{"action":"created","issue":{"url":"https://api.github.com/repos/andryyy/mailcow/issues/286","repository_url":"https://api.github.com/repos/andryyy/mailcow","labels_url":"https://api.github.com/repos/andryyy/mailcow/issues/286/labels{/name}","comments_url":"https://api.github.com/repos/andryyy/mailcow/issues/286/comments","events_url":"https://api.github.com/repos/andryyy/mailcow/issues/286/events","html_url":"https://github.com/andryyy/mailcow/issues/286","id":132760532,"number":286,"title":"Spam, Viruschecks and Mailgraphs","user":{"login":"ttoups","id":10554242,"avatar_url":"https://avatars.githubusercontent.com/u/10554242?v=3","gravatar_id":"","url":"https://api.github.com/users/ttoups","html_url":"https://github.com/ttoups","followers_url":"https://api.github.com/users/ttoups/followers","following_url":"https://api.github.com/users/ttoups/following{/other_user}","gists_url":"https://api.github.com/users/ttoups/gists{/gist_id}","starred_url":"https://api.github.com/users/ttoups/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ttoups/subscriptions","organizations_url":"https://api.github.com/users/ttoups/orgs","repos_url":"https://api.github.com/users/ttoups/repos","events_url":"https://api.github.com/users/ttoups/events{/privacy}","received_events_url":"https://api.github.com/users/ttoups/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2016-02-10T17:08:05Z","updated_at":"2016-02-10T20:58:41Z","closed_at":null,"body":"Hi,\r\nI recently updated my mailcow instance and noticed that the reliability of spam filtering and virus checking isn't working sufficient.\r\nTo validate I ran a test via [emailsecuritycheck.net](http://www.emailsecuritycheck.net):\r\n**5 of 7 Mails get delivered**\r\nOnly the standard spam message (GTUBE spam signature) and the EICAR anti virus test file are blocked correctly, while all others get through. In previous versions I had the possibility in the command center to define file types to be blocked. Is there a guide to configure Fuglu more scrict (have no experience with Fuglu).\r\n\r\n_fuglu.log_\r\n> 2016-02-10 17:43:55,647 fuglu.SessionHandler: INFO Suspect 92f8fb6e38504f68912eb795093321fe from=securitycheck@emailsecuritycheck.net to=mail@domain.xy size=7875 spam=no virus=no modified=yes decision=DUNNO\r\n2016-02-10 17:44:32,643 fuglu.plugin.ClamavPlugin: INFO Virus found in message from securitycheck@emailsecuritycheck.net : {'stream': 'Eicar-Test-Signature'}\r\n2016-02-10 17:44:32,644 fuglu.SessionHandler: INFO Suspect 8b8ad1b535dd41e1a14dddce2e78c7e8 from=securitycheck@emailsecuritycheck.net to=mail@domain.xy size=1574 spam=no virus=yes modified=no decision=REJECT\r\n2016-02-10 17:44:33,794 fuglu.SessionHandler: INFO Suspect 2d35ae560dbc42cfb31e86d0e529cf56 from=securitycheck@emailsecuritycheck.net to=mail@domain.xy size=1395 spam=no virus=no modified=yes decision=DUNNO\r\n2016-02-10 17:44:34,156 fuglu.SessionHandler: INFO Suspect 195a0f15a2e64fe18c264293124fe798 from=securitycheck@emailsecuritycheck.net to=mail@domain.xy size=1112 spam=yes virus=no modified=yes decision=REJECT\r\n2016-02-10 17:44:35,642 fuglu.SessionHandler: INFO Suspect d0ad9f557d5c4f5b862d8de526f8685a from=securitycheck@emailsecuritycheck.net to=mail@domain.xy size=1475 spam=no virus=no modified=yes decision=DUNNO\r\n2016-02-10 17:44:35,853 fuglu.SessionHandler: INFO Suspect f1954bf0eb314846bb6889c67436e0d8 from=securitycheck@emailsecuritycheck.net to=mail@domain.xy size=1399 spam=no virus=no modified=yes decision=DUNNO\r\n2016-02-10 17:44:36,821 fuglu.SessionHandler: INFO Suspect 6129434aca71473b850c37be5ad1e8ed