Re: [exim-dev] [Bug 1389] New: DMARC $dmarc_ar_header contai…

> http://bugs.exim.org/show_bug.cgi?id=1389
>            Summary: DMARC $dmarc_ar_header contains trash
> Exim version 4.80_230-b1f3784 #2 built 29-Sep-2013 22:54:20 (some minor

=== Trying pipe to /home/exim-build/projects/exim/src/build-Linux-i386/exim
-C/home/exim-build/tmp/etc/exim/exim.conf -d -bh 205.201.133.75...
=== Connected to /home/exim-build/projects/exim/src/build-Linux-i386/exim
-C/home/exim-build/tmp/etc/exim/exim.conf -d -bh 205.201.133.75.
Exim version 4.80_250-9bdd29a uid=1001 gid=1001 pid=1788 D=fbb95cfd
Berkeley DB: Berkeley DB 5.1.25: (January 28, 2011)
Support for: crypteq iconv() IPv6 Perl Expand_dlfunc OpenSSL
Content_Scanning DKIM Old_Demime Experimental_SPF Experimental_DMARC
Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch cdb dbm
dbmjz dbmnz dnsdb dsearch mysql passwd sqlite
Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Size of off_t: 8
Compiler: GCC [4.6.3]
Library version: OpenSSL: Compile: OpenSSL 1.0.1 14 Mar 2012
                          Runtime: OpenSSL 1.0.1 14 Mar 2012
Library version: Cyrus SASL: Compile: 2.1.25
                             Runtime: 2.1.25 [Cyrus SASL]
Library version: PCRE: Compile: 8.12
                       Runtime: 8.12 2011-01-15
Total 14 lookups
Library version: MySQL: Compile: 5.5.32 [(Ubuntu)]
                        Runtime: 5.5.32
Library version: SQLite: Compile: 3.7.9
                         Runtime: 3.7.9
WHITELIST_D_MACROS:
"DIR:EXIM_PATH:AA:ACL:ACLRCPT:ACL_MAIL:ACL_PREDATA:ACL_RCPT:AFFIX:ALLOW:ARG1:ARG2:AUTHF:AUTHS:AUTH_ID_DOMAIN:BAD:BANNER:BB:BR:BRB:CERT:COM:COMMAND_USER:CONNECTCOND:CONTROL:CREQCIP:CREQMAC:CRL:CSS:D6:DATA:DCF:DDF:DEFAULTDWC:DELAY:DETAILS:DRATELIMIT:DYNAMIC_OPTION:ELI:ERROR_DETAILS:ERT:FAKE:FALLBACK:FILTER:FILTER_PREPEND_HOME:FORBID:FORBID_SMTP_CODE:FUSER:HAI:HAP:HARDLIMIT:HEADER_LINE_MAXSIZE:HEADER_MAXSIZE:HELO_MSG:HL:HOSTS:HOSTS_AVOID_TLS:HOSTS_MAX_TRY:HVH:IFACE:IGNORE_QUOTA:INC:INSERT:IP1:IP2:LAST:LDAPSERVERS:LENCHECK:LIMIT:LIST:LOG_SELECTOR:LS:MAXNM:MESSAGE_LOGS:MSIZE:NOTDAEMON:ONCE:ONLY:OPT:OPTION:ORDER:PAH:PEX:PORT:PTBC:QDG:QOLL:QUOTA:QUOTA_FILECOUNT:QWM:RCPT_MSG:REMEMBER:REQUIRE:RETRY:RETRY1:RETRY2:RETURN:RETURN_ERROR_DETAILS:REWRITE:ROUTE_DATA:RRATELIMIT:RT:S:SELECTOR:SELF:SERVER:SERVERS:SREQCIP:SREQMAC:SRV:STD:STRICT:SUB:SUBMISSION_OPTIONS:TIMEOUTDEFER:TIMES:TRUSTED:TRYCLEAR:UL:USE_SENDER:UTF8:VALUE:WMF:X:Y"
TRUSTED_CONFIG_LIST: "/home/exim/tmp/etc/exim/trusted_configs"
Exim has no root privilege: uid=1001 gid=1001 euid=1001 egid=1001
changed uid/gid: -C, -D, -be or -bf forces real uid
  uid=1001 gid=1001 pid=1788
  auxiliary group list: 104 999 1001
seeking password data for user "exim-build": cache not available
getpwnam() succeeded uid=1001 gid=1001
seeking password data for user "root": cache not available
getpwnam() succeeded uid=0 gid=0
tls_validate_require_cipher child 1789 ended: status=0x0
configuration file is /home/exim-build/tmp/etc/exim/exim.conf
log selectors = 00000ffc 00232001
LOG: MAIN PANIC
  exim user lost privilege for using -C option
trusted user
admin user
changing group to 999 failed: Operation not permitted
seeking password data for user "503": cache not available
originator: uid=1001 gid=1001 login=exim-build name=Exim Build System
sender address = exim-build@???
