Hello Axb,

Tuesday, November 11, 2014, 11:26:50 AM, you wrote:

A> cat msg.eml | spamassassin -D dns

RBL rules hit... but they aren't showing under normal checks.

cat /tmp/00000001.eml | spamassassin -D dns
Nov 11 11:44:11.031 [26084] warn: config: created user preferences file: 
/root/.spamassassin/user_prefs
Nov 11 11:44:12.146 [26084] dbg: dns: EDNS, UDP payload size 4096
Nov 11 11:44:12.146 [26084] dbg: dns: servers obtained from Net::DNS : 
[127.0.0.1]:53
Nov 11 11:44:12.146 [26084] dbg: dns: nameservers set to 127.0.0.1
Nov 11 11:44:12.146 [26084] dbg: dns: using socket module: IO::Socket::INET6
Nov 11 11:44:12.146 [26084] dbg: dns: is Net::DNS::Resolver available? yes
Nov 11 11:44:12.146 [26084] dbg: dns: Net::DNS version: 0.72
Nov 11 11:44:12.167 [26084] dbg: dns: clear_resolver
Nov 11 11:44:12.168 [26084] dbg: dns: EDNS, UDP payload size 4096
Nov 11 11:44:12.168 [26084] dbg: dns: nameservers set to 127.0.0.1
Nov 11 11:44:12.168 [26084] dbg: dns: using socket module: IO::Socket::INET6
Nov 11 11:44:12.168 [26084] dbg: dns: is Net::DNS::Resolver available? yes
Nov 11 11:44:12.168 [26084] dbg: dns: Net::DNS version: 0.72
Nov 11 11:44:12.168 [26084] dbg: dns: dns_available set to yes in config file, 
skipping test
Nov 11 11:44:12.171 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.171 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.172 [26084] dbg: dns: connect_sock, resolver: yes
Nov 11 11:44:12.172 [26084] dbg: dns: LocalAddr: 0.0.0.0, name server(s): 
[127.0.0.1]:53
Nov 11 11:44:12.176 [26084] dbg: dns: 53959 configured local ports for DNS 
queries
Nov 11 11:44:12.176 [26084] dbg: dns: resolver socket rx buffer size is 129024 
bytes, local port 60347
Nov 11 11:44:12.177 [26084] dbg: dns: providing a callback for id: 
26759/IN/A/dnswl.org.multi.surbl.org
Nov 11 11:44:12.177 [26084] dbg: dns: URIBL_PH_SURBL lookup start
Nov 11 11:44:12.177 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.177 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.177 [26084] dbg: dns: providing a callback for id: 
25051/IN/A/dnswl.org.multi.uribl.com
Nov 11 11:44:12.177 [26084] dbg: dns: URIBL_BLACK lookup start
Nov 11 11:44:12.177 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.177 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.178 [26084] dbg: dns: providing a callback for id: 
17541/IN/A/dnswl.org.fresh.spameatingmonkey.net
Nov 11 11:44:12.178 [26084] dbg: dns: SEM_FRESH lookup start
Nov 11 11:44:12.178 [26084] dbg: dns: URIBL_RED lookup start
Nov 11 11:44:12.178 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.178 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.178 [26084] dbg: dns: providing a callback for id: 
44555/IN/A/dnswl.org.dob.sibl.support-intelligence.net
Nov 11 11:44:12.178 [26084] dbg: dns: URIBL_RHS_DOB lookup start
Nov 11 11:44:12.178 [26084] dbg: dns: URIBL_GREY lookup start
Nov 11 11:44:12.178 [26084] dbg: dns: URIBL_MW_SURBL lookup start
Nov 11 11:44:12.178 [26084] dbg: dns: URIBL_SC_SURBL lookup start
Nov 11 11:44:12.179 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.179 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.179 [26084] dbg: dns: providing a callback for id: 
15549/IN/A/dnswl.org.urired.spameatingmonkey.net
Nov 11 11:44:12.179 [26084] dbg: dns: SEM_URIRED lookup start
Nov 11 11:44:12.179 [26084] dbg: dns: URIBL_JP_SURBL lookup start
Nov 11 11:44:12.179 [26084] dbg: dns: URIBL_AB_SURBL lookup start
Nov 11 11:44:12.179 [26084] dbg: dns: URIBL_WS_SURBL lookup start
Nov 11 11:44:12.179 [26084] dbg: dns: URIBL_BLOCKED lookup start
Nov 11 11:44:12.179 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.179 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.180 [26084] dbg: dns: providing a callback for id: 
18978/IN/A/dnswl.org.dbl.spamhaus.org
Nov 11 11:44:12.180 [26084] dbg: dns: URIBL_DBL_ABUSE_REDIR lookup start
Nov 11 11:44:12.180 [26084] dbg: dns: URIBL_DBL_ABUSE_BOTCC lookup start
Nov 11 11:44:12.180 [26084] dbg: dns: URIBL_DBL_ERROR lookup start
Nov 11 11:44:12.180 [26084] dbg: dns: URIBL_DBL_ABUSE_SPAM lookup start
Nov 11 11:44:12.180 [26084] dbg: dns: URIBL_DBL_PHISH lookup start
Nov 11 11:44:12.180 [26084] dbg: dns: URIBL_DBL_BOTNETCC lookup start
Nov 11 11:44:12.180 [26084] dbg: dns: URIBL_DBL_SPAM lookup start
Nov 11 11:44:12.180 [26084] dbg: dns: URIBL_DBL_ABUSE_PHISH lookup start
Nov 11 11:44:12.180 [26084] dbg: dns: URIBL_DBL_ABUSE_MALW lookup start
Nov 11 11:44:12.180 [26084] dbg: dns: URIBL_DBL_MALWARE lookup start
Nov 11 11:44:12.180 [26084] dbg: dns: URIBL_DBL_REDIR lookup start
Nov 11 11:44:12.181 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.181 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.181 [26084] dbg: dns: providing a callback for id: 
21404/IN/NS/dnswl.org
Nov 11 11:44:12.181 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.181 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.181 [26084] dbg: dns: providing a callback for id: 
55332/IN/A/51.216.85.209.list.dnswl.org
Nov 11 11:44:12.181 [26084] dbg: dns: URIBL_SBL_A lookup start
Nov 11 11:44:12.182 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.182 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.182 [26084] dbg: dns: providing a callback for id: 
54070/IN/A/holtain.net.multi.surbl.org
Nov 11 11:44:12.182 [26084] dbg: dns: URIBL_PH_SURBL lookup start
Nov 11 11:44:12.182 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.182 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.182 [26084] dbg: dns: providing a callback for id: 