from=securitycheck@emailsecuritycheck.net to=mail@domain.xy size=1401 spam=no virus=no modified=yes decision=DUNNO\r\n2016-02-10 17:44:39,661 fuglu.SessionHandler: INFO Suspect c02d73420a4c437ba1e56cdfaaedcbcd from=securitycheck@emailsecuritycheck.net to=mail@domain.xy size=1400 spam=no virus=no modified=yes decision=DUNNO\r\n\r\n_mail.log_\r\n> Feb 10 17:43:53 hostname postfix/postscreen[9432]: CONNECT from [149.202.232.193]:34366 to [1.2.3.4]:25\r\nFeb 10 17:43:53 hostname postfix/postscreen[9432]: PASS OLD [149.202.232.193]:34366\r\nFeb 10 17:43:53 hostname postfix/smtpd[9434]: connect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:43:53 hostname postfix/smtpd[9434]: Anonymous TLS connection established from outbound.emailsecuritycheck.net[149.202.232.193]: TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)\r\nFeb 10 17:43:53 hostname postfix/smtpd[9434]: NOQUEUE: client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:43:53 hostname postfix/smtpd[9455]: connect from localhost[127.0.0.1]\r\nFeb 10 17:43:53 hostname postfix/smtpd[9455]: C4990801474: client=localhost[127.0.0.1], orig_client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:43:53 hostname spamd[9147]: spamd: got connection over /var/run/spamd.sock\r\nFeb 10 17:43:53 hostname spamd[9147]: spamd: processing message <1455122702.56bb690eba7d8@www.emailsecuritycheck.net> for (unknown):113\r\nFeb 10 17:43:55 hostname spamd[9147]: spamd: clean message (-1.8/5.0) for (unknown):113 in 1.8 seconds, 7875 bytes.\r\nFeb 10 17:43:55 hostname spamd[9147]: spamd: result: . -1 - BAYES_00,HTML_MESSAGE,SPF_HELO_NEUTRAL scantime=1.8,size=7875,user=(unknown),uid=113,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamd.sock,mid=<1455122702.56bb690eba7d8@www.emailsecuritycheck.net>,bayes=0.000000,autolearn=ham autolearn_force=no\r\nFeb 10 17:43:55 hostname postfix/cleanup[9458]: C4990801474: message-id=<1455122702.56bb690eba7d8@www.emailsecuritycheck.net>\r\nFeb 10 17:43:55 hostname opendkim[781]: C4990801474: no signing table match for 'securitycheck@emailsecuritycheck.net'\r\nFeb 10 17:43:55 hostname opendkim[781]: C4990801474: no signature data\r\nFeb 10 17:43:55 hostname postfix/qmgr[2931]: C4990801474: from=<securitycheck@emailsecuritycheck.net>, size=8382, nrcpt=1 (queue active)\r\nFeb 10 17:43:55 hostname postfix/smtpd[9434]: proxy-accept: END-OF-MESSAGE: 250 2.0.0 Ok: queued as C4990801474; from=<securitycheck@emailsecuritycheck.net> to=<mail@domain.xy> proto=ESMTP helo=<byteplant.com>\r\nFeb 10 17:43:55 hostname postfix/smtpd[9455]: disconnect from localhost[127.0.0.1]\r\nFeb 10 17:43:55 hostname dovecot: lmtp(9529): Connect from local\r\nFeb 10 17:43:55 hostname spamd[9145]: prefork: child states: II\r\nFeb 10 17:43:55 hostname postfix/smtpd[9434]: disconnect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:43:55 hostname dovecot: lmtp(9529, mail@domain.xy): IDAjK8tou1Y5JQAA1dT27g: sieve: msgid=<1455122702.56bb690eba7d8@www.emailsecuritycheck.net>: stored mail into mailbox 'INBOX'\r\nFeb 10 17:43:55 hostname postfix/lmtp[9476]: C4990801474: to=<mail@domain.xy>, relay=host.domain.xy[private/dovecot-lmtp], delay=2.1, delays=1.9/0/0.01/0.18, dsn=2.0.0, status=sent (250 2.0.0 <mail@domain.xy> IDAjK8tou1Y5JQAA1dT27g Saved)\r\nFeb 10 17:43:55 hostname postfix/qmgr[2931]: C4990801474: removed\r\nFeb 10 17:43:55 hostname dovecot: lmtp(9529): Disconnect from local: Successful quit\r\nFeb 10 17:44:32 hostname postfix/postscreen[9432]: CONNECT from [149.202.232.193]:45273 to [1.2.3.4]:25\r\nFeb 10 17:44:32 hostname postfix/postscreen[9432]: PASS OLD [149.202.232.193]:45273\r\nFeb 10 