1

Topic: Blacklisted domain - emails still getting through

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.1
- Deployed with iRedMail Easy or the downloadable installer? downloadable installer
- Linux/BSD distribution name and version: 18.04.4LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi,

We have a domain that is blacklisted globally (it is not whitelisted against any domain or user) but some of the emails are still getting through.

It appears the be only the emails that have a forward slash in the mail address (see attached screenshot).

Any help is appreciated.

Thank you.

Post's attachments

Annotation 2020-02-24 093125.png 52.11 kb, 1 downloads since 2020-02-24 

You don't have the permssions to download the attachments of this post.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Blacklisted domain - emails still getting through

Could you turn on debug mode in iRedAPD and show me log of new passed email?
FYI: https://docs.iredmail.org/debug.iredapd.html

We need the debug log for troubleshooting.

3

Re: Blacklisted domain - emails still getting through

Hi Zhang,

dovecot log for an email that got through is below:

Feb 25 10:00:59 mail iredapd [policy] request=smtpd_access_policy
Feb 25 10:00:59 mail iredapd [policy] protocol_state=RCPT
Feb 25 10:00:59 mail iredapd [policy] protocol_name=ESMTP
Feb 25 10:00:59 mail iredapd [policy] client_address=208.75.123.183
Feb 25 10:00:59 mail iredapd [policy] client_name=ccm183.constantcontact.com
Feb 25 10:00:59 mail iredapd [policy] client_port=31986
Feb 25 10:00:59 mail iredapd [policy] reverse_client_name=ccm183.constantcontact.com
Feb 25 10:00:59 mail iredapd [policy] server_address=xxx.xxx.xxx.139
Feb 25 10:00:59 mail iredapd [policy] server_port=25
Feb 25 10:00:59 mail iredapd [policy] helo_name=ccm183.constantcontact.com
Feb 25 10:00:59 mail iredapd [policy] sender=AnHlM0j7wS/qOsI8akpdIbg==_1119684886188_9Lfi7n/4EemTdtSuUpAOAA==@in.constantcontact.com
Feb 25 10:00:59 mail iredapd [policy] recipient=xxxxxxxx@holliesdn.co.uk
Feb 25 10:00:59 mail iredapd [policy] recipient_count=0
Feb 25 10:00:59 mail iredapd [policy] queue_id=
Feb 25 10:00:59 mail iredapd [policy] instance=c0e7.5e54f05b.1ede5.0
Feb 25 10:00:59 mail iredapd [policy] size=0
Feb 25 10:00:59 mail iredapd [policy] etrn_domain=
Feb 25 10:00:59 mail iredapd [policy] stress=
Feb 25 10:00:59 mail iredapd [policy] sasl_method=
Feb 25 10:00:59 mail iredapd [policy] sasl_username=
Feb 25 10:00:59 mail iredapd [policy] sasl_sender=
Feb 25 10:00:59 mail iredapd [policy] ccert_subject=
Feb 25 10:00:59 mail iredapd [policy] ccert_issuer=
Feb 25 10:00:59 mail iredapd [policy] ccert_fingerprint=
Feb 25 10:00:59 mail iredapd [policy] ccert_pubkey_fingerprint=
Feb 25 10:00:59 mail iredapd [policy] encryption_protocol=TLSv1.2
Feb 25 10:00:59 mail iredapd [policy] encryption_cipher=ECDHE-RSA-AES256-GCM-SHA384
Feb 25 10:00:59 mail iredapd [policy] encryption_keysize=256
Feb 25 10:00:59 mail iredapd [policy] policy_context=
Feb 25 10:00:59 mail iredapd --> Apply plugin: reject_null_sender
Feb 25 10:00:59 mail iredapd <-- Result: DUNNO
Feb 25 10:00:59 mail iredapd --> Apply plugin: wblist_rdns
Feb 25 10:00:59 mail iredapd All policy rDNS names: ['ccm183.constantcontact.com', '.ccm183.constantcontact.com', '.constantcontact.com', '.com']
Feb 25 10:00:59 mail iredapd [SQL] Query whitelisted rDNS names: #012SELECT rdns#012               FROM wblist_rdns#012              WHERE rdns IN ('ccm183.constantcontact.com', '.ccm183.constantcontact.com', '.constantcontact.com', '.com') AND wb='W'#012              LIMIT 1