60255/IN/A/holtain.net.multi.uribl.com
Nov 11 11:44:12.182 [26084] dbg: dns: URIBL_BLACK lookup start
Nov 11 11:44:12.182 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.183 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.183 [26084] dbg: dns: providing a callback for id: 
35064/IN/A/holtain.net.fresh.spameatingmonkey.net
Nov 11 11:44:12.183 [26084] dbg: dns: SEM_FRESH lookup start
Nov 11 11:44:12.183 [26084] dbg: dns: URIBL_RED lookup start
Nov 11 11:44:12.183 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.183 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.183 [26084] dbg: dns: providing a callback for id: 
14202/IN/A/holtain.net.dob.sibl.support-intelligence.net
Nov 11 11:44:12.183 [26084] dbg: dns: URIBL_RHS_DOB lookup start
Nov 11 11:44:12.183 [26084] dbg: dns: URIBL_GREY lookup start
Nov 11 11:44:12.183 [26084] dbg: dns: URIBL_MW_SURBL lookup start
Nov 11 11:44:12.184 [26084] dbg: dns: URIBL_SC_SURBL lookup start
Nov 11 11:44:12.184 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.184 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.184 [26084] dbg: dns: providing a callback for id: 
33626/IN/A/holtain.net.urired.spameatingmonkey.net
Nov 11 11:44:12.184 [26084] dbg: dns: SEM_URIRED lookup start
Nov 11 11:44:12.184 [26084] dbg: dns: URIBL_JP_SURBL lookup start
Nov 11 11:44:12.184 [26084] dbg: dns: URIBL_AB_SURBL lookup start
Nov 11 11:44:12.184 [26084] dbg: dns: URIBL_WS_SURBL lookup start
Nov 11 11:44:12.184 [26084] dbg: dns: URIBL_BLOCKED lookup start
Nov 11 11:44:12.185 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.185 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.185 [26084] dbg: dns: providing a callback for id: 
17148/IN/A/holtain.net.dbl.spamhaus.org
Nov 11 11:44:12.185 [26084] dbg: dns: URIBL_DBL_ABUSE_REDIR lookup start
Nov 11 11:44:12.185 [26084] dbg: dns: URIBL_DBL_ABUSE_BOTCC lookup start
Nov 11 11:44:12.185 [26084] dbg: dns: URIBL_DBL_ERROR lookup start
Nov 11 11:44:12.185 [26084] dbg: dns: URIBL_DBL_ABUSE_SPAM lookup start
Nov 11 11:44:12.185 [26084] dbg: dns: URIBL_DBL_PHISH lookup start
Nov 11 11:44:12.185 [26084] dbg: dns: URIBL_DBL_BOTNETCC lookup start
Nov 11 11:44:12.185 [26084] dbg: dns: URIBL_DBL_SPAM lookup start
Nov 11 11:44:12.185 [26084] dbg: dns: URIBL_DBL_ABUSE_PHISH lookup start
Nov 11 11:44:12.185 [26084] dbg: dns: URIBL_DBL_ABUSE_MALW lookup start
Nov 11 11:44:12.185 [26084] dbg: dns: URIBL_DBL_MALWARE lookup start
Nov 11 11:44:12.186 [26084] dbg: dns: URIBL_DBL_REDIR lookup start
Nov 11 11:44:12.186 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.186 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.186 [26084] dbg: dns: providing a callback for id: 
34826/IN/NS/holtain.net
Nov 11 11:44:12.186 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.186 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.186 [26084] dbg: dns: providing a callback for id: 
44988/IN/A/nitrogen.huntingdon.holtain.net
Nov 11 11:44:12.186 [26084] dbg: dns: URIBL_SBL_A lookup start
Nov 11 11:44:12.186 [26084] dbg: dns: URIBL_PH_SURBL lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: URIBL_BLACK lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: SEM_FRESH lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: URIBL_RED lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: URIBL_RHS_DOB lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: URIBL_GREY lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: URIBL_MW_SURBL lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: URIBL_SC_SURBL lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: SEM_URIRED lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: URIBL_JP_SURBL lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: URIBL_AB_SURBL lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: URIBL_WS_SURBL lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: URIBL_BLOCKED lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: URIBL_DBL_ABUSE_REDIR lookup start
Nov 11 11:44:12.187 [26084] dbg: dns: URIBL_DBL_ABUSE_BOTCC lookup start
Nov 11 11:44:12.188 [26084] dbg: dns: URIBL_DBL_ERROR lookup start
Nov 11 11:44:12.188 [26084] dbg: dns: URIBL_DBL_ABUSE_SPAM lookup start
Nov 11 11:44:12.188 [26084] dbg: dns: URIBL_DBL_PHISH lookup start
Nov 11 11:44:12.188 [26084] dbg: dns: URIBL_DBL_BOTNETCC lookup start
Nov 11 11:44:12.188 [26084] dbg: dns: URIBL_DBL_SPAM lookup start
Nov 11 11:44:12.188 [26084] dbg: dns: URIBL_DBL_ABUSE_PHISH lookup start
Nov 11 11:44:12.188 [26084] dbg: dns: URIBL_DBL_ABUSE_MALW lookup start
Nov 11 11:44:12.188 [26084] dbg: dns: URIBL_DBL_MALWARE lookup start
Nov 11 11:44:12.188 [26084] dbg: dns: URIBL_DBL_REDIR lookup start
Nov 11 11:44:12.188 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.188 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.189 [26084] dbg: dns: providing a callback for id: 
32479/IN/A/list.dnswl.org
Nov 11 11:44:12.189 [26084] dbg: dns: URIBL_SBL_A lookup start
Nov 11 11:44:12.189 [26084] dbg: dns: checking RBL bl.spamcop.net., set spamcop
Nov 11 11:44:12.189 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.189 [26084] dbg: dns: only inspecting the following IPs: 
62.2.216.82, 74.125.82.49, 192.87.106.230, 140.211.11.3
Nov 11 11:44:12.190 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.190 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.190 [26084] dbg: dns: providing a callback for id: 
34129/IN/TXT/82.216.2.62.bl.spamcop.net