sender_fullhost = [205.201.133.75]
sender_rcvhost = [205.201.133.75]
host in hosts_connection_nolog? no (option unset)
LOG: smtp_connection MAIN
  SMTP connection from [205.201.133.75]
host in host_lookup? yes (matched "*")
looking up host name for 205.201.133.75
DNS lookup of 75.133.201.205.in-addr.arpa (PTR) succeeded
Reverse DNS security status: unverified
IP address lookup yielded mail75.atl11.rsgsv.net
gethostbyname2 looked up these IP addresses:
  name=mail75.atl11.rsgsv.net address=205.201.133.75
checking addresses for mail75.atl11.rsgsv.net
  205.201.133.75 OK
sender_fullhost = mail75.atl11.rsgsv.net [205.201.133.75]
sender_rcvhost = mail75.atl11.rsgsv.net ([205.201.133.75])
set_process_info:  1788 handling incoming connection from
mail75.atl11.rsgsv.net [205.201.133.75]
host in host_reject_connection? no (option unset)
host in sender_unqualified_hosts? no (option unset)
host in recipient_unqualified_hosts? no (option unset)
host in helo_verify_hosts? no (option unset)
host in helo_try_verify_hosts? no (option unset)
host in helo_accept_junk_hosts? no (option unset)
using ACL "acl_check_connect"
processing "warn"
check hosts = !^.*\\d+\.com\$ : ^.*\\d+[x.-]\\d+[x.-]\\d+[x.-].*
host in "!^.*\d+.com$ : ^.*\d+[x.-]\d+[x.-]\d+[x.-].*"? no (end of list)
warn: condition test failed in ACL "acl_check_connect"
processing "accept"
accept: condition test succeeded in ACL "acl_check_connect"

<-  250 OK
 -> RCPT TO:<todd@???>
SMTP<< RCPT TO:<todd@???>
using ACL "acl_check_rcpt"
processing "accept"
check hosts = :
host in ":"? no (end of list)
accept: condition test failed in ACL "acl_check_rcpt"
processing "drop"
check condition = ${if def:sender_helo_name {false}{true}}
                = false
drop: condition test failed in ACL "acl_check_rcpt"
processing "drop"
check !authenticated = *
check condition = ${if and {{match
{$sender_helo_name}{\N^\[(.+)\]$\N}}{isip4 {$1}}}{true}{false}}
                = false
drop: condition test failed in ACL "acl_check_rcpt"
processing "deny"
check senders = :
address match test: subject=bounce-mc.us2_5466910.1551729-comp-news=
nestormedia.com@??? pattern=
mail75.atl11.rsgsv.net in ""? no (end of list)
bounce-mc.us2_5466910.1551729-comp-news=
nestormedia.com@??? in ":"? no (end of list)
deny: condition test failed in ACL "acl_check_rcpt"
processing "warn"
check !senders = :
address match test: subject=bounce-mc.us2_5466910.1551729-comp-news=
nestormedia.com@??? pattern=
mail75.atl11.rsgsv.net in ""? no (end of list)
bounce-mc.us2_5466910.1551729-comp-news=
nestormedia.com@??? in ":"? no (end of list)
check !authenticated = *
check !hosts = +relay_from_hosts
host in "127.0.0.1 : 10.1.0.0/16"? no (end of list)
host in "+relay_from_hosts"? no (end of list)
check !hosts = ${lookup dnsdb{ptr=$sender_host_address}{$value}}
search_open: dnsdb "NULL"
search_find: file="NULL"
  key="ptr=205.201.133.75" partial=-1 affix=NULL starflags=0
LRU list:
internal_search_find: file="NULL"
  type=dnsdb key="ptr=205.201.133.75"
database lookup required for ptr=205.201.133.75
dnsdb key: 75.133.201.205.in-addr.arpa
DNS lookup of 75.133.201.205.in-addr.arpa (PTR) succeeded
lookup yielded: mail75.atl11.rsgsv.net
gethostbyname2 looked up these IP addresses:
  name=mail75.atl11.rsgsv.net address=205.201.133.75
host in "mail75.atl11.rsgsv.net"? yes (matched "mail75.atl11.rsgsv.net")
warn: condition test failed in ACL "acl_check_rcpt"
processing "deny"
check local_parts = ^.*[@%!/|] : ^\\.
