Mar 3 11:17:58 server spamd[1460]: prefork: child states: II Mar 3 11:17:58 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<55439>: msgid=<0.0.10D.E3D.1DB8C2D9105A064.0@emx207.instillerhq.com>: saved mail to INBOX Mar 3 11:17:58 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:18:09 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:57160 to port 783, fd 6 Mar 3 11:18:09 server spamd[2837]: spamd: setuid to as240622a succeeded Mar 3 11:18:09 server spamd[2837]: spamd: checking message for as240622a:1017 Mar 3 11:18:09 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:18:09 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:18:10 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=57841, TLS, session= Mar 3 11:18:10 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<57841>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 11:18:10 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:18:10 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:18:10 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:18:10 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:18:10 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:18:10 server spamd[2837]: spamd: clean message (3.7/5.0) for as240622a:1017 in 0.7 seconds, 63106 bytes. Mar 3 11:18:10 server spamd[2837]: spamd: result: . 3 - BAYES_40,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_COUK,KAM_MARKETINGBL_PCCC,KAM_ZWNS,LOTS_OF_MONEY,MIME_QP_LONG_LINE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_CT_SURBL,URIBL_DBL_BLOCKED_OPENDNS scantime=0.7,size=63106,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=57160,mid=,bayes=0.325883,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:18:10 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:18:10 server spamd[1460]: prefork: child states: II Mar 3 11:18:10 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<55439>: msgid=: saved mail to INBOX Mar 3 11:18:10 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:18:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=57858, secured, session=<70rYT24vBNQAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:18:12 server dovecot[55220]: imap(accounts@northbuild.co.uk)<57858><70rYT24vBNQAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:18:17 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:18:17 server dovecot[55220]: lmtp(info@southlakeswindows.com)<55439>: msgid=<1UkHwQ9LUi.BFhvtECo4Y@custservice>: saved mail to INBOX Mar 3 11:18:17 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:18:23 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<57173>: Disconnected: Connection closed (UID FETCH finished 175.893 secs ago) in=589, out=65844, bytes=589/65844 Mar 3 11:18:23 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=57904, TLS, session= Mar 3 11:18:37 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=57951, TLS, session=<55NXUW4vfcWU/BKD> Mar 3 11:19:00 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=58036, secured, session=<4q2pUm4vWOsAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:19:00 server dovecot[55220]: imap(accounts@northbuild.co.uk)<58036><4q2pUm4vWOsAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:19:00 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:45918 to port 783, fd 6 Mar 3 11:19:00 server spamd[2837]: spamd: setuid to fba23102023a succeeded Mar 3 11:19:00 server spamd[2837]: spamd: checking message for fba23102023a:1031 Mar 3 11:19:00 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:19:00 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:19:01 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:19:01 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:19:01 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:19:01 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:19:01 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:19:01 server spamd[2837]: spamd: clean message (0.1/5.0) for fba23102023a:1031 in 0.6 seconds, 43278 bytes. Mar 3 11:19:01 server spamd[2837]: spamd: result: . 0 - BAYES_50,DKIM_INVALID,DKIM_SIGNED,HTML_MESSAGE,KAM_DMARC_STATUS,MAILING_LIST_MULTI,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_CT_SURBL,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=43278,user=fba23102023a,uid=1031,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=45918,mid=,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:19:01 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:19:01 server spamd[1460]: prefork: child states: II Mar 3 11:19:01 server dovecot[55220]: lmtp(graham@ge-photography.co.uk)<55439>: msgid=: saved mail to INBOX Mar 3 11:19:01 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:19:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=58092, secured, session= Mar 3 11:19:13 server dovecot[55220]: imap(accounts@northbuild.co.uk)<58092>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:19:16 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=58108, secured, session= Mar 3 11:19:17 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<58108>: Disconnected: Logged out in=82, out=929, bytes=82/929 Mar 3 11:19:17 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=58121, secured, session= Mar 3 11:19:17 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<58121>: Disconnected: Logged out in=129, out=971, bytes=129/971 Mar 3 11:19:17 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=58133, secured, session= Mar 3 11:19:17 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=58134, secured, session= Mar 3 11:19:17 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<58133>: Disconnected: Logged out in=464, out=36574, bytes=464/36574 Mar 3 11:19:17 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<58134>: Disconnected: Logged out in=362, out=1392, bytes=362/1392 Mar 3 11:19:41 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:19:41 server dovecot[55220]: lmtp(paul@southlakeswindows.com)<55439><6H+0JE2QxWeP2AAAm+Yclw>: msgid=<1UkHwQ9qhn.K2iS3O0Kn5D@desktop-2n7sfk8>: saved mail to INBOX Mar 3 11:19:41 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:19:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=58271, TLS, session=<62kOVm4vrM+d58bG> Mar 3 11:19:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=149.50.169.252, lip=172.31.3.195, mpid=58272, TLS, session= Mar 3 11:19:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=58287, TLS, session= Mar 3 11:19:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=149.50.169.252, lip=172.31.3.196, mpid=58288, TLS, session= Mar 3 11:19:58 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=58289, TLS, session= Mar 3 11:19:58 server dovecot[55220]: imap(accounts@northbuild.co.uk)<58272>: Disconnected: Logged out in=419, out=109338, bytes=419/109338 Mar 3 11:20:00 server dovecot[55220]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=196.251.67.12, lip=172.31.3.195, session= Mar 3 11:20:05 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<58271><62kOVm4vrM+d58bG>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.761 secs, 2 B in + 10+2 B out, state=wait-input) in=731, out=498401, bytes=731/498401 Mar 3 11:20:05 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<58289>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.577 secs, 2 B in + 10+2 B out, state=wait-input) in=281, out=1084, bytes=281/1084 Mar 3 11:20:05 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<58287>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.112 secs, 2 B in + 10+2 B out, state=wait-input) in=577, out=70913, bytes=577/70913 Mar 3 11:20:09 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.26.113, lip=172.31.3.195, mpid=58360, TLS, session= Mar 3 11:20:09 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.26.113, lip=172.31.3.195, mpid=58361, TLS, session=<0CfVVm4vitYfYBpx> Mar 3 11:20:10 server spamd[2837]: spamd: connection from localhost [::1]:52556 to port 783, fd 5 Mar 3 11:20:10 server spamd[1460]: prefork: child states: II Mar 3 11:20:10 server dovecot[55220]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= Mar 3 11:20:10 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:20:10 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=GREETING) Mar 3 11:20:10 server dovecot[55220]: imap-login: Login: user=<__cpanel__service__auth__imap__g8fzvoe_6llcf410>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=58427, secured, session= Mar 3 11:20:10 server dovecot[55220]: imap(__cpanel__service__auth__imap__g8fzvoe_6llcf410)<58427>: Disconnected: Logged out in=11, out=519, bytes=11/519 Mar 3 11:20:14 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=58489, secured, session=<94kdV24vqMUAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:20:14 server dovecot[55220]: imap(accounts@northbuild.co.uk)<58489><94kdV24vqMUAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:20:44 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<57904>: Disconnected: Connection closed (UID FETCH finished 140.278 secs ago) in=386, out=32797, bytes=386/32797 Mar 3 11:20:44 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=58600, TLS, session= Mar 3 11:20:54 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:47194 to port 783, fd 6 Mar 3 11:20:54 server spamd[2837]: spamd: setuid to fbb20240312a succeeded Mar 3 11:20:54 server spamd[2837]: spamd: checking message <20250303-11200325-b6d4-0@cpviis26.sc.local> for fbb20240312a:1035 Mar 3 11:20:54 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:20:54 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:20:55 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:47204 to port 783, fd 6 Mar 3 11:20:55 server spamd[35473]: spamd: setuid to fbb20240312a succeeded Mar 3 11:20:55 server spamd[35473]: spamd: checking message <20250303-11200325-b6d4-0@cpviis26.sc.local> for fbb20240312a:1035 Mar 3 11:20:55 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:20:55 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:20:55 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:20:55 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:20:55 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:20:55 server spamd[2837]: spamd: clean message (0.9/5.0) for fbb20240312a:1035 in 0.6 seconds, 12456 bytes. Mar 3 11:20:55 server spamd[2837]: spamd: result: . 0 - DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_FROM_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,PCCC_HDR_MARKETINGBL,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS,URI_HEX scantime=0.6,size=12456,user=fbb20240312a,uid=1035,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=47194,mid=<20250303-11200325-b6d4-0@cpviis26.sc.local>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:20:55 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:20:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=58640, TLS, session= Mar 3 11:20:55 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:20:55 server spamd[1460]: prefork: child states: IB Mar 3 11:20:55 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:20:55 server dovecot[55220]: lmtp(graham@penninghame.com)<55439><6KK+EJeQxWeP2AAAm+Yclw>: msgid=<20250303-11200325-b6d4-0@cpviis26.sc.local>: saved mail to INBOX Mar 3 11:20:55 server dovecot[55220]: lmtp(office@penninghame.com)<55439><6KK+EJeQxWeP2AAAm+Yclw:R2>: msgid=<20250303-11200325-b6d4-0@cpviis26.sc.local>: saved mail to INBOX Mar 3 11:20:55 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:20:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=58652, TLS, session=<702KWW4v78szm5mb> Mar 3 11:20:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=58654, TLS, session= Mar 3 11:20:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.196, mpid=58656, TLS, session=<3JGMWW4v9cszm5mb> Mar 3 11:20:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=58657, TLS, session= Mar 3 11:20:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=58659, TLS, session= Mar 3 11:20:55 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:20:55 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:20:55 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:20:55 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:20:55 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:20:55 server spamd[35473]: spamd: clean message (0.9/5.0) for fbb20240312a:1035 in 0.7 seconds, 12459 bytes. Mar 3 11:20:55 server spamd[35473]: spamd: result: . 0 - DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_FROM_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,PCCC_HDR_MARKETINGBL,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS,URI_HEX scantime=0.7,size=12459,user=fbb20240312a,uid=1035,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=47204,mid=<20250303-11200325-b6d4-0@cpviis26.sc.local>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:20:55 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:20:55 server spamd[1460]: prefork: child states: II Mar 3 11:20:55 server dovecot[55220]: lmtp(booking@penninghame.com)<55439><2GwtM5eQxWeP2AAAm+Yclw>: msgid=<20250303-11200325-b6d4-0@cpviis26.sc.local>: saved mail to INBOX Mar 3 11:20:55 server dovecot[55220]: lmtp(office@penninghame.com)<55439><2GwtM5eQxWeP2AAAm+Yclw:R2>: msgid=<20250303-11200325-b6d4-0@cpviis26.sc.local>: saved mail to INBOX Mar 3 11:20:55 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:20:58 server dovecot[55220]: imap(info@thebedstorekendal.co.uk)<58686><0CfVVm4vitYfYBpx>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:20:58 server dovecot[55220]: imap(oliver@thebedstorekendal.co.uk)<58685>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:20:59 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=58693, secured, session= Mar 3 11:21:00 server dovecot[55220]: imap(accounts@northbuild.co.uk)<58693>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:21:03 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.199.253, lip=172.31.3.195, mpid=58708, TLS, session= Mar 3 11:21:03 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.199.253, lip=172.31.3.195, mpid=58709, TLS, session= Mar 3 11:21:11 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=58736, TLS, session=<3fF9Wm4vveDVe4dK> Mar 3 11:21:11 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=58737, TLS, session= Mar 3 11:21:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=58741, TLS, session= Mar 3 11:21:15 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=58754, secured, session= Mar 3 11:21:15 server dovecot[55220]: imap(accounts@northbuild.co.uk)<58754>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:21:17 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<58736><3fF9Wm4vveDVe4dK>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.313 secs, 2 B in + 10+2 B out, state=wait-input) in=565, out=22436, bytes=565/22436 Mar 3 11:21:17 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<58737>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.432 secs, 2 B in + 10+2 B out, state=wait-input) in=365, out=1538, bytes=365/1538 Mar 3 11:21:17 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<58741>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 3.875 secs, 2 B in + 10+2 B out, state=wait-input) in=762, out=10039, bytes=762/10039 Mar 3 11:21:22 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<57268><0+iFR24vWdxawMu0>: Disconnected: Logged out in=511, out=2921, bytes=511/2921 Mar 3 11:21:22 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<57267>: Disconnected: Logged out in=511, out=2781, bytes=511/2781 Mar 3 11:21:31 server dovecot[55220]: imap(faye@becreativemail.co.uk)<58814>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:21:31 server dovecot[55220]: imap(faye@domain-authority.co.uk)<58817>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:21:31 server dovecot[55220]: imap(development@domain-authority.co.uk)<58816><702KWW4v78szm5mb>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:21:31 server dovecot[55220]: imap(hello@olmate.co.nz)<58818><3JGMWW4v9cszm5mb>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:21:31 server dovecot[55220]: imap(faye@omnom.co.uk)<58815>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:21:31 server dovecot[55220]: imap(domains@domain-authority.co.uk)<58819>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:21:33 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:58178 to port 783, fd 6 Mar 3 11:21:33 server spamd[2837]: spamd: setuid to fbb20240405b succeeded Mar 3 11:21:33 server spamd[2837]: spamd: checking message <3e7f0f5f-c1d9-44ee-b91e-6a452d69bebf@mtasv.net> for fbb20240405b:1037 Mar 3 11:21:33 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:21:33 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:21:35 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:21:35 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:21:35 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:21:35 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:21:35 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:21:35 server spamd[2837]: spamd: clean message (0.4/5.0) for fbb20240405b:1037 in 1.4 seconds, 105289 bytes. Mar 3 11:21:35 server spamd[2837]: spamd: result: . 0 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,KAM_REALLYHUGEIMGSRC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=1.4,size=105289,user=fbb20240405b,uid=1037,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=58178,mid=<3e7f0f5f-c1d9-44ee-b91e-6a452d69bebf@mtasv.net>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:21:35 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:21:35 server spamd[1460]: prefork: child states: II Mar 3 11:21:35 server dovecot[55220]: lmtp(info@communitysportsarenas.co.uk)<55439><6OjcEL+QxWeP2AAAm+Yclw>: msgid=<3e7f0f5f-c1d9-44ee-b91e-6a452d69bebf@mtasv.net>: saved mail to INBOX Mar 3 11:21:35 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:21:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=58858, TLS, session= Mar 3 11:21:40 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<56876><74TwQ24vmMBawMu0>: Disconnected: Connection closed (No commands sent) in=0, out=454, bytes=0/454 Mar 3 11:21:40 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<56874><0PftQ24vlsBawMu0>: Disconnected: Connection closed (IDLE finished 407.046 secs ago) in=945, out=15935, bytes=945/15935 Mar 3 11:21:40 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=58863, TLS, session= Mar 3 11:21:40 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<58858>: Disconnected: Logged out in=539, out=1556, bytes=539/1556 Mar 3 11:21:40 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=58865, TLS, session= Mar 3 11:21:41 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<58865>: Disconnected: Connection closed (LIST finished 0.116 secs ago) in=56, out=1936, bytes=56/1936 Mar 3 11:21:41 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=58869, TLS, session=<1XpIXG4vVZxV/+kh> Mar 3 11:21:41 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<58869><1XpIXG4vVZxV/+kh>: Disconnected: Connection closed (UID SEARCH finished 0.041 secs ago) in=81, out=1433, bytes=81/1433 Mar 3 11:21:42 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=58870, TLS, session= Mar 3 11:21:42 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<58870>: Disconnected: Connection closed (UID FETCH finished 0.029 secs ago) in=182, out=1851, bytes=182/1851 Mar 3 11:21:42 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:21:42 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<55439>: msgid=<008901db8c2e$6ed097f0$4c71c7d0$@southcoasttravel.co.uk>: saved mail to INBOX Mar 3 11:21:42 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:21:54 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=58920, TLS, session= Mar 3 11:21:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=58925, TLS, session=<7JokXW4vYNxawMu0> Mar 3 11:21:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=58926, TLS, session= Mar 3 11:21:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=58930, TLS, session=<7RouXW4vtM+d58bG> Mar 3 11:21:57 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<58920>: Disconnected: Logged out top=0/0, retr=6/12910012, del=0/1487, size=1574261292, bytes=90/12966675 Mar 3 11:22:03 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:37922 to port 783, fd 6 Mar 3 11:22:03 server spamd[2837]: spamd: setuid to fb181022a succeeded Mar 3 11:22:03 server spamd[2837]: spamd: checking message for fb181022a:1019 Mar 3 11:22:03 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:22:03 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:22:03 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:22:03 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:22:03 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:22:03 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:22:03 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:22:03 server spamd[2837]: spamd: identified spam (5.9/5.0) for fb181022a:1019 in 0.6 seconds, 26984 bytes. Mar 3 11:22:03 server spamd[2837]: spamd: result: Y 5 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FROM_EXCESS_BASE64,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,LOTS_OF_MONEY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLACK,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=26984,user=fb181022a,uid=1019,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=37922,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:22:03 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:22:03 server dovecot[55220]: lmtp(info@northbuild.co.uk)<55439>: msgid=: saved mail to INBOX.spam Mar 3 11:22:03 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:22:03 server spamd[1460]: prefork: child states: II Mar 3 11:22:05 server dovecot[55220]: imap(info@communitysportsarenas.co.uk)<58974>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:22:05 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=58976, TLS, session= Mar 3 11:22:08 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=58988, TLS, session= Mar 3 11:22:08 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<58988>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 11:22:16 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:58816 to port 783, fd 6 Mar 3 11:22:16 server spamd[2837]: spamd: setuid to fb20211118a succeeded Mar 3 11:22:16 server spamd[2837]: spamd: checking message <9k4k84mic2bycq9c-wkejs7uhgzq1o32i-2c399-4fc22@jointfixer.ru.com> for fb20211118a:1007 Mar 3 11:22:16 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:22:16 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:22:16 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:22:16 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:22:16 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:22:16 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:22:16 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:22:16 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=59017, secured, session= Mar 3 11:22:16 server spamd[2837]: spamd: identified spam (41.2/8.0) for fb20211118a:1007 in 0.6 seconds, 8324 bytes. Mar 3 11:22:16 server spamd[2837]: spamd: result: Y 41 - BAYES_99,BAYES_999,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_2TLD_PROBLEMS,KAM_BODY_URIBL_PCCC,KAM_FROM_URIBL_PCCC,LONGLN_LOW_CONTRAST,PCCC_HDR_REPLYTO,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,RDNS_NONE,SPF_PASS,T_REMOTE_IMAGE,URIBL_ABUSE_SURBL,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS,URI_TRY_3LD scantime=0.6,size=8324,user=fb20211118a,uid=1007,required_score=8.0,rhost=localhost,raddr=127.0.0.1,rport=58816,mid=<9k4k84mic2bycq9c-wkejs7uhgzq1o32i-2c399-4fc22@jointfixer.ru.com>,bayes=1.000000,autolearn=spam autolearn_force=no,shortcircuit=no Mar 3 11:22:16 server dovecot[55220]: imap(accounts@northbuild.co.uk)<59017>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:22:16 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:22:16 server spamd[1460]: prefork: child states: II Mar 3 11:22:16 server dovecot[55220]: lmtp(info@southlakeswindows.com)<55439>: msgid=<9k4k84mic2bycq9c-wkejs7uhgzq1o32i-2c399-4fc22@jointfixer.ru.com>: saved mail to INBOX.spam Mar 3 11:22:16 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:22:27 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:53784 to port 783, fd 6 Mar 3 11:22:27 server spamd[2837]: spamd: setuid to fbb20240405b succeeded Mar 3 11:22:27 server spamd[2837]: spamd: checking message for fbb20240405b:1037 Mar 3 11:22:27 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:22:27 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:22:28 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:22:28 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:22:28 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:22:28 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:22:28 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:22:28 server spamd[2837]: spamd: clean message (-0.1/5.0) for fbb20240405b:1037 in 1.4 seconds, 94212 bytes. Mar 3 11:22:28 server spamd[2837]: spamd: result: . 