Nov 11 11:44:12.190 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.190 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.190 [26084] dbg: dns: providing a callback for id: 
41779/IN/TXT/49.82.125.74.bl.spamcop.net
Nov 11 11:44:12.191 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.191 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.191 [26084] dbg: dns: providing a callback for id: 
27897/IN/TXT/230.106.87.192.bl.spamcop.net
Nov 11 11:44:12.191 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.191 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.191 [26084] dbg: dns: providing a callback for id: 
63904/IN/TXT/3.11.211.140.bl.spamcop.net
Nov 11 11:44:12.191 [26084] dbg: dns: checking RBL rbl.holtain.net., set 
holtrbl-lastexternal
Nov 11 11:44:12.192 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.192 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.192 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.192 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.192 [26084] dbg: dns: providing a callback for id: 
10995/IN/A/3.11.211.140.rbl.holtain.net
Nov 11 11:44:12.193 [26084] dbg: dns: checking A and MX for host 
spamassassin.apache.org
Nov 11 11:44:12.193 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.193 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.193 [26084] dbg: dns: providing a callback for id: 
64920/IN/A/spamassassin.apache.org
Nov 11 11:44:12.193 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.193 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.194 [26084] dbg: dns: providing a callback for id: 
11530/IN/MX/spamassassin.apache.org
Nov 11 11:44:12.194 [26084] dbg: dns: checking RBL zen.spamhaus.org., set 
zen-lastexternal
Nov 11 11:44:12.194 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.194 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.194 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.194 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.194 [26084] dbg: dns: providing a callback for id: 
12476/IN/A/3.11.211.140.zen.spamhaus.org
Nov 11 11:44:12.194 [26084] dbg: dns: checking RBL dnsbl.sorbs.net., set 
sorbs-lastexternal
Nov 11 11:44:12.194 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.195 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.195 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.195 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.195 [26084] dbg: dns: providing a callback for id: 
16873/IN/A/3.11.211.140.dnsbl.sorbs.net
Nov 11 11:44:12.195 [26084] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
Nov 11 11:44:12.195 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.195 [26084] dbg: dns: only inspecting the following IPs: 
62.2.216.82, 74.125.82.49, 192.87.106.230, 140.211.11.3
Nov 11 11:44:12.196 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.196 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.196 [26084] dbg: dns: providing a callback for id: 
36783/IN/A/82.216.2.62.dnsbl.sorbs.net
Nov 11 11:44:12.196 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.196 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.196 [26084] dbg: dns: providing a callback for id: 
3916/IN/A/49.82.125.74.dnsbl.sorbs.net
Nov 11 11:44:12.196 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.196 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.197 [26084] dbg: dns: providing a callback for id: 
10082/IN/A/230.106.87.192.dnsbl.sorbs.net
Nov 11 11:44:12.197 [26084] dbg: dns: checking RBL bl.mailspike.net., set 
mspikeb-lastexternal
Nov 11 11:44:12.197 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.197 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.197 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.197 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.197 [26084] dbg: dns: providing a callback for id: 
56210/IN/A/3.11.211.140.bl.mailspike.net
Nov 11 11:44:12.198 [26084] dbg: dns: checking RBL bl.score.senderscore.com., 
set rnbl-lastexternal
Nov 11 11:44:12.198 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.198 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.198 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.198 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.198 [26084] dbg: dns: providing a callback for id: 
3333/IN/A/3.11.211.140.bl.score.senderscore.com
Nov 11 11:44:12.198 [26084] dbg: dns: checking RBL zen.spamhaus.org., set 
zen-lastexternal
Nov 11 11:44:12.198 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.198 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.199 [26084] dbg: dns: checking RBL psbl.surriel.com., set 
psbl-lastexternal
Nov 11 11:44:12.199 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.199 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.199 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.199 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.199 [26084] dbg: dns: providing a callback for id: 
8517/IN/A/3.11.211.140.psbl.surriel.com
Nov 11 11:44:12.199 [26084] dbg: dns: checking RBL list.dnswl.org., set 
dnswl-firsttrusted
Nov 11 11:44:12.199 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.200 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.200 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.200 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.201 [26084] dbg: dns: providing a callback for id: 
8311/IN/A/3.11.211.140.list.dnswl.org
Nov 11 11:44:12.201 [26084] dbg: dns: checking RBL bb.barracudacentral.org., 