todd in "^.*[@%!/|] : ^\."? no (end of list)
deny: condition test failed in ACL "acl_check_rcpt"
processing "accept"
check local_parts = postmaster
todd in "postmaster"? no (end of list)
accept: condition test failed in ACL "acl_check_rcpt"
processing "accept"
check hosts = +iv_live_hosts
host in "10.1.1.86 : 10.1.1.87 : 10.1.1.88 : 10.1.1.43 : 10.1.1.44 :
192.168.100.79 : 10.1.1.120"? no (end of list)
host in "+iv_live_hosts"? no (end of list)
accept: condition test failed in ACL "acl_check_rcpt"
processing "warn"
check add_header = X-Originating-IP: ${sender_host_address}
                 = X-Originating-IP: 205.201.133.75
check set acl_c_rcpt = $local_part@$domain
                     = todd@???
warn: condition test succeeded in ACL "acl_check_rcpt"
processing "require"
check verify = sender

routing bounce-mc.us2_5466910.1551729-comp-news=
nestormedia.com@???
--------> dnslookup_smtp_auth router <--------
local_part=bounce-mc.us2_5466910.1551729-comp-news=nestormedia.com domain=
mail75.atl11.rsgsv.net
checking domains
mail75.atl11.rsgsv.net in "@ : tlyons.ivenue.net"? no (end of list)
mail75.atl11.rsgsv.net in "! +local_domains"? yes (end of list)
checking "condition"
dnslookup_smtp_auth router skipped: condition failure
--------> dnslookup_webmail router <--------
local_part=bounce-mc.us2_5466910.1551729-comp-news=nestormedia.com domain=
mail75.atl11.rsgsv.net
checking domains
cached no match for +local_domains
cached lookup data = NULL
mail75.atl11.rsgsv.net in "! +local_domains"? yes (end of list)
checking "condition"
dnslookup_webmail router skipped: condition failure
--------> dnslookup_iv_hosts router <--------
local_part=bounce-mc.us2_5466910.1551729-comp-news=nestormedia.com domain=
mail75.atl11.rsgsv.net
checking domains
cached no match for +local_domains
cached lookup data = NULL
mail75.atl11.rsgsv.net in "! +local_domains"? yes (end of list)
checking "condition"
dnslookup_iv_hosts router skipped: condition failure
--------> dnslookup router <--------
local_part=bounce-mc.us2_5466910.1551729-comp-news=nestormedia.com domain=
mail75.atl11.rsgsv.net
checking domains
cached no match for +local_domains
cached lookup data = NULL
mail75.atl11.rsgsv.net in "! +local_domains"? yes (end of list)
calling dnslookup router
dnslookup router called for bounce-mc.us2_5466910.1551729-comp-news=
nestormedia.com@???
  domain = mail75.atl11.rsgsv.net
DNS lookup of mail75.atl11.rsgsv.net (MX) succeeded
DNS lookup of mail.mail75.atl11.rsgsv.net (A) succeeded
205.201.133.75 in "0.0.0.0 : 127.0.0.0/8"? no (end of list)
fully qualified name = mail75.atl11.rsgsv.net
host_find_bydns yield = HOST_FOUND (2); returned hosts:
  mail.mail75.atl11.rsgsv.net 205.201.133.75 MX=10
set transport remote_smtp
queued for remote_smtp transport: local_part =
bounce-mc.us2_5466910.1551729-comp-news=nestormedia.com
domain = mail75.atl11.rsgsv.net
  errors_to=NULL
  domain_data=NULL localpart_data=NULL
routed by dnslookup router
  envelope to: bounce-mc.us2_5466910.1551729-comp-news=
nestormedia.com@???