Feb 25 10:00:59 mail iredapd [SQL] Query blacklisted rDNS names: #012SELECT rdns#012               FROM wblist_rdns#012              WHERE rdns IN ('ccm183.constantcontact.com', '.ccm183.constantcontact.com', '.constantcontact.com', '.com') AND wb='B'#012              LIMIT 1
Feb 25 10:00:59 mail iredapd <-- Result: DUNNO
Feb 25 10:00:59 mail iredapd --> Apply plugin: reject_sender_login_mismatch
Feb 25 10:00:59 mail iredapd Not an authenticated sender (no sasl_username).
Feb 25 10:00:59 mail iredapd [SQL] query local domain (in.constantcontact.com): #012SELECT domain#012                   FROM domain#012                  WHERE domain='in.constantcontact.com' AND active=1 AND backupmx=0#012                  LIMIT 1
Feb 25 10:00:59 mail iredapd SQL query result: None
Feb 25 10:00:59 mail iredapd [SQL] query alias domain (in.constantcontact.com): #012SELECT alias_domain.alias_domain#012                       FROM alias_domain, domain#012                      WHERE domain.active=1#012                            AND domain.domain=alias_domain.target_domain#012                            AND alias_domain.alias_domain='in.constantcontact.com'#012                      LIMIT 1
Feb 25 10:00:59 mail iredapd [SQL] query result: None
Feb 25 10:00:59 mail iredapd Sender domain is NOT hosted locally.
Feb 25 10:00:59 mail iredapd <-- Result: DUNNO
Feb 25 10:00:59 mail iredapd --> Apply plugin: greylisting
Feb 25 10:00:59 mail iredapd [SQL] query target domain of given alias domain (holliesdn.co.uk): #012SELECT alias_domain.target_domain#012               FROM alias_domain, domain#012              WHERE domain.active=1#012                    AND domain.domain=alias_domain.target_domain#012                    AND alias_domain.alias_domain='holliesdn.co.uk'#012              LIMIT 1
Feb 25 10:00:59 mail iredapd [SQL] query result: (u'holliesdaynurseries.co.uk',)
Feb 25 10:00:59 mail iredapd [SQL] Query greylisting whitelists from `greylisting_whitelist_domain_spf`: #012SELECT sender#012                   FROM greylisting_whitelist_domain_spf#012                  WHERE account IN ('xxxxxxxx@holliesdn.co.uk', '@holliesdn.co.uk', '@.', '@.holliesdn.co.uk', '@.co.uk', '@.uk', 'xxxxxxxx@holliesdaynurseries.co.uk', '@holliesdaynurseries.co.uk', '@.', '@.holliesdaynurseries.co.uk', '@.co.uk', '@.uk')
Feb 25 10:00:59 mail iredapd [SQL] Query greylisting whitelists from `greylisting_whitelists`: #012SELECT sender#012                   FROM greylisting_whitelists#012                  WHERE account IN ('xxxxxxxx@holliesdn.co.uk', '@holliesdn.co.uk', '@.', '@.holliesdn.co.uk', '@.co.uk', '@.uk', 'xxxxxxxx@holliesdaynurseries.co.uk', '@holliesdaynurseries.co.uk', '@.', '@.holliesdaynurseries.co.uk', '@.co.uk', '@.uk')
Feb 25 10:00:59 mail iredapd [208.75.123.183] Client is not explictly whitelisted.
Feb 25 10:00:59 mail iredapd [208.75.123.183] Client network is whitelisted: cidr=208.75.120.0/22
Feb 25 10:00:59 mail iredapd <-- Result: DUNNO
Feb 25 10:00:59 mail iredapd --> Apply plugin: throttle
Feb 25 10:00:59 mail iredapd Check sender throttling.
Feb 25 10:00:59 mail iredapd [SQL] query target domain of given alias domain (in.constantcontact.com): #012SELECT alias_domain.target_domain#012               FROM alias_domain, domain#012              WHERE domain.active=1#012                    AND domain.domain=alias_domain.target_domain#012                    AND alias_domain.alias_domain='in.constantcontact.com'#012              LIMIT 1
