFrom:brefer@cehoo.net" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","MyDNS ctor" 2008-04-04,15:11:41,655,3,"#000006dc","#000016b4","info ","spf","dns server: () timeout 5 rr 16 <cehoo.net>" 2008-04-04,15:11:41,796,3,"#000006dc","#000016b4","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:41,796,3,"#000006dc","#000016b4","info ","spf","Received-SPF: none (: 193.92.70.161 is neither permitted nor denied by domain of cehoo.net) client-ip=193.92.70.161; envelope-from=brefer@cehoo.net; helo=;" 2008-04-04,15:11:41,796,3,"#000006dc","#000016b4","info ","spf","SPF tested. [Not performing action]" 2008-04-04,15:11:41,796,3,"#000006dc","#000016b4","info ","spf","writing SpamFlag: 0" 2008-04-04,15:11:41,796,3,"#000006dc","#000016b4","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","Message ID: <3IX537EJXVWDA849@wikipedia.org>" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","SMTP Recipients [3]" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","Getting IP from received lines" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","match: 41.200.243.123" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","Non-gateway machine: 41.200.243.123" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","Getting Senderemail" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","Processing SPF. IP:41.200.243.123, Helo:, MailFrom:elome@philly.com" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","MyDNS ctor" 2008-04-04,15:11:41,905,3,"#000006dc","#0000064c","info ","spf","dns server: () timeout 5 rr 16 <philly.com>" 2008-04-04,15:11:42,030,3,"#000006dc","#0000064c","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:42,030,3,"#000006dc","#0000064c","info ","spf","Received-SPF: none (: 41.200.243.123 is neither permitted nor denied by domain of philly.com) client-ip=41.200.243.123; envelope-from=elome@philly.com; helo=;" 2008-04-04,15:11:42,030,3,"#000006dc","#0000064c","info ","spf","SPF tested. [Not performing action]" 2008-04-04,15:11:42,030,3,"#000006dc","#0000064c","info ","spf","writing SpamFlag: 0" 2008-04-04,15:11:42,030,3,"#000006dc","#0000064c","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","Message ID: <[email=4D98DEEC-98AB-6988-7B9E-4B280DA4C20B@sigpack.com]4D98DEEC-98AB-6988-7B9E-4B280DA4C20B@sigpack.com[/email]>" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","SMTP Recipients [1]" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","Getting IP from received lines" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","match: 78.169.228.233" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","Non-gateway machine: 78.169.228.233" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","Getting Senderemail" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","Processing SPF. IP:78.169.228.233, Helo:, MailFrom:muguette-pressen@momsinlaw.com" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","MyDNS ctor" 2008-04-04,15:11:42,140,3,"#000006dc","#00000e80","info ","spf","dns server: () timeout 5 rr 16 <momsinlaw.com>" 2008-04-04,15:11:42,343,3,"#000006dc","#00000e80","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:42,343,3,"#000006dc","#00000e80","info ","spf","Received-SPF: none (: 78.169.228.233 is neither permitted nor denied by domain of momsinlaw.com) client-ip=78.169.228.233; envelope-from=muguette-pressen@momsinlaw.com; helo=;" 2008-04-04,15:11:42,343,3,"#000006dc","#00000e80","info ","spf","SPF tested. [Not performing action]" 2008-04-04,15:11:42,343,3,"#000006dc","#00000e80","info ","spf","writing SpamFlag: 0" 2008-04-04,15:11:42,343,3,"#000006dc","#00000e80","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info ","spf","Message ID: <01c89666$2a442a00$06154d52@endorserdmh25>" 2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info ","spf","SMTP Recipients [2]" 2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info ","spf","Getting IP from received lines" 2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:42,530,3,"#000006dc","#0000064c","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:42,546,3,"#000006dc","#0000064c","info ","spf","match: 82.77.21.6" 2008-04-04,15:11:42,546,3,"#000006dc","#0000064c","info ","spf","Non-gateway machine: 82.77.21.6" 2008-04-04,15:11:42,546,3,"#000006dc","#0000064c","info ","spf","Getting Senderemail" 2008-04-04,15:11:42,546,3,"#000006dc","#0000064c","info ","spf","Processing SPF. IP:82.77.21.6, Helo:, MailFrom:endorserdmh25@seawall.com" 2008-04-04,15:11:42,546,3,"#000006dc","#0000064c","info ","spf","MyDNS ctor" 2008-04-04,15:11:42,546,3,"#000006dc","#0000064c","info ","spf","dns server: () timeout 5 rr 16 <seawall.com>" 2008-04-04,15:11:42,734,3,"#000006dc","#0000064c","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:42,734,3,"#000006dc","#0000064c","info ","spf","Received-SPF: none (: 82.77.21.6 is neither permitted nor denied by domain of seawall.com) client-ip=82.77.21.6; envelope-from=endorserdmh25@seawall.com; helo=;" 