set brbl-lastexternal
Nov 11 11:44:12.201 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.201 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.201 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.201 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.201 [26084] dbg: dns: providing a callback for id: 
25405/IN/A/3.11.211.140.bb.barracudacentral.org
Nov 11 11:44:12.202 [26084] dbg: dns: checking RBL wl.mailspike.net., set 
mspikeg-firsttrusted
Nov 11 11:44:12.202 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.202 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.202 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.202 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.202 [26084] dbg: dns: providing a callback for id: 
4084/IN/A/3.11.211.140.wl.mailspike.net
Nov 11 11:44:12.203 [26084] dbg: dns: checking RBL rbl.holtain.net., set 
holtrbl-lastexternal
Nov 11 11:44:12.203 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.203 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.203 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.203 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.203 [26084] dbg: dns: providing a callback for id: 
21647/IN/TXT/3.11.211.140.rbl.holtain.net
Nov 11 11:44:12.203 [26084] dbg: dns: checking RBL 
sa-trusted.bondedsender.org., set ssc-firsttrusted
Nov 11 11:44:12.204 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.204 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.204 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.204 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.204 [26084] dbg: dns: providing a callback for id: 
53761/IN/TXT/3.11.211.140.sa-trusted.bondedsender.org
Nov 11 11:44:12.204 [26084] dbg: dns: checking RBL zen.spamhaus.org., set zen
Nov 11 11:44:12.205 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.205 [26084] dbg: dns: only inspecting the following IPs: 
62.2.216.82, 74.125.82.49, 192.87.106.230, 140.211.11.3
Nov 11 11:44:12.205 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.205 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.205 [26084] dbg: dns: providing a callback for id: 
28012/IN/A/82.216.2.62.zen.spamhaus.org
Nov 11 11:44:12.205 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.206 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.206 [26084] dbg: dns: providing a callback for id: 
7486/IN/A/49.82.125.74.zen.spamhaus.org
Nov 11 11:44:12.206 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.206 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.206 [26084] dbg: dns: providing a callback for id: 
21709/IN/A/230.106.87.192.zen.spamhaus.org
Nov 11 11:44:12.206 [26084] dbg: dns: checking RBL sa-accredit.habeas.com., set 
ssc-firsttrusted
Nov 11 11:44:12.207 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.207 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.207 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.207 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.207 [26084] dbg: dns: providing a callback for id: 
3596/IN/TXT/3.11.211.140.sa-accredit.habeas.com
Nov 11 11:44:12.207 [26084] dbg: dns: checking RBL iadb.isipp.com., set 
iadb-firsttrusted
Nov 11 11:44:12.208 [26084] dbg: dns: IPs found: full-external: 140.211.11.3, 
192.87.106.230, 74.125.82.49, 62.2.216.82, 140.211.11.3 untrusted: 
140.211.11.3, 192.87.106.230, 74.125.82.49, 62.2.216.82 originating: 
140.211.11.3
Nov 11 11:44:12.208 [26084] dbg: dns: only inspecting the following IPs: 
140.211.11.3
Nov 11 11:44:12.208 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.208 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.208 [26084] dbg: dns: providing a callback for id: 
6548/IN/A/3.11.211.140.iadb.isipp.com
Nov 11 11:44:12.210 [26084] dbg: dns: dns reply 34826 is OK, 2 answer records
Nov 11 11:44:12.213 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.213 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.213 [26084] dbg: dns: providing a callback for id: 
60121/IN/A/ns1.holtain.net
Nov 11 11:44:12.213 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.213 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.214 [26084] dbg: dns: providing a callback for id: 
35329/IN/A/ns1.crosswell.holtain.net
Nov 11 11:44:12.215 [26084] dbg: dns: dns reply 44988 is OK, 1 answer records
Nov 11 11:44:12.215 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.215 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.215 [26084] dbg: dns: providing a callback for id: 
37399/IN/A/40.107.146.217.sbl.spamhaus.org
Nov 11 11:44:12.215 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.215 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.216 [26084] dbg: dns: providing a callback for id: 
34819/IN/A/40.107.146.217.zen.spamhaus.org
Nov 11 11:44:12.218 [26084] dbg: dns: dns reply to 
10995/IN/A/3.11.211.140.rbl.holtain.net: NXDOMAIN
Nov 11 11:44:12.221 [26084] dbg: dns: dns reply 11530 is OK, 5 answer records
Nov 11 11:44:12.221 [26084] dbg: dns: hit <dns:spamassassin.apache.org?type=MX> 
10 mx1.eu.apache.org.
Nov 11 11:44:12.222 [26084] dbg: dns: hit <dns:spamassassin.apache.org?type=MX> 
10 mx1-eu-west.apache.org.
Nov 11 11:44:12.222 [26084] dbg: dns: hit <dns:spamassassin.apache.org?type=MX> 
10 mx1-us-west.apache.org.
Nov 11 11:44:12.222 [26084] dbg: dns: hit <dns:spamassassin.apache.org?type=MX> 
10 mx1-us-east.apache.org.
Nov 11 11:44:12.222 [26084] dbg: dns: hit <dns:spamassassin.apache.org?type=MX> 
10 mx1.us.apache.org.
