DCC showing whitelist, don't know why

Chris Aseltine ophidian@newsnation.com
Sun Feb 26 15:00:13 UTC 2017


Here's a dcc log file from something that got through.

VERSION: 3
DATE: 02/26/17 00:02:30 CST
IP: [220.191.210.2] ::ffff:220.191.210.2
HELO: mail.hzzx.gov.cn
env_From: <wch@hzzx.gov.cn>  mail_host=hzzx.gov.cn.
env_To: <ophidian@newsnation.com>  addr=ophidian  dir=userdirs/local/ophidian

Received: from ifslvubpc (113.219.99.59) by mail.hzzx.gov.cn (10.255.54.3)
 with Microsoft SMTP Server id 14.0.639.21; Sun, 26 Feb 2017 13:20:15 +0800
Message-ID: <37728470AECA2346CA1547FAE6DBD25C@ifslvubpc>
From: dqvvjhskd <wch@hzzx.gov.cn>
To: <rbrookman@sabt.com>, <ophidian@newsnation.com>, <rata@sf-express.com>,
        <sales@dxslxj.com>, <qiaoping@fenglin.com.cn>, <sales@nikunipump.com>,
        <support@easyexpunctions.com>, <sales@peacedove.cn>,
        <liuxiaojun@cindasc.com>, <office@bycoop.com>, <michael@ntyagao.com>,
        <shyegongmin@jd.com>, <simon@jieling-soft.com>, <network@eastwestassist.com>,
        <postmaster@mail2uk.com>, <seth@sethmedia.cn>, <qc@trinetcn.com>,
        <sidney@unival.cn>, <sales@luoergang.com>, <support@titantrade.com>,
        <sales@chipstech-int.com>
Subject: =?gb2312?B?zbu3otL5z+ujrL3QyMvG3sC0ztK80rfFxPK4+M7Sv7TQwMnN?=
Date: Sun, 26 Feb 2017 15:03:27 +0800
MIME-Version: 1.0
Content-Type: text/html; charset="gb2312"
Content-Transfer-Encoding: base64
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
Return-Path: wch@hzzx.gov.cn
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### end of message body ########################
DCC-->spam(off)  dccm  global-log

X-DCC--Metrics: quantum 1356; bulk Body=1 Fuz1=160 Fuz2=many
                            reported: 1               checksum  server thold
                       IP: bf3402b3 9d36bcb6 ef7a06f1 b9a24755
                 env_From: 91096200 3cafaa66 3e0ef598 38d8c85b
                     From: 8522f931 19f40f98 758a535e 6876becb
          substitute helo: 0fc71112 7ba33822 ebbea772 4b51039a
               Message-ID: 955b7da1 da472eab 45d9400e 07ce1192
                 Received: db32a350 52973a94 9ab089c1 bc30d6e3
                     Body: 277b6e8e 3cfb3ca3 37f99a27 bd0f9f0f       0    20
                     Fuz1: a0161e65 5da42cc3 b0274545 573a2164     159    20
                     Fuz2: 67b64700 a5bd951c 44000dbc cad8681a    many    20
     substitute mail_host: df5c1511 773435b7 8d684a8a f4d6aa4e

       greylist recipient
  ophidian@newsnation.com: 2af34144 1b59e070 03529575 65ad8609
                           4fe2b813 a7bf8f46 d5d49838 ad3c8e0f Pass

result: accept



-----Original Message-----
From: DCC [mailto:dcc-bounces@rhyolite.com] On Behalf Of Vernon Schryver
Sent: Saturday, February 25, 2017 9:52 PM
To: dcc@rhyolite.com
Subject: RE: DCC showing whitelist, don't know why

> From: Chris Aseltine <ophidian@newsnation.com>

> Feb 25 15:39:35 quantum sendmail[53701]: v1PLdZcG053701: 
> from=ophidian, size=9530, class=0, nrcpts=1, 
> msgid=<4e303f8563313fdad13d0733799c4075@encernal.com>, 
> relay=ophidian@localhost
>
> ??? What is this??

that is a system log message from sendmail.

I wrote instead about /var/dcc/log/ file like those visible in https://www.rhyolite.com/dcc-demo-cgi-bin/list-log
with user name dcc-demo-cgi and password dcc-demo-cgi

Look at the "Envelope" and "Headers" sections at the starts of those files and "the "Checksums" section at their ends.


Vernon Schryver    vjs@rhyolite.com
_______________________________________________
DCC mailing list      DCC@rhyolite.com
https://www.rhyolite.com/mailman/listinfo/dcc




More information about the DCC mailing list

Contact vjs@rhyolite.com by mail or use the form.