2008-04-04,15:11:42,734,3,"#000006dc","#0000064c","info ","spf","SPF tested. [Not performing action]" 2008-04-04,15:11:42,734,3,"#000006dc","#0000064c","info ","spf","writing SpamFlag: 0" 2008-04-04,15:11:42,734,3,"#000006dc","#0000064c","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","Message ID: <47F62903.7020901@sigpack.com>" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","SMTP Recipients [1]" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","Getting IP from received lines" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","match: 211.74.211.23" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","Non-gateway machine: 211.74.211.23" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","Getting Senderemail" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","Processing SPF. IP:211.74.211.23, Helo:, MailFrom:ddssfxr@sigpack.com" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","Received-SPF: none (: 211.74.211.23 is neither permitted nor denied by domain of sigpack.com) client-ip=211.74.211.23; envelope-from=ddssfxr@sigpack.com; helo=;" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","SPF tested. [Not performing action]" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","writing SpamFlag: 0" 2008-04-04,15:11:42,843,3,"#000006dc","#00000e80","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","Message ID: <01c89698$75773080$a950d8dd@a-annech>" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","SMTP Recipients [1]" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","Getting IP from received lines" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","match: 221.216.80.169" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","Non-gateway machine: 221.216.80.169" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","Getting Senderemail" 2008-04-04,15:11:42,984,3,"#000006dc","#0000162c","info ","spf","Processing SPF. IP:221.216.80.169, Helo:, MailFrom:a-annech@accentalaska.com" 2008-04-04,15:11:42,999,3,"#000006dc","#0000162c","info ","spf","MyDNS ctor" 2008-04-04,15:11:42,999,3,"#000006dc","#0000162c","info ","spf","dns server: () timeout 5 rr 16 <accentalaska.com>" 2008-04-04,15:11:43,343,3,"#000006dc","#0000162c","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:43,343,3,"#000006dc","#0000162c","info ","spf","Received-SPF: none (: 221.216.80.169 is neither permitted nor denied by domain of accentalaska.com) client-ip=221.216.80.169; envelope-from=a-annech@accentalaska.com; helo=;" 2008-04-04,15:11:43,343,3,"#000006dc","#0000162c","info ","spf","SPF tested. [Not performing action]" 2008-04-04,15:11:43,343,3,"#000006dc","#0000162c","info ","spf","writing SpamFlag: 0" 2008-04-04,15:11:43,343,3,"#000006dc","#0000162c","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","Message ID: <0d4501c89655$687b8090$c0a80168@Elba>" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","SMTP Recipients [1]" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","Getting IP from received lines" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","match: 88.254.38.62" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","Non-gateway machine: 88.254.38.62" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","Getting Senderemail" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","Processing SPF. IP:88.254.38.62, Helo:, MailFrom:aluluuzrj@sakai.zaq.ne.jp" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","found SPF record: v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","found SPF record: v=spf1 ip4:211.124.255.176/28 ip4:211.124.127.0/27 ~all" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","include: getting SPF record: No errors" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 211.124.255.176 (/28 255.255.255.240): 0" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 211.124.127.0 (/27 255.255.255.224): 0" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","include: executed SPF record: No errors result: softfail reason: mechanism" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","found SPF record: v=spf1 ip4:122.197.253.64/28 ip4:122.197.253.80/28 ip4:122.197.253.114/32 ip4:122.197.253.115/32 ip4:122.197.253.98/32 ~all" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","include: getting SPF record: No errors" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 122.197.253.64 (/28 255.255.255.240): 0" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 122.197.253.80 (/28 255.255.255.240): 0" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 122.197.253.114 (/32 255.255.255.255): 0" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 122.197.253.115 (/32 255.255.255.255): 0" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 122.197.253.98 (/32 255.255.255.255): 0" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","include: executed SPF record: No errors result: softfail reason: mechanism" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","found SPF record: v=spf1 