17:44:32 hostname postfix/smtpd[9434]: connect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9434]: Anonymous TLS connection established from outbound.emailsecuritycheck.net[149.202.232.193]: TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)\r\nFeb 10 17:44:32 hostname postfix/postscreen[9432]: CONNECT from [149.202.232.193]:47293 to [1.2.3.4]:25\r\nFeb 10 17:44:32 hostname postfix/postscreen[9432]: PASS OLD [149.202.232.193]:47293\r\nFeb 10 17:44:32 hostname postfix/smtpd[9535]: connect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9434]: NOQUEUE: client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9455]: connect from localhost[127.0.0.1]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9455]: 5F8A480146E: client=localhost[127.0.0.1], orig_client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname spamd[9147]: spamd: got connection over /var/run/spamd.sock\r\nFeb 10 17:44:32 hostname spamd[9147]: spamd: processing message <emailsecuritycheck.net.1.LEnC4bgFimQHGHz3PvKpOQ==> for (unknown):113\r\nFeb 10 17:44:32 hostname postfix/postscreen[9432]: CONNECT from [149.202.232.193]:53674 to [1.2.3.4]:25\r\nFeb 10 17:44:32 hostname postfix/postscreen[9432]: PASS OLD [149.202.232.193]:53674\r\nFeb 10 17:44:32 hostname postfix/smtpd[9537]: connect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9535]: Anonymous TLS connection established from outbound.emailsecuritycheck.net[149.202.232.193]: TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)\r\nFeb 10 17:44:32 hostname postfix/smtpd[9535]: NOQUEUE: client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname postfix/postscreen[9432]: CONNECT from [149.202.232.193]:39580 to [1.2.3.4]:25\r\nFeb 10 17:44:32 hostname postfix/postscreen[9432]: PASS OLD [149.202.232.193]:39580\r\nFeb 10 17:44:32 hostname postfix/smtpd[9539]: connect from localhost[127.0.0.1]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9538]: connect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9539]: 9C7D9801473: client=localhost[127.0.0.1], orig_client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9535]: proxy-reject: END-OF-MESSAGE: 550 threat detected: Eicar-Test-Signature; from=<securitycheck@emailsecuritycheck.net> to=<mail@domain.xy> proto=ESMTP helo=<byteplant.com>\r\nFeb 10 17:44:32 hostname postfix/smtpd[9539]: disconnect from localhost[127.0.0.1]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9535]: disconnect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9537]: Anonymous TLS connection established from outbound.emailsecuritycheck.net[149.202.232.193]: TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)\r\nFeb 10 17:44:32 hostname postfix/smtpd[9537]: NOQUEUE: client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9539]: connect from localhost[127.0.0.1]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9539]: B09D9801474: client=localhost[127.0.0.1], orig_client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname spamd[9149]: spamd: got connection over /var/run/spamd.sock\r\nFeb 10 17:44:32 hostname spamd[9149]: spamd: processing message <emailsecuritycheck.net.3.LEnC4bgFimQHGHz3PvKpOQ==> for (unknown):113\r\nFeb 10 17:44:32 hostname postfix/postscreen[9432]: CONNECT from [149.202.232.193]:55077 to [1.2.3.4]:25\r\nFeb 10 17:44:32 hostname postfix/postscreen[9432]: PASS OLD [149.202.232.193]:55077\r\nFeb 10 17:44:32 hostname postfix/smtpd[9535]: connect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9538]: Anonymous TLS connection established from outbound.emailsecuritycheck.net[149.202.232.193]: TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)\r\nFeb 