0 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=1.4,size=94212,user=fbb20240405b,uid=1037,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=53784,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:22:28 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:22:28 server dovecot[55220]: lmtp(info@communitysportsarenas.co.uk)<55439>: msgid=: saved mail to INBOX Mar 3 11:22:28 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:22:28 server spamd[1460]: prefork: child states: II Mar 3 11:22:28 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<58976>: Disconnected: Logged out in=266, out=1182, bytes=266/1182 Mar 3 11:22:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=59172, secured, session= Mar 3 11:22:55 server dovecot[55220]: imap(accounts@northbuild.co.uk)<59172>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:23:00 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=59207, secured, session= Mar 3 11:23:00 server dovecot[55220]: imap(accounts@northbuild.co.uk)<59207>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:23:02 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<58600>: Disconnected: Connection closed (UID FETCH finished 137.399 secs ago) in=386, out=32797, bytes=386/32797 Mar 3 11:23:02 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=59215, TLS, session= Mar 3 11:23:17 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=59271, secured, session=<+dcFYm4vbq0AAAAAAAAAAAAAAAAAAAAB> Mar 3 11:23:17 server dovecot[55220]: imap(accounts@northbuild.co.uk)<59271><+dcFYm4vbq0AAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:23:24 server dovecot[55220]: lmtp(55439): Connect from local Mar 3 11:23:24 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<55439>: msgid=: saved mail to INBOX Mar 3 11:23:24 server dovecot[55220]: lmtp(55439): Disconnect from local: Logged out (state=READY) Mar 3 11:23:27 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.26.113, lip=172.31.3.195, mpid=59309, TLS, session= Mar 3 11:23:45 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=59371, TLS, session= Mar 3 11:23:45 server dovecot[55220]: imap(info@mwaccess.co.uk)<59371>: Disconnected: Connection closed (SELECT finished 0.135 secs ago) in=115, out=1128, bytes=115/1128 Mar 3 11:23:55 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<58930><7RouXW4vtM+d58bG>: Disconnected: Connection closed (UID SEARCH finished 118.275 secs ago) in=417, out=369697, bytes=417/369697 Mar 3 11:23:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=59411, TLS, session= Mar 3 11:24:12 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=59474, TLS, session= Mar 3 11:24:14 server dovecot[55220]: imap(info@thebedstorekendal.co.uk)<59484>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:24:16 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<59474>: Disconnected: Logged out top=0/0, retr=7/18641707, del=2/1488, size=1579992967, bytes=117/18698486 Mar 3 11:24:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=59502, secured, session= Mar 3 11:24:18 server dovecot[55220]: imap(accounts@northbuild.co.uk)<59502>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:24:34 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:59958 to port 783, fd 6 Mar 3 11:24:34 server spamd[2837]: spamd: setuid to as240622a succeeded Mar 3 11:24:34 server spamd[2837]: spamd: checking message for as240622a:1017 Mar 3 11:24:34 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:24:34 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:24:35 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:24:35 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:24:35 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:24:35 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:24:35 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:24:35 server spamd[2837]: spamd: clean message (3.2/5.0) for as240622a:1017 in 1.1 seconds, 117302 bytes. Mar 3 11:24:35 server spamd[2837]: spamd: result: . 3 - BAYES_50,DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,MIME_QP_LONG_LINE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS,URIBL_GOLD,URIBL_GREY scantime=1.1,size=117302,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=59958,mid=,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:24:35 server dovecot[55220]: lmtp(59567): Connect from local Mar 3 11:24:35 server spamd[1460]: prefork: child states: II Mar 3 11:24:35 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<59567><+a2tH3ORxWev6AAAm+Yclw>: msgid=: saved mail to INBOX Mar 3 11:24:35 server dovecot[55220]: lmtp(59567): Disconnect from local: Logged out (state=READY) Mar 3 11:24:37 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=164.39.147.14, lip=172.31.3.195, mpid=59575, TLS, session= Mar 3 11:24:39 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<59411>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 42.500 secs, 2 B in + 10+2 B out, state=wait-input) in=234, out=10564, bytes=234/10564 Mar 3 11:24:44 server dovecot[55220]: imap(enquiries@ryedalegaragedoors.co.uk)<59575>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.434 secs, 2 B in + 10+2 B out, state=wait-input) in=288, out=2419, bytes=288/2419 Mar 3 11:24:59 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=59665, secured, session= Mar 3 11:24:59 server dovecot[55220]: imap(accounts@northbuild.co.uk)<59665>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:25:09 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<59215>: Disconnected: Connection closed (UID FETCH finished 97.821 secs ago) in=386, out=32797, bytes=386/32797 Mar 3 11:25:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=59758, secured, session= Mar 3 11:25:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<59758>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:25:20 server spamd[2837]: spamd: connection from localhost [::1]:56892 to port 783, fd 5 Mar 3 11:25:20 server spamd[1460]: prefork: child states: II Mar 3 11:25:20 server dovecot[55220]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= Mar 3 11:25:20 server dovecot[55220]: lmtp(59567): Connect from local Mar 3 11:25:20 server dovecot[55220]: lmtp(59567): Disconnect from local: Logged out (state=GREETING) Mar 3 11:25:20 server dovecot[55220]: imap-login: Login: user=<__cpanel__service__auth__imap__g8fzvoe_6llcf410>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=59836, secured, session= Mar 3 11:25:20 server dovecot[55220]: imap(__cpanel__service__auth__imap__g8fzvoe_6llcf410)<59836>: Disconnected: Logged out in=11, out=519, bytes=11/519 Mar 3 11:25:27 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=59909, TLS, session= Mar 3 11:25:59 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=60031, TLS, session= Mar 3 11:25:59 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<60031>: Disconnected: Logged out top=0/0, retr=1/125323, del=0/1487, size=1579083847, bytes=35/181972 Mar 3 11:26:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=60131, secured, session= Mar 3 11:26:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<60131>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:26:40 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=60193, TLS, session=<+KgVbm4v+O6d58bG> Mar 3 11:26:40 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<60193><+KgVbm4v+O6d58bG>: Disconnected: Logged out in=38, out=586, bytes=38/586 Mar 3 11:26:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=60254, secured, session= Mar 3 11:26:55 server dovecot[55220]: imap(accounts@northbuild.co.uk)<60254>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:27:11 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=60317, TLS, session= Mar 3 11:27:11 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<60317>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 11:27:11 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=92.40.218.205, lip=172.31.3.195, mpid=60321, TLS, session= Mar 3 11:27:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=92.40.218.205, lip=172.31.3.195, mpid=60325, TLS, session= Mar 3 11:27:14 server dovecot[55220]: imap(lancashire@hanleycaravans.co.uk)<60321>: Disconnected: Logged out in=211, out=3849, bytes=211/3849 Mar 3 11:27:14 server dovecot[55220]: imap(sedbergh@hanleycaravans.co.uk)<60325>: Disconnected: Logged out in=238, out=4203, bytes=238/4203 Mar 3 11:27:20 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=60350, TLS, session= Mar 3 11:27:20 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<60350>: Disconnected: Logged out top=0/0, retr=0/0, del=0/1487, size=1579083847, bytes=24/56646 Mar 3 11:27:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=60357, secured, session= Mar 3 11:27:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<60357>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:27:39 server dovecot[55220]: imap(info@southlakeswindows.com)<57951><55NXUW4vfcWU/BKD>: Disconnected: Connection closed (UID FETCH finished 0.324 secs ago) in=1431, out=423095, bytes=1431/423095 Mar 3 11:27:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=60423, TLS, session= Mar 3 11:27:40 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<58926>: Disconnected: Logged out in=711, out=4093, bytes=711/4093 Mar 3 11:27:40 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<58925><7JokXW4vYNxawMu0>: Disconnected: Logged out in=711, out=3883, bytes=711/3883 Mar 3 11:27:45 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.98.204.125, lip=172.31.3.195, mpid=60440, TLS, session= Mar 3 11:27:53 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=60466, TLS, session= Mar 3 11:27:53 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=60467, TLS, session=<0651cm4vMPvVe4dK> Mar 3 11:27:53 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=60471, TLS, session= Mar 3 11:27:54 server dovecot[55220]: imap(steven@southlakeswindows.com)<60423>: Disconnected: Connection closed (UID FETCH finished 12.109 secs ago) in=745, out=62456, bytes=745/62456 Mar 3 11:27:54 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=60472, TLS, session= Mar 3 11:27:59 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<60466>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.086 secs, 2 B in + 10+2 B out, state=wait-input) in=562, out=22436, bytes=562/22436 Mar 3 11:27:59 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<60467><0651cm4vMPvVe4dK>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.069 secs, 2 B in + 10+2 B out, state=wait-input) in=380, out=1957, bytes=380/1957 Mar 3 11:27:59 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<60471>: Disconnected: Connection closed (COMPRESS finished 6.106 secs ago) in=155, out=567, bytes=155/567 Mar 3 11:28:02 server dovecot[55220]: imap(info@southlakeswindows.com)<60472>: Disconnected: Connection closed (UID FETCH finished 0.185 secs ago) in=917, out=345986, bytes=917/345986 Mar 3 11:28:02 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=60508, TLS, session= Mar 3 11:28:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=60571, secured, session=<7r0UdG4vXpYAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:28:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<60571><7r0UdG4vXpYAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:28:48 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<59909>: Disconnected: Connection closed (UID FETCH finished 200.615 secs ago) in=386, out=32797, bytes=386/32797 Mar 3 11:28:48 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=60660, TLS, session= Mar 3 11:29:03 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:36200 to port 783, fd 6 Mar 3 11:29:03 server spamd[2837]: spamd: setuid to as240622a succeeded Mar 3 11:29:03 server spamd[2837]: spamd: checking message for as240622a:1017 Mar 3 11:29:03 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:29:03 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:29:03 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:29:03 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:29:03 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:29:03 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:29:03 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:29:03 server spamd[2837]: spamd: clean message (4.5/5.0) for as240622a:1017 in 0.7 seconds, 59300 bytes. Mar 3 11:29:03 server spamd[2837]: spamd: result: . 4 - BAYES_50,DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_COUK,KAM_MARKETINGBL_PCCC,KAM_ZWNS,LOTS_OF_MONEY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.7,size=59300,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=36200,mid=,bayes=0.499995,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:29:03 server dovecot[55220]: lmtp(60725): Connect from local Mar 3 11:29:03 server spamd[1460]: prefork: child states: II Mar 3 11:29:03 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<60725>: msgid=: saved mail to INBOX Mar 3 11:29:03 server dovecot[55220]: lmtp(60725): Disconnect from local: Logged out (state=READY) Mar 3 11:29:10 server dovecot[55220]: imap-hibernate(simon@scsplumbingandheating.co.uk)<55502>: Disconnected: Connection closed in=1081, out=3146, bytes=1081/3146 Mar 3 11:29:18 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=31.94.74.3, lip=172.31.3.195, mpid=60778, session= Mar 3 11:29:18 server dovecot[55220]: pop3(chris@rosecountyinteriors.co.uk)<60778>: Disconnected: Logged out top=0/0, retr=0/0, del=0/349, size=53806501, bytes=22/80 Mar 3 11:29:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=60786, secured, session= Mar 3 11:29:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<60786>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:29:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=60856, TLS, session= Mar 3 11:29:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=60857, TLS, session= Mar 3 11:29:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=60858, TLS, session= Mar 3 11:29:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=60859, TLS, session= Mar 3 11:29:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=60860, TLS, session= Mar 3 11:29:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=60861, TLS, session= Mar 3 11:29:43 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=60879, TLS, session= Mar 3 11:29:43 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=60880, TLS, session= Mar 3 11:29:43 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=60881, TLS, session=<+MIGeW4v9MEfYM3j> Mar 3 11:29:51 server dovecot[55220]: imap(steven@southlakeswindows.com)<60508>: Disconnected: Connection closed (UID FETCH finished 107.371 secs ago) in=745, out=61963, bytes=745/61963 Mar 3 11:29:51 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=60909, TLS, session= Mar 3 11:29:54 server dovecot[55220]: imap(info@southlakeswindows.com)<60909>: Disconnected: Connection closed (UID FETCH finished 0.219 secs ago) in=819, out=343045, bytes=819/343045 Mar 3 11:29:54 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=60920, TLS, session=<7kqpeW4vp8WU/BKD> Mar 3 11:30:00 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=60951, TLS, session= Mar 3 11:30:00 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=60952, TLS, session= Mar 3 11:30:00 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=60953, TLS, session= Mar 3 11:30:00 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=60954, TLS, session= Mar 3 11:30:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=60978, TLS, session= Mar 3 11:30:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=60979, TLS, session= Mar 3 11:30:03 server dovecot[55220]: imap-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=31.94.22.106, lip=172.31.3.195, TLS handshaking: Connection closed, session= Mar 3 11:30:03 server dovecot[55220]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=31.94.22.106, lip=172.31.3.196, TLS handshaking: Connection closed, session= Mar 3 11:30:03 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.94.22.106, lip=172.31.3.195, mpid=60986, TLS, session= Mar 3 11:30:08 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=61006, TLS, session= Mar 3 11:30:08 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<61006>: Disconnected: Logged out in=38, out=586, bytes=38/586 Mar 3 11:30:11 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<60856>: Disconnected: Connection closed (FETCH finished 32.549 secs ago) in=159, out=1316, bytes=159/1316 Mar 3 11:30:11 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<60861>: Disconnected: Connection closed (FETCH finished 32.331 secs ago) in=152, out=1854, bytes=152/1854 Mar 3 11:30:12 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<60860>: Disconnected: Connection closed (FETCH finished 32.359 secs ago) in=152, out=1736, bytes=152/1736 Mar 3 11:30:12 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<60858>: Disconnected: Connection closed (SELECT finished 32.572 secs ago) in=139, out=1033, bytes=139/1033 Mar 3 11:30:12 server dovecot[55220]: imap(info@paragoninterior.co.uk)<60859>: Disconnected: Connection closed (FETCH finished 32.612 secs ago) in=159, out=1475, bytes=159/1475 Mar 3 11:30:12 server dovecot[55220]: imap(info@paragoninterior.co.uk)<60857>: Disconnected: Connection closed (FETCH finished 32.613 secs ago) in=154, out=2245, bytes=154/2245 Mar 3 11:30:18 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<60660>: Disconnected: Connection closed (UID FETCH finished 88.984 secs ago) in=386, out=32797, bytes=386/32797 Mar 3 11:30:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=61047, TLS, session= Mar 3 11:30:20 server dovecot[55220]: imap(steven@southlakeswindows.com)<60920><7kqpeW4vp8WU/BKD>: Disconnected: Connection closed (UID FETCH finished 25.240 secs ago) in=745, out=61955, bytes=745/61955 Mar 3 11:30:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=61057, secured, session= Mar 3 11:30:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=61058, TLS, session= Mar 3 11:30:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<61057>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:30:21 server spamd[2837]: spamd: connection from localhost [::1]:49942 to port 783, fd 5 Mar 3 11:30:21 server spamd[1460]: prefork: child states: II Mar 3 11:30:21 server dovecot[55220]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= Mar 3 11:30:21 server dovecot[55220]: lmtp(60725): Connect from local Mar 3 11:30:21 server dovecot[55220]: lmtp(60725): Disconnect from local: Logged out (state=GREETING) Mar 3 11:30:21 server dovecot[55220]: imap-login: Login: user=<__cpanel__service__auth__imap__g8fzvoe_6llcf410>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=61135, secured, session= Mar 3 11:30:21 server dovecot[55220]: imap(__cpanel__service__auth__imap__g8fzvoe_6llcf410)<61135>: Disconnected: Logged out in=11, out=519, bytes=11/519 Mar 3 11:30:23 server dovecot[55220]: imap(info@southlakeswindows.com)<61058>: Disconnected: Connection closed (UID FETCH finished 0.143 secs ago) in=819, out=342874, bytes=819/342874 Mar 3 11:30:23 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=61184, TLS, session= Mar 3 11:30:25 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:36734 to port 783, fd 6 Mar 3 11:30:25 server spamd[2837]: spamd: setuid to fb181022a succeeded Mar 3 11:30:25 server spamd[2837]: spamd: checking message <99HR705NJPU4.KFKFHLYXPP4A2@bouncing.gbr.sja.org.uk> for fb181022a:1019 Mar 3 11:30:25 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:30:25 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:30:26 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:30:26 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:30:26 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:30:26 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:30:26 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:30:26 server spamd[2837]: spamd: clean message (-0.1/5.0) for fb181022a:1019 in 1.4 seconds, 133843 bytes. Mar 3 11:30:26 server spamd[2837]: spamd: result: . 0 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=1.4,size=133843,user=fb181022a,uid=1019,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=36734,mid=<99HR705NJPU4.KFKFHLYXPP4A2@bouncing.gbr.sja.org.uk>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:30:26 server dovecot[55220]: lmtp(60725): Connect from local Mar 3 11:30:26 server spamd[1460]: prefork: child states: II Mar 3 11:30:26 server dovecot[55220]: lmtp(accounts@northbuild.co.uk)<60725>: msgid=<99HR705NJPU4.KFKFHLYXPP4A2@bouncing.gbr.sja.org.uk>: saved mail to INBOX Mar 3 11:30:26 server dovecot[55220]: lmtp(60725): Disconnect from local: Logged out (state=READY) Mar 3 11:30:28 server dovecot[55220]: imap(steven@southlakeswindows.com)<61184>: Disconnected: Connection closed (UID FETCH finished 3.396 secs ago) in=745, out=61955, bytes=745/61955 Mar 3 11:30:28 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=61208, TLS, session=<9Wewe24vrMWU/BKD> Mar 3 11:30:30 server dovecot[55220]: imap(info@southlakeswindows.com)<61208><9Wewe24vrMWU/BKD>: Disconnected: Connection closed (UID FETCH finished 0.185 secs ago) in=783, out=342324, bytes=783/342324 Mar 3 11:30:31 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=61215, TLS, session= Mar 3 11:30:36 server dovecot[55220]: imap(steven@southlakeswindows.com)<61215>: Disconnected: Connection closed (UID FETCH finished 4.460 secs ago) in=745, out=61963, bytes=745/61963 Mar 3 11:30:36 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=61236, TLS, session= Mar 3 11:30:39 server dovecot[55220]: imap(info@southlakeswindows.com)<61236>: Disconnected: Connection closed (UID FETCH finished 0.160 secs ago) in=783, out=342324, bytes=783/342324 Mar 3 11:30:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=61247, TLS, session=<9BJafG4vscWU/BKD> Mar 3 11:30:44 server dovecot[55220]: imap(steven@southlakeswindows.com)<61247><9BJafG4vscWU/BKD>: Disconnected: Connection closed (UID FETCH finished 4.321 secs ago) in=745, out=61955, bytes=745/61955 Mar 3 11:30:45 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=61263, TLS, session= Mar 3 11:30:47 server dovecot[55220]: imap(info@southlakeswindows.com)<61263>: Disconnected: Connection closed (UID FETCH finished 0.140 secs ago) in=783, out=342324, bytes=783/342324 Mar 3 11:30:47 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=61273, TLS, session= Mar 3 11:31:14 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=86.177.36.99, lip=172.31.3.195, mpid=61374, TLS, session= Mar 3 11:31:15 server dovecot[55220]: imap(info@grampianpestcontrol.com)<61374>: Disconnected: Connection closed (LIST finished 0.078 secs ago) in=56, out=3149, bytes=56/3149 Mar 3 11:31:15 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=86.177.36.99, lip=172.31.3.195, mpid=61378, TLS, session= Mar 3 11:31:15 server dovecot[55220]: imap(info@grampianpestcontrol.com)<61378>: Disconnected: Connection closed (UID FETCH finished 0.063 secs ago) in=1702, out=15875, bytes=1702/15875 Mar 3 11:31:16 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=86.177.36.99, lip=172.31.3.195, mpid=61379, TLS, session= Mar 3 11:31:16 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:51866 to port 783, fd 6 Mar 3 11:31:16 server spamd[2837]: spamd: setuid to jfa20241216a succeeded Mar 3 11:31:16 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:51878 to port 783, fd 6 Mar 3 11:31:16 server spamd[35473]: spamd: setuid to jfa20241216a succeeded Mar 3 11:31:16 server spamd[2837]: spamd: checking message <0.0.D.7A1.1DB8C2F6EE2A8A4.0@emx070.instillerhq.com> for jfa20241216a:1047 Mar 3 11:31:16 server spamd[35473]: spamd: checking message <0.0.D.7A1.1DB8C2F6EE2A8A4.0@emx070.instillerhq.com> for jfa20241216a:1047 Mar 3 11:31:16 server dovecot[55220]: imap(info@grampianpestcontrol.com)<61379>: Disconnected: Connection closed (UID FETCH finished 0.045 secs ago) in=1657, out=15105, bytes=1657/15105 Mar 3 11:31:16 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:31:16 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:31:16 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:31:16 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:31:17 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:31:17 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:31:17 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:31:17 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:31:17 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:31:17 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:31:17 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:31:17 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:31:17 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:31:17 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:31:17 server spamd[35473]: spamd: clean message (4.8/5.0) for jfa20241216a:1047 in 1.2 seconds, 67215 bytes. Mar 3 11:31:17 server spamd[35473]: spamd: result: . 4 - CPANEL_LOTS_OF_EMPTY_LINE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,KAM_COUK,LOTS_OF_MONEY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_FAIL,SPF_HELO_PASS,T_MONEY_PERCENT,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=1.2,size=67215,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=51878,mid=<0.0.D.7A1.1DB8C2F6EE2A8A4.0@emx070.instillerhq.com>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:31:17 server spamd[2837]: spamd: clean message (4.8/5.0) for jfa20241216a:1047 in 1.2 seconds, 67215 bytes. Mar 3 11:31:17 server spamd[2837]: spamd: result: . 4 - CPANEL_LOTS_OF_EMPTY_LINE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,KAM_COUK,LOTS_OF_MONEY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_FAIL,SPF_HELO_PASS,T_MONEY_PERCENT,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=1.2,size=67215,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=51866,mid=<0.0.D.7A1.1DB8C2F6EE2A8A4.0@emx070.instillerhq.com>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:31:17 server spamd[1460]: prefork: child states: BI Mar 3 11:31:17 server spamd[1460]: prefork: child states: II Mar 3 11:31:17 server dovecot[55220]: lmtp(60725): Connect from local Mar 3 11:31:17 server dovecot[55220]: lmtp(61396): Connect from local Mar 3 11:31:17 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<60725>: msgid=<0.0.D.7A1.1DB8C2F6EE2A8A4.0@emx070.instillerhq.com>: saved mail to INBOX Mar 3 11:31:17 server dovecot[55220]: lmtp(60725): Disconnect from local: Logged out (state=READY) Mar 3 11:31:17 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<61396>: msgid=<0.0.D.7A1.1DB8C2F6EE2A8A4.0@emx070.instillerhq.com>: saved mail to INBOX Mar 3 11:31:17 server dovecot[55220]: lmtp(61396): Disconnect from local: Logged out (state=READY) Mar 3 11:31:18 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:51880 to port 783, fd 6 Mar 3 11:31:18 server spamd[2837]: spamd: setuid to fb20241023a succeeded Mar 3 11:31:18 server spamd[2837]: spamd: checking message <1142077404401.1131312516847.1151690109.0.230630JL.3010@synd.ccsend.com> for fb20241023a:1045 Mar 3 11:31:18 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:31:18 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:31:19 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:31:19 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:31:19 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:31:19 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:31:19 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:31:19 server spamd[2837]: spamd: clean message (3.5/5.0) for fb20241023a:1045 in 0.6 seconds, 29460 bytes. Mar 3 11:31:19 server spamd[2837]: spamd: result: . 