ip4:211.124.255.32/27 ~all" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","include: getting SPF record: No errors" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 211.124.255.32 (/27 255.255.255.224): 0" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","include: executed SPF record: No errors result: softfail reason: mechanism" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","found SPF record: v=spf1 exists:%{ir}.wl.trusted-forwarder.org exists:%{p}.wl.trusted-forwarder.org" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","include: getting SPF record: No errors" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","MyDNS ctor" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","dns server: () timeout 5 rr 1 <62.38.254.88.wl.trusted-forwarder.org>" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","found 0 A records for 62.38.254.88.wl.trusted-forwarder.org (herrno: 11004)" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","MyDNS ctor" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","dns server: () timeout 5 rr 12 <62.38.254.88.in-addr.arpa>" 2008-04-04,15:11:43,452,3,"#000006dc","#0000064c","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","MyDNS ctor" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","dns server: () timeout 5 rr 1 <unknown.wl.trusted-forwarder.org>" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","found 0 A records for unknown.wl.trusted-forwarder.org (herrno: 11004)" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","include: executed SPF record: No errors result: neutral reason: default" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","local_policy: executed SPF record: No errors result: neutral reason: default" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","SPF header: version: 1 mech 4/82 mod 0/0 len=86" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","SPF record: v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","Received-SPF: softfail (: transitioning domain of sakai.zaq.ne.jp does not designate 88.254.38.62 as permitted sender) client-ip=88.254.38.62; envelope-from=aluluuzrj@sakai.zaq.ne.jp; helo=;" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","performing action" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","SPF tested. [Performing action]" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","Block Connection" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","V_ACT_E2K3JUNK" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","Logging action to D:\GFI\logs\spf.log" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","calling WRITECSVRECORDEX" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","WRITECSVRECORDEX returned" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","Filling DLE properties" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","GFI_DLE_AS_Action_ID = 7" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","GFI_DLE_AS_Action_Details = " 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","GFI_DLE_AS_Reason_ID = 60003" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","Logging DLE" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","writing SpamFlag: -1" 2008-04-04,15:11:43,468,3,"#000006dc","#0000064c","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","Message ID: <GMUFIUJVUTCCRBJXVRULNAY@clo.com>" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","SMTP Recipients [2]" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","Getting IP from received lines" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","match: 124.60.236.15" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","Non-gateway machine: 124.60.236.15" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","Getting Senderemail" 2008-04-04,15:11:43,593,3,"#000006dc","#00000e80","info ","spf","Processing SPF. IP:124.60.236.15, Helo:, MailFrom:xmhtvolxzjwxrb@dti.net" 2008-04-04,15:11:43,609,3,"#000006dc","#00000e80","info ","spf","MyDNS ctor" 2008-04-04,15:11:43,609,3,"#000006dc","#00000e80","info ","spf","dns server: () timeout 5 rr 16 <dti.net>" 2008-04-04,15:11:43,796,3,"#000006dc","#00000e80","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:43,796,3,"#000006dc","#00000e80","info ","spf","Received-SPF: none (: 124.60.236.15 is neither permitted nor denied by domain of dti.net) client-ip=124.60.236.15; envelope-from=xmhtvolxzjwxrb@dti.net; helo=;" 2008-04-04,15:11:43,796,3,"#000006dc","#00000e80","info ","spf","SPF tested. [Not performing action]" 2008-04-04,15:11:43,796,3,"#000006dc","#00000e80","info ","spf","writing SpamFlag: 0" 2008-04-04,15:11:43,796,3,"#000006dc","#00000e80","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","Message ID: <000a01c89655$04ebee4a$ae3235b7@yrchwhu>" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","SMTP Recipients [1]" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","Getting IP from received lines" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","match: 