10 17:44:32 hostname postfix/smtpd[9538]: NOQUEUE: client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9541]: connect from localhost[127.0.0.1]\r\nFeb 10 17:44:32 hostname postfix/smtpd[9541]: D0D6A801476: client=localhost[127.0.0.1], orig_client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:33 hostname postfix/postscreen[9432]: CONNECT from [149.202.232.193]:43730 to [1.2.3.4]:25\r\nFeb 10 17:44:33 hostname postfix/postscreen[9432]: PASS OLD [149.202.232.193]:43730\r\nFeb 10 17:44:33 hostname postfix/postscreen[9432]: CONNECT from [149.202.232.193]:32992 to [1.2.3.4]:25\r\nFeb 10 17:44:33 hostname postfix/postscreen[9432]: PASS OLD [149.202.232.193]:32992\r\nFeb 10 17:44:33 hostname postfix/smtpd[9535]: Anonymous TLS connection established from outbound.emailsecuritycheck.net[149.202.232.193]: TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)\r\nFeb 10 17:44:33 hostname postfix/smtpd[9543]: connect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:33 hostname postfix/smtpd[9544]: connect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:33 hostname postfix/smtpd[9535]: NOQUEUE: client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:33 hostname postfix/smtpd[9545]: connect from localhost[127.0.0.1]\r\nFeb 10 17:44:33 hostname postfix/smtpd[9545]: 7A19580147C: client=localhost[127.0.0.1], orig_client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:33 hostname postfix/smtpd[9544]: Anonymous TLS connection established from outbound.emailsecuritycheck.net[149.202.232.193]: TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)\r\nFeb 10 17:44:33 hostname postfix/smtpd[9544]: NOQUEUE: client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:33 hostname postfix/smtpd[9547]: connect from localhost[127.0.0.1]\r\nFeb 10 17:44:33 hostname postfix/smtpd[9547]: A66EB801482: client=localhost[127.0.0.1], orig_client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:33 hostname postfix/smtpd[9543]: Anonymous TLS connection established from outbound.emailsecuritycheck.net[149.202.232.193]: TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)\r\nFeb 10 17:44:33 hostname spamd[9147]: spamd: clean message (0.2/5.0) for (unknown):113 in 1.4 seconds, 1395 bytes.\r\nFeb 10 17:44:33 hostname spamd[9147]: spamd: result: . 0 - BAYES_00,INVALID_MSGID,PYZOR_CHECK,SPF_HELO_NEUTRAL scantime=1.4,size=1395,user=(unknown),uid=113,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamd.sock,mid=<emailsecuritycheck.net.1.LEnC4bgFimQHGHz3PvKpOQ==>,bayes=0.000000,autolearn=no autolearn_force=no\r\nFeb 10 17:44:33 hostname postfix/cleanup[9458]: 5F8A480146E: message-id=emailsecuritycheck.net.1.LEnC4bgFimQHGHz3PvKpOQ==\r\nFeb 10 17:44:33 hostname postfix/smtpd[9543]: NOQUEUE: client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:33 hostname opendkim[781]: 5F8A480146E: no signing table match for 'securitycheck@emailsecuritycheck.net'\r\nFeb 10 17:44:33 hostname opendkim[781]: 5F8A480146E: no signature data\r\nFeb 10 17:44:33 hostname postfix/qmgr[2931]: 5F8A480146E: from=<securitycheck@emailsecuritycheck.net>, size=1913, nrcpt=1 (queue active)\r\nFeb 10 17:44:33 hostname postfix/smtpd[9434]: proxy-accept: END-OF-MESSAGE: 250 2.0.0 Ok: queued as 5F8A480146E; from=<securitycheck@emailsecuritycheck.net> to=<mail@domain.xy> proto=ESMTP helo=<byteplant.com>\r\nFeb 10 17:44:33 hostname postfix/smtpd[9455]: disconnect from localhost[127.0.0.1]\r\nFeb 10 17:44:33 hostname dovecot: lmtp(9529): Connect from local\r\nFeb 10 17:44:33 hostname postfix/smtpd[9455]: connect from localhost[127.0.0.1]\r\nFeb 10 17:44:33 hostname postfix/smtpd[9455]: D4764801484: client=localhost[127.0.0.1], orig_client=outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:33 hostname spamd[9145]: prefork: child states: BB\r\nFeb 10 17:44:33 hostname spamd[9145]: spamd: server successfully spawned child process, pid 9550\r\nFeb 10 17:44:33 hostname spamd[9145]: prefork: adjust: 0 idle children less than 1 minimum idle children. Increasing spamd children: 9550 started.