3 - BAYES_50,DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_COUK,KAM_FROM_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,KAM_UNSUB1,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS,URIBL_GOLD,URIBL_GREY scantime=0.6,size=29460,user=fb20241023a,uid=1045,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=51880,mid=<1142077404401.1131312516847.1151690109.0.230630JL.3010@synd.ccsend.com>,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:31:19 server dovecot[55220]: lmtp(61396): Connect from local Mar 3 11:31:19 server spamd[1460]: prefork: child states: II Mar 3 11:31:19 server dovecot[55220]: lmtp(barbaraproctor@partners-in-design.co.uk)<61396>: msgid=<1142077404401.1131312516847.1151690109.0.230630JL.3010@synd.ccsend.com>: saved mail to INBOX Mar 3 11:31:19 server dovecot[55220]: lmtp(61396): Disconnect from local: Logged out (state=READY) Mar 3 11:31:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=61412, secured, session= Mar 3 11:31:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<61412>: Disconnected: Logged out in=651, out=79163, bytes=651/79163 Mar 3 11:31:27 server dovecot[55220]: imap(steven@southlakeswindows.com)<61273>: Disconnected: Connection closed (UID MOVE finished 3.735 secs ago) in=1178, out=131982, bytes=1178/131982 Mar 3 11:31:28 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=61442, TLS, session= Mar 3 11:31:36 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=61471, TLS, session= Mar 3 11:31:40 server dovecot[55220]: imap(info@southlakeswindows.com)<61442>: Disconnected: Connection closed (UID FETCH finished 0.292 secs ago) in=881, out=345265, bytes=881/345265 Mar 3 11:31:40 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=61487, TLS, session=<9Hn8f24v0MWU/BKD> Mar 3 11:31:43 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.199.253, lip=172.31.3.195, mpid=61498, TLS, session= Mar 3 11:31:47 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<61471>: Disconnected: Logged out top=0/0, retr=12/18927107, del=0/1488, size=1579149152, bytes=156/18983828 Mar 3 11:31:54 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:59218 to port 783, fd 6 Mar 3 11:31:54 server spamd[2837]: spamd: setuid to fb181022a succeeded Mar 3 11:31:54 server spamd[2837]: spamd: checking message for fb181022a:1019 Mar 3 11:31:54 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:31:54 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:31:54 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.26.113, lip=172.31.3.195, mpid=61537, TLS, session= Mar 3 11:31:55 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:31:55 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:31:55 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:31:55 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:31:55 server spamd[2837]: spamd: clean message (0.7/5.0) for fb181022a:1019 in 0.6 seconds, 14277 bytes. Mar 3 11:31:55 server spamd[2837]: spamd: result: . 0 - ARC_SIGNED,ARC_VALID,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,GB_FREEMAIL_NUM,HTML_MESSAGE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS scantime=0.6,size=14277,user=fb181022a,uid=1019,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=59218,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:31:55 server dovecot[55220]: lmtp(61396): Connect from local Mar 3 11:31:55 server spamd[1460]: prefork: child states: II Mar 3 11:31:55 server dovecot[55220]: lmtp(info@northbuild.co.uk)<61396>: msgid=: saved mail to INBOX Mar 3 11:31:55 server dovecot[55220]: lmtp(61396): Disconnect from local: Logged out (state=READY) Mar 3 11:31:57 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<61047>: Disconnected: Connection closed (UID FETCH finished 88.967 secs ago) in=1948, out=632305, bytes=1948/632305 Mar 3 11:31:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=61563, TLS, session= Mar 3 11:32:01 server dovecot[55220]: imap(steven@southlakeswindows.com)<60978>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 116.779 secs, 2 B in + 10+2 B out, state=wait-input) in=353, out=1567, bytes=353/1567 Mar 3 11:32:01 server dovecot[55220]: imap(info@southlakeswindows.com)<60951>: Disconnected: Connection closed (IDLE running for 0.002 + waiting input for 101.042 secs, 0.001 in locks, 2 B in + 10+2 B out, state=wait-input) in=1757, out=633770, bytes=1757/633770 Mar 3 11:32:01 server dovecot[55220]: imap(steven@southlakeswindows.com)<60954>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 115.792 secs, 2 B in + 10+2 B out, state=wait-input) in=638, out=3123, bytes=638/3123 Mar 3 11:32:01 server dovecot[55220]: imap(info@southlakeswindows.com)<60979>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 100.856 secs, 2 B in + 10+2 B out, state=wait-input) in=1698, out=10194, bytes=1698/10194 Mar 3 11:32:01 server dovecot[55220]: imap(steven@southlakeswindows.com)<60952>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 101.042 secs, 2 B in + 10+2 B out, state=wait-input) in=699, out=97586, bytes=699/97586 Mar 3 11:32:01 server dovecot[55220]: imap(info@southlakeswindows.com)<60953>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 100.856 secs, 2 B in + 10+2 B out, state=wait-input) in=732, out=40598, bytes=732/40598 Mar 3 11:32:05 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<61563>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.947 secs, 2 B in + 10+2 B out, state=wait-input) in=1759, out=680023, bytes=1759/680023 Mar 3 11:32:07 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=61601, TLS, session= Mar 3 11:32:08 server dovecot[55220]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=196.251.118.239, lip=172.31.3.195, session=<7tmQgW4vzLTE+3bv> Mar 3 11:32:11 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=61616, TLS, session= Mar 3 11:32:11 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<61616>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 11:32:14 server dovecot[55220]: imap(info@communitysportsarenas.co.uk)<61626>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:32:20 server dovecot[55220]: imap(steven@southlakeswindows.com)<61487><9Hn8f24v0MWU/BKD>: Disconnected: Connection closed (UID FETCH finished 37.448 secs ago) in=745, out=62319, bytes=745/62319 Mar 3 11:32:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=61645, TLS, session= Mar 3 11:32:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=61647, secured, session= Mar 3 11:32:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<61647>: Disconnected: Logged out in=428, out=1413, bytes=428/1413 Mar 3 11:32:29 server dovecot[55220]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=196.251.67.37, lip=172.31.3.195, session= Mar 3 11:32:29 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=61682, TLS, session= Mar 3 11:32:31 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<61601>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 6.001 secs, 2 B in + 10+2 B out, state=wait-input) in=993, out=494485, bytes=993/494485 Mar 3 11:32:41 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=61722, TLS, session=<1bifg24vdt7Ve4dK> Mar 3 11:32:41 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<61722><1bifg24vdt7Ve4dK>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 11:32:44 server dovecot[55220]: imap(info@southlakeswindows.com)<61645>: Disconnected: Connection closed (UID FETCH finished 0.437 secs ago) in=853, out=343079, bytes=853/343079 Mar 3 11:32:44 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=61734, TLS, session=<4TLMg24v2MWU/BKD> Mar 3 11:32:52 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=61759, TLS, session= Mar 3 11:32:52 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=61763, TLS, session= Mar 3 11:32:52 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=61764, TLS, session=<1uFLhG4vyM+d58bG> Mar 3 11:32:58 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=61794, TLS, session= Mar 3 11:32:59 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<61763>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.734 secs, 2 B in + 10+2 B out, state=wait-input) in=398, out=2086, bytes=398/2086 Mar 3 11:32:59 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<61759>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.733 secs, 2 B in + 10+2 B out, state=wait-input) in=546, out=12554, bytes=546/12554 Mar 3 11:32:59 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<61764><1uFLhG4vyM+d58bG>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.501 secs, 2 B in + 10+2 B out, state=wait-input) in=193, out=1026, bytes=193/1026 Mar 3 11:33:05 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<61794>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.539 secs, 2 B in + 10+2 B out, state=wait-input) in=350, out=276051, bytes=350/276051 Mar 3 11:33:14 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:38878 to port 783, fd 6 Mar 3 11:33:14 server spamd[2837]: spamd: setuid to afb070223a succeeded Mar 3 11:33:14 server spamd[2837]: spamd: checking message <202503031132.523BWVRT016450@payments-dsworker-mz-blue-16zt.c.etsy-web-prod.internal> for afb070223a:1025 Mar 3 11:33:14 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:33:14 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:33:15 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:33:15 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:33:15 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:33:15 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:33:15 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:33:15 server spamd[2837]: spamd: clean message (-1.5/8.0) for afb070223a:1025 in 0.6 seconds, 24162 bytes. Mar 3 11:33:15 server spamd[2837]: spamd: result: . -1 - BAYES_00,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,KAM_REALLYHUGEIMGSRC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=24162,user=afb070223a,uid=1025,required_score=8.0,rhost=localhost,raddr=127.0.0.1,rport=38878,mid=<202503031132.523BWVRT016450@payments-dsworker-mz-blue-16zt.c.etsy-web-prod.internal>,bayes=0.000000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:33:15 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:33:15 server dovecot[55220]: lmtp(sales@earthtoheaven.co.uk)<61853>: msgid=<202503031132.523BWVRT016450@payments-dsworker-mz-blue-16zt.c.etsy-web-prod.internal>: saved mail to INBOX Mar 3 11:33:15 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:33:15 server spamd[1460]: prefork: child states: II Mar 3 11:33:19 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<61863>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:33:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=61873, secured, session=<1/v1hW4v3p0AAAAAAAAAAAAAAAAAAAAB> Mar 3 11:33:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<61873><1/v1hW4v3p0AAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:33:22 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:46678 to port 783, fd 6 Mar 3 11:33:22 server spamd[2837]: spamd: setuid to jfa20241216a succeeded Mar 3 11:33:22 server spamd[2837]: spamd: checking message <0.1.A.2DD.1DB8C2FB9BE2AEC.0@mail35.euc1.acems2.com> for jfa20241216a:1047 Mar 3 11:33:22 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:46692 to port 783, fd 6 Mar 3 11:33:22 server spamd[35473]: spamd: setuid to jfa20241216a succeeded Mar 3 11:33:22 server spamd[35473]: spamd: checking message <0.1.A.2DD.1DB8C2FB9BE2AEC.0@mail35.euc1.acems2.com> for jfa20241216a:1047 Mar 3 11:33:22 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:33:22 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:33:22 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:33:23 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:33:23 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:33:23 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:33:23 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:33:23 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:33:23 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:33:23 server spamd[2837]: spamd: clean message (2.5/5.0) for jfa20241216a:1047 in 1.1 seconds, 52868 bytes. Mar 3 11:33:23 server spamd[2837]: spamd: result: . 2 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_SOFTFAIL,URIBL_BLOCKED,URIBL_CT_SURBL,URIBL_DBL_BLOCKED_OPENDNS scantime=1.1,size=52868,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=46678,mid=<0.1.A.2DD.1DB8C2FB9BE2AEC.0@mail35.euc1.acems2.com>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:33:23 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:33:23 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:33:23 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:33:23 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:33:23 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:33:23 server spamd[35473]: spamd: clean message (2.5/5.0) for jfa20241216a:1047 in 1.1 seconds, 52868 bytes. Mar 3 11:33:23 server spamd[35473]: spamd: result: . 2 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_SOFTFAIL,URIBL_BLOCKED,URIBL_CT_SURBL,URIBL_DBL_BLOCKED_OPENDNS scantime=1.1,size=52868,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=46692,mid=<0.1.A.2DD.1DB8C2FB9BE2AEC.0@mail35.euc1.acems2.com>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:33:23 server spamd[1460]: prefork: child states: IB Mar 3 11:33:24 server spamd[1460]: prefork: child states: II Mar 3 11:33:24 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:33:24 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<61853>: msgid=<0.1.A.2DD.1DB8C2FB9BE2AEC.0@mail35.euc1.acems2.com>: saved mail to INBOX Mar 3 11:33:24 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:33:24 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:33:24 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<61853>: msgid=<0.1.A.2DD.1DB8C2FB9BE2AEC.0@mail35.euc1.acems2.com>: saved mail to INBOX Mar 3 11:33:24 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:33:30 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:46698 to port 783, fd 6 Mar 3 11:33:30 server spamd[2837]: spamd: setuid to fb20211118a succeeded Mar 3 11:33:30 server spamd[2837]: spamd: checking message for fb20211118a:1007 Mar 3 11:33:31 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:33:31 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:33:31 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:33:31 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:33:31 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:33:31 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:33:31 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:33:31 server spamd[2837]: spamd: clean message (3.5/8.0) for fb20211118a:1007 in 0.8 seconds, 739774 bytes. Mar 3 11:33:31 server spamd[2837]: spamd: result: . 3 - ARC_SIGNED,ARC_VALID,BAYES_50,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_FONT_LOW_CONTRAST,HTML_IMAGE_RATIO_08,HTML_MESSAGE,KAM_COUK,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.8,size=739774,user=fb20211118a,uid=1007,required_score=8.0,rhost=localhost,raddr=127.0.0.1,rport=46698,mid=,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:33:31 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:33:31 server dovecot[55220]: lmtp(info@southlakeswindows.com)<61853>: msgid=: saved mail to INBOX Mar 3 11:33:31 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:33:31 server spamd[1460]: prefork: child states: II Mar 3 11:33:33 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=61951, TLS, session=<+CzAhm4vxus+6Den> Mar 3 11:33:43 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=61992, secured, session=<9rZNh24vHLIAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:33:43 server dovecot[55220]: imap(accounts@northbuild.co.uk)<61992><9rZNh24vHLIAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=1007, bytes=82/1007 Mar 3 11:33:44 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=62007, secured, session= Mar 3 11:33:44 server dovecot[55220]: imap(accounts@northbuild.co.uk)<62007>: Disconnected: Logged out in=129, out=1203, bytes=129/1203 Mar 3 11:33:46 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=62030, secured, session= Mar 3 11:33:47 server dovecot[55220]: imap(accounts@northbuild.co.uk)<62030>: Disconnected: Logged out in=651, out=79155, bytes=651/79155 Mar 3 11:33:47 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=62032, secured, session= Mar 3 11:33:47 server dovecot[55220]: imap(accounts@northbuild.co.uk)<62032>: Disconnected: Logged out in=623, out=2130, bytes=623/2130 Mar 3 11:33:47 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:40204 to port 783, fd 6 Mar 3 11:33:47 server spamd[2837]: spamd: setuid to fb20250106a succeeded Mar 3 11:33:47 server spamd[2837]: spamd: checking message for fb20250106a:1048 Mar 3 11:33:47 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:33:47 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:33:48 server spamd[2837]: spamd: clean message (1.2/5.0) for fb20250106a:1048 in 0.9 seconds, 2215 bytes. Mar 3 11:33:48 server spamd[2837]: spamd: result: . 1 - ALL_TRUSTED,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,KAM_DMARC_QUARANTINE,KAM_DMARC_STATUS,MIME_HTML_ONLY scantime=0.9,size=2215,user=fb20250106a,uid=1048,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=40204,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:33:48 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:33:48 server dovecot[55220]: lmtp(hello@olmate.co.nz)<61853>: msgid=: saved mail to INBOX Mar 3 11:33:48 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:33:48 server spamd[1460]: prefork: child states: II Mar 3 11:33:50 server dovecot[55220]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=196.251.67.6, lip=172.31.3.195, session= Mar 3 11:33:56 server dovecot[55220]: imap(info@thebedstorekendal.co.uk)<62072>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:33:58 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.26.113, lip=172.31.3.195, mpid=62090, TLS, session= Mar 3 11:34:05 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=62112, TLS, session= Mar 3 11:34:09 server dovecot[55220]: imap(steven@southlakeswindows.com)<61734><4TLMg24v2MWU/BKD>: Disconnected: Connection closed (UID FETCH finished 83.604 secs ago) in=745, out=61792, bytes=745/61792 Mar 3 11:34:09 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=62126, TLS, session= Mar 3 11:34:11 server dovecot[55220]: imap(info@southlakeswindows.com)<62126>: Disconnected: Connection closed (UID FETCH finished 0.347 secs ago) in=783, out=342575, bytes=783/342575 Mar 3 11:34:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=62136, TLS, session= Mar 3 11:34:14 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.26.113, lip=172.31.3.195, mpid=62144, TLS, session= Mar 3 11:34:14 server dovecot[55220]: imap(steven@southlakeswindows.com)<62136>: Disconnected: Connection closed (UID FETCH finished 0.292 secs ago) in=745, out=61792, bytes=745/61792 Mar 3 11:34:14 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=62145, TLS, session= Mar 3 11:34:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=62171, secured, session= Mar 3 11:34:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<62171>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:34:21 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=86.145.109.33, lip=172.31.3.195, mpid=62181, TLS, session= Mar 3 11:34:24 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=62190, TLS, session= Mar 3 11:34:24 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=62191, TLS, session= Mar 3 11:34:24 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=62195, TLS, session= Mar 3 11:34:24 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=62196, TLS, session= Mar 3 11:34:25 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=62200, TLS, session= Mar 3 11:34:25 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:51390 to port 783, fd 6 Mar 3 11:34:25 server spamd[2837]: spamd: setuid to fb181022a succeeded Mar 3 11:34:25 server spamd[2837]: spamd: checking message for fb181022a:1019 Mar 3 11:34:25 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:34:25 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:34:26 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=62202, TLS, session=<8XbbiW4va0qU/J0U> Mar 3 11:34:26 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:34:26 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:34:26 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:34:26 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:34:26 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:34:26 server spamd[2837]: spamd: clean message (1.1/5.0) for fb181022a:1019 in 0.8 seconds, 117060 bytes. Mar 3 11:34:26 server spamd[2837]: spamd: result: . 1 - DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_COUK,KAM_FROM_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,MIME_HTML_MOSTLY,PCCC_HDR_MARKETINGBL,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,UNPARSEABLE_RELAY,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.8,size=117060,user=fb181022a,uid=1019,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=51390,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:34:26 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:34:26 server spamd[1460]: prefork: child states: II Mar 3 11:34:26 server dovecot[55220]: lmtp(info@northbuild.co.uk)<61853>: msgid=: saved mail to INBOX Mar 3 11:34:26 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:34:29 server spamd[2837]: spamd: connection from localhost [127.0.0.1]:51394 to port 783, fd 6 Mar 3 11:34:29 server spamd[2837]: spamd: setuid to as240622a succeeded Mar 3 11:34:29 server spamd[2837]: spamd: checking message for as240622a:1017 Mar 3 11:34:29 server spamd[2837]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:34:29 server spamd[2837]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:34:29 server spamd[2837]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:34:29 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:34:29 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:34:29 server spamd[2837]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:34:29 server spamd[2837]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:34:29 server spamd[2837]: spamd: clean message (-16.9/5.0) for as240622a:1017 in 0.7 seconds, 87188 bytes. Mar 3 11:34:29 server spamd[2837]: spamd: result: . -16 - BAYES_00,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,LOTS_OF_MONEY,MIME_HTML_ONLY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS,USER_IN_DEF_DKIM_WL,USER_IN_DEF_SPF_WL scantime=0.7,size=87188,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=51394,mid=,bayes=0.000000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:34:30 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:34:30 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<61853>: msgid=: saved mail to INBOX Mar 3 11:34:30 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:34:30 server spamd[1460]: prefork: child states: BI Mar 3 11:34:30 server spamd[1460]: spamd: handled cleanup of child pid [2837] due to SIGCHLD: exit 0 Mar 3 11:34:30 server spamd[1460]: spamd: server successfully spawned child process, pid 62226 Mar 3 11:34:30 server spamd[1460]: prefork: child states: II Mar 3 11:34:35 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<62247>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:34:38 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:48018 to port 783, fd 6 Mar 3 11:34:38 server spamd[35473]: spamd: setuid to as240622a succeeded Mar 3 11:34:38 server spamd[35473]: spamd: checking message <1854bf1ede581403ae786b424a68b6f2@mlsend.com> for as240622a:1017 Mar 3 11:34:39 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:34:39 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:34:39 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:34:39 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:34:39 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:34:39 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:34:39 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:34:39 server spamd[35473]: spamd: clean message (1.9/5.0) for as240622a:1017 in 0.7 seconds, 117085 bytes. Mar 3 11:34:39 server spamd[35473]: spamd: result: . 1 - BAYES_50,DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_COUK,KAM_FROM_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,MIME_HTML_MOSTLY,PCCC_HDR_MARKETINGBL,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,UNPARSEABLE_RELAY,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.7,size=117085,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=48018,mid=<1854bf1ede581403ae786b424a68b6f2@mlsend.com>,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:34:39 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:34:39 server spamd[1460]: prefork: child states: II Mar 3 11:34:39 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<61853>: msgid=<1854bf1ede581403ae786b424a68b6f2@mlsend.com>: saved mail to INBOX Mar 3 11:34:39 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:34:50 server dovecot[55220]: imap(info@thebedstorekendal.co.uk)<62295>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:34:50 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=62297, TLS, session= Mar 3 11:34:50 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=62298, TLS, session= Mar 3 11:34:50 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=62299, TLS, session= Mar 3 11:34:54 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:59950 to port 783, fd 6 Mar 3 11:34:54 server spamd[35473]: spamd: setuid to fb20211118a succeeded Mar 3 11:34:54 server spamd[35473]: spamd: checking message for fb20211118a:1007 Mar 3 11:34:54 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:34:54 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:34:55 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:34:55 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:34:55 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:34:55 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:34:55 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:34:55 server spamd[35473]: spamd: clean message (0.8/8.0) for fb20211118a:1007 in 0.8 seconds, 48744 bytes. Mar 3 11:34:55 server spamd[35473]: spamd: result: . 