24.236.203.178" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","Non-gateway machine: 24.236.203.178" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","Getting Senderemail" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","Processing SPF. IP:24.236.203.178, Helo:, MailFrom:reyesrreyes@edapi.cl" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","MyDNS ctor" 2008-04-04,15:11:43,874,3,"#000006dc","#0000162c","info ","spf","dns server: () timeout 5 rr 16 <edapi.cl>" 2008-04-04,15:11:44,281,3,"#000006dc","#0000162c","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:44,281,3,"#000006dc","#0000162c","info ","spf","Received-SPF: none (: 24.236.203.178 is neither permitted nor denied by domain of edapi.cl) client-ip=24.236.203.178; envelope-from=reyesrreyes@edapi.cl; helo=;" 2008-04-04,15:11:44,281,3,"#000006dc","#0000162c","info ","spf","SPF tested. [Not performing action]" 2008-04-04,15:11:44,281,3,"#000006dc","#0000162c","info ","spf","writing SpamFlag: 0" 2008-04-04,15:11:44,281,3,"#000006dc","#0000162c","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","Message ID: <0d4601c89655$687b8090$c0a80168@Elba>" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","SMTP Recipients [1]" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","Getting IP from received lines" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","match: 88.254.38.62" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","Non-gateway machine: 88.254.38.62" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","Getting Senderemail" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","Processing SPF. IP:88.254.38.62, Helo:, MailFrom:aluluuzrj@sakai.zaq.ne.jp" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","found SPF record: v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","found SPF record: v=spf1 ip4:211.124.255.176/28 ip4:211.124.127.0/27 ~all" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","include: getting SPF record: No errors" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 211.124.255.176 (/28 255.255.255.240): 0" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 211.124.127.0 (/27 255.255.255.224): 0" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","include: executed SPF record: No errors result: softfail reason: mechanism" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","found SPF record: v=spf1 ip4:122.197.253.64/28 ip4:122.197.253.80/28 ip4:122.197.253.114/32 ip4:122.197.253.115/32 ip4:122.197.253.98/32 ~all" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","include: getting SPF record: No errors" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 122.197.253.64 (/28 255.255.255.240): 0" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 122.197.253.80 (/28 255.255.255.240): 0" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 122.197.253.114 (/32 255.255.255.255): 0" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 122.197.253.115 (/32 255.255.255.255): 0" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 122.197.253.98 (/32 255.255.255.255): 0" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","include: executed SPF record: No errors result: softfail reason: mechanism" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","found SPF record: v=spf1 ip4:211.124.255.32/27 ~all" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","include: getting SPF record: No errors" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","ip_match: 88.254.38.62 == 211.124.255.32 (/27 255.255.255.224): 0" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","include: executed SPF record: No errors result: softfail reason: mechanism" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","found SPF record: v=spf1 exists:%{ir}.wl.trusted-forwarder.org exists:%{p}.wl.trusted-forwarder.org" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","include: getting SPF record: No errors" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","MyDNS ctor" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","dns server: () timeout 5 rr 1 <62.38.254.88.wl.trusted-forwarder.org>" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","found 0 A records for 62.38.254.88.wl.trusted-forwarder.org (herrno: 11004)" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","MyDNS ctor" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","dns server: () timeout 5 rr 12 <62.38.254.88.in-addr.arpa>" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","MyDNS ctor" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","dns server: () timeout 5 rr 1 <unknown.wl.trusted-forwarder.org>" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","found 0 A records for unknown.wl.trusted-forwarder.org (herrno: 11004)" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","include: executed SPF record: No errors result: neutral reason: default" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","local_policy: executed SPF record: No