\r\nFeb 10 17:44:33 hostname spamd[9147]: spamd: got connection over /var/run/spamd.sock\r\nFeb 10 17:44:33 hostname postfix/smtpd[9434]: disconnect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:33 hostname spamd[9147]: spamd: processing message <emailsecuritycheck.net.4.LEnC4bgFimQHGHz3PvKpOQ==> for (unknown):113\r\nFeb 10 17:44:33 hostname spamd[9145]: prefork: child states: BBB\r\nFeb 10 17:44:33 hostname spamd[9145]: spamd: server successfully spawned child process, pid 9551\r\nFeb 10 17:44:33 hostname spamd[9145]: prefork: adjust: 0 idle children less than 1 minimum idle children. Increasing spamd children: 9551 started.\r\nFeb 10 17:44:33 hostname spamd[9550]: spamd: got connection over /var/run/spamd.sock\r\nFeb 10 17:44:33 hostname spamd[9550]: spamd: processing message <emailsecuritycheck.net.5.LEnC4bgFimQHGHz3PvKpOQ==> for (unknown):113\r\nFeb 10 17:44:33 hostname spamd[9145]: prefork: child states: BBBB\r\nFeb 10 17:44:33 hostname spamd[9145]: spamd: server successfully spawned child process, pid 9553\r\nFeb 10 17:44:33 hostname spamd[9145]: prefork: adjust: 0 idle children less than 1 minimum idle children. Increasing spamd children: 9553 started.\r\nFeb 10 17:44:33 hostname spamd[9551]: spamd: got connection over /var/run/spamd.sock\r\nFeb 10 17:44:33 hostname dovecot: lmtp(9529, mail@domain.xy): JDAjK8tou1Y5JQAA1dT27g: sieve: msgid=emailsecuritycheck.net.1.LEnC4bgFimQHGHz3PvKpOQ==: stored mail into mailbox 'INBOX'\r\nFeb 10 17:44:33 hostname spamd[9551]: spamd: processing message <emailsecuritycheck.net.7.LEnC4bgFimQHGHz3PvKpOQ==> for (unknown):113\r\nFeb 10 17:44:33 hostname spamd[9145]: prefork: child states: BBBBB\r\nFeb 10 17:44:33 hostname spamd[9145]: prefork: server reached --max-children setting, consider raising it\r\nFeb 10 17:44:33 hostname spamd[9553]: spamd: got connection over /var/run/spamd.sock\r\nFeb 10 17:44:33 hostname spamd[9553]: spamd: processing message <emailsecuritycheck.net.6.LEnC4bgFimQHGHz3PvKpOQ==> for (unknown):113\r\nFeb 10 17:44:34 hostname spamd[9149]: spamd: identified spam (998.8/5.0) for (unknown):113 in 1.4 seconds, 1112 bytes.\r\nFeb 10 17:44:34 hostname postfix/lmtp[9476]: 5F8A480146E: to=<mail@domain.xy>, relay=host.domain.xy[private/dovecot-lmtp], delay=1.8, delays=1.5/0/0/0.28, dsn=2.0.0, status=sent (250 2.0.0 <mail@domain.xy> JDAjK8tou1Y5JQAA1dT27g Saved)\r\nFeb 10 17:44:34 hostname dovecot: lmtp(9529): Disconnect from local: Successful quit\r\nFeb 10 17:44:34 hostname postfix/qmgr[2931]: 5F8A480146E: removed\r\nFeb 10 17:44:34 hostname spamd[9149]: spamd: result: Y 998 - BAYES_00,GTUBE,INVALID_MSGID,SPF_HELO_NEUTRAL scantime=1.4,size=1112,user=(unknown),uid=113,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamd.sock,mid=<emailsecuritycheck.net.3.LEnC4bgFimQHGHz3PvKpOQ==>,bayes=0.000000,autolearn=no autolearn_force=no\r\nFeb 10 17:44:34 hostname postfix/smtpd[9537]: proxy-reject: END-OF-MESSAGE: 550 message identified as spam; from=<securitycheck@emailsecuritycheck.net> to=<mail@domain.xy> proto=ESMTP helo=<byteplant.com>\r\nFeb 10 17:44:34 hostname postfix/smtpd[9539]: disconnect from localhost[127.0.0.1]\r\nFeb 10 17:44:34 hostname postfix/smtpd[9537]: disconnect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:34 hostname spamd[9145]: prefork: child states: BIBBB\r\nFeb 10 17:44:35 hostname spamd[9147]: spamd: clean message (0.2/5.0) for (unknown):113 in 1.7 seconds, 1475 bytes.