0 - BAYES_50,HTML_MESSAGE,KAM_DMARC_STATUS,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.8,size=48744,user=fb20211118a,uid=1007,required_score=8.0,rhost=localhost,raddr=127.0.0.1,rport=59950,mid=,bayes=0.579127,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:34:55 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:34:55 server dovecot[55220]: lmtp(cs@southlakeswindows.com)<61853>: msgid=: saved mail to INBOX Mar 3 11:34:55 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:34:55 server spamd[1460]: prefork: child states: II Mar 3 11:34:56 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<62299>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.924 secs, 2 B in + 10+2 B out, state=wait-input) in=200, out=1066, bytes=200/1066 Mar 3 11:34:56 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<62297>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.923 secs, 2 B in + 10+2 B out, state=wait-input) in=714, out=5374, bytes=714/5374 Mar 3 11:34:56 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<62298>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.156 secs, 2 B in + 10+2 B out, state=wait-input) in=284, out=1081, bytes=284/1081 Mar 3 11:34:57 server dovecot[55220]: imap(estellegleave@partners-in-design.co.uk)<62181>: Disconnected: Logged out in=7502, out=152647, bytes=7502/152647 Mar 3 11:35:10 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=62418, TLS, session=<4N97jG4vUe+d58bG> Mar 3 11:35:10 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<62418><4N97jG4vUe+d58bG>: Disconnected: Logged out in=38, out=586, bytes=38/586 Mar 3 11:35:10 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=62419, TLS, session= Mar 3 11:35:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=62460, secured, session=<2y8djW4vgNcAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:35:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<62460><2y8djW4vgNcAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:35:32 server dovecot[55220]: imap-login: Disconnected: Connection closed: read(size=509) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=148.252.157.20, lip=172.31.3.195, TLS handshaking: read(size=509) failed: Connection reset by peer, session= Mar 3 11:35:32 server dovecot[55220]: imap-login: Disconnected: Connection closed: read(size=509) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=148.252.157.20, lip=172.31.3.195, TLS handshaking: read(size=509) failed: Connection reset by peer, session= Mar 3 11:35:32 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=62512, TLS, session= Mar 3 11:35:33 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=62513, TLS, session= Mar 3 11:35:33 server dovecot[55220]: imap(steven@southlakeswindows.com)<62191>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 3.971 secs, 2 B in + 10+2 B out, state=wait-input) in=882, out=4668, bytes=882/4668 Mar 3 11:35:33 server dovecot[55220]: imap(info@southlakeswindows.com)<62190>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 3.963 secs, 2 B in + 10+2 B out, state=wait-input) in=1140, out=7025, bytes=1140/7025 Mar 3 11:35:33 server dovecot[55220]: imap(steven@southlakeswindows.com)<62195>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 26.555 secs, 2 B in + 10+2 B out, state=wait-input) in=520, out=2653, bytes=520/2653 Mar 3 11:35:33 server dovecot[55220]: imap(info@southlakeswindows.com)<62202><8XbbiW4va0qU/J0U>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 27.617 secs, 2 B in + 10+2 B out, state=wait-input) in=373, out=1737, bytes=373/1737 Mar 3 11:35:33 server dovecot[55220]: imap(info@southlakeswindows.com)<62200>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 25.598 secs, 2 B in + 10+2 B out, state=wait-input) in=2103, out=2458025, bytes=2103/2458025 Mar 3 11:35:33 server dovecot[55220]: imap(steven@southlakeswindows.com)<62196>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 39.199 secs, 2 B in + 10+2 B out, state=wait-input) in=277, out=1137, bytes=277/1137 Mar 3 11:35:33 server spamd[35473]: spamd: connection from localhost [::1]:39106 to port 783, fd 5 Mar 3 11:35:33 server spamd[1460]: prefork: child states: II Mar 3 11:35:33 server dovecot[55220]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= Mar 3 11:35:33 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:35:33 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=GREETING) Mar 3 11:35:33 server dovecot[55220]: imap-login: Login: user=<__cpanel__service__auth__imap__g8fzvoe_6llcf410>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=62578, secured, session= Mar 3 11:35:33 server dovecot[55220]: imap(__cpanel__service__auth__imap__g8fzvoe_6llcf410)<62578>: Disconnected: Logged out in=11, out=519, bytes=11/519 Mar 3 11:35:54 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=62688, secured, session= Mar 3 11:35:54 server dovecot[55220]: imap(accounts@northbuild.co.uk)<62688>: Disconnected: Logged out in=129, out=1203, bytes=129/1203 Mar 3 11:35:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=62700, secured, session= Mar 3 11:35:55 server dovecot[55220]: imap(accounts@northbuild.co.uk)<62700>: Disconnected: Logged out in=651, out=79155, bytes=651/79155 Mar 3 11:35:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=62701, secured, session= Mar 3 11:35:55 server dovecot[55220]: imap(accounts@northbuild.co.uk)<62701>: Disconnected: Logged out in=185, out=1244, bytes=185/1244 Mar 3 11:36:04 server dovecot[55220]: imap(barbaraproctor@partners-in-design.co.uk)<55740><8FXIM24vLtpcHR/q>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 1498.168 secs, 2 B in + 10+2 B out, state=wait-input) in=2177, out=10492, bytes=2177/10492 Mar 3 11:36:04 server dovecot[55220]: imap(barbaraproctor@partners-in-design.co.uk)<55741>: Disconnected: Connection closed (IDLE running for 0.004 + waiting input for 1498.064 secs, 2 B in + 10+2 B out, state=wait-input) in=1748, out=9853, bytes=1748/9853 Mar 3 11:36:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=62768, TLS, session= Mar 3 11:36:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=62769, TLS, session= Mar 3 11:36:12 server dovecot[55220]: imap(barbaraproctor@partners-in-design.co.uk)<55739><5pfGM24vLdpcHR/q>: Disconnected: Connection closed (IDLE running for 0.005 + waiting input for 1463.038 secs, 2 B in + 10+2 B out, state=wait-input) in=7113, out=19478266, bytes=7113/19478266 Mar 3 11:36:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=62770, TLS, session= Mar 3 11:36:14 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=62774, TLS, session= Mar 3 11:36:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=62797, secured, session= Mar 3 11:36:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<62797>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:36:29 server dovecot[55220]: imap(info@thebedstorekendal.co.uk)<62832>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:36:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=62925, secured, session= Mar 3 11:36:56 server dovecot[55220]: imap(accounts@northbuild.co.uk)<62925>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:36:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=92.40.218.205, lip=172.31.3.195, mpid=62940, TLS, session=<94Likm4v9eZcKNrN> Mar 3 11:36:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=92.40.218.205, lip=172.31.3.195, mpid=62941, TLS, session=<2u3ikm4v9uZcKNrN> Mar 3 11:36:58 server dovecot[55220]: imap(lancashire@hanleycaravans.co.uk)<62941><2u3ikm4v9uZcKNrN>: Disconnected: Logged out in=211, out=3841, bytes=211/3841 Mar 3 11:36:58 server dovecot[55220]: imap(sedbergh@hanleycaravans.co.uk)<62940><94Likm4v9eZcKNrN>: Disconnected: Logged out in=238, out=4195, bytes=238/4195 Mar 3 11:37:01 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:54208 to port 783, fd 6 Mar 3 11:37:01 server spamd[35473]: spamd: setuid to fb20211021 succeeded Mar 3 11:37:01 server spamd[35473]: spamd: checking message <0.0.CD.61C.1DB8C307BFB72EA.0@emx251.instillerhq.com> for fb20211021:1006 Mar 3 11:37:01 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:37:01 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:37:02 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:37:02 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:37:02 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:37:02 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:37:02 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:37:02 server spamd[35473]: spamd: clean message (-0.2/5.0) for fb20211021:1006 in 1.4 seconds, 13330 bytes. Mar 3 11:37:02 server spamd[35473]: spamd: result: . 0 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=1.4,size=13330,user=fb20211021,uid=1006,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=54208,mid=<0.0.CD.61C.1DB8C307BFB72EA.0@emx251.instillerhq.com>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:37:02 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:37:02 server spamd[1460]: prefork: child states: II Mar 3 11:37:02 server dovecot[55220]: lmtp(enquiries@localtakeaways.co.uk)<61853>: msgid=<0.0.CD.61C.1DB8C307BFB72EA.0@emx251.instillerhq.com>: saved mail to INBOX Mar 3 11:37:02 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:37:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.26.113, lip=172.31.3.195, mpid=63008, TLS, session=<14HYk24vNdcfYBpx> Mar 3 11:37:14 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=63012, TLS, session=<+z7ik24v8us+6Den> Mar 3 11:37:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=63035, secured, session= Mar 3 11:37:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<63035>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:37:25 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=63060, secured, session= Mar 3 11:37:26 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<63060>: Disconnected: Logged out in=82, out=929, bytes=82/929 Mar 3 11:37:26 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=63075, secured, session=<43WdlG4vhugAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:37:26 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<63075><43WdlG4vhugAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=129, out=971, bytes=129/971 Mar 3 11:37:26 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=63084, secured, session=<9sejlG4vlOgAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:37:26 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<63084><9sejlG4vlOgAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=362, out=1392, bytes=362/1392 Mar 3 11:37:26 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=63085, secured, session= Mar 3 11:37:26 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<63085>: Disconnected: Logged out in=464, out=36574, bytes=464/36574 Mar 3 11:37:38 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:37:38 server dovecot[55220]: lmtp(info@southlakeswindows.com)<61853><6FzcBoKUxWed8QAAm+Yclw>: msgid=<066B07F1-179D-49F7-AB46-5944A4AFAE41@btinternet.com>: saved mail to INBOX Mar 3 11:37:38 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:37:42 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=63143, TLS, session= Mar 3 11:37:42 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<63143>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 11:37:45 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:41866 to port 783, fd 6 Mar 3 11:37:45 server spamd[35473]: spamd: setuid to fbb28102022a succeeded Mar 3 11:37:45 server spamd[35473]: spamd: checking message <202503031137.90149640733@smtp-relay.mailin.fr> for fbb28102022a:1022 Mar 3 11:37:45 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:37:45 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:37:45 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:37:45 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:37:45 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:37:45 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:37:45 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:37:45 server spamd[35473]: spamd: clean message (3.0/5.0) for fbb28102022a:1022 in 0.6 seconds, 13654 bytes. Mar 3 11:37:45 server spamd[35473]: spamd: result: . 2 - BAYES_50,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_IMAGE_RATIO_04,HTML_MESSAGE,KAM_COUK,KAM_FROM_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,KAM_REALLYHUGEIMGSRC,LOTS_OF_MONEY,MIME_HTML_ONLY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,SUBJ_ALL_CAPS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=13654,user=fbb28102022a,uid=1022,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=41866,mid=<202503031137.90149640733@smtp-relay.mailin.fr>,bayes=0.499989,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:37:45 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:37:45 server spamd[1460]: prefork: child states: II Mar 3 11:37:45 server dovecot[55220]: lmtp(blackadder@hanleycaravans.co.uk)<61853><+M8VLImUxWed8QAAm+Yclw>: msgid=<202503031137.90149640733@smtp-relay.mailin.fr>: saved mail to INBOX Mar 3 11:37:45 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:37:48 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<63168><+z7ik24v8us+6Den>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:37:55 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<62419>: Disconnected: Connection closed (UID SEARCH finished 165.005 secs ago) in=417, out=369697, bytes=417/369697 Mar 3 11:37:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=63192, TLS, session= Mar 3 11:37:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=63194, secured, session= Mar 3 11:37:56 server dovecot[55220]: imap(accounts@northbuild.co.uk)<63194>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:38:02 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<63192>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.478 secs, 2 B in + 10+2 B out, state=wait-input) in=293, out=10667, bytes=293/10667 Mar 3 11:38:18 server dovecot[55220]: imap(info@southlakeswindows.com)<62512>: Disconnected: Connection closed (IDLE running for 0.003 + waiting input for 35.795 secs, 0.001 in locks, 2 B in + 10+2 B out, state=wait-input) in=1780, out=1861399, bytes=1780/1861399 Mar 3 11:38:18 server dovecot[55220]: imap(info@southlakeswindows.com)<62768>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 83.358 secs, 2 B in + 10+2 B out, state=wait-input) in=401, out=1759, bytes=401/1759 Mar 3 11:38:18 server dovecot[55220]: imap(info@southlakeswindows.com)<62774>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 83.559 secs, 2 B in + 10+2 B out, state=wait-input) in=279, out=1141, bytes=279/1141 Mar 3 11:38:18 server dovecot[55220]: imap(steven@southlakeswindows.com)<62769>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 84.310 secs, 2 B in + 10+2 B out, state=wait-input) in=368, out=1573, bytes=368/1573 Mar 3 11:38:18 server dovecot[55220]: imap(steven@southlakeswindows.com)<62770>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 84.479 secs, 2 B in + 10+2 B out, state=wait-input) in=277, out=1120, bytes=277/1120 Mar 3 11:38:18 server dovecot[55220]: imap(steven@southlakeswindows.com)<62513>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 71.677 secs, 2 B in + 10+2 B out, state=wait-input) in=882, out=3890, bytes=882/3890 Mar 3 11:38:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=63286, secured, session= Mar 3 11:38:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<63286>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:38:42 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=63364, TLS, session=<924kmW4vgt7Ve4dK> Mar 3 11:38:42 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<63364><924kmW4vgt7Ve4dK>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 11:38:47 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:54400 to port 783, fd 6 Mar 3 11:38:47 server spamd[35473]: spamd: setuid to fba20240816a succeeded Mar 3 11:38:47 server spamd[35473]: spamd: checking message for fba20240816a:1044 Mar 3 11:38:47 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:38:47 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:38:48 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:38:48 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:38:48 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:38:48 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:38:48 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:38:48 server spamd[35473]: spamd: clean message (-0.8/5.0) for fba20240816a:1044 in 0.7 seconds, 21626 bytes. Mar 3 11:38:48 server spamd[35473]: spamd: result: . 0 - ARC_SIGNED,ARC_VALID,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FROM_GOV_DKIM_AU,HTML_MESSAGE,HTTP_ESCAPED_HOST,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.7,size=21626,user=fba20240816a,uid=1044,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=54400,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:38:48 server dovecot[55220]: lmtp(61853): Connect from local Mar 3 11:38:48 server dovecot[55220]: lmtp(simon@lignumdesigns.co.uk)<61853><2DofFMiUxWed8QAAm+Yclw>: msgid=: saved mail to INBOX Mar 3 11:38:48 server dovecot[55220]: lmtp(61853): Disconnect from local: Logged out (state=READY) Mar 3 11:38:48 server spamd[1460]: prefork: child states: II Mar 3 11:38:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=63412, secured, session= Mar 3 11:38:56 server dovecot[55220]: imap(accounts@northbuild.co.uk)<63412>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:39:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=63526, secured, session= Mar 3 11:39:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<63526>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:39:32 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=63573, TLS, session= Mar 3 11:39:32 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<63573>: Disconnected: Connection closed (LIST finished 0.156 secs ago) in=56, out=1936, bytes=56/1936 Mar 3 11:39:33 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=63574, TLS, session= Mar 3 11:39:33 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<63574>: Disconnected: Connection closed (UID SEARCH finished 0.054 secs ago) in=81, out=1433, bytes=81/1433 Mar 3 11:39:33 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=63578, TLS, session= Mar 3 11:39:34 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<55358><8S7sMG4vlMBawMu0>: Disconnected: Inactivity - no input for 1801 secs in=23, out=550, bytes=23/550 Mar 3 11:39:34 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<63578>: Disconnected: Connection closed (UID FETCH finished 0.031 secs ago) in=182, out=1851, bytes=182/1851 Mar 3 11:39:47 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=164.39.147.14, lip=172.31.3.195, mpid=63627, TLS, session=<8rEInW4v68CkJ5MO> Mar 3 11:39:48 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=63628, TLS, session= Mar 3 11:39:48 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<63628>: Disconnected: Logged out top=0/0, retr=3/283459, del=3/1490, size=1579367215, bytes=81/340331 Mar 3 11:39:54 server dovecot[55220]: imap(enquiries@ryedalegaragedoors.co.uk)<63627><8rEInW4v68CkJ5MO>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.190 secs, 2 B in + 10+2 B out, state=wait-input) in=288, out=2419, bytes=288/2419 Mar 3 11:39:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=63668, secured, session= Mar 3 11:39:56 server dovecot[55220]: imap(accounts@northbuild.co.uk)<63668>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:40:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=63785, secured, session= Mar 3 11:40:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<63785>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:40:22 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=63805, TLS, session= Mar 3 11:40:23 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=63811, TLS, session=<9YMon24vHOw+6Den> Mar 3 11:40:54 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<63915><9YMon24vHOw+6Den>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:40:54 server dovecot[55220]: imap(hello@coffinandurnstore.co.uk)<63929>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:40:54 server spamd[35473]: spamd: connection from localhost [::1]:42320 to port 783, fd 5 Mar 3 11:40:54 server spamd[1460]: prefork: child states: II Mar 3 11:40:54 server dovecot[55220]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= Mar 3 11:40:55 server dovecot[55220]: lmtp(63972): Connect from local Mar 3 11:40:55 server dovecot[55220]: lmtp(63972): Disconnect from local: Logged out (state=GREETING) Mar 3 11:40:55 server dovecot[55220]: imap-login: Login: user=<__cpanel__service__auth__imap__g8fzvoe_6llcf410>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=63983, secured, session=<3x4OoW4vppV/AAAB> Mar 3 11:40:55 server dovecot[55220]: imap(__cpanel__service__auth__imap__g8fzvoe_6llcf410)<63983><3x4OoW4vppV/AAAB>: Disconnected: Logged out in=11, out=519, bytes=11/519 Mar 3 11:41:01 server dovecot[55220]: imap(info@communitysportsarenas.co.uk)<64052>: Disconnected: Logged out in=15, out=135, bytes=15/135 Mar 3 11:41:02 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.97.154.117, lip=172.31.3.196, mpid=64076, TLS, session= Mar 3 11:41:10 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=64102, TLS, session= Mar 3 11:41:10 server dovecot[55220]: imap(info@mwaccess.co.uk)<64102>: Disconnected: Connection closed (SELECT finished 0.134 secs ago) in=115, out=1128, bytes=115/1128 Mar 3 11:41:11 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:56780 to port 783, fd 6 Mar 3 11:41:11 server spamd[35473]: spamd: setuid to jfa20241216a succeeded Mar 3 11:41:11 server spamd[62226]: spamd: connection from localhost [127.0.0.1]:56792 to port 783, fd 6 Mar 3 11:41:11 server spamd[62226]: spamd: setuid to jfa20241216a succeeded Mar 3 11:41:11 server spamd[35473]: spamd: checking message <74.E6.23970.3C495C76@i-07f2d4481de636190.mta3vrest.sd.prd.sparkpost> for jfa20241216a:1047 Mar 3 11:41:11 server spamd[62226]: spamd: checking message <74.E6.23970.3C495C76@i-07f2d4481de636190.mta3vrest.sd.prd.sparkpost> for jfa20241216a:1047 Mar 3 11:41:11 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:41:11 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:41:11 server spamd[62226]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:41:11 server spamd[62226]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:41:12 server spamd[62226]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:41:12 server spamd[62226]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:41:12 server spamd[62226]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:41:12 server spamd[62226]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:41:12 server spamd[62226]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:41:12 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:41:12 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:41:12 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:41:12 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:41:12 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:41:12 server spamd[62226]: spamd: clean message (2.0/5.0) for jfa20241216a:1047 in 1.7 seconds, 75700 bytes. Mar 3 11:41:12 server spamd[62226]: spamd: result: . 1 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_COUK,KAM_EU,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_SOFTFAIL,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=1.7,size=75700,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=56792,mid=<74.E6.23970.3C495C76@i-07f2d4481de636190.mta3vrest.sd.prd.sparkpost>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:41:12 server spamd[35473]: spamd: clean message (2.0/5.0) for jfa20241216a:1047 in 1.7 seconds, 75700 bytes. Mar 3 11:41:12 server spamd[35473]: spamd: result: . 1 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_COUK,KAM_EU,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_SOFTFAIL,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=1.7,size=75700,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=56780,mid=<74.E6.23970.3C495C76@i-07f2d4481de636190.mta3vrest.sd.prd.sparkpost>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:41:13 server spamd[1460]: prefork: child states: BI Mar 3 11:41:13 server dovecot[55220]: lmtp(63972): Connect from local Mar 3 11:41:13 server spamd[1460]: prefork: child states: II Mar 3 11:41:13 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<63972>: msgid=<74.E6.23970.3C495C76@i-07f2d4481de636190.mta3vrest.sd.prd.sparkpost>: saved mail to INBOX Mar 3 11:41:13 server dovecot[55220]: lmtp(63972): Disconnect from local: Logged out (state=READY) Mar 3 11:41:13 server dovecot[55220]: lmtp(63972): Connect from local Mar 3 11:41:13 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<63972>: msgid=<74.E6.23970.3C495C76@i-07f2d4481de636190.mta3vrest.sd.prd.sparkpost>: saved mail to INBOX Mar 3 11:41:13 server dovecot[55220]: lmtp(63972): Disconnect from local: Logged out (state=READY) Mar 3 11:41:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=64155, secured, session= Mar 3 11:41:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<64155>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:41:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=64160, secured, session= Mar 3 11:41:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<64160>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:41:47 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=64248, TLS, session= Mar 3 11:41:47 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=64252, TLS, session=<8VEtpG4vcdxawMu0> Mar 3 11:41:53 server dovecot[55220]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=196.251.118.238, lip=172.31.3.195, session= Mar 3 11:42:02 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.94.22.106, lip=172.31.3.196, mpid=64309, TLS, session=<450TpW4vtfofXhZq> Mar 3 11:42:03 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.94.22.106, lip=172.31.3.196, mpid=64313, TLS, session= Mar 3 11:42:10 server dovecot[55220]: imap(info@thebedstorekendal.co.uk)<64335>: Disconnected: Logged out in=15, out=136, bytes=15/136 Mar 3 11:42:10 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.98.216.213, lip=172.31.3.195, mpid=64336, TLS, session= Mar 3 11:42:11 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:38664 to port 783, fd 6 Mar 3 11:42:11 server spamd[35473]: spamd: setuid to fbb28102022a succeeded Mar 3 11:42:11 server spamd[35473]: spamd: checking message for fbb28102022a:1022 Mar 3 11:42:11 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:42:11 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:42:12 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:42:12 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:42:12 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:42:12 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:42:12 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:42:12 server spamd[35473]: spamd: clean message (0.9/5.0) for fbb28102022a:1022 in 0.6 seconds, 109134 bytes. Mar 3 11:42:12 server spamd[35473]: spamd: result: . 