Nov 11 11:44:12.222 [26084] dbg: dns: dns reply to 
12476/IN/A/3.11.211.140.zen.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.223 [26084] dbg: dns: dns reply to 
21647/IN/TXT/3.11.211.140.rbl.holtain.net: NXDOMAIN
Nov 11 11:44:12.225 [26084] dbg: dns: dns reply 64920 is OK, 2 answer records
Nov 11 11:44:12.225 [26084] dbg: dns: hit <dns:spamassassin.apache.org> 
54.172.167.43
Nov 11 11:44:12.225 [26084] dbg: dns: hit <dns:spamassassin.apache.org> 
192.87.106.229
Nov 11 11:44:12.225 [26084] dbg: dns: dns reply 60121 is OK, 1 answer records
Nov 11 11:44:12.226 [26084] dbg: dns: dns reply 35329 is OK, 1 answer records
Nov 11 11:44:12.227 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.227 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.227 [26084] dbg: dns: providing a callback for id: 
34653/IN/A/133.145.33.46.sbl.spamhaus.org
Nov 11 11:44:12.227 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.227 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.228 [26084] dbg: dns: providing a callback for id: 
49695/IN/A/133.145.33.46.zen.spamhaus.org
Nov 11 11:44:12.228 [26084] dbg: dns: dns reply to 
27897/IN/TXT/230.106.87.192.bl.spamcop.net: NXDOMAIN
Nov 11 11:44:12.229 [26084] dbg: dns: harvested completed queries
Nov 11 11:44:12.314 [26084] dbg: dns: dns reply to 
56210/IN/A/3.11.211.140.bl.mailspike.net: NXDOMAIN
Nov 11 11:44:12.315 [26084] dbg: dns: dns reply 4084 is OK, 1 answer records
Nov 11 11:44:12.315 [26084] dbg: dns: hit <dns:3.11.211.140.wl.mailspike.net> 
127.0.0.18
Nov 11 11:44:12.316 [26084] dbg: dns: dns reply to 
18978/IN/A/dnswl.org.dbl.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.317 [26084] dbg: dns: dns reply to 
53761/IN/TXT/3.11.211.140.sa-trusted.bondedsender.org: NXDOMAIN
Nov 11 11:44:12.317 [26084] dbg: dns: dns reply to 
3596/IN/TXT/3.11.211.140.sa-accredit.habeas.com: NXDOMAIN
Nov 11 11:44:12.318 [26084] dbg: dns: dns reply to 
17148/IN/A/holtain.net.dbl.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.318 [26084] dbg: dns: dns reply to 
21709/IN/A/230.106.87.192.zen.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.319 [26084] dbg: dns: dns reply to 
28012/IN/A/82.216.2.62.zen.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.319 [26084] dbg: dns: dns reply to 
7486/IN/A/49.82.125.74.zen.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.320 [26084] dbg: dns: dns reply to 
34819/IN/A/40.107.146.217.zen.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.320 [26084] dbg: dns: dns reply to 
49695/IN/A/133.145.33.46.zen.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.321 [26084] dbg: dns: dns reply to 
37399/IN/A/40.107.146.217.sbl.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.321 [26084] dbg: dns: dns reply to 
34129/IN/TXT/82.216.2.62.bl.spamcop.net: NXDOMAIN
Nov 11 11:44:12.322 [26084] dbg: dns: dns reply to 
63904/IN/TXT/3.11.211.140.bl.spamcop.net: NXDOMAIN
Nov 11 11:44:12.322 [26084] dbg: dns: dns reply to 
41779/IN/TXT/49.82.125.74.bl.spamcop.net: NXDOMAIN
Nov 11 11:44:12.323 [26084] dbg: dns: dns reply to 
34653/IN/A/133.145.33.46.sbl.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.324 [26084] dbg: dns: dns reply to 
8517/IN/A/3.11.211.140.psbl.surriel.com: NXDOMAIN
Nov 11 11:44:12.324 [26084] dbg: dns: dns reply to 
25405/IN/A/3.11.211.140.bb.barracudacentral.org: NXDOMAIN
Nov 11 11:44:12.324 [26084] dbg: dns: harvested completed queries
Nov 11 11:44:12.375 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.375 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.376 [26084] dbg: dns: providing a callback for id: 
31421/IN/TXT/gmail.com._vouch.dwl.spamhaus.org
Nov 11 11:44:12.376 [26084] dbg: dns: 
askdns:TXT:gmail.com._vouch.dwl.spamhaus.org lookup start
Nov 11 11:44:12.395 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.395 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.395 [26084] dbg: dns: providing a callback for id: 
26587/IN/SPF/mail.apache.org
Nov 11 11:44:12.398 [26084] dbg: dns: dns reply 21404 is OK, 8 answer records
Nov 11 11:44:12.398 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.398 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.398 [26084] dbg: dns: providing a callback for id: 
60708/IN/A/ns02.wl-infra.net
Nov 11 11:44:12.399 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.399 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.399 [26084] dbg: dns: providing a callback for id: 
46500/IN/A/zone-ns1.dnswl.org
Nov 11 11:44:12.399 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.399 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.399 [26084] dbg: dns: providing a callback for id: 
22812/IN/A/ns03.wl-infra.net
Nov 11 11:44:12.400 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.400 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.400 [26084] dbg: dns: providing a callback for id: 
7265/IN/A/zone-ns5.dnswl.org
Nov 11 11:44:12.400 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.400 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.400 [26084] dbg: dns: providing a callback for id: 
12954/IN/A/zone-ns2.dnswl.org
Nov 11 11:44:12.401 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.401 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.401 [26084] dbg: dns: providing a callback for id: 
9407/IN/A/zone-ns6.dnswl.org
Nov 11 11:44:12.401 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.401 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.402 [26084] dbg: dns: providing a callback for id: 
8330/IN/A/dnswl1.chaosreigns.com