errors result: neutral reason: default" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","SPF header: version: 1 mech 4/82 mod 0/0 len=86" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","SPF record: v=spf1 include:spf-mx.zaq.ne.jp include:spf-poemh.zaq.ne.jp include:spf-poeml.zaq.ne.jp ~all" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","Received-SPF: softfail (: transitioning domain of sakai.zaq.ne.jp does not designate 88.254.38.62 as permitted sender) client-ip=88.254.38.62; envelope-from=aluluuzrj@sakai.zaq.ne.jp; helo=;" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","performing action" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","SPF tested. [Performing action]" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","Block Connection" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","V_ACT_E2K3JUNK" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","Logging action to D:\GFI\logs\spf.log" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","calling WRITECSVRECORDEX" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","WRITECSVRECORDEX returned" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","Filling DLE properties" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","GFI_DLE_AS_Action_ID = 7" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","GFI_DLE_AS_Action_Details = " 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","GFI_DLE_AS_Reason_ID = 60003" 2008-04-04,15:11:44,375,3,"#000006dc","#0000064c","info ","spf","Logging DLE" 2008-04-04,15:11:44,390,3,"#000006dc","#0000064c","info ","spf","writing SpamFlag: -1" 2008-04-04,15:11:44,390,3,"#000006dc","#0000064c","info ","spf","UnInitMessage (0x290F6DC8)" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","InitMessage (0x290F6DC8)" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","Message ID: eb8201c89655$7175ef00$1900000a@pakistan422ee1" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","---------------------------------------------------------" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","InitMessage Exiting - checking expiry status..." 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","ProcessMessage (0x290F6DC8)" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","Getting SMTP recipients" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","SMTP Recipients [4]" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","Getting IP from received lines" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","[GetRecievedLines] stream retrieved" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","extracting the last of the remote IPs" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","::extractLastRemoteIP final regex = (?:(?:x.x.x.x\|y.y.y.y\|z.z.z.z).+?)+((\d{1,3}[.]){3}\d{1,3})" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","match: 117.102.24.130" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","Non-gateway machine: 117.102.24.130" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","Getting Senderemail" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","Processing SPF. IP:117.102.24.130, Helo:, MailFrom:charmainesnakelikeroot@tornadoair.com" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","MyDNS ctor" 2008-04-04,15:11:44,484,3,"#000006dc","#000016b4","info ","spf","dns server: () timeout 5 rr 16 <tornadoair.com>" 2008-04-04,15:11:44,687,3,"#000006dc","#000016b4","info ","spf","dns.Query( qDomain ) = 0 ]0[" 2008-04-04,15:11:44,687,3,"#000006dc","#000016b4","info ","spf","Received-SPF: none (: 117.102.24.130 is neither permitted nor denied by domain of tornadoair.com) client-ip=117.102.24.130; envelope-from=charmainesnakelikeroot@tornadoair.com; helo=;" 2008-04-04,15:11:44,687,3,"#000006dc","#000016b4","info ","spf","SPF tested. [Not performing action]" 2008-04-04,15:11:44,687,3,"#000006dc","#000016b4","info ","spf","writing SpamFlag: 0" 2008-04-04,15:11:44,687,3,"#000006dc","#000016b4","info ","spf","UnInitMessage (0x290F6DC8)"

stefan.gillich -> RE: SPF causing slow mail traffic (7.Apr.2008 3:26:15 AM)
Hi In the meantime I did some more tesing. Disableing the "Use the Trusted Forwarder SPF Global Whitelist" option improved the behaviour (tested friday to sunday). The number of mails in the "Messages pending submission" queue droped to <200 compared to some thousands last week (still increasing). Does this point to a performance problem on trusted-forwarder.org? Since yesterday, we are down to <5 mails in the "Messages pending submission" with option "Use the Trusted Forwarder SPF Global Whitelist" disabled and <100 with these option enabled. Does anybody know about problems on trusted-forwarder.org side? Update: In the meantime the number of mails in the queue is growing again with option "Use the Trusted Forwarder SPF Global Whitelist" enabled. Much slower than last week but growing. To me it really looks like an performance issue. Is there an alternative to trusted-forwarder.org?