\r\nFeb 10 17:44:35 hostname spamd[9147]: spamd: result: . 0 - BAYES_00,INVALID_MSGID,PYZOR_CHECK,SPF_HELO_NEUTRAL scantime=1.7,size=1475,user=(unknown),uid=113,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamd.sock,mid=<emailsecuritycheck.net.4.LEnC4bgFimQHGHz3PvKpOQ==>,bayes=0.000000,autolearn=no autolearn_force=no\r\nFeb 10 17:44:35 hostname postfix/cleanup[9542]: D0D6A801476: message-id=emailsecuritycheck.net.4.LEnC4bgFimQHGHz3PvKpOQ==\r\nFeb 10 17:44:35 hostname opendkim[781]: D0D6A801476: no signing table match for 'securitycheck@emailsecuritycheck.net'\r\nFeb 10 17:44:35 hostname opendkim[781]: D0D6A801476: no signature data\r\nFeb 10 17:44:35 hostname spamd[9145]: prefork: child states: IIBBB\r\nFeb 10 17:44:35 hostname postfix/qmgr[2931]: D0D6A801476: from=<securitycheck@emailsecuritycheck.net>, size=1993, nrcpt=1 (queue active)\r\nFeb 10 17:44:35 hostname postfix/smtpd[9538]: proxy-accept: END-OF-MESSAGE: 250 2.0.0 Ok: queued as D0D6A801476; from=<securitycheck@emailsecuritycheck.net> to=<mail@domain.xy> proto=ESMTP helo=<byteplant.com>\r\nFeb 10 17:44:35 hostname dovecot: lmtp(9529): Connect from local\r\nFeb 10 17:44:35 hostname postfix/smtpd[9541]: disconnect from localhost[127.0.0.1]\r\nFeb 10 17:44:35 hostname spamd[9550]: spamd: clean message (0.2/5.0) for (unknown):113 in 1.9 seconds, 1399 bytes.\r\nFeb 10 17:44:35 hostname spamd[9550]: spamd: result: . 0 - BAYES_00,INVALID_MSGID,PYZOR_CHECK,SPF_HELO_NEUTRAL scantime=1.9,size=1399,user=(unknown),uid=113,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamd.sock,mid=<emailsecuritycheck.net.5.LEnC4bgFimQHGHz3PvKpOQ==>,bayes=0.000000,autolearn=no autolearn_force=no\r\nFeb 10 17:44:35 hostname postfix/cleanup[9546]: 7A19580147C: message-id=emailsecuritycheck.net.5.LEnC4bgFimQHGHz3PvKpOQ==\r\nFeb 10 17:44:35 hostname postfix/smtpd[9538]: disconnect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:35 hostname dovecot: lmtp(9529, mail@domain.xy): KDAjK8tou1Y5JQAA1dT27g: sieve: msgid=emailsecuritycheck.net.4.LEnC4bgFimQHGHz3PvKpOQ==: stored mail into mailbox 'INBOX'\r\nFeb 10 17:44:35 hostname opendkim[781]: 7A19580147C: no signing table match for 'securitycheck@emailsecuritycheck.net'\r\nFeb 10 17:44:35 hostname opendkim[781]: 7A19580147C: no signature data\r\nFeb 10 17:44:35 hostname postfix/lmtp[9476]: D0D6A801476: to=<mail@domain.xy>, relay=host.domain.xy[private/dovecot-lmtp], delay=3.1, delays=2.9/0/0/0.17, dsn=2.0.0, status=sent (250 2.0.0 <mail@domain.xy> KDAjK8tou1Y5JQAA1dT27g Saved)\r\nFeb 10 17:44:35 hostname dovecot: lmtp(9529): Disconnect from local: Successful quit\r\nFeb 10 17:44:35 hostname postfix/qmgr[2931]: D0D6A801476: removed\r\nFeb 10 17:44:35 hostname postfix/qmgr[2931]: 7A19580147C: from=<securitycheck@emailsecuritycheck.net>, size=1917, nrcpt=1 (queue active)\r\nFeb 10 17:44:35 hostname postfix/smtpd[9535]: proxy-accept: END-OF-MESSAGE: 250 2.0.0 Ok: queued as 7A19580147C; from=<securitycheck@emailsecuritycheck.net> to=<mail@domain.xy> proto=ESMTP helo=<byteplant.com>\r\nFeb 10 17:44:35 hostname dovecot: lmtp(9529): Connect from local\r\nFeb 10 17:44:35 hostname postfix/smtpd[9545]: disconnect from localhost[127.0.0.1]\r\nFeb 10 17:44:35 hostname spamd[9145]: prefork: child states: IIIBB\r\nFeb 10 17:44:35 hostname spamd[9145]: prefork: adjust: 3 idle children more than 2 maximum idle children. Decreasing spamd children: 9550 killed.