Feb 25 10:00:59 mail iredapd [SQL] query result: None
Feb 25 10:00:59 mail iredapd [SQL] Query throttle setting: #012        SELECT id, account, priority, period, max_msgs, max_quota, msg_size#012          FROM throttle#012         WHERE kind='external' AND account IN ('208.75.123.183', '@ip', '@.', '208.75.123.*', '208.75.*.183')#012         ORDER BY priority DESC
Feb 25 10:00:59 mail iredapd [SQL] Query result: []
Feb 25 10:00:59 mail iredapd No sender throttle setting.
Feb 25 10:00:59 mail iredapd Check recipient throttling.
Feb 25 10:00:59 mail iredapd [SQL] query target domain of given alias domain (holliesdn.co.uk): #012SELECT alias_domain.target_domain#012               FROM alias_domain, domain#012              WHERE domain.active=1#012                    AND domain.domain=alias_domain.target_domain#012                    AND alias_domain.alias_domain='holliesdn.co.uk'#012              LIMIT 1
Feb 25 10:00:59 mail iredapd [SQL] query result: (u'holliesdaynurseries.co.uk',)
Feb 25 10:00:59 mail iredapd [SQL] Query throttle setting: #012        SELECT id, account, priority, period, max_msgs, max_quota, msg_size#012          FROM throttle#012         WHERE kind='inbound' AND account IN ('208.75.123.183', '@ip', 'xxxxxxxx@holliesdn.co.uk', '@holliesdn.co.uk', '@.', '@.holliesdn.co.uk', '@.co.uk', '@.uk', 'xxxxxxxx@holliesdaynurseries.co.uk', '@holliesdaynurseries.co.uk', '@.', '@.holliesdaynurseries.co.uk', '@.co.uk', '@.uk', '208.75.123.*', '208.75.*.183')#012         ORDER BY priority DESC
Feb 25 10:00:59 mail iredapd [SQL] Query result: []
Feb 25 10:00:59 mail iredapd No recipient throttle setting.
Feb 25 10:00:59 mail iredapd <-- Result: DUNNO
Feb 25 10:00:59 mail iredapd --> Apply plugin: sql_alias_access_policy
Feb 25 10:00:59 mail iredapd [SQL] query access policy: #012SELECT accesspolicy#012               FROM alias#012              WHERE address='xxxxxxxx@holliesdn.co.uk'#012              LIMIT 1
Feb 25 10:00:59 mail iredapd [SQL] query result: None
Feb 25 10:00:59 mail iredapd [SQL] query target domain of given alias domain (holliesdn.co.uk): #012SELECT alias_domain.target_domain#012               FROM alias_domain, domain#012              WHERE domain.active=1#012                    AND domain.domain=alias_domain.target_domain#012                    AND alias_domain.alias_domain='holliesdn.co.uk'#012              LIMIT 1
Feb 25 10:00:59 mail iredapd [SQL] query result: (u'holliesdaynurseries.co.uk',)
Feb 25 10:00:59 mail iredapd [SQL] query access policy: #012SELECT accesspolicy#012               FROM alias#012              WHERE address='xxxxxxxx@holliesdaynurseries.co.uk'#012              LIMIT 1
Feb 25 10:00:59 mail iredapd [SQL] query result: None
Feb 25 10:00:59 mail iredapd <-- Result: DUNNO (Recipient domain is an alias domain, but recipient is not a mail alias account)
Feb 25 10:00:59 mail iredapd --> Apply plugin: amavisd_wblist
Feb 25 10:00:59 mail iredapd [SQL] query target domain of given alias domain (in.constantcontact.com): #012SELECT alias_domain.target_domain#012               FROM alias_domain, domain#012              WHERE domain.active=1#012                    AND domain.domain=alias_domain.target_domain#012                    AND alias_domain.alias_domain='in.constantcontact.com'#012              LIMIT 1
Feb 25 10:00:59 mail iredapd [SQL] query result: None