  transport: remote_smtp
  host mail.mail75.atl11.rsgsv.net [205.201.133.75] MX=10
----------- end verify ------------
sender bounce-mc.us2_5466910.1551729-comp-news=
nestormedia.com@??? verified ok
require: condition test succeeded in ACL "acl_check_rcpt"
processing "accept"
check authenticated = *
accept: condition test failed in ACL "acl_check_rcpt"
processing "deny"
check condition = ${if eq {$interface_port}{587} {yes}{no} }
                = no
deny: condition test failed in ACL "acl_check_rcpt"
processing "accept"
check hosts = +relay_from_hosts
cached no match for +relay_from_hosts
cached lookup data = NULL
host in "+relay_from_hosts"? no (end of list)
accept: condition test failed in ACL "acl_check_rcpt"
processing "warn"
check dnslists = exclusions.blacklist.ivenue.net : list.dnswl.org
DNS list check: exclusions.blacklist.ivenue.net
new DNS lookup for 75.133.201.205.exclusions.blacklist.ivenue.net
DNS lookup of 75.133.201.205.exclusions.blacklist.ivenue.net (A) gave
HOST_NOT_FOUND
returning DNS_NOMATCH
DNS lookup for 75.133.201.205.exclusions.blacklist.ivenue.net failed
=> that means 205.201.133.75 is not listed at
exclusions.blacklist.ivenue.net
DNS list check: list.dnswl.org
new DNS lookup for 75.133.201.205.list.dnswl.org
DNS lookup of 75.133.201.205.list.dnswl.org (A) succeeded
DNS lookup for 75.133.201.205.list.dnswl.org succeeded (yielding 127.0.15.0)
DNS lookup of 75.133.201.205.list.dnswl.org (TXT) succeeded
=> that means 205.201.133.75 is listed at list.dnswl.org
check set acl_c0 = $sender_host_address
                 = 205.201.133.75
check add_header = X-RBL-Whitelist: $sender_host_address is in DNS based
whitelist
                 = X-RBL-Whitelist: 205.201.133.75 is in DNS based whitelist
warn: condition test succeeded in ACL "acl_check_rcpt"
processing "deny"
check !condition = ${if eq {$acl_c0}{$sender_host_address}}
                 = true
deny: condition test failed in ACL "acl_check_rcpt"
processing "deny"
check !condition = ${if eq {$acl_c0}{$sender_host_address}}
                 = true
deny: condition test failed in ACL "acl_check_rcpt"
processing "accept"
check domains = +local_domains
tlyons.ivenue.net in "@ : tlyons.ivenue.net"? yes (matched "@")
tlyons.ivenue.net in "+local_domains"? yes (matched "+local_domains")
check verify = recipient

search_tidyup called
<-  354 Enter message, ending with "." on a line by itself
 -> Received: from webmail2.ivenue.net (localhost.localdomain [127.0.0.1])^M
 ->     by smtp-webmail.ivenue.com (8.14.4/8.14.4) with ESMTP id
oBKKuaUd008454^M
 ->     for <todd@???>; Mon, 20 Dec 2010 12:56:36 -0800^M
 -> Received: from User (24-113-254-185.wavecable.com [24.113.254.185])^M
 ->     (authenticated bits=0)^M
 ->     by mail941c35.nsolutionszone.com (8.13.6/8.13.1) with ESMTP id
pASL7WTW028577;^M
 ->     Mon, 28 Nov 2011 21:07:37 GMT^M
 -> X-DKIM: OpenDKIM Filter v2.2.2 smtp-webmail.ivenue.com oBKKuaUd008454^M
 -> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=misterball.com;
s=k8;^M
 ->     t=1292878596; bh=6rBf3So9DpYCtqKcTPuXceUp8QfIXqucByezNXC7RFE=;^M
 ->     h=Content-Type:Content-Transfer-Encoding:Mime-Version:From:To:^M
 ->      Subject:Reply-To:Date;^M
 ->
z=Content-Type:=20text/plain=3B=20charset=3D"iso-8859-1"|Content-Di^M
 ->
 sposition:=20inline|Content-Transfer-Encoding:=20binary|Mime-Versi^M
 ->      on:=201.0|From:=20<todd@???>|To:=20todd@???
|^M
 ->      Subject:=20Fwd:=20test=201|Reply-To:=20todd@???