\r\nFeb 10 17:44:35 hostname spamd[9145]: prefork: child states: IIKBB\r\nFeb 10 17:44:35 hostname spamd[9145]: spamd: handled cleanup of child pid [9550] due to SIGCHLD: interrupted, signal 2 (0002)\r\nFeb 10 17:44:36 hostname postfix/smtpd[9535]: disconnect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:36 hostname dovecot: lmtp(9529, mail@domain.xy): LDAjK8tou1Y5JQAA1dT27g: sieve: msgid=emailsecuritycheck.net.5.LEnC4bgFimQHGHz3PvKpOQ==: stored mail into mailbox 'INBOX'\r\nFeb 10 17:44:36 hostname postfix/lmtp[9476]: 7A19580147C: to=<mail@domain.xy>, relay=host.domain.xy[private/dovecot-lmtp], delay=2.6, delays=2.5/0/0/0.18, dsn=2.0.0, status=sent (250 2.0.0 <mail@domain.xy> LDAjK8tou1Y5JQAA1dT27g Saved)\r\nFeb 10 17:44:36 hostname dovecot: lmtp(9529): Disconnect from local: Successful quit\r\nFeb 10 17:44:36 hostname postfix/qmgr[2931]: 7A19580147C: removed\r\nFeb 10 17:44:36 hostname spamd[9551]: spamd: clean message (0.2/5.0) for (unknown):113 in 2.8 seconds, 1401 bytes.\r\nFeb 10 17:44:36 hostname spamd[9551]: spamd: result: . 0 - BAYES_00,INVALID_MSGID,MISSING_MIME_HB_SEP,PYZOR_CHECK,SPF_HELO_NEUTRAL scantime=2.8,size=1401,user=(unknown),uid=113,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamd.sock,mid=<emailsecuritycheck.net.7.LEnC4bgFimQHGHz3PvKpOQ==>,bayes=0.000000,autolearn=no autolearn_force=no\r\nFeb 10 17:44:36 hostname postfix/cleanup[9548]: A66EB801482: message-id=emailsecuritycheck.net.7.LEnC4bgFimQHGHz3PvKpOQ==\r\nFeb 10 17:44:36 hostname opendkim[781]: A66EB801482: no signing table match for 'securitycheck@emailsecuritycheck.net'\r\nFeb 10 17:44:36 hostname opendkim[781]: A66EB801482: no signature data\r\nFeb 10 17:44:36 hostname postfix/qmgr[2931]: A66EB801482: from=<securitycheck@emailsecuritycheck.net>, size=1941, nrcpt=1 (queue active)\r\nFeb 10 17:44:36 hostname postfix/smtpd[9544]: proxy-accept: END-OF-MESSAGE: 250 2.0.0 Ok: queued as A66EB801482; from=<securitycheck@emailsecuritycheck.net> to=<mail@domain.xy> proto=ESMTP helo=<byteplant.com>\r\nFeb 10 17:44:36 hostname dovecot: lmtp(9556): Connect from local\r\nFeb 10 17:44:36 hostname postfix/smtpd[9547]: disconnect from localhost[127.0.0.1]\r\nFeb 10 17:44:36 hostname spamd[9145]: prefork: child states: IIIB\r\nFeb 10 17:44:36 hostname spamd[9145]: prefork: adjust: 3 idle children more than 2 maximum idle children. Decreasing spamd children: 9551 killed.\r\nFeb 10 17:44:36 hostname spamd[9145]: prefork: child states: IIKB\r\nFeb 10 17:44:36 hostname spamd[9145]: spamd: handled cleanup of child pid [9551] due to SIGCHLD: interrupted, signal 2 (0002)\r\nFeb 10 17:44:37 hostname dovecot: lmtp(9556, mail@domain.xy): cMxmNvRou1ZUJQAA1dT27g: sieve: msgid=emailsecuritycheck.net.7.LEnC4bgFimQHGHz3PvKpOQ==: stored mail into mailbox 'INBOX'\r\nFeb 10 17:44:37 hostname postfix/lmtp[9476]: A66EB801482: to=<mail@domain.xy>, relay=host.domain.xy[private/dovecot-lmtp], delay=3.4, delays=3.2/0/0/0.15, dsn=2.0.0, status=sent (250 2.0.0 <mail@domain.xy> cMxmNvRou1ZUJQAA1dT27g Saved)\r\nFeb 10 17:44:37 hostname postfix/qmgr[2931]: A66EB801482: removed\r\nFeb 10 17:44:37 hostname dovecot: lmtp(9556): Disconnect from local: Successful quit\r\nFeb 10 17:44:37 hostname postfix/smtpd[9544]: disconnect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:39 hostname spamd[9553]: spamd: clean message (0.2/5.0) for (unknown):113 in 5.7 seconds, 1400 bytes.\r\nFeb 10 17:44:39 hostname spamd[9553]: spamd: result: . 