Feb 25 10:00:59 mail iredapd [SQL] query target domain of given alias domain (holliesdn.co.uk): #012SELECT alias_domain.target_domain#012               FROM alias_domain, domain#012              WHERE domain.active=1#012                    AND domain.domain=alias_domain.target_domain#012                    AND alias_domain.alias_domain='holliesdn.co.uk'#012              LIMIT 1
Feb 25 10:00:59 mail iredapd [SQL] query result: (u'holliesdaynurseries.co.uk',)
Feb 25 10:00:59 mail iredapd Possible policy senders: ['@.', 'anhlm0j7ws/qosi8akpdibg==_1119684886188_9lfi7n/4eemtdtsuupaoaa==@*', '208.75.123.183', '208.75.123.*', '208.75.*.183']
Feb 25 10:00:59 mail iredapd Possible policy recipients: ['xxxxxxxx@holliesdn.co.uk', '@holliesdn.co.uk', '@.', '@.holliesdn.co.uk', '@.co.uk', '@.uk', 'xxxxxxxx@holliesdaynurseries.co.uk', '@holliesdaynurseries.co.uk', '@.', '@.holliesdaynurseries.co.uk', '@.co.uk', '@.uk']
Feb 25 10:00:59 mail iredapd [SQL] query local domain (in.constantcontact.com): #012SELECT domain#012                   FROM domain#012                  WHERE domain='in.constantcontact.com' AND active=1 #012                  LIMIT 1
Feb 25 10:00:59 mail iredapd SQL query result: None
Feb 25 10:00:59 mail iredapd [SQL] query local domain (holliesdn.co.uk): #012SELECT domain#012                   FROM domain#012                  WHERE domain='holliesdn.co.uk' AND active=1 #012                  LIMIT 1
Feb 25 10:00:59 mail iredapd SQL query result: None
Feb 25 10:00:59 mail iredapd Apply wblist for inbound message.
Feb 25 10:00:59 mail iredapd [SQL] Query local addresses: #012SELECT id, email#012               FROM users#012              WHERE email IN ('xxxxxxxx@holliesdn.co.uk', '@holliesdn.co.uk', '@.', '@.holliesdn.co.uk', '@.co.uk', '@.uk', 'xxxxxxxx@holliesdaynurseries.co.uk', '@holliesdaynurseries.co.uk', '@.', '@.holliesdaynurseries.co.uk', '@.co.uk', '@.uk')#012           ORDER BY priority DESC
Feb 25 10:00:59 mail iredapd Local addresses (in `users`): [(23, '@holliesdaynurseries.co.uk'), (1, '@.')]
Feb 25 10:00:59 mail iredapd [SQL] Query external addresses: #012SELECT id, email#012               FROM mailaddr#012              WHERE email IN ('@.', 'anhlm0j7ws/qosi8akpdibg==_1119684886188_9lfi7n/4eemtdtsuupaoaa==@*', '208.75.123.183', '208.75.123.*', '208.75.*.183')#012           ORDER BY priority DESC
Feb 25 10:00:59 mail iredapd Addresses (in `mailaddr`): [(71399, '@.')]
Feb 25 10:00:59 mail iredapd [SQL] Query CIDR network: #012SELECT id, email#012               FROM mailaddr#012              WHERE email LIKE '208.%%'#012           ORDER BY priority DESC
Feb 25 10:00:59 mail iredapd [SQL] Query inbound wblist (in `wblist`): #012SELECT rid, sid, wb#012               FROM wblist#012              WHERE sid IN (71399) AND rid IN (23, 1)
Feb 25 10:00:59 mail iredapd No wblist found.
Feb 25 10:00:59 mail iredapd <-- Result: DUNNO
Feb 25 10:00:59 mail iredapd --> Apply plugin: senderscore
Feb 25 10:00:59 mail iredapd [208.75.123.183] [in.constantcontact.com] senderscore: 97
Feb 25 10:00:59 mail iredapd <-- Result: DUNNO
Feb 25 10:00:59 mail iredapd Session ended.
Feb 25 10:00:59 mail iredapd [208.75.123.183] RCPT, anhlm0j7ws/qosi8akpdibg==_1119684886188_9lfi7n/4eemtdtsuupaoaa==@in.constantcontact.com -> xxxxxxxx@holliesdn.co.uk, DUNNO [sasl_username=, sender=anhlm0j7ws/qosi8akpdibg==_1119684886188_9lfi7n/4eemtdtsuupaoaa==@in.constantcontact.com, client_name=ccm183.constantcontact.com, reverse_client_name=ccm183.constantcontact.com, helo=ccm183.constantcontact.com, encryption_protocol=TLSv1.2, encryption_cipher=ECDHE-RSA-AES256-GCM-SHA384, server_port=25, process_time=0.2748s]