|X-Maile^M
 ->      r:=20AtMail=20Corp=204.0=20-=20http://webbasedemail.com/|X-Origin
:^M
 ->
 =20192.168.100.166|Date:=20Mon,=2020=20Dec=202010=2020:56:36=20+00^M
 ->
 00|X-Virus-Scanned:=20clamav-milter=200.96.4=20at=20webmail2.ivenu^M
 ->      e.net|X-Virus-Status:=20Clean;^M
 ->
b=IcA2guXoW4OZ78TyoOvUiBbLe3pQ6kZ9/VX6HkgtVGDOefB3CnhqDE8A28YzhjKyA^M
 ->
 FKOKemKmhpvRcqWS4Xb9oRhtGA8wFFdVN0JEQAn6PyHS/Kthyb0kl1wjFOyyUyEcHK^M
 ->      T+1xFEY3BxTa1SHRvGzLrzoRYMqp4epKsBeLgk/g=^M
-> Message-Id: <2010122202056.oBKXKuaUd8454@???>^M
 -> Content-Type: text/plain; charset="iso-8859-1"^M
 -> Content-Disposition: inline^M
 -> Content-Transfer-Encoding: binary^M
 -> Mime-Version: 1.0^M
 -> From: =?utf-8?Q?IT=20Labs?= <lera@???>^M
 -> To: todd@???^M
 -> Subject: Fwd: test 3^M
 -> Date: Mon, 20 Dec 2010 20:56:36 +0000^M
 -> X-Virus-Scanned: clamav-milter 0.96.4 at webmail2.ivenue.net^M
 -> X-Virus-Status: Clean^M
 -> ^M
 -> ^M
 -> ^M
 -> ^M
 -> ----- Original Message ----- ^M
 -> From: Todd Lyons <tlyons@???>^M
 -> To: cannonball@???^M
 -> Sent: Wed Dec 15  5:57^M
 -> Subject: Fwd: test 1^M
 -> ^M
 -> ^M
 -> Huh, who would have thunk it?^M
 -> -- ^M
 -> Regards...          Todd^M
 -> I've visited conferences where the wireless LAN was deemed "secure" by^M
 -> the organisation because they had outlawed sniffers.    --Neils Bakker^M
 -> Linux kernel 2.6.35-23-generic   8 users,  load average: 2.45, 2.47,
2.38^M
 -> ^M
 -> ^M
 -> ---- Msg sent via WebMail^M
 -> ^M
 -> .
PDKIM >> Found sig, trying to parse >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
v=1
a=rsa-sha256
c=relaxed/simple
d=misterball.com
s=k8
t=1292878596
bh=6rBf3So9DpYCtqKcTPuXceUp8QfIXqucByezNXC7RFE=
h=Content-Type:Content-Transfer-Encoding:Mime-Version:From:To:Subject:Reply-To:Date
z=Content-Type:=20text/plain=3B=20charset=3D"iso-8859-1"|Content-Disposition:=20inline|Content-Transfer-Encoding:=20binary|Mime-Version:=201.0|From:=20<
todd@???>|To:=20todd@???
|Subject:=20Fwd:=20test=201|Reply-To:=20todd@???
|X-Mailer:=20AtMail=20Corp=204.0=20-=20
http://webbasedemail.com/|X-Origin:=20192.168.100.166|Date:=20Mon,=2020=20Dec=202010=2020:56:36=20+0000|X-Virus-Scanned:=20clamav-milter=200.96.4=20at=20webmail2.ivenue.net|X-Virus-Status:=20Clean
b=IcA2guXoW4OZ78TyoOvUiBbLe3pQ6kZ9/VX6HkgtVGDOefB3CnhqDE8A28YzhjKyAFKOKemKmhpvRcqWS4Xb9oRhtGA8wFFdVN0JEQAn6PyHS/Kthyb0kl1wjFOyyUyEcHKT+1xFEY3BxTa1SHRvGzLrzoRYMqp4epKsBeLgk/g=
PDKIM >> Raw signature w/o b= tag value >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
DKIM-Signature:{SP}v=1;{SP}a=rsa-sha256;{SP}c=relaxed/simple;{SP}d=
misterball.com
;{SP}s=k8;{CR}{LF}{TB}t=1292878596;{SP}bh=6rBf3So9DpYCtqKcTPuXceUp8QfIXqucByezNXC7RFE=;{CR}{LF}{TB}h=Content-Type:Content-Transfer-Encoding:Mime-Version:From:To:{CR}{LF}{TB}{SP}Subject:Reply-To:Date;{CR}{LF}{TB}z=Content-Type:=20text/plain=3B=20charset=3D"iso-8859-1"|Content-Di{CR}{LF}{TB}{SP}sposition:=20inline|Content-Transfer-Encoding:=20binary|Mime-Versi{CR}{LF}{TB}{SP}on:=201.0|From:=20<
todd@???>|To:=20todd@???
|{CR}{LF}{TB}{SP}Subject:=20Fwd:=20test=201|Reply-To:=20todd@???