0 - ARC_SIGNED,ARC_VALID,BAYES_50,HTML_FONT_LOW_CONTRAST,HTML_IMAGE_RATIO_08,HTML_MESSAGE,KAM_COUK,KAM_DMARC_STATUS,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=109134,user=fbb28102022a,uid=1022,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=38664,mid=,bayes=0.499983,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:42:12 server dovecot[55220]: lmtp(63972): Connect from local Mar 3 11:42:12 server spamd[1460]: prefork: child states: II Mar 3 11:42:12 server dovecot[55220]: lmtp(lancashire@hanleycaravans.co.uk)<63972>: msgid=: saved mail to INBOX Mar 3 11:42:12 server dovecot[55220]: lmtp(63972): Disconnect from local: Logged out (state=READY) Mar 3 11:42:13 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=64354, TLS, session= Mar 3 11:42:14 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<64354>: Disconnected: Logged out top=0/0, retr=5/6140477, del=0/1487, size=1579239087, bytes=79/6197139 Mar 3 11:42:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=64374, secured, session= Mar 3 11:42:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<64374>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:42:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=146.198.180.35, lip=172.31.3.195, mpid=64375, TLS, session= Mar 3 11:42:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=64380, secured, session= Mar 3 11:42:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<64380>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:42:20 server dovecot[55220]: imap-hibernate(gus@paragoninterior.co.uk)<55502>: Disconnected: Connection closed in=31, out=118, bytes=31/118 Mar 3 11:42:22 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<64252><8VEtpG4vcdxawMu0>: Disconnected: Logged out in=311, out=1749, bytes=311/1749 Mar 3 11:42:22 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<64248>: Disconnected: Logged out in=311, out=1679, bytes=311/1679 Mar 3 11:42:36 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64439, TLS, session= Mar 3 11:42:36 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64440, TLS, session=<87UTp24vC8DZJNVG> Mar 3 11:42:36 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64441, TLS, session= Mar 3 11:42:45 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64471, TLS, session= Mar 3 11:42:46 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64472, TLS, session= Mar 3 11:42:47 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64480, TLS, session= Mar 3 11:42:47 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64481, TLS, session= Mar 3 11:42:49 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=31.94.74.2, lip=172.31.3.195, mpid=64489, session=<6w3Xp24vCIQfXkoC> Mar 3 11:42:49 server dovecot[55220]: pop3(chris@rosecountyinteriors.co.uk)<64489><6w3Xp24vCIQfXkoC>: Disconnected: Logged out top=0/0, retr=0/0, del=0/349, size=53806501, bytes=22/80 Mar 3 11:42:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64512, TLS, session= Mar 3 11:42:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64513, TLS, session= Mar 3 11:42:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64514, TLS, session= Mar 3 11:43:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.195, mpid=64542, TLS, session= Mar 3 11:43:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.195, mpid=64543, TLS, session= Mar 3 11:43:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.195, mpid=64544, TLS, session= Mar 3 11:43:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.195, mpid=64545, TLS, session= Mar 3 11:43:01 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<64471>: Disconnected: Logged out in=1210, out=29701, bytes=1210/29701 Mar 3 11:43:01 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<64472>: Disconnected: Logged out in=293, out=1338, bytes=293/1338 Mar 3 11:43:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64546, TLS, session= Mar 3 11:43:02 server dovecot[55220]: imap(annee@scsplumbingandheating.co.uk)<64481>: Disconnected: Logged out in=406, out=35836, bytes=406/35836 Mar 3 11:43:02 server dovecot[55220]: imap(annee@scsplumbingandheating.co.uk)<64546>: Disconnected: Logged out in=32, out=577, bytes=32/577 Mar 3 11:43:02 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<64514>: Disconnected: Logged out in=227, out=279757, bytes=227/279757 Mar 3 11:43:02 server dovecot[55220]: imap(info@communitysportsarenas.co.uk)<64375>: Disconnected: Logged out in=9555, out=107021, bytes=9555/107021 Mar 3 11:43:04 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=146.198.180.35, lip=172.31.3.195, mpid=64557, TLS, session= Mar 3 11:43:04 server dovecot[55220]: imap(info@communitysportsarenas.co.uk)<64557>: Disconnected: Logged out in=2757, out=1551, bytes=2757/1551 Mar 3 11:43:05 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64562, TLS, session= Mar 3 11:43:05 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64563, TLS, session= Mar 3 11:43:06 server dovecot[55220]: imap(annee@scsplumbingandheating.co.uk)<64563>: Disconnected: Logged out in=32, out=577, bytes=32/577 Mar 3 11:43:06 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<64513>: Disconnected: Logged out in=596, out=782977, bytes=596/782977 Mar 3 11:43:07 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=64570, TLS, session=<9G3tqG4vQMDZJNVG> Mar 3 11:43:12 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<64512>: Disconnected: Logged out in=1587, out=1814852, bytes=1587/1814852 Mar 3 11:43:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=64608, secured, session= Mar 3 11:43:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<64608>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:43:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=64616, secured, session= Mar 3 11:43:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<64616>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:43:26 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=64642, TLS, session= Mar 3 11:43:26 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=64643, TLS, session= Mar 3 11:43:27 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=64647, TLS, session=<3Pwhqm4vNvvVe4dK> Mar 3 11:43:32 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=146.198.180.35, lip=172.31.3.195, mpid=64664, TLS, session= Mar 3 11:43:33 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<64642>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.271 secs, 2 B in + 10+2 B out, state=wait-input) in=579, out=45017, bytes=579/45017 Mar 3 11:43:33 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<64643>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.193 secs, 2 B in + 10+2 B out, state=wait-input) in=380, out=1957, bytes=380/1957 Mar 3 11:43:33 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<64647><3Pwhqm4vNvvVe4dK>: Disconnected: Connection closed (COMPRESS finished 6.247 secs ago) in=155, out=567, bytes=155/567 Mar 3 11:43:36 server dovecot[55220]: imap(lee@precisionheatplumbing.co.uk)<60986>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 68.497 secs, 2 B in + 10+2 B out, state=wait-input) in=2006, out=725700, bytes=2006/725700 Mar 3 11:43:36 server dovecot[55220]: imap(lee@precisionheatplumbing.co.uk)<64309><450TpW4vtfofXhZq>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 70.165 secs, 2 B in + 10+2 B out, state=wait-input) in=3934, out=16874, bytes=3934/16874 Mar 3 11:43:36 server dovecot[55220]: imap(lee@precisionheatplumbing.co.uk)<64313>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 68.283 secs, 2 B in + 10+2 B out, state=wait-input) in=494, out=1697, bytes=494/1697 Mar 3 11:43:41 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=64693, TLS, session= Mar 3 11:43:41 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=64695, TLS, session= Mar 3 11:43:41 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=64698, TLS, session= Mar 3 11:43:41 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=64699, TLS, session=<04D6qm4v2N8fYLmG> Mar 3 11:43:41 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=64700, TLS, session=<4Kb6qm4v198fYLmG> Mar 3 11:43:41 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=64701, TLS, session=<9JT6qm4v298fYLmG> Mar 3 11:43:44 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=64713, TLS, session=<+ZMiq24vkN7Ve4dK> Mar 3 11:43:44 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<64713><+ZMiq24vkN7Ve4dK>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 11:43:48 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=64727, TLS, session= Mar 3 11:43:48 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=64728, TLS, session= Mar 3 11:44:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=64778, TLS, session= Mar 3 11:44:01 server dovecot[55220]: imap(accounts@hanleycaravans.co.uk)<64782>: Disconnected: Logged out in=15, out=136, bytes=15/136 Mar 3 11:44:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=64783, TLS, session= Mar 3 11:44:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.196, mpid=64785, TLS, session= Mar 3 11:44:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=64786, TLS, session= Mar 3 11:44:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=64787, TLS, session=<9SUorG4v/Mwzm5mb> Mar 3 11:44:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.97.197.5, lip=172.31.3.195, mpid=64788, TLS, session= Mar 3 11:44:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=64789, TLS, session= Mar 3 11:44:13 server dovecot[55220]: imap(luke@rmg.org.uk)<64825>: Disconnected: Logged out in=15, out=133, bytes=15/133 Mar 3 11:44:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.98.198.45, lip=172.31.3.195, mpid=64830, TLS, session=<+t7erG4vP580YsYt> Mar 3 11:44:15 server dovecot[55220]: imap(info@paragoninterior.co.uk)<64698>: Disconnected: Connection closed (LIST finished 31.148 secs ago) in=218, out=1532, bytes=218/1532 Mar 3 11:44:15 server dovecot[55220]: imap(gus@paragoninterior.co.uk)<64700><4Kb6qm4v198fYLmG>: Disconnected: Connection closed (LIST finished 31.148 secs ago) in=199, out=1484, bytes=199/1484 Mar 3 11:44:16 server dovecot[55220]: imap(lancashire@hanleycaravans.co.uk)<64824>: Disconnected: Logged out in=15, out=135, bytes=15/135 Mar 3 11:44:16 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.98.199.29, lip=172.31.3.195, mpid=64842, TLS, session=<3X4IrW4v6BE0Yscd> Mar 3 11:44:18 server dovecot[55220]: imap(info@communitysportsarenas.co.uk)<64664>: Disconnected: Logged out in=18920, out=15671, bytes=18920/15671 Mar 3 11:44:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=64860, secured, session=<2fYzrW4vWtYAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:44:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<64860><2fYzrW4vWtYAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:44:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=64868, secured, session= Mar 3 11:44:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<64868>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:44:31 server dovecot[55220]: imap(info@paragoninterior.co.uk)<64693>: Disconnected: Connection closed (STATUS finished 32.108 secs ago) in=307, out=2072, bytes=307/2072 Mar 3 11:44:31 server dovecot[55220]: imap(info@paragoninterior.co.uk)<64699><04D6qm4v2N8fYLmG>: Disconnected: Connection closed (UID FETCH finished 32.075 secs ago) in=858, out=9952, bytes=858/9952 Mar 3 11:44:33 server dovecot[55220]: imap(domains@domain-authority.co.uk)<64916>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:44:33 server dovecot[55220]: imap(hello@olmate.co.nz)<64917>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:44:33 server dovecot[55220]: imap(development@domain-authority.co.uk)<64915>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:44:42 server dovecot[55220]: imap(faye@becreativemail.co.uk)<64945><9SUorG4v/Mwzm5mb>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:44:42 server dovecot[55220]: imap(faye@domain-authority.co.uk)<64947>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:44:42 server dovecot[55220]: imap(faye@omnom.co.uk)<64946>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:44:48 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=146.198.180.35, lip=172.31.3.195, mpid=64969, TLS, session= Mar 3 11:44:49 server dovecot[55220]: imap(info@communitysportsarenas.co.uk)<64969>: Disconnected: Logged out in=232, out=4010, bytes=232/4010 Mar 3 11:44:56 server dovecot[55220]: imap(gus@paragoninterior.co.uk)<64701><9JT6qm4v298fYLmG>: Disconnected: Connection closed (STATUS finished 31.935 secs ago) in=450, out=2233, bytes=450/2233 Mar 3 11:44:56 server dovecot[55220]: imap(gus@paragoninterior.co.uk)<64695>: Disconnected: Connection closed (UID FETCH finished 31.900 secs ago) in=560, out=10093, bytes=560/10093 Mar 3 11:45:01 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:45:01 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<65045>: msgid=<00a201db8c31$b26dfb80$1749f280$@southcoasttravel.co.uk>: saved mail to INBOX Mar 3 11:45:01 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=READY) Mar 3 11:45:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=65113, secured, session= Mar 3 11:45:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<65113>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:45:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=65122, secured, session= Mar 3 11:45:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<65122>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:45:28 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:37704 to port 783, fd 6 Mar 3 11:45:28 server spamd[35473]: spamd: setuid to fb20241023a succeeded Mar 3 11:45:28 server spamd[35473]: spamd: checking message for fb20241023a:1045 Mar 3 11:45:28 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:45:28 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:45:29 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:45:29 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:45:29 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:45:29 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:45:29 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:45:29 server spamd[35473]: spamd: clean message (4.3/5.0) for fb20241023a:1045 in 0.6 seconds, 49346 bytes. Mar 3 11:45:29 server spamd[35473]: spamd: result: . 4 - BAYES_50,DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,KAM_ZWNS,MIME_QP_LONG_LINE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=49346,user=fb20241023a,uid=1045,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=37704,mid=,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:45:29 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:45:29 server spamd[1460]: prefork: child states: II Mar 3 11:45:29 server dovecot[55220]: lmtp(barbaraproctor@partners-in-design.co.uk)<65045>: msgid=: saved mail to INBOX Mar 3 11:45:29 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=READY) Mar 3 11:45:41 server dovecot[55220]: imap(info@southlakeswindows.com)<62145>: Disconnected: Connection closed (UID FETCH finished 0.128 secs ago) in=939, out=1851170, bytes=939/1851170 Mar 3 11:45:41 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=65212, TLS, session= Mar 3 11:45:42 server dovecot[55220]: imap(steven@southlakeswindows.com)<65212>: Disconnected: Connection closed (UID FETCH finished 0.309 secs ago) in=745, out=61792, bytes=745/61792 Mar 3 11:45:42 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=65216, TLS, session= Mar 3 11:45:45 server dovecot[55220]: imap(office@penninghame.com)<65226><7VG3Nm4vkGg0YdGF>: Disconnected: Logged out in=15, out=136, bytes=15/136 Mar 3 11:45:45 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.97.209.133, lip=172.31.3.196, mpid=65227, TLS, session= Mar 3 11:46:01 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<65446><+CzAhm4vxus+6Den>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:46:02 server spamd[35473]: spamd: connection from localhost [::1]:35322 to port 783, fd 5 Mar 3 11:46:02 server spamd[1460]: prefork: child states: II Mar 3 11:46:02 server dovecot[55220]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= Mar 3 11:46:02 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:46:02 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=GREETING) Mar 3 11:46:02 server dovecot[55220]: imap-login: Login: user=<__cpanel__service__auth__imap__g8fzvoe_6llcf410>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=65512, secured, session=<9sxjs24vGNN/AAAB> Mar 3 11:46:02 server dovecot[55220]: imap(__cpanel__service__auth__imap__g8fzvoe_6llcf410)<65512><9sxjs24vGNN/AAAB>: Disconnected: Logged out in=11, out=519, bytes=11/519 Mar 3 11:46:03 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:42794 to port 783, fd 6 Mar 3 11:46:03 server spamd[35473]: spamd: setuid to fb20241023a succeeded Mar 3 11:46:03 server spamd[35473]: spamd: checking message <20250303034521.A47B30C5ACF52472@cpf-solutionconsult.com> for fb20241023a:1045 Mar 3 11:46:03 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:46:03 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:46:04 server dovecot[55220]: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=149.50.169.252, lip=172.31.3.195, session= Mar 3 11:46:04 server dovecot[55220]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=149.50.169.252, lip=172.31.3.195, session= Mar 3 11:46:04 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:46:04 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:46:04 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:46:04 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:46:04 server spamd[35473]: spamd: identified spam (5.9/5.0) for fb20241023a:1045 in 1.1 seconds, 8637 bytes. Mar 3 11:46:04 server spamd[35473]: spamd: result: Y 5 - BAYES_50,HTML_MESSAGE,KAM_DMARC_NONE,KAM_DMARC_STATUS,MIME_HTML_ONLY,NEW_PRODUCTS,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,RDNS_NONE,SPF_SOFTFAIL,TO_NO_BRKTS_NORDNS_HTML scantime=1.1,size=8637,user=fb20241023a,uid=1045,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=42794,mid=<20250303034521.A47B30C5ACF52472@cpf-solutionconsult.com>,bayes=0.546756,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:46:04 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:46:04 server spamd[1460]: prefork: child states: II Mar 3 11:46:04 server dovecot[55220]: lmtp(barbaraproctor@partners-in-design.co.uk)<65045>: msgid=<20250303034521.A47B30C5ACF52472@cpf-solutionconsult.com>: saved mail to INBOX.spam Mar 3 11:46:04 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=READY) Mar 3 11:46:06 server dovecot[55220]: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=149.50.169.252, lip=172.31.3.195, TLS: Connection closed, session= Mar 3 11:46:12 server dovecot[55220]: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=149.50.169.252, lip=172.31.3.195, TLS: Connection closed, session= Mar 3 11:46:18 server dovecot[55220]: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=149.50.169.252, lip=172.31.3.195, session= Mar 3 11:46:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.30.111, lip=172.31.3.195, mpid=65614, TLS, session= Mar 3 11:46:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.30.111, lip=172.31.3.196, mpid=65617, TLS, session= Mar 3 11:46:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.30.111, lip=172.31.3.196, mpid=65619, TLS, session=<0MtPtG4vL/heCx5v> Mar 3 11:46:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.30.111, lip=172.31.3.195, mpid=65620, TLS, session=<67hPtG4vLPheCx5v> Mar 3 11:46:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.30.111, lip=172.31.3.195, mpid=65621, TLS, session= Mar 3 11:46:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.30.111, lip=172.31.3.195, mpid=65622, TLS, session= Mar 3 11:46:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.30.111, lip=172.31.3.196, mpid=65623, TLS, session= Mar 3 11:46:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.30.111, lip=172.31.3.196, mpid=65624, TLS, session= Mar 3 11:46:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.30.111, lip=172.31.3.195, mpid=65626, TLS, session= Mar 3 11:46:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.30.111, lip=172.31.3.196, mpid=65627, TLS, session= Mar 3 11:46:18 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.30.111, lip=172.31.3.196, mpid=65628, TLS, session= Mar 3 11:46:18 server dovecot[55220]: imap(graham@ge-photography.co.uk)<65622>: Disconnected: Logged out in=145, out=1664, bytes=145/1664 Mar 3 11:46:18 server dovecot[55220]: imap(graham@penninghame.com)<65623>: Disconnected: Logged out in=145, out=1453, bytes=145/1453 Mar 3 11:46:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=65630, secured, session= Mar 3 11:46:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<65630>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:46:19 server dovecot[55220]: imap(graham@penninghame.com)<65584>: Disconnected: Logged out in=36, out=257, bytes=36/257 Mar 3 11:46:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.98.173.93, lip=172.31.3.195, mpid=65634, TLS, session= Mar 3 11:46:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=65638, TLS, session= Mar 3 11:46:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=65639, TLS, session= Mar 3 11:46:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=65640, TLS, session= Mar 3 11:46:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=65641, TLS, session= Mar 3 11:46:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=65642, TLS, session=<0EJxtG4vAcIfYM3j> Mar 3 11:46:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=65643, TLS, session= Mar 3 11:46:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=65645, secured, session= Mar 3 11:46:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<65645>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:46:22 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=65657, TLS, session= Mar 3 11:46:22 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=65658, TLS, session= Mar 3 11:46:22 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=65659, TLS, session= Mar 3 11:46:33 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:36290 to port 783, fd 6 Mar 3 11:46:33 server spamd[35473]: spamd: setuid to jfa20241216a succeeded Mar 3 11:46:33 server spamd[35473]: spamd: checking message <010201955bd3a6c9-8ef7623b-e7ee-4f2a-87c0-20ba9608530b-000000@eu-west-1.amazonses.com> for jfa20241216a:1047 Mar 3 11:46:33 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=65692, TLS, session= Mar 3 11:46:33 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:46:33 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:46:33 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=65697, TLS, session= Mar 3 11:46:33 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=65698, TLS, session= Mar 3 11:46:33 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:46:33 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:46:33 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:46:33 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:46:33 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:46:33 server spamd[35473]: spamd: clean message (3.0/5.0) for jfa20241216a:1047 in 0.8 seconds, 135253 bytes. Mar 3 11:46:33 server spamd[35473]: spamd: result: . 2 - CPANEL_LOTS_OF_EMPTY_LINE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_EU,KAM_INFOUSMEBIZ,KAM_MARKETINGBL_PCCC,LOTS_OF_MONEY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,T_OBFU_PDF_ATTACH,T_REMOTE_IMAGE,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.8,size=135253,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=36290,mid=<010201955bd3a6c9-8ef7623b-e7ee-4f2a-87c0-20ba9608530b-000000@eu-west-1.amazonses.com>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:46:33 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:46:34 server spamd[1460]: prefork: child states: II Mar 3 11:46:34 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<65045>: msgid=<010201955bd3a6c9-8ef7623b-e7ee-4f2a-87c0-20ba9608530b-000000@eu-west-1.amazonses.com>: saved mail to INBOX Mar 3 11:46:34 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=READY) Mar 3 11:46:35 server dovecot[55220]: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 6 secs): user=<>, rip=87.236.176.176, lip=172.31.3.196, TLS, session=<7BpUtW4v5ZtX7LCw> Mar 3 11:46:41 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<65692>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.482 secs, 2 B in + 10+2 B out, state=wait-input) in=509, out=37991, bytes=509/37991 Mar 3 11:46:41 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<65697>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 6.066 secs, 2 B in + 10+2 B out, state=wait-input) in=405, out=2201, bytes=405/2201 Mar 3 11:46:41 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<65698>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.917 secs, 2 B in + 10+2 B out, state=wait-input) in=287, out=1092, bytes=287/1092 Mar 3 11:46:41 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<60879>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 718.037 secs, 2 B in + 10+2 B out, state=wait-input) in=278, out=4419, bytes=278/4419 Mar 3 11:46:41 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<60881><+MIGeW4v9MEfYM3j>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 718.036 secs, 2 B in + 10+2 B out, state=wait-input) in=285, out=4852, bytes=285/4852 Mar 3 11:46:41 server dovecot[55220]: imap(info@paragoninterior.co.uk)<60880>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 718.043 secs, 2 B in + 10+2 B out, state=wait-input) in=542, out=10758, bytes=542/10758 Mar 3 11:46:42 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=65733, TLS, session= Mar 3 11:46:53 server dovecot[55220]: imap(info@paragoninterior.co.uk)<65638>: Disconnected: Connection closed (FETCH finished 32.557 secs ago) in=159, out=1475, bytes=159/1475 Mar 3 11:46:53 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<65639>: Disconnected: Connection closed (FETCH finished 32.555 secs ago) in=152, out=1854, bytes=152/1854 Mar 3 11:46:53 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<65643>: Disconnected: Connection closed (SELECT finished 32.549 secs ago) in=139, out=1033, bytes=139/1033 Mar 3 11:46:53 server dovecot[55220]: imap(info@paragoninterior.co.uk)<65640>: Disconnected: Connection closed (FETCH finished 32.545 secs ago) in=154, out=2245, bytes=154/2245 Mar 3 11:46:53 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<65642><0EJxtG4vAcIfYM3j>: Disconnected: Connection closed (FETCH finished 32.547 secs ago) in=159, out=1316, bytes=159/1316 Mar 3 11:46:53 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<65641>: Disconnected: Connection closed (FETCH finished 32.546 secs ago) in=152, out=1736, bytes=152/1736 Mar 3 11:46:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=65795, TLS, session= Mar 3 11:46:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=65796, TLS, session= Mar 3 11:46:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=65797, TLS, session= Mar 3 11:47:10 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=65841, TLS, session= Mar 3 11:47:10 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=65842, TLS, session= Mar 3 11:47:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=65855, TLS, session= Mar 3 11:47:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=65856, TLS, session= Mar 3 11:47:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=65857, TLS, session= Mar 3 11:47:18 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:37852 to port 783, fd 6 Mar 3 11:47:18 server spamd[35473]: spamd: setuid to fba20241206a succeeded Mar 3 11:47:18 server spamd[35473]: spamd: checking message for fba20241206a:1046 Mar 3 11:47:18 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:47:18 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:47:18 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:47:18 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:47:18 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:47:18 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:47:18 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:47:18 server spamd[35473]: spamd: clean message (0.4/5.0) for fba20241206a:1046 in 0.6 seconds, 17864 bytes. Mar 3 11:47:18 server spamd[35473]: spamd: result: . 