And here is one that was blacklisted:

Feb 25 09:30:45 mail iredapd [policy] request=smtpd_access_policy
Feb 25 09:30:45 mail iredapd [policy] protocol_state=RCPT
Feb 25 09:30:45 mail iredapd [policy] protocol_name=ESMTP
Feb 25 09:30:45 mail iredapd [policy] client_address=208.75.123.171
Feb 25 09:30:45 mail iredapd [policy] client_name=ccm171.constantcontact.com
Feb 25 09:30:45 mail iredapd [policy] client_port=4399
Feb 25 09:30:45 mail iredapd [policy] reverse_client_name=ccm171.constantcontact.com
Feb 25 09:30:45 mail iredapd [policy] server_address=xxx.xxx.xxx.139
Feb 25 09:30:45 mail iredapd [policy] server_port=25
Feb 25 09:30:45 mail iredapd [policy] helo_name=ccm171.constantcontact.com
Feb 25 09:30:45 mail iredapd [policy] sender=AaWnAdPFTRT2hvQXt4HPIZA==_1128055713599_GobtUBM3EemP1NSuUnuJWg==@in.constantcontact.com
Feb 25 09:30:45 mail iredapd [policy] recipient=xxxxx@wjpengineeringplastics.co.uk
Feb 25 09:30:45 mail iredapd [policy] recipient_count=0
Feb 25 09:30:45 mail iredapd [policy] queue_id=
Feb 25 09:30:45 mail iredapd [policy] instance=b8f0.5e54e945.40169.0
Feb 25 09:30:45 mail iredapd [policy] size=0
Feb 25 09:30:45 mail iredapd [policy] etrn_domain=
Feb 25 09:30:45 mail iredapd [policy] stress=
Feb 25 09:30:45 mail iredapd [policy] sasl_method=
Feb 25 09:30:45 mail iredapd [policy] sasl_username=
Feb 25 09:30:45 mail iredapd [policy] sasl_sender=
Feb 25 09:30:45 mail iredapd [policy] ccert_subject=
Feb 25 09:30:45 mail iredapd [policy] ccert_issuer=
Feb 25 09:30:45 mail iredapd [policy] ccert_fingerprint=
Feb 25 09:30:45 mail iredapd [policy] ccert_pubkey_fingerprint=
Feb 25 09:30:45 mail iredapd [policy] encryption_protocol=TLSv1.2
Feb 25 09:30:45 mail iredapd [policy] encryption_cipher=ECDHE-RSA-AES256-GCM-SHA384
Feb 25 09:30:45 mail iredapd [policy] encryption_keysize=256
Feb 25 09:30:45 mail iredapd [policy] policy_context=
Feb 25 09:30:45 mail iredapd --> Apply plugin: reject_null_sender
Feb 25 09:30:45 mail iredapd <-- Result: DUNNO
Feb 25 09:30:45 mail iredapd --> Apply plugin: wblist_rdns
Feb 25 09:30:45 mail iredapd All policy rDNS names: ['ccm171.constantcontact.com', '.ccm171.constantcontact.com', '.constantcontact.com', '.com']
Feb 25 09:30:45 mail iredapd [SQL] Query whitelisted rDNS names: #012SELECT rdns#012               FROM wblist_rdns#012              WHERE rdns IN ('ccm171.constantcontact.com', '.ccm171.constantcontact.com', '.constantcontact.com', '.com') AND wb='W'#012              LIMIT 1
Feb 25 09:30:45 mail iredapd [SQL] Query blacklisted rDNS names: #012SELECT rdns#012               FROM wblist_rdns#012              WHERE rdns IN ('ccm171.constantcontact.com', '.ccm171.constantcontact.com', '.constantcontact.com', '.com') AND wb='B'#012              LIMIT 1
Feb 25 09:30:45 mail iredapd <-- Result: DUNNO
Feb 25 09:30:45 mail iredapd --> Apply plugin: reject_sender_login_mismatch
Feb 25 09:30:45 mail iredapd Not an authenticated sender (no sasl_username).
Feb 25 09:30:45 mail iredapd [SQL] query local domain (in.constantcontact.com): #012SELECT domain#012                   FROM domain#012                  WHERE domain='in.constantcontact.com' AND active=1 AND backupmx=0#012                  LIMIT 1