0 - BAYES_00,INVALID_MSGID,PYZOR_CHECK,SPF_HELO_NEUTRAL scantime=5.7,size=1400,user=(unknown),uid=113,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamd.sock,mid=<emailsecuritycheck.net.6.LEnC4bgFimQHGHz3PvKpOQ==>,bayes=0.000000,autolearn=no autolearn_force=no\r\nFeb 10 17:44:39 hostname postfix/cleanup[9458]: D4764801484: message-id=emailsecuritycheck.net.6.LEnC4bgFimQHGHz3PvKpOQ==\r\nFeb 10 17:44:39 hostname opendkim[781]: D4764801484: no signing table match for 'securitycheck@emailsecuritycheck.net'\r\nFeb 10 17:44:39 hostname opendkim[781]: D4764801484: no signature data\r\nFeb 10 17:44:39 hostname spamd[9145]: prefork: child states: III\r\nFeb 10 17:44:39 hostname spamd[9145]: prefork: adjust: 3 idle children more than 2 maximum idle children. Decreasing spamd children: 9553 killed.\r\nFeb 10 17:44:39 hostname spamd[9145]: prefork: child states: IIK\r\nFeb 10 17:44:39 hostname spamd[9145]: spamd: handled cleanup of child pid [9553] due to SIGCHLD: interrupted, signal 2 (0002)\r\nFeb 10 17:44:40 hostname postfix/qmgr[2931]: D4764801484: from=<securitycheck@emailsecuritycheck.net>, size=1918, nrcpt=1 (queue active)\r\nFeb 10 17:44:40 hostname postfix/smtpd[9543]: proxy-accept: END-OF-MESSAGE: 250 2.0.0 Ok: queued as D4764801484; from=<securitycheck@emailsecuritycheck.net> to=<mail@domain.xy> proto=ESMTP helo=<byteplant.com>\r\nFeb 10 17:44:40 hostname postfix/smtpd[9455]: disconnect from localhost[127.0.0.1]\r\nFeb 10 17:44:40 hostname dovecot: lmtp(9556): Connect from local\r\nFeb 10 17:44:40 hostname postfix/smtpd[9543]: disconnect from outbound.emailsecuritycheck.net[149.202.232.193]\r\nFeb 10 17:44:40 hostname dovecot: lmtp(9556, mail@domain.xy): dMxmNvRou1ZUJQAA1dT27g: sieve: msgid=emailsecuritycheck.net.6.LEnC4bgFimQHGHz3PvKpOQ==: stored mail into mailbox 'INBOX'\r\nFeb 10 17:44:40 hostname postfix/lmtp[9476]: D4764801484: to=<mail@domain.xy>, relay=host.domain.xy[private/dovecot-lmtp], delay=6.5, delays=6.1/0/0/0.35, dsn=2.0.0, status=sent (250 2.0.0 <mail@domain.xy> dMxmNvRou1ZUJQAA1dT27g Saved)\r\nFeb 10 17:44:40 hostname dovecot: lmtp(9556): Disconnect from local: Successful quit\r\nFeb 10 17:44:40 hostname postfix/qmgr[2931]: D4764801484: removed\r\n\r\nAlso I've noticed that the Graphs at the bottom of the control center only show as broken links. I don't really care for that feature, but I thought I mention it since I'm at it ...\r\n\r\nThanks for your efforts and great product. It's a blessing :)\r\nKind regards,\r\ntimo"},"comment":{"url":"https://api.github.com/repos/andryyy/mailcow/issues/comments/182579874","html_url":"https://github.com/andryyy/mailcow/issues/286#issuecomment-182579874","issue_url":"https://api.github.com/repos/andryyy/mailcow/issues/286","id":182579874,"user":{"login":"shoeper","id":5340585,"avatar_url":"https://avatars.githubusercontent.com/u/5340585?v=3","gravatar_id":"","url":"https://api.github.com/users/shoeper","html_url":"https://github.com/shoeper","followers_url":"https://api.github.com/users/shoeper/followers","following_url":"https://api.github.com/users/shoeper/following{/other_user}","gists_url":"https://api.github.com/users/shoeper/gists{/gist_id}","starred_url":"https://api.github.com/users/shoeper/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shoeper/subscriptions","organizations_url":"https://api.github.com/users/shoeper/orgs","repos_url":"https://api.github.com/users/shoeper/repos","events_url":"https://api.github.com/users/shoeper/events{/privacy}","received_events_url":"https://api.github.com/users/shoeper/received_events","type":"User","site_admin":false},"created_at":"2016-02-10T20:58:41Z","updated_at":"2016-02-10T20:58:41Z","body":"You could exlude files not matching a dot."}}