0 - DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_IMAGE_RATIO_08,HTML_MESSAGE,KAM_REALLYHUGEIMGSRC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=17864,user=fba20241206a,uid=1046,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=37852,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:47:18 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:47:18 server spamd[1460]: prefork: child states: II Mar 3 11:47:18 server dovecot[55220]: lmtp(gus@paragoninterior.co.uk)<65045><8Nk1MsaWxWcV/gAAm+Yclw>: msgid=: saved mail to INBOX Mar 3 11:47:18 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=READY) Mar 3 11:47:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=65882, secured, session= Mar 3 11:47:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<65882>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:47:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=65890, secured, session= Mar 3 11:47:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<65890>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:47:22 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:44792 to port 783, fd 6 Mar 3 11:47:22 server spamd[35473]: spamd: setuid to fbb20240312a succeeded Mar 3 11:47:22 server spamd[35473]: spamd: checking message <20250303134639.1E14FC9862344916@accountprotection.microsoft.com> for fbb20240312a:1035 Mar 3 11:47:22 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:47:22 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:47:22 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:47:22 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:47:22 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:47:22 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:47:22 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:47:22 server spamd[35473]: spamd: identified spam (14.8/5.0) for fbb20240312a:1035 in 0.6 seconds, 1770 bytes. Mar 3 11:47:22 server spamd[35473]: spamd: result: Y 14 - HTML_MESSAGE,KAM_DMARC_REJECT,KAM_DMARC_STATUS,MIME_HTML_ONLY,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,RDNS_NONE,SPF_FAIL,TO_NO_BRKTS_NORDNS_HTML,URIBL_ABUSE_SURBL,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS,URIBL_PH_SURBL,URI_HEX,VFY_ACCT_NORDNS scantime=0.6,size=1770,user=fbb20240312a,uid=1035,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=44792,mid=<20250303134639.1E14FC9862344916@accountprotection.microsoft.com>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:47:22 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:47:22 server spamd[1460]: prefork: child states: II Mar 3 11:47:22 server dovecot[55220]: lmtp(booking@penninghame.com)<65045>: msgid=<20250303134639.1E14FC9862344916@accountprotection.microsoft.com>: saved mail to INBOX.spam Mar 3 11:47:22 server dovecot[55220]: lmtp(office@penninghame.com)<65045>: msgid=<20250303134639.1E14FC9862344916@accountprotection.microsoft.com>: saved mail to INBOX.spam Mar 3 11:47:22 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=READY) Mar 3 11:47:23 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:44806 to port 783, fd 6 Mar 3 11:47:23 server spamd[35473]: spamd: setuid to fbb28102022a succeeded Mar 3 11:47:23 server spamd[35473]: spamd: checking message for fbb28102022a:1022 Mar 3 11:47:23 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:47:23 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:47:24 server dovecot[55220]: imap(info@hanleycaravans.co.uk)<65913>: Disconnected: Logged out in=15, out=136, bytes=15/136 Mar 3 11:47:24 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:47:24 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:47:24 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:47:24 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:47:24 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:47:24 server spamd[35473]: spamd: clean message (-2.1/5.0) for fbb28102022a:1022 in 0.6 seconds, 15145 bytes. Mar 3 11:47:24 server spamd[35473]: spamd: result: . -2 - BAYES_00,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,T_REMOTE_IMAGE,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=15145,user=fbb28102022a,uid=1022,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=44806,mid=,bayes=0.000000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:47:24 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:47:24 server spamd[1460]: prefork: child states: II Mar 3 11:47:24 server dovecot[55220]: lmtp(accounts@hanleycaravans.co.uk)<65045>: msgid=: saved mail to INBOX Mar 3 11:47:24 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=READY) Mar 3 11:47:24 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.97.236.221, lip=172.31.3.195, mpid=65924, TLS, session= Mar 3 11:47:29 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=65943, TLS, session= Mar 3 11:47:29 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=65944, TLS, session= Mar 3 11:47:31 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=65956, TLS, session= Mar 3 11:47:32 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<65956>: Disconnected: Logged out in=38, out=586, bytes=38/586 Mar 3 11:47:37 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=65972, TLS, session= Mar 3 11:47:37 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<65972>: Disconnected: Logged out in=38, out=586, bytes=38/586 Mar 3 11:47:42 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:54374 to port 783, fd 6 Mar 3 11:47:42 server spamd[35473]: spamd: setuid to fba20241206a succeeded Mar 3 11:47:42 server spamd[35473]: spamd: checking message for fba20241206a:1046 Mar 3 11:47:42 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:47:42 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:47:43 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:47:43 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:47:43 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:47:43 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:47:43 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:47:43 server spamd[35473]: spamd: clean message (0.5/5.0) for fba20241206a:1046 in 0.6 seconds, 31610 bytes. Mar 3 11:47:43 server spamd[35473]: spamd: result: . 0 - DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_IMAGE_RATIO_04,HTML_MESSAGE,HTTPS_HTTP_MISMATCH,KAM_REALLYHUGEIMGSRC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=31610,user=fba20241206a,uid=1046,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=54374,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:47:43 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:47:43 server dovecot[55220]: lmtp(gus@paragoninterior.co.uk)<65045>: msgid=: saved mail to INBOX Mar 3 11:47:43 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=READY) Mar 3 11:47:43 server spamd[1460]: prefork: child states: II Mar 3 11:47:45 server dovecot[55220]: imap(gus@paragoninterior.co.uk)<65855>: Disconnected: Connection closed (LIST finished 31.532 secs ago) in=174, out=1153, bytes=174/1153 Mar 3 11:47:45 server dovecot[55220]: imap(info@paragoninterior.co.uk)<65857>: Disconnected: Connection closed (LIST finished 31.520 secs ago) in=174, out=1113, bytes=174/1113 Mar 3 11:47:45 server dovecot[55220]: imap(info@paragoninterior.co.uk)<65856>: Disconnected: Connection closed (UID FETCH finished 31.474 secs ago) in=210, out=1863, bytes=210/1863 Mar 3 11:47:49 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<65733>: Disconnected: Logged out in=266, out=1182, bytes=266/1182 Mar 3 11:47:54 server dovecot[55220]: imap(gus@paragoninterior.co.uk)<65841>: Disconnected: Connection closed (UID FETCH finished 31.288 secs ago) in=441, out=17833, bytes=441/17833 Mar 3 11:48:02 server dovecot[55220]: imap(gus@paragoninterior.co.uk)<65944>: Disconnected: Connection closed (UID STORE finished 32.933 secs ago) in=188, out=1167, bytes=188/1167 Mar 3 11:48:02 server dovecot[55220]: imap(gus@paragoninterior.co.uk)<65842>: Disconnected: Connection closed (UID SEARCH finished 33.044 secs ago) in=921, out=9732, bytes=921/9732 Mar 3 11:48:02 server dovecot[55220]: imap(gus@paragoninterior.co.uk)<65943>: Disconnected: Connection closed (UID FETCH finished 32.931 secs ago) in=231, out=1274, bytes=231/1274 Mar 3 11:48:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66121, secured, session= Mar 3 11:48:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66121>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:48:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66131, secured, session= Mar 3 11:48:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66131>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:48:21 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=66142, TLS, session= Mar 3 11:48:21 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=66143, TLS, session=<5lKsu24v7N8fYLmG> Mar 3 11:48:24 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=66153, TLS, session= Mar 3 11:48:24 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=66155, TLS, session= Mar 3 11:48:24 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=66156, TLS, session= Mar 3 11:48:25 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.196, mpid=66160, TLS, session= Mar 3 11:48:36 server dovecot[55220]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=196.251.67.36, lip=172.31.3.195, session= Mar 3 11:48:36 server dovecot[55220]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=196.251.118.237, lip=172.31.3.195, session= Mar 3 11:48:37 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<65795>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 93.900 secs, 2 B in + 10+2 B out, state=wait-input) in=813, out=14470, bytes=813/14470 Mar 3 11:48:37 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<65796>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 93.704 secs, 2 B in + 10+2 B out, state=wait-input) in=730, out=4138, bytes=730/4138 Mar 3 11:48:37 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<65797>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 33.198 secs, 2 B in + 10+2 B out, state=wait-input) in=557, out=30232, bytes=557/30232 Mar 3 11:48:44 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=66220, TLS, session=<9mEEvW4vm97Ve4dK> Mar 3 11:48:44 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<66220><9mEEvW4vm97Ve4dK>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 11:48:51 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:42658 to port 783, fd 6 Mar 3 11:48:51 server spamd[35473]: spamd: setuid to fbb28102022a succeeded Mar 3 11:48:51 server spamd[35473]: spamd: checking message for fbb28102022a:1022 Mar 3 11:48:51 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:48:51 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:48:52 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:48:52 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:48:52 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:48:52 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:48:52 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:48:52 server spamd[35473]: spamd: clean message (-2.0/5.0) for fbb28102022a:1022 in 0.6 seconds, 7892 bytes. Mar 3 11:48:52 server spamd[35473]: spamd: result: . -1 - BAYES_00,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,TRACKER_ID,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=7892,user=fbb28102022a,uid=1022,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=42658,mid=,bayes=0.000000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:48:52 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:48:52 server dovecot[55220]: lmtp(accounts@hanleycaravans.co.uk)<65045><6KMmESSXxWcV/gAAm+Yclw>: msgid=: saved mail to INBOX Mar 3 11:48:52 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=READY) Mar 3 11:48:54 server dovecot[55220]: imap(gus@paragoninterior.co.uk)<66142>: Disconnected: Connection closed (UID FETCH finished 33.026 secs ago) in=592, out=5568, bytes=592/5568 Mar 3 11:48:56 server dovecot[55220]: imap(gus@paragoninterior.co.uk)<66143><5lKsu24v7N8fYLmG>: Disconnected: Connection closed (UID FETCH finished 31.108 secs ago) in=343, out=31684, bytes=343/31684 Mar 3 11:48:57 server dovecot[55220]: imap(gus@paragoninterior.co.uk)<66156>: Disconnected: Connection closed (LIST finished 32.095 secs ago) in=174, out=1153, bytes=174/1153 Mar 3 11:48:57 server dovecot[55220]: imap(info@paragoninterior.co.uk)<66153>: Disconnected: Connection closed (LIST finished 32.103 secs ago) in=174, out=1113, bytes=174/1113 Mar 3 11:48:57 server dovecot[55220]: imap(info@paragoninterior.co.uk)<66155>: Disconnected: Connection closed (UID FETCH finished 32.066 secs ago) in=210, out=1863, bytes=210/1863 Mar 3 11:48:58 server dovecot[55220]: imap(gus@paragoninterior.co.uk)<66160>: Disconnected: Connection closed (UID STORE finished 32.129 secs ago) in=188, out=1167, bytes=188/1167 Mar 3 11:49:11 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:60128 to port 783, fd 6 Mar 3 11:49:11 server spamd[35473]: spamd: setuid to as240622a succeeded Mar 3 11:49:11 server spamd[35473]: spamd: checking message <010201955bd60f11-9b90dba3-f67c-4f46-aad6-d7f2e93ad876-000000@eu-west-1.amazonses.com> for as240622a:1017 Mar 3 11:49:11 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:49:11 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:49:11 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:49:11 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:49:11 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:49:11 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:49:11 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:49:11 server spamd[35473]: spamd: clean message (3.0/5.0) for as240622a:1017 in 0.6 seconds, 32563 bytes. Mar 3 11:49:11 server spamd[35473]: spamd: result: . 2 - BAYES_50,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_EU,KAM_INFOUSMEBIZ,KAM_MARKETINGBL_PCCC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=32563,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=60128,mid=<010201955bd60f11-9b90dba3-f67c-4f46-aad6-d7f2e93ad876-000000@eu-west-1.amazonses.com>,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:49:11 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:49:11 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<65045>: msgid=<010201955bd60f11-9b90dba3-f67c-4f46-aad6-d7f2e93ad876-000000@eu-west-1.amazonses.com>: saved mail to INBOX Mar 3 11:49:11 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=READY) Mar 3 11:49:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66361, secured, session= Mar 3 11:49:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66361>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:49:21 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=149.50.169.252, lip=172.31.3.195, mpid=66376, TLS, session= Mar 3 11:49:24 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66387, secured, session= Mar 3 11:49:24 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66387>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:49:26 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:35096 to port 783, fd 6 Mar 3 11:49:26 server spamd[35473]: spamd: setuid to jfa20241216a succeeded Mar 3 11:49:26 server spamd[35473]: spamd: checking message <010201955bd64aa6-f11c6a33-30f1-4ee3-a8bb-977858897350-000000@eu-west-1.amazonses.com> for jfa20241216a:1047 Mar 3 11:49:26 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:49:26 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:49:26 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66399, secured, session=<8SSMv24vVLUAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:49:26 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66399><8SSMv24vVLUAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=576, out=113405, bytes=576/113405 Mar 3 11:49:27 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:49:27 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:49:27 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:49:27 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:49:27 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:49:27 server spamd[35473]: spamd: clean message (2.2/5.0) for jfa20241216a:1047 in 0.6 seconds, 80799 bytes. Mar 3 11:49:27 server spamd[35473]: spamd: result: . 2 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_EU,KAM_INFOUSMEBIZ,KAM_MARKETINGBL_PCCC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,T_OBFU_PDF_ATTACH,T_REMOTE_IMAGE,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=80799,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=35096,mid=<010201955bd64aa6-f11c6a33-30f1-4ee3-a8bb-977858897350-000000@eu-west-1.amazonses.com>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:49:27 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:49:27 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<65045><6O8OBUeXxWcV/gAAm+Yclw>: msgid=<010201955bd64aa6-f11c6a33-30f1-4ee3-a8bb-977858897350-000000@eu-west-1.amazonses.com>: saved mail to INBOX Mar 3 11:49:27 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=READY) Mar 3 11:49:30 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66419, secured, session= Mar 3 11:49:30 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66419>: Disconnected: Logged out in=607, out=47339, bytes=607/47339 Mar 3 11:49:30 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66422, secured, session=<2IjJv24vbrUAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:49:30 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66422><2IjJv24vbrUAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=531, out=75786, bytes=531/75786 Mar 3 11:49:32 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66431, secured, session= Mar 3 11:49:32 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66431>: Disconnected: Logged out in=448, out=25141, bytes=448/25141 Mar 3 11:49:35 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66443, secured, session= Mar 3 11:49:35 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66443>: Disconnected: Logged out in=651, out=79162, bytes=651/79162 Mar 3 11:49:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=66456, TLS, session= Mar 3 11:49:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=66457, TLS, session=<5ENOwG4vyODVe4dK> Mar 3 11:49:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=66458, TLS, session= Mar 3 11:49:45 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<66456>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.309 secs, 2 B in + 10+2 B out, state=wait-input) in=565, out=44953, bytes=565/44953 Mar 3 11:49:45 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<66457><5ENOwG4vyODVe4dK>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.006 secs, 2 B in + 10+2 B out, state=wait-input) in=365, out=1538, bytes=365/1538 Mar 3 11:49:45 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<66458>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.828 secs, 2 B in + 10+2 B out, state=wait-input) in=361, out=1584, bytes=361/1584 Mar 3 11:49:50 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:47268 to port 783, fd 6 Mar 3 11:49:50 server spamd[35473]: spamd: setuid to fb20211118a succeeded Mar 3 11:49:50 server spamd[35473]: spamd: checking message <0ab7e7d8-3a19-456c-b5b3-e6ac581e68e3@BN2PEPF00004FBB.namprd04.prod.outlook.com> for fb20211118a:1007 Mar 3 11:49:50 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:49:50 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:49:51 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:49:51 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:49:51 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:49:51 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:49:51 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:49:51 server spamd[35473]: spamd: identified spam (11.5/8.0) for fb20211118a:1007 in 0.7 seconds, 9659 bytes. Mar 3 11:49:51 server spamd[35473]: spamd: result: Y 11 - ARC_SIGNED,ARC_VALID,BAYES_50,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,GB_M365_SPAM,HEADER_FROM_DIFFERENT_DOMAINS,HTML_IMAGE_ONLY_16,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,KAM_DMARC_STATUS,KAM_SHORT,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,T_REMOTE_IMAGE,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS,URI_WP_HACKED_2 scantime=0.7,size=9659,user=fb20211118a,uid=1007,required_score=8.0,rhost=localhost,raddr=127.0.0.1,rport=47268,mid=<0ab7e7d8-3a19-456c-b5b3-e6ac581e68e3@BN2PEPF00004FBB.namprd04.prod.outlook.com>,bayes=0.500396,autolearn=spam autolearn_force=no,shortcircuit=no Mar 3 11:49:51 server dovecot[55220]: lmtp(65045): Connect from local Mar 3 11:49:51 server dovecot[55220]: lmtp(info@southlakeswindows.com)<65045>: msgid=<0ab7e7d8-3a19-456c-b5b3-e6ac581e68e3@BN2PEPF00004FBB.namprd04.prod.outlook.com>: saved mail to INBOX.spam Mar 3 11:49:51 server dovecot[55220]: lmtp(65045): Disconnect from local: Logged out (state=READY) Mar 3 11:50:01 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66551, secured, session= Mar 3 11:50:01 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66551>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:50:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66644, secured, session=<0DCpwm4vtIEAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:50:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66644><0DCpwm4vtIEAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=651, out=79162, bytes=651/79162 Mar 3 11:50:25 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=66680, TLS, session= Mar 3 11:50:27 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.26.113, lip=172.31.3.195, mpid=66684, TLS, session= Mar 3 11:50:28 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.26.113, lip=172.31.3.195, mpid=66689, TLS, session= Mar 3 11:50:32 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<66680>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.473 secs, 2 B in + 10+2 B out, state=wait-input) in=382, out=126941, bytes=382/126941 Mar 3 11:50:40 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.94.22.106, lip=172.31.3.196, mpid=66731, TLS, session=<4Kzww24vBvMfXhZq> Mar 3 11:50:46 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=66752, TLS, session= Mar 3 11:50:46 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<66752>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 11:50:51 server dovecot[55220]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=20.169.106.171, lip=172.31.3.196, session=<58KZxG4vppMUqWqr> Mar 3 11:50:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66788, secured, session=<6PDmxG4vtL8AAAAAAAAAAAAAAAAAAAAB> Mar 3 11:50:56 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66788><6PDmxG4vtL8AAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:51:05 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.94.22.106, lip=172.31.3.196, mpid=66828, TLS, session= Mar 3 11:51:05 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:35408 to port 783, fd 6 Mar 3 11:51:05 server spamd[35473]: spamd: setuid to fba20240816a succeeded Mar 3 11:51:05 server spamd[35473]: spamd: checking message <1142105884528.1142098628563.1502860941.0.310650JL.2002@synd.ccsend.com> for fba20240816a:1044 Mar 3 11:51:05 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:51:05 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:51:06 server spamd[62226]: spamd: connection from localhost [::1]:48606 to port 783, fd 5 Mar 3 11:51:06 server spamd[1460]: prefork: child states: II [... logline repeated 4 times] Mar 3 11:51:06 server spamd[1460]: prefork: child states: BI Mar 3 11:51:06 server dovecot[55220]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<1/p4xW4vluB/AAAB> Mar 3 11:51:06 server dovecot[55220]: lmtp(66888): Connect from local Mar 3 11:51:06 server dovecot[55220]: lmtp(66888): Disconnect from local: Logged out (state=GREETING) Mar 3 11:51:06 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:51:06 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:51:06 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:51:06 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:51:06 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:51:06 server spamd[35473]: spamd: clean message (1.2/5.0) for fba20240816a:1044 in 1.2 seconds, 37715 bytes. Mar 3 11:51:06 server spamd[35473]: spamd: result: . 1 - DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_COUK,KAM_FROM_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,KAM_UNSUB1,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=1.2,size=37715,user=fba20240816a,uid=1044,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=35408,mid=<1142105884528.1142098628563.1502860941.0.310650JL.2002@synd.ccsend.com>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:51:06 server dovecot[55220]: imap-login: Login: user=<__cpanel__service__auth__imap__g8fzvoe_6llcf410>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=66899, secured, session= Mar 3 11:51:06 server dovecot[55220]: imap(__cpanel__service__auth__imap__g8fzvoe_6llcf410)<66899>: Disconnected: Logged out in=11, out=519, bytes=11/519 Mar 3 11:51:06 server spamd[1460]: prefork: child states: II Mar 3 11:51:06 server dovecot[55220]: lmtp(66888): Connect from local Mar 3 11:51:06 server dovecot[55220]: lmtp(simon@lignumdesigns.co.uk)<66888>: msgid=<1142105884528.1142098628563.1502860941.0.310650JL.2002@synd.ccsend.com>: saved mail to INBOX Mar 3 11:51:06 server dovecot[55220]: lmtp(66888): Disconnect from local: Logged out (state=READY) Mar 3 11:51:11 server dovecot[55220]: imap(lee@precisionheatplumbing.co.uk)<66731><4Kzww24vBvMfXhZq>: Disconnected: Connection closed (IDLE running for 0.005 + waiting input for 4.008 secs, 0.001 in locks, 2 B in + 10+2 B out, state=wait-input) in=804, out=251433, bytes=804/251433 Mar 3 11:51:16 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=94.11.199.253, lip=172.31.3.195, mpid=66976, TLS, session= Mar 3 11:51:16 server dovecot[55220]: imap(oliver@thebedstorekendal.co.uk)<66979>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:51:16 server dovecot[55220]: imap(info@thebedstorekendal.co.uk)<66978>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:51:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=66988, secured, session= Mar 3 11:51:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<66988>: Disconnected: Logged out in=428, out=1363, bytes=428/1363 Mar 3 11:51:35 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:49116 to port 783, fd 6 Mar 3 11:51:35 server spamd[35473]: spamd: setuid to as240622a succeeded Mar 3 11:51:35 server spamd[35473]: spamd: checking message <010201955bd8465e-21cc35bc-deb2-4deb-a963-aee7e9c8e879-000000@eu-west-1.amazonses.com> for as240622a:1017 Mar 3 11:51:35 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:51:35 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:51:36 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:51:36 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:51:36 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:51:36 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:51:36 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:51:36 server spamd[35473]: spamd: clean message (0.8/5.0) for as240622a:1017 in 0.5 seconds, 3767 bytes. Mar 3 11:51:36 server spamd[35473]: spamd: result: . 