--On Monday, March 24, 2014 12:28 PM -0700 Quanah Gibson-Mount
<qua...@zimbra.com> wrote:
For some reason, with this spam email, URIDNSBL never seems to kick off.
Usually I see lines like:
Ah, I didn't have the full text of the message. However, something still
seems off, as the URIDNSBL scans aborted?
Mar 24 13:33:51.109 [17508] dbg: uridnsbl: considering
host=www.writicized.eu, domain=writicized.eu
Mar 24 13:33:51.130 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_PH_SURBL DNSBL:writicized.eu:multi.surbl.org
Mar 24 13:33:51.130 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_MW_SURBL DNSBL:writicized.eu:multi.surbl.org
Mar 24 13:33:51.130 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_SC_SURBL DNSBL:writicized.eu:multi.surbl.org
Mar 24 13:33:51.130 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_JP_SURBL DNSBL:writicized.eu:multi.surbl.org
Mar 24 13:33:51.130 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_AB_SURBL DNSBL:writicized.eu:multi.surbl.org
Mar 24 13:33:51.130 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_WS_SURBL DNSBL:writicized.eu:multi.surbl.org
Mar 24 13:33:51.130 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_RHS_DOB DNSBL:writicized.eu:dob.sibl.support-intelligence.net
Mar 24 13:33:51.131 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_ERROR DNSBL:writicized.eu:dbl.spamhaus.org
Mar 24 13:33:51.131 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_SPAM DNSBL:writicized.eu:dbl.spamhaus.org
Mar 24 13:33:51.131 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_REDIR DNSBL:writicized.eu:dbl.spamhaus.org
Mar 24 13:33:51.133 [17508] dbg: uridnsbl: complete_ns_lookup
NS:writicized.eu
Mar 24 13:33:51.135 [17508] dbg: uridnsbl: got(1) NS for writicized.eu:
writicized.eu. 85335 IN NS b.ns.joker.com.
Mar 24 13:33:51.135 [17508] dbg: uridnsbl: got(2) NS for writicized.eu:
writicized.eu. 85335 IN NS a.ns.joker.com.
Mar 24 13:33:51.136 [17508] dbg: uridnsbl: got(3) NS for writicized.eu:
writicized.eu. 85335 IN NS c.ns.joker.com.
Mar 24 13:33:51.137 [17508] dbg: uridnsbl: complete_a_lookup
A:www.writicized.eu
Mar 24 13:33:51.137 [17508] dbg: uridnsbl: complete_a_lookup got(1) A for
www.writicized.eu: www.writicized.eu. 736 IN A 184.22.111.14
Mar 24 13:33:51.141 [17508] dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL
DNSBL:14.111.22.184:zen.spamhaus.org
Mar 24 13:33:51.144 [17508] dbg: uridnsbl: complete_a_lookup
A:b.ns.joker.com
Mar 24 13:33:51.144 [17508] dbg: uridnsbl: complete_a_lookup got(1) A for
b.ns.joker.com: b.ns.joker.com. 144125 IN A 159.25.97.69
Mar 24 13:33:51.146 [17508] dbg: uridnsbl: complete_a_lookup
A:a.ns.joker.com
Mar 24 13:33:51.146 [17508] dbg: uridnsbl: complete_a_lookup got(1) A for
a.ns.joker.com: a.ns.joker.com. 144125 IN A 184.172.157.218
Mar 24 13:33:51.147 [17508] dbg: uridnsbl: complete_a_lookup
A:c.ns.joker.com
Mar 24 13:33:51.148 [17508] dbg: uridnsbl: complete_a_lookup got(1) A for
c.ns.joker.com: c.ns.joker.com. 144125 IN A 85.25.110.247
Mar 24 13:33:51.149 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_SBL_A DNSBL:14.111.22.184:sbl.spamhaus.org
Mar 24 13:33:51.149 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_SBL_A DNSBL:69.97.25.159:sbl.spamhaus.org
Mar 24 13:33:51.150 [17508] dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL
DNSBL:69.97.25.159:zen.spamhaus.org
Mar 24 13:33:51.150 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_SBL_A DNSBL:218.157.172.184:sbl.spamhaus.org
Mar 24 13:33:51.151 [17508] dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL
DNSBL:218.157.172.184:zen.spamhaus.org
Mar 24 13:33:51.151 [17508] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_SBL_A DNSBL:247.110.25.85:sbl.spamhaus.org
Mar 24 13:33:51.152 [17508] dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL
DNSBL:247.110.25.85:zen.spamhaus.org
Mar 24 13:33:54.879 [17508] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_BLACK DNSBL:writicized.eu:multi.uribl.com
Mar 24 13:33:54.879 [17508] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_RED DNSBL:writicized.eu:multi.uribl.com
Mar 24 13:33:54.879 [17508] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_GREY DNSBL:writicized.eu:multi.uribl.com
Mar 24 13:33:54.879 [17508] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_BLOCKED DNSBL:writicized.eu:multi.uribl.com
Return-Path: lendingt...@writicized.eu
X-Spam-Status: No, score=2.4 required=5.0 tests=AC_HTML_NONSENSE_TAGS,
HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,MIME_HTML_ONLY,RDNS_NONE,TVD_RCVD_IP,
TVD_RCVD_IP4,T_REMOTE_IMAGE,UNPARSEABLE_RELAY autolearn=no
autolearn_force=no
version=3.4.0
X-Spam-Level: **
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on edge01.zimbra.com
--Quanah
--
Quanah Gibson-Mount
Architect - Server
Zimbra, Inc.
--------------------
Zimbra :: the leader in open source messaging and collaboration