JanZoet -> RE: SPF causing slow mail traffic (7.Apr.2008 9:09:45 AM)
Hello Stefan, Looking at your logging abstract I see that the SPF check sometimes takes rather long. Somehow the DNS query does not receive a reply in a timely fashion. I would advise you to go through http://kbase.gfi.com/showarticle.asp?id=KBID001770 and follow the DNS troubleshooting steps. Configuring MailEssentials to use a different DSN server might help as well (Anti Spam > Properties > DNS Server tab). If you select a different server for MailEssentials to use I would advise you to restart the MailEssentials services together with the IIS Admin service after the change and to make sure the 'Test' option gives a successful result quickly. Kind regards,

stefan.gillich -> RE: SPF causing slow mail traffic (8.Apr.2008 9:44:11 AM)
Hi Jan I tested DNS and can't find any problem. No event log entries, all gfi tests successful (DNSBL, Header Checking, SPF, Spam URI Realtime Blacklist), nslookup and dcdiag. DNS is running on the same machine than ME. Same behaviour on test installation in DMZ using an other DNS server (installed on the test server, also). Same thing. Enabling SPF fills the queue.

JanZoet -> RE: SPF causing slow mail traffic (9.Apr.2008 8:57:43 AM)
Hello Stefan, This could be due to a late response from the other side. Do you get instant results when you do a nslookup on the spf record of 'spf-poeml.zaq.ne.jp'? And what are the results if you configure an external DNS server to be used by MailEssentials (such as your ISPs DNS server)? I feel something must be delaying the reply to the SPF query. Kind regards,

stefan.gillich -> RE: SPF causing slow mail traffic (9.Apr.2008 1:30:40 PM)
Hi Jan I do get instant result doing an nslookup (type=txt) on spf-poeml.zaq.ne.jp. However, I configured ME to use one of our ISP DNS servers (restarted server after configuration change). No change. After enabling SPF the queue is still filling up. All other DNS related filters are running well. DNS Blacklist: checking bl.spamcop.net and sbl-xbl.spamhaus.org. Botnet / Zombie Check active Header Chekc: Verify if sender domain is valid is active Spam URI Realtime Blocklist: Check for multi.surbl.org is active. The 3 Filters mentioned above work just fine. The problem occurs only with SPF enabled. I tested with SPF enabled only (all other DNS related filters inactive). The queue is still filling up.

JanZoet -> RE: SPF causing slow mail traffic (14.Apr.2008 6:12:45 AM)
Hello Stefan, This issue is currently being handled by e-mail support. The reference number(s) used are: CAS-63742 - stefan.gillich NOTE: We have sent you an email on the address that you have registered over the forums with. Should you require any updates or further information, kindly contact us using the support form at the following link: http://support.gfi.com/supportrequestform.asp Kind regards,

Rajjairath -> RE: SPF causing slow mail traffic (24.Jun.2008 1:25:24 AM)
We are experiencing the same issue. I wondering if there is fix on this issue by chance?

Page: [1]