|X-Maile{CR}{LF}{TB}{SP}r:=20AtMail=20Corp=204.0=20-=20
http://webbasedemail.com/|X-Origin:{CR}{LF}{TB}{SP}=20192.168.100.166|Date:=20Mon,=2020=20Dec=202010=2020:56:36=20+00{CR}{LF}{TB}{SP}00|X-Virus-Scanned:=20clamav-milter=200.96.4=20at=20webmail2.ivenu{CR}{LF}{TB}{SP}e.net|X-Virus-Status:=20Clean;{CR}{LF}{TB}b=
PDKIM <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
PDKIM >> Hashed body data, canonicalized >>>>>>>>>>>>>>>>>>>>>>>>>>>>>
{CR}{LF}{CR}{LF}{CR}{LF}-----{SP}Original{SP}Message{SP}-----{SP}{CR}{LF}From:{SP}Todd{SP}Lyons{SP}<
tlyons@???>{CR}{LF}To:{SP}cannonball@???{CR}{LF}Sent:{SP}Wed{SP}Dec{SP}15{SP}{SP}5:57{CR}{LF}Subject:{SP}Fwd:{SP}test{SP}1{CR}{LF}{CR}{LF}{CR}{LF}Huh,{SP}who{SP}would{SP}have{SP}thunk{SP}it?{CR}{LF}--{SP}{CR}{LF}Regards...{TB}{TB}Todd{CR}{LF}I've{SP}visited{SP}conferences{SP}where{SP}the{SP}wireless{SP}LAN{SP}was{SP}deemed{SP}"secure"{SP}by{CR}{LF}the{SP}organisation{SP}because{SP}they{SP}had{SP}outlawed{SP}sniffers.{SP}{SP}{SP}{SP}--Neils{SP}Bakker{CR}{LF}Linux{SP}kernel{SP}2.6.35-23-generic{SP}{SP}{SP}8{SP}users,{SP}{SP}load{SP}average:{SP}2.45,{SP}2.47,{SP}2.38{CR}{LF}{CR}{LF}{CR}{LF}----{SP}Msg{SP}sent{SP}via{SP}WebMail{CR}{LF}host
in ignore_fromline_hosts? no (option unset)

Received: from webmail2.ivenue.net (localhost.localdomain [127.0.0.1])
        by smtp-webmail.ivenue.com (8.14.4/8.14.4) with ESMTP id
oBKKuaUd008454
        for <todd@???>; Mon, 20 Dec 2010 12:56:36 -0800
Received: from User (24-113-254-185.wavecable.com [24.113.254.185])
        (authenticated bits=0)
        by mail941c35.nsolutionszone.com (8.13.6/8.13.1) with ESMTP id
pASL7WTW028577;
        Mon, 28 Nov 2011 21:07:37 GMT
X-DKIM: OpenDKIM Filter v2.2.2 smtp-webmail.ivenue.com oBKKuaUd008454
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=misterball.com; s=k8;
        t=1292878596; bh=6rBf3So9DpYCtqKcTPuXceUp8QfIXqucByezNXC7RFE=;
        h=Content-Type:Content-Transfer-Encoding:Mime-Version:From:To:
         Subject:Reply-To:Date;
        z=Content-Type:=20text/plain=3B=20charset=3D"iso-8859-1"|Content-Di
         sposition:=20inline|Content-Transfer-Encoding:=20binary|Mime-Versi
         on:=201.0|From:=20<todd@???>|To:=20todd@???|
         Subject:=20Fwd:=20test=201|Reply-To:=20todd@???|X-Maile
         r:=20AtMail=20Corp=204.0=20-=20http://webbasedemail.com/|X-Origin:
         =20192.168.100.166|Date:=20Mon,=2020=20Dec=202010=2020:56:36=20+00
         00|X-Virus-Scanned:=20clamav-milter=200.96.4=20at=20webmail2.ivenu
         e.net|X-Virus-Status:=20Clean;
        b=IcA2guXoW4OZ78TyoOvUiBbLe3pQ6kZ9/VX6HkgtVGDOefB3CnhqDE8A28YzhjKyA
         FKOKemKmhpvRcqWS4Xb9oRhtGA8wFFdVN0JEQAn6PyHS/Kthyb0kl1wjFOyyUyEcHK
         T+1xFEY3BxTa1SHRvGzLrzoRYMqp4epKsBeLgk/g=
Message-Id: <2010122202056.oBKXKuaUd8454@???>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: binary
Mime-Version: 1.0
From: =?utf-8?Q?IT=20Labs?= <lera@???>
To: todd@???