Nov 11 11:44:12.402 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.402 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.402 [26084] dbg: dns: providing a callback for id: 
37188/IN/A/ns01.wl-infra.net
Nov 11 11:44:12.403 [26084] dbg: dns: dns reply to 
6548/IN/A/3.11.211.140.iadb.isipp.com: NXDOMAIN
Nov 11 11:44:12.403 [26084] dbg: dns: dns reply to 
26759/IN/A/dnswl.org.multi.surbl.org: NXDOMAIN
Nov 11 11:44:12.404 [26084] dbg: dns: dns reply to 
54070/IN/A/holtain.net.multi.surbl.org: NXDOMAIN
Nov 11 11:44:12.405 [26084] dbg: dns: dns reply to 
16873/IN/A/3.11.211.140.dnsbl.sorbs.net: NXDOMAIN
Nov 11 11:44:12.405 [26084] dbg: dns: dns reply to 
3916/IN/A/49.82.125.74.dnsbl.sorbs.net: NXDOMAIN
Nov 11 11:44:12.406 [26084] dbg: dns: dns reply to 
36783/IN/A/82.216.2.62.dnsbl.sorbs.net: NXDOMAIN
Nov 11 11:44:12.406 [26084] dbg: dns: dns reply to 
10082/IN/A/230.106.87.192.dnsbl.sorbs.net: NXDOMAIN
Nov 11 11:44:12.408 [26084] dbg: dns: dns reply 60708 is OK, 2 answer records
Nov 11 11:44:12.409 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.409 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.409 [26084] dbg: dns: providing a callback for id: 
2063/IN/A/6.191.75.62.sbl.spamhaus.org
Nov 11 11:44:12.409 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.409 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.409 [26084] dbg: dns: providing a callback for id: 
51464/IN/A/6.191.75.62.zen.spamhaus.org
Nov 11 11:44:12.410 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.410 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.410 [26084] dbg: dns: providing a callback for id: 
48356/IN/A/115.240.255.173.sbl.spamhaus.org
Nov 11 11:44:12.410 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.410 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.411 [26084] dbg: dns: providing a callback for id: 
27059/IN/A/115.240.255.173.zen.spamhaus.org
Nov 11 11:44:12.413 [26084] dbg: dns: dns reply 22812 is OK, 1 answer records
Nov 11 11:44:12.413 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.413 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.413 [26084] dbg: dns: providing a callback for id: 
4703/IN/A/123.167.47.78.sbl.spamhaus.org
Nov 11 11:44:12.413 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.414 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.414 [26084] dbg: dns: providing a callback for id: 
38954/IN/A/123.167.47.78.zen.spamhaus.org
Nov 11 11:44:12.415 [26084] dbg: dns: dns reply 8330 is OK, 1 answer records
Nov 11 11:44:12.416 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.416 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.416 [26084] dbg: dns: providing a callback for id: 
44325/IN/A/40.152.71.64.sbl.spamhaus.org
Nov 11 11:44:12.416 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.416 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.416 [26084] dbg: dns: providing a callback for id: 
36440/IN/A/40.152.71.64.zen.spamhaus.org
Nov 11 11:44:12.419 [26084] dbg: dns: dns reply 37188 is OK, 1 answer records
Nov 11 11:44:12.419 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.419 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.419 [26084] dbg: dns: providing a callback for id: 
12289/IN/A/66.9.4.46.sbl.spamhaus.org
Nov 11 11:44:12.419 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.419 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.420 [26084] dbg: dns: providing a callback for id: 
28572/IN/A/66.9.4.46.zen.spamhaus.org
Nov 11 11:44:12.422 [26084] dbg: dns: dns reply 26587 is OK, 0 answer records
Nov 11 11:44:12.422 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.422 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.422 [26084] dbg: dns: providing a callback for id: 
39553/IN/TXT/mail.apache.org
Nov 11 11:44:12.432 [26084] dbg: dns: dns reply 46500 is OK, 1 answer records
Nov 11 11:44:12.434 [26084] dbg: dns: dns reply 12954 is OK, 1 answer records
Nov 11 11:44:12.437 [26084] dbg: dns: dns reply 7265 is OK, 1 answer records
Nov 11 11:44:12.439 [26084] dbg: dns: dns reply 9407 is OK, 1 answer records
Nov 11 11:44:12.440 [26084] dbg: dns: dns reply 39553 is OK, 0 answer records
Nov 11 11:44:12.444 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.444 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.444 [26084] dbg: dns: providing a callback for id: 
1/IN/SPF/spamassassin.apache.org
Nov 11 11:44:12.460 [26084] dbg: dns: dns reply 1 is OK, 0 answer records
Nov 11 11:44:12.460 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.461 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.461 [26084] dbg: dns: providing a callback for id: 
29282/IN/TXT/spamassassin.apache.org
Nov 11 11:44:12.463 [26084] dbg: dns: dns reply 29282 is OK, 1 answer records
Nov 11 11:44:12.504 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.504 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.505 [26084] dbg: dns: providing a callback for id: 
56147/IN/A/mail.apache.org
Nov 11 11:44:12.507 [26084] dbg: dns: dns reply 55332 is OK, 1 answer records
Nov 11 11:44:12.507 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.507 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.507 [26084] dbg: dns: providing a callback for id: 
21303/IN/A/1.5.0.127.sbl.spamhaus.org
Nov 11 11:44:12.508 [26084] dbg: dns: bgsend, DNS servers: [127.0.0.1]:53
Nov 11 11:44:12.508 [26084] dbg: dns: attempt 1/1, trying connect/sendto to 
[127.0.0.1]:53
Nov 11 11:44:12.508 [26084] dbg: dns: providing a callback for id: 
51694/IN/A/1.5.0.127.zen.spamhaus.org