0 - BAYES_50,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,MIME_HTML_ONLY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.5,size=3767,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=49116,mid=<010201955bd8465e-21cc35bc-deb2-4deb-a963-aee7e9c8e879-000000@eu-west-1.amazonses.com>,bayes=0.499998,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:51:36 server dovecot[55220]: lmtp(66888): Connect from local Mar 3 11:51:36 server spamd[1460]: prefork: child states: II Mar 3 11:51:36 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<66888>: msgid=<010201955bd8465e-21cc35bc-deb2-4deb-a963-aee7e9c8e879-000000@eu-west-1.amazonses.com>: saved mail to INBOX Mar 3 11:51:36 server dovecot[55220]: lmtp(66888): Disconnect from local: Logged out (state=READY) Mar 3 11:51:40 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<58863>: Disconnected: Inactivity - no input for 1800 secs in=163, out=621, bytes=163/621 Mar 3 11:51:56 server dovecot[55220]: imap(info@communitysportsarenas.co.uk)<67121>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:51:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=67147, secured, session= Mar 3 11:51:57 server dovecot[55220]: imap(accounts@northbuild.co.uk)<67147>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:52:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=67220, secured, session=<+77YyW4vOrUAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:52:19 server dovecot[55220]: imap(accounts@northbuild.co.uk)<67220><+77YyW4vOrUAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:52:37 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=67283, TLS, session= Mar 3 11:52:37 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<67283>: Disconnected: Logged out in=38, out=586, bytes=38/586 Mar 3 11:52:54 server dovecot[55220]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=196.251.67.34, lip=172.31.3.195, session= Mar 3 11:52:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=67346, TLS, session= Mar 3 11:52:57 server dovecot[55220]: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=149.50.169.252, lip=172.31.3.195, session=<330VzG4v5OqVMqn8> Mar 3 11:52:57 server dovecot[55220]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=149.50.169.252, lip=172.31.3.195, session= Mar 3 11:52:58 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=67370, secured, session=<5g4uzG4v+q4AAAAAAAAAAAAAAAAAAAAB> Mar 3 11:52:58 server dovecot[55220]: imap(accounts@northbuild.co.uk)<67370><5g4uzG4v+q4AAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:52:59 server dovecot[55220]: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=149.50.169.252, lip=172.31.3.195, TLS: Connection closed, session= Mar 3 11:53:05 server dovecot[55220]: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=149.50.169.252, lip=172.31.3.195, TLS: Connection closed, session= Mar 3 11:53:11 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=67410, TLS, session= Mar 3 11:53:11 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<67410>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 11:53:11 server dovecot[55220]: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=149.50.169.252, lip=172.31.3.195, session= Mar 3 11:53:38 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=146.198.180.35, lip=172.31.3.195, mpid=67506, TLS, session= Mar 3 11:53:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=67512, TLS, session= Mar 3 11:53:39 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<67512>: Disconnected: Logged out in=38, out=586, bytes=38/586 Mar 3 11:53:42 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.26.113, lip=172.31.3.195, mpid=67524, TLS, session= Mar 3 11:53:52 server dovecot[55220]: imap(info@communitysportsarenas.co.uk)<67506>: Disconnected: Logged out in=197, out=3995, bytes=197/3995 Mar 3 11:53:56 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:32768 to port 783, fd 6 Mar 3 11:53:56 server spamd[35473]: spamd: setuid to fb20241023a succeeded Mar 3 11:53:56 server spamd[35473]: spamd: checking message <2289b0f98578ebb4d431c40e6.ce4ffbdef0.20250303115244.8f0c152875.b3e20292@mail48.suw15.mcsv.net> for fb20241023a:1045 Mar 3 11:53:56 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:53:56 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:53:57 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:53:57 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:53:57 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:53:57 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:53:57 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:53:57 server spamd[35473]: spamd: clean message (3.6/5.0) for fb20241023a:1045 in 0.7 seconds, 57733 bytes. Mar 3 11:53:57 server spamd[35473]: spamd: result: . 3 - BAYES_50,DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_COUK,KAM_MARKETINGBL_PCCC,KAM_ZWNS,MAILING_LIST_MULTI,MIME_QP_LONG_LINE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_CT_SURBL,URIBL_DBL_BLOCKED_OPENDNS scantime=0.7,size=57733,user=fb20241023a,uid=1045,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=32768,mid=<2289b0f98578ebb4d431c40e6.ce4ffbdef0.20250303115244.8f0c152875.b3e20292@mail48.suw15.mcsv.net>,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:53:57 server spamd[1460]: prefork: child states: II Mar 3 11:53:57 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:53:57 server dovecot[55220]: lmtp(barbaraproctor@partners-in-design.co.uk)<67595>: msgid=<2289b0f98578ebb4d431c40e6.ce4ffbdef0.20250303115244.8f0c152875.b3e20292@mail48.suw15.mcsv.net>: saved mail to INBOX Mar 3 11:53:57 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=READY) Mar 3 11:54:09 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:57954 to port 783, fd 6 Mar 3 11:54:09 server spamd[35473]: spamd: setuid to fb20250106a succeeded Mar 3 11:54:09 server spamd[35473]: spamd: checking message <85b4508e46891e6a3d4f35640422a8ff@waba.uk> for fb20250106a:1048 Mar 3 11:54:09 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:54:09 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:54:10 server spamd[35473]: spamd: clean message (1.2/5.0) for fb20250106a:1048 in 1.0 seconds, 2147 bytes. Mar 3 11:54:10 server spamd[35473]: spamd: result: . 1 - ALL_TRUSTED,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,KAM_DMARC_QUARANTINE,KAM_DMARC_STATUS,MIME_HTML_ONLY scantime=1.0,size=2147,user=fb20250106a,uid=1048,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=57954,mid=<85b4508e46891e6a3d4f35640422a8ff@waba.uk>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:54:10 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:54:10 server spamd[1460]: prefork: child states: II Mar 3 11:54:10 server dovecot[55220]: lmtp(hello@olmate.co.nz)<67595><+OdYNWKYxWcLCAEAm+Yclw>: msgid=<85b4508e46891e6a3d4f35640422a8ff@waba.uk>: saved mail to INBOX Mar 3 11:54:10 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=READY) Mar 3 11:54:12 server dovecot[55220]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=196.251.67.31, lip=172.31.3.195, session= Mar 3 11:54:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=67681, secured, session= Mar 3 11:54:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<67681>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:54:22 server dovecot[55220]: imap(jessicalunt@partners-in-design.co.uk)<67682>: Disconnected: Logged out in=15, out=135, bytes=15/135 Mar 3 11:54:22 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.97.173.93, lip=172.31.3.195, mpid=67697, TLS, session= Mar 3 11:54:28 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:48404 to port 783, fd 6 Mar 3 11:54:28 server spamd[35473]: spamd: setuid to fba17102023a succeeded Mar 3 11:54:28 server spamd[35473]: spamd: checking message <011301955bdae75f-5724f48c-2332-4c25-b65d-9ccecab16526-000000@eu-west-3.amazonses.com> for fba17102023a:1030 Mar 3 11:54:28 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:54:28 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:54:29 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:54:29 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:54:29 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:54:29 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:54:29 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:54:29 server spamd[35473]: spamd: identified spam (5.4/5.0) for fba17102023a:1030 in 0.6 seconds, 27368 bytes. Mar 3 11:54:29 server spamd[35473]: spamd: result: Y 5 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_IMAGE_RATIO_04,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_COUK,KAM_EU,KAM_INFOUSMEBIZ,KAM_MARKETINGBL_PCCC,KAM_REALLYHUGEIMGSRC,KAM_ZWNS,MIME_HTML_ONLY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=27368,user=fba17102023a,uid=1030,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=48404,mid=<011301955bdae75f-5724f48c-2332-4c25-b65d-9ccecab16526-000000@eu-west-3.amazonses.com>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:54:29 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:54:29 server spamd[1460]: prefork: child states: II Mar 3 11:54:29 server dovecot[55220]: lmtp(info@mwaccess.co.uk)<67595>: msgid=<011301955bdae75f-5724f48c-2332-4c25-b65d-9ccecab16526-000000@eu-west-3.amazonses.com>: saved mail to INBOX.spam Mar 3 11:54:29 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=READY) Mar 3 11:54:30 server dovecot[55220]: imap(info@thebedstorekendal.co.uk)<67731>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:54:45 server dovecot[55220]: imap(lee@precisionheatplumbing.co.uk)<66828>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 218.859 secs, 2 B in + 10+2 B out, state=wait-input) in=283, out=1164, bytes=283/1164 Mar 3 11:54:46 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:57730 to port 783, fd 6 Mar 3 11:54:46 server spamd[35473]: spamd: setuid to fb20211118a succeeded Mar 3 11:54:46 server spamd[35473]: spamd: checking message <20250303115405.1e203087998b8ec3@post.xero.com> for fb20211118a:1007 Mar 3 11:54:46 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:54:46 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:54:47 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:54:47 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:54:47 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:54:47 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:54:47 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:54:47 server spamd[35473]: spamd: clean message (-2.1/8.0) for fb20211118a:1007 in 0.6 seconds, 114885 bytes. Mar 3 11:54:47 server spamd[35473]: spamd: result: . -2 - BAYES_00,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=114885,user=fb20211118a,uid=1007,required_score=8.0,rhost=localhost,raddr=127.0.0.1,rport=57730,mid=<20250303115405.1e203087998b8ec3@post.xero.com>,bayes=0.000000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:54:47 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:54:47 server spamd[1460]: prefork: child states: II Mar 3 11:54:47 server dovecot[55220]: lmtp(jackie@southlakeswindows.com)<67595>: msgid=<20250303115405.1e203087998b8ec3@post.xero.com>: saved mail to INBOX Mar 3 11:54:47 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=READY) Mar 3 11:54:48 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:57734 to port 783, fd 6 Mar 3 11:54:48 server spamd[35473]: spamd: setuid to fbb20240312a succeeded Mar 3 11:54:48 server spamd[35473]: spamd: checking message <7805ed59-36df-4758-9898-8394a0b3a6b9@mtasv.net> for fbb20240312a:1035 Mar 3 11:54:48 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:54:48 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:54:49 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:54:49 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:54:49 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:54:49 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:54:49 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:54:49 server spamd[35473]: spamd: clean message (0.4/5.0) for fbb20240312a:1035 in 0.6 seconds, 55626 bytes. Mar 3 11:54:49 server spamd[35473]: spamd: result: . 0 - DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,KAM_REALLYHUGEIMGSRC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=55626,user=fbb20240312a,uid=1035,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=57734,mid=<7805ed59-36df-4758-9898-8394a0b3a6b9@mtasv.net>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:54:49 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:54:49 server spamd[1460]: prefork: child states: II Mar 3 11:54:49 server dovecot[55220]: lmtp(office@penninghame.com)<67595><2JJeDomYxWcLCAEAm+Yclw>: msgid=<7805ed59-36df-4758-9898-8394a0b3a6b9@mtasv.net>: saved mail to INBOX Mar 3 11:54:49 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=READY) Mar 3 11:54:50 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=67814, TLS, session= Mar 3 11:55:02 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:49160 to port 783, fd 6 Mar 3 11:55:02 server spamd[35473]: spamd: setuid to jfa20241216a succeeded Mar 3 11:55:02 server spamd[35473]: spamd: checking message for jfa20241216a:1047 Mar 3 11:55:02 server spamd[62226]: spamd: connection from localhost [127.0.0.1]:49170 to port 783, fd 6 Mar 3 11:55:02 server spamd[62226]: spamd: setuid to jfa20241216a succeeded Mar 3 11:55:02 server spamd[62226]: spamd: checking message for jfa20241216a:1047 Mar 3 11:55:02 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:55:02 server spamd[62226]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:55:02 server spamd[62226]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:55:02 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:55:02 server spamd[62226]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:55:02 server spamd[62226]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:55:02 server spamd[62226]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:55:02 server spamd[62226]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:55:02 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:55:02 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:55:02 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:55:02 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:55:02 server spamd[62226]: spamd: identified spam (10.5/5.0) for jfa20241216a:1047 in 0.6 seconds, 10825 bytes. Mar 3 11:55:02 server spamd[62226]: spamd: result: Y 10 - DKIM_SIGNED,DKIM_VALID,HTML_MESSAGE,KAM_FROM_URIBL_PCCC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_SOFTFAIL scantime=0.6,size=10825,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=49170,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:55:02 server spamd[35473]: spamd: identified spam (10.5/5.0) for jfa20241216a:1047 in 0.6 seconds, 10825 bytes. Mar 3 11:55:02 server spamd[35473]: spamd: result: Y 10 - DKIM_SIGNED,DKIM_VALID,HTML_MESSAGE,KAM_FROM_URIBL_PCCC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_SOFTFAIL scantime=0.6,size=10825,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=49160,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:55:03 server spamd[1460]: prefork: child states: BI Mar 3 11:55:03 server spamd[1460]: prefork: child states: II Mar 3 11:55:03 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:55:03 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<67595>: msgid=: saved mail to INBOX.spam Mar 3 11:55:03 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=READY) Mar 3 11:55:03 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:55:03 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<67595>: msgid=: saved mail to INBOX.spam Mar 3 11:55:03 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=READY) Mar 3 11:55:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=67931, TLS, session= Mar 3 11:55:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=67935, TLS, session= Mar 3 11:55:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=67936, TLS, session= Mar 3 11:55:18 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=67960, TLS, session= Mar 3 11:55:18 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:55:18 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<67595>: msgid=<00a701db8c33$20a24dd0$61e6e970$@southcoasttravel.co.uk>: saved mail to INBOX Mar 3 11:55:18 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=READY) Mar 3 11:55:18 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<67960>: Disconnected: Logged out top=0/0, retr=3/53018, del=4/1490, size=1579292046, bytes=89/109915 Mar 3 11:55:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=67978, secured, session=<6Gaj1G4vstEAAAAAAAAAAAAAAAAAAAAB> Mar 3 11:55:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<67978><6Gaj1G4vstEAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:55:21 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<67980>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 11:55:29 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=68030, secured, session= Mar 3 11:55:30 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<68030>: Disconnected: Logged out in=82, out=929, bytes=82/929 Mar 3 11:55:30 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=68045, secured, session= Mar 3 11:55:30 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<68045>: Disconnected: Logged out in=129, out=971, bytes=129/971 Mar 3 11:55:31 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=68054, secured, session= Mar 3 11:55:31 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<68054>: Disconnected: Logged out in=362, out=1392, bytes=362/1392 Mar 3 11:55:31 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=68055, secured, session= Mar 3 11:55:31 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<68055>: Disconnected: Logged out in=464, out=36574, bytes=464/36574 Mar 3 11:55:34 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=68069, TLS, session= Mar 3 11:55:35 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<68069>: Disconnected: Logged out top=0/0, retr=1/5731498, del=0/1487, size=1578931922, bytes=35/5788146 Mar 3 11:55:45 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=68104, TLS, session= Mar 3 11:55:47 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<68104>: Disconnected: Logged out top=0/0, retr=4/5784516, del=0/1487, size=1578931922, bytes=68/5841173 Mar 3 11:55:48 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=68112, TLS, session= Mar 3 11:55:48 server dovecot[55220]: imap(info@mwaccess.co.uk)<68112>: Disconnected: Connection closed (SELECT finished 0.102 secs ago) in=115, out=1128, bytes=115/1128 Mar 3 11:56:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=68253, secured, session= Mar 3 11:56:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<68253>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:56:20 server spamd[35473]: spamd: connection from localhost [::1]:37826 to port 783, fd 5 Mar 3 11:56:21 server spamd[1460]: prefork: child states: II Mar 3 11:56:21 server dovecot[55220]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= Mar 3 11:56:21 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:56:21 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=GREETING) Mar 3 11:56:21 server dovecot[55220]: imap-login: Login: user=<__cpanel__service__auth__imap__g8fzvoe_6llcf410>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=68318, secured, session= Mar 3 11:56:21 server dovecot[55220]: imap(__cpanel__service__auth__imap__g8fzvoe_6llcf410)<68318>: Disconnected: Logged out in=11, out=519, bytes=11/519 Mar 3 11:56:26 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=164.39.147.14, lip=172.31.3.195, mpid=68379, TLS, session=<7sSL2G4vZ/ykJ5MO> Mar 3 11:56:26 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<67936>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 12.796 secs, 2 B in + 10+2 B out, state=wait-input) in=457, out=127162, bytes=457/127162 Mar 3 11:56:26 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<67935>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 72.460 secs, 2 B in + 10+2 B out, state=wait-input) in=560, out=3243, bytes=560/3243 Mar 3 11:56:26 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<67931>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 71.173 secs, 2 B in + 10+2 B out, state=wait-input) in=799, out=71111, bytes=799/71111 Mar 3 11:56:26 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=31.94.74.3, lip=172.31.3.195, mpid=68383, session=<7KeW2G4vHp8fXkoD> Mar 3 11:56:27 server dovecot[55220]: pop3(chris@rosecountyinteriors.co.uk)<68383><7KeW2G4vHp8fXkoD>: Disconnected: Logged out top=0/0, retr=0/0, del=0/349, size=53806501, bytes=22/80 Mar 3 11:56:28 server dovecot[55220]: imap(violetbank@hanleycaravans.co.uk)<68393>: Disconnected: Logged out in=15, out=136, bytes=15/136 Mar 3 11:56:28 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.97.215.13, lip=172.31.3.195, mpid=68397, TLS, session= Mar 3 11:56:31 server dovecot[55220]: imap(enquiries@ryedalegaragedoors.co.uk)<68379><7sSL2G4vZ/ykJ5MO>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.114 secs, 2 B in + 10+2 B out, state=wait-input) in=288, out=2419, bytes=288/2419 Mar 3 11:56:43 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:34414 to port 783, fd 6 Mar 3 11:56:43 server spamd[35473]: spamd: setuid to yo170122a succeeded Mar 3 11:56:43 server spamd[35473]: spamd: checking message for yo170122a:1013 Mar 3 11:56:44 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:56:44 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:56:44 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:56:44 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:56:44 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:56:44 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:56:44 server spamd[35473]: spamd: clean message (4.8/5.0) for yo170122a:1013 in 0.9 seconds, 4588 bytes. Mar 3 11:56:44 server spamd[35473]: spamd: result: . 4 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,T_SPF_PERMERROR,URIBL_BLACK,URIBL_DBL_BLOCKED_OPENDNS scantime=0.9,size=4588,user=yo170122a,uid=1013,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=34414,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:56:44 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:56:44 server spamd[1460]: prefork: child states: II Mar 3 11:56:45 server dovecot[55220]: lmtp(info@thebedstorekendal.co.uk)<67595>: msgid=: saved mail to INBOX Mar 3 11:56:45 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=READY) Mar 3 11:56:51 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.94.22.106, lip=172.31.3.196, mpid=68479, TLS, session= Mar 3 11:56:51 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.94.22.106, lip=172.31.3.196, mpid=68480, TLS, session= Mar 3 11:56:57 server dovecot[55220]: imap(lee@precisionheatplumbing.co.uk)<68479>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.368 secs, 2 B in + 10+2 B out, state=wait-input) in=385, out=2604, bytes=385/2604 Mar 3 11:57:04 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=68539, TLS, session= Mar 3 11:57:04 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=68541, TLS, session= Mar 3 11:57:04 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=68542, TLS, session= Mar 3 11:57:05 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=68543, TLS, session=<8M3b2m4vRuLZJNVG> Mar 3 11:57:12 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<68539>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.995 secs, 2 B in + 10+2 B out, state=wait-input) in=568, out=21737, bytes=568/21737 Mar 3 11:57:12 server dovecot[55220]: imap(annee@scsplumbingandheating.co.uk)<68542>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.993 secs, 2 B in + 10+2 B out, state=wait-input) in=568, out=23295, bytes=568/23295 Mar 3 11:57:13 server dovecot[55220]: imap(martyn.lloyd@cubefinancialservices.co.uk)<68576>: Disconnected: Logged out in=15, out=135, bytes=15/135 Mar 3 11:57:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=40.99.212.237, lip=172.31.3.195, mpid=68581, TLS, session=<3iVa224vJrcoY9Tt> Mar 3 11:57:16 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<68541>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 6.036 secs, 2 B in + 10+2 B out, state=wait-input) in=584, out=21763, bytes=584/21763 Mar 3 11:57:16 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<68543><8M3b2m4vRuLZJNVG>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 9.838 secs, 2 B in + 10+2 B out, state=wait-input) in=340, out=1134, bytes=340/1134 Mar 3 11:57:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=68599, session= Mar 3 11:57:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=68603, session= Mar 3 11:57:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=217.36.213.70, lip=172.31.3.195, mpid=68604, TLS, session= Mar 3 11:57:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=68611, secured, session= Mar 3 11:57:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<68611>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:57:25 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=68633, TLS, session= Mar 3 11:57:25 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<68633>: Disconnected: Logged out top=0/0, retr=0/0, del=0/1487, size=1578931922, bytes=24/56645 Mar 3 11:57:33 server dovecot[55220]: imap(faye@becreativemail.co.uk)<68657>: Disconnected: Logged out in=15, out=134, bytes=15/134 Mar 3 11:57:33 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.98.203.245, lip=172.31.3.195, mpid=68661, TLS, session= Mar 3 11:57:40 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:38112 to port 783, fd 6 Mar 3 11:57:40 server spamd[35473]: spamd: setuid to as240622a succeeded Mar 3 11:57:40 server spamd[35473]: spamd: checking message <010201955bddd4e7-58a65083-0c00-4ad3-ac76-0be77b4bb459-000000@eu-west-1.amazonses.com> for as240622a:1017 Mar 3 11:57:40 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:57:40 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:57:40 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:57:40 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:57:40 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:57:40 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:57:40 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:57:40 server spamd[35473]: spamd: clean message (3.8/5.0) for as240622a:1017 in 0.6 seconds, 32059 bytes. Mar 3 11:57:40 server spamd[35473]: spamd: result: . 