Subject: Fwd: test 3
Date: Mon, 20 Dec 2010 20:56:36 +0000
X-Virus-Scanned: clamav-milter 0.96.4 at webmail2.ivenue.net
X-Virus-Status: Clean

P Received: from webmail2.ivenue.net (localhost.localdomain [127.0.0.1])
        by smtp-webmail.ivenue.com (8.14.4/8.14.4) with ESMTP id
oBKKuaUd008454
        for <todd@???>; Mon, 20 Dec 2010 12:56:36 -0800
P Received: from User (24-113-254-185.wavecable.com [24.113.254.185])
        (authenticated bits=0)
        by mail941c35.nsolutionszone.com (8.13.6/8.13.1) with ESMTP id
pASL7WTW028577;
        Mon, 28 Nov 2011 21:07:37 GMT
  X-DKIM: OpenDKIM Filter v2.2.2 smtp-webmail.ivenue.com oBKKuaUd008454
  DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=misterball.com;
s=k8;
        t=1292878596; bh=6rBf3So9DpYCtqKcTPuXceUp8QfIXqucByezNXC7RFE=;
        h=Content-Type:Content-Transfer-Encoding:Mime-Version:From:To:
         Subject:Reply-To:Date;
        z=Content-Type:=20text/plain=3B=20charset=3D"iso-8859-1"|Content-Di
         sposition:=20inline|Content-Transfer-Encoding:=20binary|Mime-Versi
         on:=201.0|From:=20<todd@???>|To:=20todd@???|
         Subject:=20Fwd:=20test=201|Reply-To:=20todd@???|X-Maile
         r:=20AtMail=20Corp=204.0=20-=20http://webbasedemail.com/|X-Origin:
         =20192.168.100.166|Date:=20Mon,=2020=20Dec=202010=2020:56:36=20+00
         00|X-Virus-Scanned:=20clamav-milter=200.96.4=20at=20webmail2.ivenu
         e.net|X-Virus-Status:=20Clean;
        b=IcA2guXoW4OZ78TyoOvUiBbLe3pQ6kZ9/VX6HkgtVGDOefB3CnhqDE8A28YzhjKyA
         FKOKemKmhpvRcqWS4Xb9oRhtGA8wFFdVN0JEQAn6PyHS/Kthyb0kl1wjFOyyUyEcHK
         T+1xFEY3BxTa1SHRvGzLrzoRYMqp4epKsBeLgk/g=
I Message-Id: <2010122202056.oBKXKuaUd8454@???>
  Content-Type: text/plain; charset="iso-8859-1"
  Content-Disposition: inline
  Content-Transfer-Encoding: binary
  Mime-Version: 1.0
F From: =?utf-8?Q?IT=20Labs?= <lera@???>
T To: todd@???
  Subject: Fwd: test 3
  Date: Mon, 20 Dec 2010 20:56:36 +0000
  X-Virus-Scanned: clamav-milter 0.96.4 at webmail2.ivenue.net
  X-Virus-Status: Clean

P Received: from mail75.atl11.rsgsv.net ([205.201.133.75])
        by tlyons.ivenue.net with esmtp (Exim 4.80_250-9bdd29a)
        (envelope-from <bounce-mc.us2_5466910.1551729-comp-news=
nestormedia.com@???>)
        id 1VRLxL-0000Sq-31
        for todd@???; Wed, 02 Oct 2013 05:55:07 -0700

PDKIM <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
PDKIM [misterball.com] Body bytes hashed: 460
PDKIM [misterball.com] bh  computed:
eab05fdd2a3d0e9602b6a29c4cfb9771e529f107c85eab9c0727b33570bb4451
PDKIM [misterball.com] Body hash verified OK
PDKIM >> Hashed header data, canonicalized, in sequence >>>>>>>>>>>>>>
content-type:text/plain;{SP}charset="iso-8859-1"{CR}{LF}
content-transfer-encoding:binary{CR}{LF}
mime-version:1.0{CR}{LF}
from:=?utf-8?Q?IT=20Labs?={SP}<lera@???>{CR}{LF}
to:todd@???{CR}{LF}
subject:Fwd:{SP}test{SP}3{CR}{LF}
date:Mon,{SP}20{SP}Dec{SP}2010{SP}20:56:36{SP}+0000{CR}{LF}
PDKIM <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
PDKIM >> Signed DKIM-Signature header, canonicalized >>>>>>>>>>>>>>>>>
dkim-signature:v=1;{SP}a=rsa-sha256;{SP}c=relaxed/simple;{SP}d=
misterball.com
;{SP}s=k8;{SP}t=1292878596;{SP}bh=6rBf3So9DpYCtqKcTPuXceUp8QfIXqucByezNXC7RFE=;{SP}h=Content-Type:Content-Transfer-Encoding:Mime-Version:From:To:{SP}Subject:Reply-To:Date;{SP}z=Content-Type:=20text/plain=3B=20charset=3D"iso-8859-1"|Content-Di{SP}sposition:=20inline|Content-Transfer-Encoding:=20binary|Mime-Versi{SP}on:=201.0|From:=20<
todd@???>|To:=20todd@???