Nov 11 11:44:12.508 [26084] dbg: dns: dns reply 32479 is OK, 0 answer records
Nov 11 11:44:12.510 [26084] dbg: dns: dns reply 8311 is OK, 1 answer records
Nov 11 11:44:12.511 [26084] dbg: dns: hit <dns:3.11.211.140.list.dnswl.org> 
127.0.4.3
Nov 11 11:44:12.512 [26084] dbg: dns: dns reply 56147 is OK, 1 answer records
Nov 11 11:44:12.519 [26084] dbg: dns: harvested completed queries
Nov 11 11:44:12.623 [26084] dbg: dns: dns reply to 
44555/IN/A/dnswl.org.dob.sibl.support-intelligence.net: NXDOMAIN
Nov 11 11:44:12.623 [26084] dbg: dns: dns reply to 
14202/IN/A/holtain.net.dob.sibl.support-intelligence.net: NXDOMAIN
Nov 11 11:44:12.624 [26084] dbg: dns: dns reply to 
25051/IN/A/dnswl.org.multi.uribl.com: NXDOMAIN
Nov 11 11:44:12.625 [26084] dbg: dns: dns reply to 
60255/IN/A/holtain.net.multi.uribl.com: NXDOMAIN
Nov 11 11:44:12.625 [26084] dbg: dns: dns reply to 
31421/IN/TXT/gmail.com._vouch.dwl.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.626 [26084] dbg: dns: dns reply to 
2063/IN/A/6.191.75.62.sbl.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.626 [26084] dbg: dns: dns reply to 
51464/IN/A/6.191.75.62.zen.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.627 [26084] dbg: dns: dns reply to 
38954/IN/A/123.167.47.78.zen.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.627 [26084] dbg: dns: dns reply to 
44325/IN/A/40.152.71.64.sbl.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.628 [26084] dbg: dns: dns reply to 
27059/IN/A/115.240.255.173.zen.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.629 [26084] dbg: dns: dns reply to 
36440/IN/A/40.152.71.64.zen.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.629 [26084] dbg: dns: dns reply to 
48356/IN/A/115.240.255.173.sbl.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.630 [26084] dbg: dns: dns reply to 
12289/IN/A/66.9.4.46.sbl.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.630 [26084] dbg: dns: dns reply to 
4703/IN/A/123.167.47.78.sbl.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.631 [26084] dbg: dns: dns reply to 
28572/IN/A/66.9.4.46.zen.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.631 [26084] dbg: dns: harvested completed queries
Nov 11 11:44:12.677 [26084] dbg: dns: harvest_dnsbl_queries
Nov 11 11:44:12.678 [26084] dbg: dns: harvest_dnsbl_queries - check_tick
Nov 11 11:44:12.686 [26084] dbg: dns: dns reply to 
51694/IN/A/1.5.0.127.zen.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.686 [26084] dbg: dns: harvest_dnsbl_queries - check_tick
Nov 11 11:44:12.692 [26084] dbg: dns: dns reply to 
21303/IN/A/1.5.0.127.sbl.spamhaus.org: NXDOMAIN
Nov 11 11:44:12.692 [26084] dbg: dns: harvest_dnsbl_queries - check_tick
Nov 11 11:44:12.701 [26084] dbg: dns: dns reply to 
3333/IN/A/3.11.211.140.bl.score.senderscore.com: NXDOMAIN
Nov 11 11:44:12.701 [26084] dbg: dns: harvest_dnsbl_queries - check_tick
Nov 11 11:44:13.322 [26084] dbg: dns: dns reply to 
33626/IN/A/holtain.net.urired.spameatingmonkey.net: NXDOMAIN
Nov 11 11:44:13.322 [26084] dbg: dns: harvest_dnsbl_queries - check_tick
Nov 11 11:44:13.445 [26084] dbg: dns: dns reply to 
15549/IN/A/dnswl.org.urired.spameatingmonkey.net: NXDOMAIN
Nov 11 11:44:13.445 [26084] dbg: dns: harvest_dnsbl_queries - check_tick
Nov 11 11:44:13.446 [26084] dbg: dns: dns reply to 
17541/IN/A/dnswl.org.fresh.spameatingmonkey.net: NXDOMAIN
Nov 11 11:44:13.446 [26084] dbg: dns: harvest_dnsbl_queries - check_tick
Nov 11 11:44:13.449 [26084] dbg: dns: dns reply to 
35064/IN/A/holtain.net.fresh.spameatingmonkey.net: NXDOMAIN
Return-Path: <users-return-106185-niamh=fullbore.co...@spamassassin.apache.org>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
        nitrogen.huntingdon.holtain.net
X-Spam-Level:
X-Spam-Status: No, score=-7.7 required=4.5 autolearn=ham autolearn_force=no
X-Spam-Report:
        * -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
        *      [140.211.11.3 listed in wl.mailspike.net]
        *  0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail 
provider
        *      (axb.lists[at]gmail.com)
        *  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level 
mail
        *      domains are different
        * -5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at http://www.dnswl.org/, 
high
        *      trust
        *      [140.211.11.3 listed in list.dnswl.org]
        * -0.0 SPF_PASS SPF: sender matches SPF record
        * -0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay 
domain
        * -2.0 BAYES_00 BODY: Bayes spam probability is 0 to 1%
        *      [score: 0.0000]
        * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from 
author's
        *       domain
        * -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
        *  0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
        *      valid
        * -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
        *  0.0 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
        *      EnvelopeFrom freemail headers are different
X-Spam-Relays-Untrusted: [ ip=140.211.11.3 rdns=hermes.apache.org
        helo=mail.apache.org by=nitrogen.huntingdon.holtain.net ident= envfrom=
        intl=0 id= auth= msa=0 ] [ ip=192.87.106.230 rdns=nike.apache.org
        helo=nike.apache.org by=apache.org ident= envfrom= intl=0 id= auth= 
msa=0 ] [
        ip=74.125.82.49 rdns=!74.125.82.49! helo=mail-wg0-f49.google.com
        by=apache.org ident= envfrom= intl=0 id= auth= msa=0 ] [ ip=62.2.216.82
        rdns=62-2-216-82.static.cablecom.ch. helo=!192.168.192.3! 
