[Samba] Message Stopped by Bothways : Block Greater than 40 recip

security at meandermc.nl security at meandermc.nl
Fri May 20 15:40:58 GMT 2005


MailMarshal has stopped the following message:

   Message: B0000edbce.00000001.mml
   From:    samba at samba.org
   To:      0HMN001SJJEO7P at meandermc.nl; 0HMN002PGJ3XTO at meandermc.nl; 0HMN003MSRVTJ4 at meandermc.nl; 0HMN004HCKM5BS at meandermc.nl; 0HMN00CLFJAHEI at meandermc.nl; 0HMU001QIAZXD7 at meandermc.nl; 0HMU00DMEHZEM8 at meandermc.nl; 0HN50004MEFYL8 at meandermc.nl; 3Darjan at meandermc.nl; 3Dcisca.scholten at meandermc.nl; 3DHenk at meandermc.nl; 3Dkrijn at meandermc.nl; 3Dl.drupsteen at meandermc.nl; 3DMiranda.Annokkee at meandermc.nl; 3Dmiranda.schroer at meandermc.nl; 3Dmkunstman at meandermc.nl; 3Dmylene.kool at meandermc.nl; 3Droel at meandermc.nl; 3Dronald at meandermc.nl; 3Dtcn10post at meandermc.nl; 3Dtheo.scholten at meandermc.nl; 3Dw.kool at meandermc.nl; a.korpelshoek at meandermc.nl; A.P.Dijk at meandermc.nl; a.vandermaas at meandermc.nl; ail at meandermc.nl; bdjrv at meandermc.nl; Beekjes at meandermc.nl; c.korpelshoek at meandermc.nl; cholten at meandermc.nl; cisca.scholten at meandermc.nl; evanderburgh at meandermc.nl; fc at meandermc.nl; flipsen40 at meandermc.nl; I.S.Maas at meandermc.nl; J.C.A.G.Jansen at meandermc.nl; jerome at meandermc.nl; js at meandermc.nl; kvdb@
 meandermc.nl; l.drupsteen at meandermc.nl; m.borst5 at meandermc.nl; Miranda.Annokkee at meandermc.nl; miranda.schroer at meandermc.nl; nge at meandermc.nl; nokkee at meandermc.nl; pe1ofx at meandermc.nl; radiozwirs at meandermc.nl; sterop at meandermc.nl; Suzanne.poot at meandermc.nl; theo.scholten at meandermc.nl
   Subject: Auf Streife durch den Berliner Wedding

The original mail message and its processing log are attached.