|{SP}Subject:=20Fwd:=20test=201|Reply-To:=20todd@???
|X-Maile{SP}r:=20AtMail=20Corp=204.0=20-=20
http://webbasedemail.com/|X-Origin:{SP}=20192.168.100.166|Date:=20Mon,=2020=20Dec=202010=2020:56:36=20+00{SP}00|X-Virus-Scanned:=20clamav-milter=200.96.4=20at=20webmail2.ivenu{SP}e.net|X-Virus-Status:=20Clean;{SP}b=
PDKIM <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
PDKIM [misterball.com] hh computed:
17cdc4a5250de3c243aef13d2debfde9d86d062cb4bd131fe407bfb5590bacec
DNS lookup of k8._domainkey.misterball.com. (TXT) gave HOST_NOT_FOUND
returning DNS_NOMATCH
PDKIM [misterball.com] signature status: PDKIM_VERIFY_INVALID
(PDKIM_VERIFY_INVALID_PUBKEY_UNAVAILABLE)
LOG: MAIN
  DKIM: d=misterball.com s=k8 c=relaxed/simple a=rsa-sha256 t=1292878596
[invalid - public key record (currently?) unavailable]
Found Content-Type: header - executing acl_smtp_mime.
Found content-type: MIME header, value is 'text/plain'
Found charset= MIME parameter in content-type: header, value is 'iso-8859-1'
Found content-disposition: MIME header, value is 'inline'
Found content-transfer-encoding: MIME header, value is 'binary'
using ACL "acl_check_mime"
processing "warn"
check decode = default
warn: condition test succeeded in ACL "acl_check_mime"
processing "deny"
check condition = ${if match {${lc:$mime_filename}}
{\N(\.exe|\.pif|\.bat|\.scr|\.lnk|\.com|\.vbs)$\N} {1}{0}}
                = 0
deny: condition test failed in ACL "acl_check_mime"
processing "accept"
accept: condition test succeeded in ACL "acl_check_mime"
using ACL "acl_check_content"
processing "warn"
check dmarc_status = *
DMARC adding DKIM sender domain = misterball.com
DMARC no record found for it-labs.ru
norecord in "*"? yes (matched "*")
warn: condition test succeeded in ACL "acl_check_content"
LOG: MAIN
  H=mail75.atl11.rsgsv.net [205.201.133.75] Warning: DMARC DEBUG: norecord
*** No DMARC record *** it-labs.ru *** Authentication-Results:
tlyons.ivenue.net; dmarc=temperror header.from=it-labs.ru
processing "deny"
check condition = ${if >{${strlen:$h_subject:}}{1000}}
                =
deny: condition test failed in ACL "acl_check_content"
processing "deny"
check demime = *
check condition = ${if >{$demime_errorlevel}{2}{1}{0}}
                = 0
deny: condition test failed in ACL "acl_check_content"
processing "accept"
check condition = ${if def:header_x-atmail-account:{yes}{no}}
                = no
accept: condition test failed in ACL "acl_check_content"
processing "deny"
check condition = ${if !def:h_Date: {1}}
                =
deny: condition test failed in ACL "acl_check_content"
processing "discard"
check condition = ${if >{$message_size}{500K}{true}{false}}
                = false
discard: condition test failed in ACL "acl_check_content"
processing "accept"
accept: condition test succeeded in ACL "acl_check_content"
unspool_mbox(): unlinking
'/home/exim-build/tmp/var/spool/exim/scan/1VRLxL-0000Sq-31/1VRLxL-0000Sq-31-00000.com'
unspool_mbox(): unlinking
'/home/exim-build/tmp/var/spool/exim/scan/1VRLxL-0000Sq-31/1VRLxL-0000Sq-31-00000'
unspool_mbox(): unlinking
'/home/exim-build/tmp/var/spool/exim/scan/1VRLxL-0000Sq-31/1VRLxL-0000Sq-31.eml'
calling local_scan(); timeout=300
local_scan() returned 0 NULL
LOG: MAIN
  <= bounce-mc.us2_5466910.1551729-comp-news=
nestormedia.com@???
H=mail75.atl11.rsgsv.net[205.201.133.75] P=esmtp S=2638 id=
2010122202056.oBKXKuaUd8454@???