by=mx.google.com
        ident= envfrom= intl=0 id=nd20sm17097649wic.11.2014.11.11.03.26.52
        auth=ESMTPSA msa=0 ] [ ip=140.211.11.3 rdns= helo= by= ident= envfrom= 
intl=0
        id= auth= msa=0 ]
X-Spam-Language: en
X-Spam-DKIM-i: @gmail.com
X-Spam-DKIM-d: gmail.com
Delivered-To: niamh.fullb...@nitrogen.huntingdon.holtain.net
Received: (qmail 24946 invoked by uid 1023); 11 Nov 2014 11:28:57 +0000
Delivered-To: niamh.fullbore-ni...@fullbore.co.uk
Received: (qmail 24938 invoked from network); 11 Nov 2014 11:28:57 +0000
DomainKey-Status: no signature
X-DKIM-Originator: axb.li...@gmail.com
X-DKIM-Policy-Detail: dk_sender=accept; dkim_author=accept;
  dkim_ADSP=accept
X-Originating-IP: 140.211.11.3
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by nitrogen.huntingdon.holtain.net with SMTP; 11 Nov 2014 11:28:57 +0000
Received-SPF: pass (nitrogen.huntingdon.holtain.net: SPF record at 
spamassassin.apache.org designates 140.211.11.3 as permitted sender)
Received: (qmail 39512 invoked by uid 500); 11 Nov 2014 11:28:50 -0000
Mailing-List: contact users-h...@spamassassin.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:users-h...@spamassassin.apache.org>
list-unsubscribe: <mailto:users-unsubscr...@spamassassin.apache.org>
List-Post: <mailto:users@spamassassin.apache.org>
List-Id: <users.spamassassin.apache.org>
Delivered-To: mailing list users@spamassassin.apache.org
Received: (qmail 39003 invoked by uid 99); 11 Nov 2014 11:28:49 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 11 Nov 2014 11:28:49 +0000
X-ASF-Spam-Status: No, hits=-0.7 required=10.0
        tests=RCVD_IN_DNSWL_LOW,SPF_PASS
Received-SPF: pass (nike.apache.org: domain of axb.li...@gmail.com designates 
74.125.82.49 as permitted sender)
Received: from [74.125.82.49] (HELO mail-wg0-f49.google.com) (74.125.82.49)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 11 Nov 2014 11:28:24 +0000
Received: by mail-wg0-f49.google.com with SMTP id x13so11271616wgg.36
        for <users@spamassassin.apache.org>; Tue, 11 Nov 2014 03:26:53 -0800 
(PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=message-id:date:from:user-agent:mime-version:to:subject:references
         :in-reply-to:content-type:content-transfer-encoding;
        bh=e/D1CN6ky2DaJWMppfUrxvYJQCEoIfXpIFJ8bOilhfI=;
        b=jxyaWWH68ItlF++mJ4FOIwqXqeM8vdssxf9r8noaOcP0BHOUzl+glcAahuD405x/mz
         AvaC+7WkCyNnVH4ovxhH0VmwBy/iTkNAq8msP4UQzuEvePZ5rNp2DHQopABzEYE8Wicc
         H9mNikrdAYdbsiYEiZLOWZ0NcNQgwLHOuzSM/dMFX23tU1NIQJgcwS9bGcQAENzu0UkV
         vZx9RyfEeRHX/k1XwiInFnXzod2jIrcd979xQtLxpkF1oSon6GxHiWhbJ7yOx+QSodiu
         BQtpcy/u+5kJQEI/5ENKIXEICLnkBAKi+JRN7yTC5XYaQ2fHEPdbCtkXWultbVBWxeoZ
         PZVA==
X-Received: by 10.194.63.79 with SMTP id e15mr54398167wjs.79.1415705213588;
        Tue, 11 Nov 2014 03:26:53 -0800 (PST)
Received: from [192.168.192.3] (62-2-216-82.static.cablecom.ch. [62.2.216.82])
        by mx.google.com with ESMTPSA id 
nd20sm17097649wic.11.2014.11.11.03.26.52
        for <users@spamassassin.apache.org>
        (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 11 Nov 2014 03:26:52 -0800 (PST)
Message-ID: <5461f27a.2020...@gmail.com>
Date: Tue, 11 Nov 2014 12:26:50 +0100
From: Axb <axb.li...@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 
Thunderbird/31.2.0
MIME-Version: 1.0
To: users@spamassassin.apache.org
Subject: Re: DNS checks not being performed-
References: <1366719437.20141111112...@fullbore.co.uk>
In-Reply-To: <1366719437.20141111112...@fullbore.co.uk>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked by ClamAV on apache.org

On 11/11/2014 12:20 PM, Niamh Holding wrote:
>
> Hello
>
> Seems like since the last rules update DNS rules aren't being checked
> given that 209.85.216.51 is listed in list.dnswl.org the relevant rule
> should show-
>
> ;; QUESTION SECTION:
> ;51.216.85.209.list.dnswl.org.  IN      A
>
> ;; ANSWER SECTION:
> 51.216.85.209.list.dnswl.org. 28800 IN  A       127.0.5.1
>
> Return-Path: <globalmedicaldevi...@gmail.com>
> X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
>          nitrogen.huntingdon.holtain.net
> X-Spam-Level:
> X-Spam-Status: No, score=-1.8 required=4.5 autolearn=unavailable
>          autolearn_force=no

what do you see if you do

cat msg.eml | spamassassin -D dns



-- 
Best regards,
 Niamh                            mailto:ni...@fullbore.co.uk

Attachment: pgpzDwdrzTHdX.pgp
Description: PGP signature

Reply via email to