Feb 25 09:30:45 mail iredapd SQL query result: None
Feb 25 09:30:45 mail iredapd [SQL] query alias domain (in.constantcontact.com): #012SELECT alias_domain.alias_domain#012                       FROM alias_domain, domain#012                      WHERE domain.active=1#012                            AND domain.domain=alias_domain.target_domain#012                            AND alias_domain.alias_domain='in.constantcontact.com'#012                      LIMIT 1
Feb 25 09:30:45 mail iredapd [SQL] query result: None
Feb 25 09:30:45 mail iredapd Sender domain is NOT hosted locally.
Feb 25 09:30:45 mail iredapd <-- Result: DUNNO
Feb 25 09:30:45 mail iredapd --> Apply plugin: greylisting
Feb 25 09:30:45 mail iredapd [SQL] query target domain of given alias domain (wjpengineeringplastics.co.uk): #012SELECT alias_domain.target_domain#012               FROM alias_domain, domain#012              WHERE domain.active=1#012                    AND domain.domain=alias_domain.target_domain#012                    AND alias_domain.alias_domain='wjpengineeringplastics.co.uk'#012              LIMIT 1
Feb 25 09:30:45 mail iredapd [SQL] query result: None
Feb 25 09:30:45 mail iredapd [SQL] Query greylisting whitelists from `greylisting_whitelist_domain_spf`: #012SELECT sender#012                   FROM greylisting_whitelist_domain_spf#012                  WHERE account IN ('xxxxx@wjpengineeringplastics.co.uk', '@wjpengineeringplastics.co.uk', '@.', '@.wjpengineeringplastics.co.uk', '@.co.uk', '@.uk')
Feb 25 09:30:45 mail iredapd [SQL] Query greylisting whitelists from `greylisting_whitelists`: #012SELECT sender#012                   FROM greylisting_whitelists#012                  WHERE account IN ('xxxxx@wjpengineeringplastics.co.uk', '@wjpengineeringplastics.co.uk', '@.', '@.wjpengineeringplastics.co.uk', '@.co.uk', '@.uk')
Feb 25 09:30:45 mail iredapd [208.75.123.171] Client is not explictly whitelisted.
Feb 25 09:30:45 mail iredapd [208.75.123.171] Client network is whitelisted: cidr=208.75.120.0/22
Feb 25 09:30:45 mail iredapd <-- Result: DUNNO
Feb 25 09:30:45 mail iredapd --> Apply plugin: throttle
Feb 25 09:30:45 mail iredapd Check sender throttling.
Feb 25 09:30:45 mail iredapd [SQL] query target domain of given alias domain (in.constantcontact.com): #012SELECT alias_domain.target_domain#012               FROM alias_domain, domain#012              WHERE domain.active=1#012                    AND domain.domain=alias_domain.target_domain#012                    AND alias_domain.alias_domain='in.constantcontact.com'#012              LIMIT 1
Feb 25 09:30:45 mail iredapd [SQL] query result: None
Feb 25 09:30:45 mail iredapd [SQL] Query throttle setting: #012        SELECT id, account, priority, period, max_msgs, max_quota, msg_size#012          FROM throttle#012         WHERE kind='external' AND account IN ('208.75.123.171', '@ip', 'aawnadpftrt2hvqxt4hpiza==_1128055713599_gobtubm3eemp1nsuunujwg==@in.constantcontact.com', '@in.constantcontact.com', '@.', '@.in.constantcontact.com', '@.constantcontact.com', '@.com', '208.75.123.*', '208.75.*.171')#012         ORDER BY priority DESC