MailMarshal Rule: Bothways : Block Greater than 40 recip

For more information on email virus scanning, security and content 
management, visit http://www.marshalsoftware.com
-------------- next part --------------
0224 17:40:58.421 Message From <samba at samba.org>, Return-path <samba at samba.org>, Recipients (50) -  <0HMN001SJJEO7P at meandermc.nl>  <0HMN002PGJ3XTO at meandermc.nl>  <0HMN003MSRVTJ4 at meandermc.nl>  <0HMN004HCKM5BS at meandermc.nl>  <0HMN00CLFJAHEI at meandermc.nl>  <0HMU001QIAZXD7 at meandermc.nl>  <0HMU00DMEHZEM8 at meandermc.nl>  <0HN50004MEFYL8 at meandermc.nl>  <3Darjan at meandermc.nl>  <3Dcisca.scholten at meandermc.nl>  <3DHenk at meandermc.nl>  <3Dkrijn at meandermc.nl>  <3Dl.drupsteen at meandermc.nl>  <3DMiranda.Annokkee at meandermc.nl>  <3Dmiranda.schroer at meandermc.nl>  <3Dmkunstman at meandermc.nl>  <3Dmylene.kool at meandermc.nl>  <3Droel at meandermc.nl>  <3Dronald at meandermc.nl>  <3Dtcn10post at meandermc.nl>  <3Dtheo.scholten at meandermc.nl>  <3Dw.kool at meandermc.nl>  <a.korpelshoek at meandermc.nl>  <A.P.Dijk at meandermc.nl>  <a.vandermaas at meandermc.nl>  <ail at meandermc.nl>  <bdjrv at meandermc.nl>  <Beekjes at meandermc.nl>  <c.korpelshoek at meandermc.nl>  <cholten at meandermc.nl>  <cisca.scholten at meandermc.nl>  <evanderburgh at meandermc.nl>  <fc at meandermc.nl>  <flipsen40 at meandermc.nl>  <I.S.Maas at meandermc.nl>  <J.C.A.G.Jansen at meandermc.nl>  <jerome at meandermc.nl>  <js at meandermc.nl>  <kvdb at meandermc.nl>  <l.drupsteen at meandermc.nl>  <m.borst5 at meandermc.nl>  <Miranda.Annokkee at meandermc.nl>  <miranda.schroer at meandermc.nl>  <nge at meandermc.nl>  <nokkee at meandermc.nl>  <pe1ofx at meandermc.nl>  <radiozwirs at meandermc.nl>  <sterop at meandermc.nl>  <Suzanne.poot at meandermc.nl>  <theo.scholten at meandermc.nl> 
0224 17:40:58.421 RuleSet Outbound Messages does not split the msg - no users match
0224 17:40:58.421 Thread 4 Starting to unpack <B0000edbce.00000001.mml>
0224 17:40:58.421 Type=MAIL,  size=1338,  Name=B0000edbce.00000001.mml
0224 17:40:58.421   Type=MHDR,  size=1203,  Name=MsgHeader.txt
0224 17:40:58.421   Type=MBODY,  size=133,  Name=Plain.txt
0224 17:40:58.421 50 user(s) match ruleset - Inbound Messages
0224 17:40:58.421   0 user(s) match rule - Block banned accounts (standard rule)
0224 17:40:58.421   0 user(s) match rule - Block mail from banned domains
0224 17:40:58.421   50 user(s) match rule - Block Subject: Er staat een eCard voor u klaar!
0224 17:40:58.421     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.421   50 user(s) match rule - Block Subject: Mail Delivery Failure
0224 17:40:58.421     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.421   50 user(s) match rule - Block Subject: Single-word-subjects
0224 17:40:58.421     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.421   0 user(s) match rule - Strip attachments to 'reanimatieinstructie at meandermc.nl'
0224 17:40:58.421   50 user(s) match rule - Block Virus
0224 17:40:58.453 Command OK <FSecure AntiVirus> file <B0000edbce.00000001.mml> Result= 0 after 32 millisecs
0224 17:40:58.468 Command OK <FSecure AntiVirus> file <MsgHeader.txt> Result= 0 after 15 millisecs
0224 17:40:58.468 Command OK <FSecure AntiVirus> file <Plain.txt> Result= 0 after 0 millisecs
0224 17:40:58.468     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.468       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.468       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.468   50 user(s) match rule - Block German Spam
0224 17:40:58.468     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.484   50 user(s) match rule - SpamCensor
0224 17:40:58.484     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.484   50 user(s) match rule - Spam Filter
0224 17:40:58.484     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.484       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.484       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.484   50 user(s) match rule - PornSpam Filter
0224 17:40:58.484     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.484       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.484       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.484   50 user(s) match rule - Block Dangerous Attachments
0224 17:40:58.484     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.484       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.484       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.484   0 user(s) match rule - Block mail from spoofed MMC domains
0224 17:40:58.484   50 user(s) match rule - Block Known Worms
0224 17:40:58.484     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.484       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.484       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.484   50 user(s) match rule - Block Known Virus Attachments
0224 17:40:58.484     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.484       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.484       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.500   50 user(s) match rule - Block Password Protected Attachments
0224 17:40:58.500     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.500       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.500       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.500   0 user(s) match rule - Block SMIME and PGP Encrypted
0224 17:40:58.500   50 user(s) match rule - Block VBScript
0224 17:40:58.500     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.500       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.500       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.500   50 user(s) match rule - Block JavaScript
0224 17:40:58.500     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.500       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.500       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.500   50 user(s) match rule - Block Virus Hoax Messages
0224 17:40:58.500     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.500       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.500       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.500   50 user(s) match rule - Block Chain Letters
0224 17:40:58.500     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.500       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.500       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.500   0 user(s) match rule - Block Junk Mailers
0224 17:40:58.500   50 user(s) match rule - Block EXECUTABLE Files
0224 17:40:58.500     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.500       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.500       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.500   50 user(s) match rule - Block SOUND Files
0224 17:40:58.500     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.500       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.500       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.500   50 user(s) match rule - Archive Message
0224 17:40:58.500     Name=U1\B0000edbce.00000001.mml (MAIL,1338) TRUE
0224 17:40:58.500     Requesting Action <Inbound Messages:Archive Message:CopyMessage> be run
0224 17:40:58.500   0 user(s) match rule - Retiring MMC Domains Notification
0224 17:40:58.500   50 user(s) match rule - Block Script and Code
0224 17:40:58.500     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.500       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.500       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.500 0 user(s) match ruleset - Outbound Messages
0224 17:40:58.500 50 user(s) match ruleset - Bothways
0224 17:40:58.500   0 user(s) match rule - Block mail to or from banned domains
0224 17:40:58.500   0 user(s) match rule - Block banned users (standard)
0224 17:40:58.500   50 user(s) match rule - Blok encrypted archives
0224 17:40:58.500     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.500       Name=U2\MsgHeader.txt (MHDR,1203) False
0224 17:40:58.500       Name=U2\Plain.txt (MBODY,133) False
0224 17:40:58.500   50 user(s) match rule - Globally quarantine over 5 MB
0224 17:40:58.500     Name=U1\B0000edbce.00000001.mml (MAIL,1338) False
0224 17:40:58.500   50 user(s) match rule - Block Greater than 40 recip
0224 17:40:58.500     Name=U1\B0000edbce.00000001.mml (MAIL,1338) TRUE Terminal
0224 17:40:58.500     Requesting Action <Bothways:Block Greater than 40 recip:MailTemplate> be run


More information about the samba mailing list