Feb 25 09:30:45 mail iredapd [SQL] Query result: []
Feb 25 09:30:45 mail iredapd No sender throttle setting.
Feb 25 09:30:45 mail iredapd Check recipient throttling.
Feb 25 09:30:45 mail iredapd [SQL] query target domain of given alias domain (wjpengineeringplastics.co.uk): #012SELECT alias_domain.target_domain#012               FROM alias_domain, domain#012              WHERE domain.active=1#012                    AND domain.domain=alias_domain.target_domain#012                    AND alias_domain.alias_domain='wjpengineeringplastics.co.uk'#012              LIMIT 1
Feb 25 09:30:45 mail iredapd [SQL] query result: None
Feb 25 09:30:45 mail iredapd [SQL] Query throttle setting: #012        SELECT id, account, priority, period, max_msgs, max_quota, msg_size#012          FROM throttle#012         WHERE kind='inbound' AND account IN ('208.75.123.171', '@ip', 'xxxxx@wjpengineeringplastics.co.uk', '@wjpengineeringplastics.co.uk', '@.', '@.wjpengineeringplastics.co.uk', '@.co.uk', '@.uk', '208.75.123.*', '208.75.*.171')#012         ORDER BY priority DESC
Feb 25 09:30:45 mail iredapd [SQL] Query result: []
Feb 25 09:30:45 mail iredapd No recipient throttle setting.
Feb 25 09:30:45 mail iredapd <-- Result: DUNNO
Feb 25 09:30:45 mail iredapd --> Apply plugin: sql_alias_access_policy
Feb 25 09:30:45 mail iredapd [SQL] query access policy: #012SELECT accesspolicy#012               FROM alias#012              WHERE address='xxxxx@wjpengineeringplastics.co.uk'#012              LIMIT 1
Feb 25 09:30:45 mail iredapd [SQL] query result: None
Feb 25 09:30:45 mail iredapd [SQL] query target domain of given alias domain (wjpengineeringplastics.co.uk): #012SELECT alias_domain.target_domain#012               FROM alias_domain, domain#012              WHERE domain.active=1#012                    AND domain.domain=alias_domain.target_domain#012                    AND alias_domain.alias_domain='wjpengineeringplastics.co.uk'#012              LIMIT 1
Feb 25 09:30:45 mail iredapd [SQL] query result: None
Feb 25 09:30:45 mail iredapd Recipient domain is not an alias domain.
Feb 25 09:30:45 mail iredapd <-- Result: DUNNO Recipient is not a mail alias account or no access policy
Feb 25 09:30:45 mail iredapd --> Apply plugin: amavisd_wblist
Feb 25 09:30:45 mail iredapd [SQL] query target domain of given alias domain (in.constantcontact.com): #012SELECT alias_domain.target_domain#012               FROM alias_domain, domain#012              WHERE domain.active=1#012                    AND domain.domain=alias_domain.target_domain#012                    AND alias_domain.alias_domain='in.constantcontact.com'#012              LIMIT 1
Feb 25 09:30:45 mail iredapd [SQL] query result: None
Feb 25 09:30:45 mail iredapd [SQL] query target domain of given alias domain (wjpengineeringplastics.co.uk): #012SELECT alias_domain.target_domain#012               FROM alias_domain, domain#012              WHERE domain.active=1#012                    AND domain.domain=alias_domain.target_domain#012                    AND alias_domain.alias_domain='wjpengineeringplastics.co.uk'#012              LIMIT 1
Feb 25 09:30:45 mail iredapd [SQL] query result: None
Feb 25 09:30:45 mail iredapd Possible policy senders: ['aawnadpftrt2hvqxt4hpiza==_1128055713599_gobtubm3eemp1nsuunujwg==@in.constantcontact.com', '@in.constantcontact.com', '@.', '@.in.constantcontact.com', '@.constantcontact.com', '@.com', 'aawnadpftrt2hvqxt4hpiza==_1128055713599_gobtubm3eemp1nsuunujwg==@*', '208.75.123.171', '208.75.123.*', '208.75.*.171']
Feb 25 09:30:45 mail iredapd Possible policy recipients: ['xxxxx@wjpengineeringplastics.co.uk', '@wjpengineeringplastics.co.uk', '@.', '@.wjpengineeringplastics.co.uk', '@.co.uk', '@.uk']
Feb 25 09:30:45 mail iredapd [SQL] query local domain (in.constantcontact.com): #012SELECT domain#012                   FROM domain#012                  WHERE domain='in.constantcontact.com' AND active=1 #012                  LIMIT 1
Feb 25 09:30:45 mail iredapd SQL query result: None
Feb 25 09:30:45 mail iredapd [SQL] query local domain (wjpengineeringplastics.co.uk): #012SELECT domain#012                   FROM domain#012                  WHERE domain='wjpengineeringplastics.co.uk' AND active=1 #012                  LIMIT 1
Feb 25 09:30:45 mail iredapd SQL query result: (u'wjpengineeringplastics.co.uk',)
Feb 25 09:30:45 mail iredapd Apply wblist for inbound message.
Feb 25 09:30:45 mail iredapd [SQL] Query local addresses: #012SELECT id, email#012               FROM users#012              WHERE email IN ('xxxxx@wjpengineeringplastics.co.uk', '@wjpengineeringplastics.co.uk', '@.', '@.wjpengineeringplastics.co.uk', '@.co.uk', '@.uk')#012           ORDER BY priority DESC
Feb 25 09:30:45 mail iredapd Local addresses (in `users`): [(24, '@wjpengineeringplastics.co.uk'), (1, '@.')]
Feb 25 09:30:45 mail iredapd [SQL] Query external addresses: #012SELECT id, email#012               FROM mailaddr#012              WHERE email IN ('aawnadpftrt2hvqxt4hpiza==_1128055713599_gobtubm3eemp1nsuunujwg==@in.constantcontact.com', '@in.constantcontact.com', '@.', '@.in.constantcontact.com', '@.constantcontact.com', '@.com', 'aawnadpftrt2hvqxt4hpiza==_1128055713599_gobtubm3eemp1nsuunujwg==@*', '208.75.123.171', '208.75.123.*', '208.75.*.171')#012           ORDER BY priority DESC
Feb 25 09:30:45 mail iredapd Addresses (in `mailaddr`): [(74164, '@.in.constantcontact.com'), (71399, '@.')]
Feb 25 09:30:45 mail iredapd [SQL] Query CIDR network: #012SELECT id, email#012               FROM mailaddr#012              WHERE email LIKE '208.%%'#012           ORDER BY priority DESC
Feb 25 09:30:45 mail iredapd [SQL] Query inbound wblist (in `wblist`): #012SELECT rid, sid, wb#012               FROM wblist#012              WHERE sid IN (74164, 71399) AND rid IN (24, 1)
Feb 25 09:30:45 mail iredapd Found inbound wblist: [(1, 74164, u'B')]
Feb 25 09:30:45 mail iredapd Blacklisted: wblist=(1, 74164, 'B')
Feb 25 09:30:45 mail iredapd <-- Result: REJECT Blacklisted
Feb 25 09:30:45 mail iredapd Session ended.

Thank you