3 - BAYES_50,CPANEL_LOTS_OF_EMPTY_LINE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_EU,KAM_INFOUSMEBIZ,KAM_MARKETINGBL_PCCC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=32059,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=38112,mid=<010201955bddd4e7-58a65083-0c00-4ad3-ac76-0be77b4bb459-000000@eu-west-1.amazonses.com>,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:57:40 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:57:40 server spamd[1460]: prefork: child states: II Mar 3 11:57:40 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<67595><4IAmKDSZxWcLCAEAm+Yclw>: msgid=<010201955bddd4e7-58a65083-0c00-4ad3-ac76-0be77b4bb459-000000@eu-west-1.amazonses.com>: saved mail to INBOX Mar 3 11:57:40 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=READY) Mar 3 11:57:53 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=68738, TLS, session= Mar 3 11:57:54 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=68742, TLS, session= Mar 3 11:57:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=68749, TLS, session= Mar 3 11:57:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=68750, TLS, session= Mar 3 11:57:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=68751, TLS, session= Mar 3 11:57:56 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=68753, TLS, session=<6Cv03W4vbxCU/J0U> Mar 3 11:57:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=68766, TLS, session= Mar 3 11:57:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.196, mpid=68769, TLS, session= Mar 3 11:57:59 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<68742>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.571 secs, 2 B in + 10+2 B out, state=wait-input) in=299, out=1500, bytes=299/1500 Mar 3 11:57:59 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<68738>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.373 secs, 2 B in + 10+2 B out, state=wait-input) in=611, out=4774, bytes=611/4774 Mar 3 11:58:11 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=68817, TLS, session=<3l3Q3m4v0N7Ve4dK> Mar 3 11:58:11 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<68817><3l3Q3m4v0N7Ve4dK>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 11:58:12 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<55357>: Disconnected: Connection closed (STATUS finished 873.841 secs ago) in=722, out=1715, bytes=722/1715 Mar 3 11:58:12 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<55356>: Disconnected: Connection closed (STATUS finished 873.845 secs ago) in=687, out=1664, bytes=687/1664 Mar 3 11:58:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=68821, TLS, session= Mar 3 11:58:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=68822, TLS, session= Mar 3 11:58:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=68823, TLS, session=<8cvg3m4vrcBawMu0> Mar 3 11:58:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=68824, TLS, session= Mar 3 11:58:12 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<68821>: Disconnected: Connection closed (LIST finished 0.142 secs ago) in=19, out=529, bytes=19/529 Mar 3 11:58:12 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<68822>: Disconnected: Connection closed (LIST finished 0.142 secs ago) in=19, out=529, bytes=19/529 Mar 3 11:58:15 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.196, mpid=68835, TLS, session= Mar 3 11:58:15 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.196, mpid=68836, TLS, session= Mar 3 11:58:15 server dovecot[55220]: imap(steven@southlakeswindows.com)<68750>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 17.561 secs, 2 B in + 10+2 B out, state=wait-input) in=465, out=2251, bytes=465/2251 Mar 3 11:58:15 server dovecot[55220]: imap(steven@southlakeswindows.com)<68751>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 14.578 secs, 2 B in + 10+2 B out, state=wait-input) in=407, out=1816, bytes=407/1816 Mar 3 11:58:15 server dovecot[55220]: imap(info@southlakeswindows.com)<68749>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 14.578 secs, 2 B in + 10+2 B out, state=wait-input) in=699, out=3793, bytes=699/3793 Mar 3 11:58:15 server dovecot[55220]: imap(steven@southlakeswindows.com)<68766>: Disconnected: Connection closed (COMPRESS finished 18.702 secs ago) in=153, out=564, bytes=153/564 Mar 3 11:58:15 server dovecot[55220]: imap(info@southlakeswindows.com)<68769>: Disconnected: Connection closed (COMPRESS finished 18.613 secs ago) in=153, out=564, bytes=153/564 Mar 3 11:58:15 server dovecot[55220]: imap(info@southlakeswindows.com)<68753><6Cv03W4vbxCU/J0U>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 17.096 secs, 2 B in + 10+2 B out, state=wait-input) in=465, out=29473, bytes=465/29473 Mar 3 11:58:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=68854, secured, session= Mar 3 11:58:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<68854>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:58:40 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=68923, TLS, session= Mar 3 11:58:40 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<68923>: Disconnected: Logged out in=38, out=586, bytes=38/586 Mar 3 11:58:51 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=68963, TLS, session= Mar 3 11:59:00 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:49228 to port 783, fd 6 Mar 3 11:59:00 server spamd[35473]: spamd: setuid to fba23102023a succeeded Mar 3 11:59:00 server spamd[35473]: spamd: checking message <4UQ5.10PLL.E048643385A2914113U5DQ6B8EFD429A95CDB3.a25ecf8d-ff9d-489a-a09a-4e6802f30e97@e.wex.co.uk> for fba23102023a:1031 Mar 3 11:59:00 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:59:00 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:59:02 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:59:02 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:59:02 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 11:59:02 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:59:02 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:59:02 server spamd[35473]: spamd: clean message (-1.9/5.0) for fba23102023a:1031 in 2.1 seconds, 406859 bytes. Mar 3 11:59:02 server spamd[35473]: spamd: result: . -1 - BAYES_00,DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,KAM_COUK,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=2.1,size=406859,user=fba23102023a,uid=1031,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=49228,mid=<4UQ5.10PLL.E048643385A2914113U5DQ6B8EFD429A95CDB3.a25ecf8d-ff9d-489a-a09a-4e6802f30e97@e.wex.co.uk>,bayes=0.000000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:59:02 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:59:02 server spamd[1460]: prefork: child states: II Mar 3 11:59:02 server dovecot[55220]: lmtp(info@ge-photography.co.uk)<67595>: msgid=<4UQ5.10PLL.E048643385A2914113U5DQ6B8EFD429A95CDB3.a25ecf8d-ff9d-489a-a09a-4e6802f30e97@e.wex.co.uk>: saved mail to INBOX Mar 3 11:59:02 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=READY) Mar 3 11:59:07 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.112.66.152, lip=172.31.3.195, mpid=69036, TLS, session=<3JIq4m4vhMofcEKY> Mar 3 11:59:07 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.112.66.152, lip=172.31.3.195, mpid=69037, TLS, session= Mar 3 11:59:16 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<68963>: Disconnected: Connection closed (UID FETCH finished 22.696 secs ago) in=1151, out=300967, bytes=1151/300967 Mar 3 11:59:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=69082, secured, session= Mar 3 11:59:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<69082>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 11:59:21 server dovecot[55220]: imap(info@northbuild.co.uk)<69086>: Disconnected: Logged out in=15, out=136, bytes=15/136 Mar 3 11:59:21 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.98.199.117, lip=172.31.3.196, mpid=69087, TLS, session= Mar 3 11:59:28 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.112.66.152, lip=172.31.3.195, mpid=69117, TLS, session= Mar 3 11:59:36 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.112.66.152, lip=172.31.3.195, mpid=69143, TLS, session= Mar 3 11:59:40 server dovecot[55220]: imap(steven@southlakeswindows.com)<68836>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 82.851 secs, 2 B in + 10+2 B out, state=wait-input) in=274, out=1217, bytes=274/1217 Mar 3 11:59:40 server dovecot[55220]: imap(info@southlakeswindows.com)<68835>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 82.861 secs, 2 B in + 10+2 B out, state=wait-input) in=276, out=1539, bytes=276/1539 Mar 3 11:59:41 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:56328 to port 783, fd 6 Mar 3 11:59:41 server spamd[35473]: spamd: setuid to fb20241023a succeeded Mar 3 11:59:41 server spamd[35473]: spamd: checking message for fb20241023a:1045 Mar 3 11:59:41 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:59:41 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 11:59:41 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 11:59:41 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 11:59:41 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 11:59:41 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 11:59:41 server spamd[35473]: spamd: identified spam (9.8/5.0) for fb20241023a:1045 in 0.3 seconds, 7754 bytes. Mar 3 11:59:41 server spamd[35473]: spamd: result: Y 9 - BAYES_50,DKIM_SIGNED,DKIM_VALID,HTML_MESSAGE,KAM_FROM_URIBL_PCCC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS scantime=0.3,size=7754,user=fb20241023a,uid=1045,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=56328,mid=,bayes=0.501870,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 11:59:41 server dovecot[55220]: lmtp(67595): Connect from local Mar 3 11:59:41 server spamd[1460]: prefork: child states: II Mar 3 11:59:41 server dovecot[55220]: lmtp(barbaraproctor@partners-in-design.co.uk)<67595><6C3ZLq2ZxWcLCAEAm+Yclw>: msgid=: saved mail to INBOX.spam Mar 3 11:59:41 server dovecot[55220]: lmtp(67595): Disconnect from local: Logged out (state=READY) Mar 3 12:00:02 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=86.177.36.99, lip=172.31.3.195, mpid=69292, TLS, session= Mar 3 12:00:03 server dovecot[55220]: imap(info@grampianpestcontrol.com)<69292>: Disconnected: Connection closed (LIST finished 0.136 secs ago) in=56, out=3149, bytes=56/3149 Mar 3 12:00:03 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=86.177.36.99, lip=172.31.3.195, mpid=69296, TLS, session= Mar 3 12:00:03 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=69297, TLS, session=<4GKB5W4vIfQ+6Den> Mar 3 12:00:03 server dovecot[55220]: imap(info@grampianpestcontrol.com)<69296>: Disconnected: Connection closed (UID FETCH finished 0.073 secs ago) in=1702, out=15875, bytes=1702/15875 Mar 3 12:00:04 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=69298, TLS, session= Mar 3 12:00:04 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=86.177.36.99, lip=172.31.3.195, mpid=69299, TLS, session= Mar 3 12:00:04 server dovecot[55220]: imap(info@grampianpestcontrol.com)<69299>: Disconnected: Connection closed (UID FETCH finished 0.065 secs ago) in=1657, out=15105, bytes=1657/15105 Mar 3 12:00:11 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<69297><4GKB5W4vIfQ+6Den>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.432 secs, 2 B in + 10+2 B out, state=wait-input) in=448, out=27056, bytes=448/27056 Mar 3 12:00:11 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<69298>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.186 secs, 2 B in + 10+2 B out, state=wait-input) in=615, out=10946, bytes=615/10946 Mar 3 12:00:13 server dovecot[55220]: imap(estellegleave@partners-in-design.co.uk)<69338>: Disconnected: Logged out in=15, out=135, bytes=15/135 Mar 3 12:00:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.98.172.221, lip=172.31.3.195, mpid=69339, TLS, session= Mar 3 12:00:21 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=69372, secured, session= Mar 3 12:00:21 server dovecot[55220]: imap(accounts@northbuild.co.uk)<69372>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:00:25 server dovecot[55220]: imap(will@penninghame.com)<69398>: Disconnected: Logged out in=15, out=133, bytes=15/133 Mar 3 12:00:25 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=40.100.172.69, lip=172.31.3.196, mpid=69402, TLS, session=<42XP5m4vETYoZKxF> Mar 3 12:00:37 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=69443, TLS, session= Mar 3 12:00:37 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=69444, TLS, session=<5yKL524vBNCd58bG> Mar 3 12:00:45 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<69444><5yKL524vBNCd58bG>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.727 secs, 2 B in + 10+2 B out, state=wait-input) in=280, out=10660, bytes=280/10660 Mar 3 12:00:45 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<69443>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.463 secs, 2 B in + 10+2 B out, state=wait-input) in=601, out=50446, bytes=601/50446 Mar 3 12:01:04 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=69557, TLS, session= Mar 3 12:01:11 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<69557>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.263 secs, 2 B in + 10+2 B out, state=wait-input) in=350, out=276051, bytes=350/276051 Mar 3 12:01:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=69611, secured, session= Mar 3 12:01:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<69611>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:01:21 server spamd[35473]: spamd: connection from localhost [::1]:35642 to port 783, fd 5 Mar 3 12:01:21 server spamd[1460]: prefork: child states: II Mar 3 12:01:21 server dovecot[55220]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= Mar 3 12:01:21 server dovecot[55220]: lmtp(69667): Connect from local Mar 3 12:01:21 server dovecot[55220]: lmtp(69667): Disconnect from local: Logged out (state=GREETING) Mar 3 12:01:21 server dovecot[55220]: imap-login: Login: user=<__cpanel__service__auth__imap__g8fzvoe_6llcf410>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=69677, secured, session=<+1Qq6m4vbtN/AAAB> Mar 3 12:01:21 server dovecot[55220]: imap(__cpanel__service__auth__imap__g8fzvoe_6llcf410)<69677><+1Qq6m4vbtN/AAAB>: Disconnected: Logged out in=11, out=519, bytes=11/519 Mar 3 12:01:28 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:42550 to port 783, fd 6 Mar 3 12:01:28 server spamd[35473]: spamd: setuid to fb20241023a succeeded Mar 3 12:01:28 server spamd[35473]: spamd: checking message for fb20241023a:1045 Mar 3 12:01:28 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:01:28 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:01:29 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:01:29 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:01:29 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:01:29 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:01:29 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:01:29 server spamd[35473]: spamd: clean message (1.7/5.0) for fb20241023a:1045 in 0.6 seconds, 44335 bytes. Mar 3 12:01:29 server spamd[35473]: spamd: result: . 1 - BAYES_50,DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_FROM_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,PCCC_HDR_MARKETINGBL,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=44335,user=fb20241023a,uid=1045,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=42550,mid=,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:01:29 server dovecot[55220]: lmtp(69667): Connect from local Mar 3 12:01:29 server spamd[1460]: prefork: child states: II Mar 3 12:01:29 server dovecot[55220]: lmtp(barbaraproctor@partners-in-design.co.uk)<69667>: msgid=: saved mail to INBOX Mar 3 12:01:29 server dovecot[55220]: lmtp(69667): Disconnect from local: Logged out (state=READY) Mar 3 12:01:42 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=69799, TLS, session= Mar 3 12:01:45 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<69799>: Disconnected: Logged out top=0/0, retr=7/6040389, del=0/1488, size=1578969634, bytes=101/6097094 Mar 3 12:01:53 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.195, mpid=69840, TLS, session= Mar 3 12:01:53 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.195, mpid=69841, TLS, session=<2gUI7G4vDROU/J0U> Mar 3 12:01:57 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:36142 to port 783, fd 6 Mar 3 12:01:57 server spamd[35473]: spamd: setuid to as240622a succeeded Mar 3 12:01:57 server spamd[35473]: spamd: checking message for as240622a:1017 Mar 3 12:01:57 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:01:57 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:01:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=69869, TLS, session=<+y1M7G4vOvvVe4dK> Mar 3 12:01:57 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=69870, TLS, session= Mar 3 12:01:57 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:01:57 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:01:57 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:01:57 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:01:57 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:01:57 server spamd[35473]: spamd: clean message (1.0/5.0) for as240622a:1017 in 0.7 seconds, 91363 bytes. Mar 3 12:01:57 server spamd[35473]: spamd: result: . 1 - ARC_SIGNED,ARC_VALID,BAYES_50,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,KAM_NUMSUBJECT,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.7,size=91363,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=36142,mid=,bayes=0.498364,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:01:57 server dovecot[55220]: lmtp(69667): Connect from local Mar 3 12:01:57 server spamd[1460]: prefork: child states: II Mar 3 12:01:57 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<69667>: msgid=: saved mail to INBOX Mar 3 12:01:57 server dovecot[55220]: lmtp(69667): Disconnect from local: Logged out (state=READY) Mar 3 12:01:58 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=69878, TLS, session=<0/hZ7G4vPfvVe4dK> Mar 3 12:02:02 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.26.113, lip=172.31.3.195, mpid=69890, TLS, session= Mar 3 12:02:03 server dovecot[55220]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=148.252.157.20, lip=172.31.3.196, TLS handshaking: Connection closed, session= Mar 3 12:02:03 server dovecot[55220]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=148.252.157.20, lip=172.31.3.196, TLS handshaking: Connection closed, session= Mar 3 12:02:03 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.195, mpid=69901, TLS, session= Mar 3 12:02:03 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.195, mpid=69902, TLS, session= Mar 3 12:02:04 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.195, mpid=69903, TLS, session= Mar 3 12:02:04 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.195, mpid=69904, TLS, session=<7pmu7G4vcGuU/J0U> Mar 3 12:02:05 server dovecot[55220]: imap-hibernate(simon@scsplumbingandheating.co.uk)<55502>: Disconnected: Connection closed in=0, out=294, bytes=0/294 Mar 3 12:02:17 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<55676>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 2074.720 secs, 2 B in + 10+2 B out, state=wait-input) in=612, out=12567, bytes=612/12567 Mar 3 12:02:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=69959, secured, session= Mar 3 12:02:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<69959>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:02:29 server dovecot[55220]: imap(info@paragoninterior.co.uk)<55677>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 2087.488 secs, 2 B in + 10+2 B out, state=wait-input) in=1637, out=31283, bytes=1637/31283 Mar 3 12:02:29 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=69995, TLS, session= Mar 3 12:02:33 server dovecot[55220]: imap(info@thebedstorekendal.co.uk)<70005>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 12:02:40 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:37566 to port 783, fd 6 Mar 3 12:02:40 server spamd[35473]: spamd: setuid to fb20241023a succeeded Mar 3 12:02:40 server spamd[35473]: spamd: checking message <5H24.16SFA.F679C6F2A3D83D654PV1Q1170DD13FE3217BAB.f901b822-8553-4cc0-a929-dfe25154d958@emarketing.littlegreene.com> for fb20241023a:1045 Mar 3 12:02:40 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:02:40 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:02:40 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:02:40 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:02:40 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:02:40 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:02:40 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:02:40 server spamd[35473]: spamd: clean message (3.1/5.0) for fb20241023a:1045 in 0.8 seconds, 107330 bytes. Mar 3 12:02:40 server spamd[35473]: spamd: result: . 3 - BAYES_50,DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,LONG_IMG_URI,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.8,size=107330,user=fb20241023a,uid=1045,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=37566,mid=<5H24.16SFA.F679C6F2A3D83D654PV1Q1170DD13FE3217BAB.f901b822-8553-4cc0-a929-dfe25154d958@emarketing.littlegreene.com>,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:02:40 server dovecot[55220]: lmtp(69667): Connect from local Mar 3 12:02:40 server spamd[1460]: prefork: child states: II Mar 3 12:02:41 server dovecot[55220]: lmtp(barbaraproctor@partners-in-design.co.uk)<69667>: msgid=<5H24.16SFA.F679C6F2A3D83D654PV1Q1170DD13FE3217BAB.f901b822-8553-4cc0-a929-dfe25154d958@emarketing.littlegreene.com>: saved mail to INBOX Mar 3 12:02:41 server dovecot[55220]: lmtp(69667): Disconnect from local: Logged out (state=READY) Mar 3 12:03:08 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<70139>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 12:03:09 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<69869><+y1M7G4vOvvVe4dK>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 70.162 secs, 2 B in + 10+2 B out, state=wait-input) in=499, out=2643, bytes=499/2643 Mar 3 12:03:09 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<69870>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 70.003 secs, 2 B in + 10+2 B out, state=wait-input) in=362, out=1538, bytes=362/1538 Mar 3 12:03:09 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<69878><0/hZ7G4vPfvVe4dK>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 69.221 secs, 2 B in + 10+2 B out, state=wait-input) in=321, out=1579, bytes=321/1579 Mar 3 12:03:11 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=70149, TLS, session= Mar 3 12:03:11 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<70149>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 12:03:16 server dovecot[55220]: imap(info@thebedstorekendal.co.uk)<70165><14HYk24vNdcfYBpx>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 12:03:19 server dovecot[55220]: imap(steven@southlakeswindows.com)<69840>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 70.783 secs, 2 B in + 10+2 B out, state=wait-input) in=633, out=3081, bytes=633/3081 Mar 3 12:03:19 server dovecot[55220]: imap(info@southlakeswindows.com)<69903>: Disconnected: Connection closed (COMPRESS finished 75.021 secs ago) in=153, out=564, bytes=153/564 Mar 3 12:03:19 server dovecot[55220]: imap(steven@southlakeswindows.com)<69901>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 73.784 secs, 2 B in + 10+2 B out, state=wait-input) in=239, out=986, bytes=239/986 Mar 3 12:03:19 server dovecot[55220]: imap(info@southlakeswindows.com)<69841><2gUI7G4vDROU/J0U>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 70.784 secs, 2 B in + 10+2 B out, state=wait-input) in=640, out=3747, bytes=640/3747 Mar 3 12:03:19 server dovecot[55220]: imap(steven@southlakeswindows.com)<69904><7pmu7G4vcGuU/J0U>: Disconnected: Connection closed (COMPRESS finished 75.029 secs ago) in=153, out=564, bytes=153/564 Mar 3 12:03:19 server dovecot[55220]: imap(info@southlakeswindows.com)<69902>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 74.278 secs, 2 B in + 10+2 B out, state=wait-input) in=281, out=1171, bytes=281/1171 Mar 3 12:03:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70178, TLS, session= Mar 3 12:03:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70179, TLS, session= Mar 3 12:03:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70185, TLS, session=<6Mwu8W4vH8IfYM3j> Mar 3 12:03:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70186, TLS, session= Mar 3 12:03:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70187, TLS, session=<5NAu8W4vIsIfYM3j> Mar 3 12:03:19 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70188, TLS, session=<5NAu8W4vIMIfYM3j> Mar 3 12:03:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=70193, secured, session= Mar 3 12:03:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<70193>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:03:21 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<65658>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 99.765 secs, 2 B in + 10+2 B out, state=wait-input) in=574, out=11353, bytes=574/11353 Mar 3 12:03:21 server dovecot[55220]: imap(info@paragoninterior.co.uk)<65657>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 99.755 secs, 2 B in + 10+2 B out, state=wait-input) in=1598, out=28459, bytes=1598/28459 Mar 3 12:03:21 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<65659>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 99.769 secs, 2 B in + 10+2 B out, state=wait-input) in=546, out=9994, bytes=546/9994 Mar 3 12:03:21 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70197, TLS, session= Mar 3 12:03:21 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70198, TLS, session= Mar 3 12:03:21 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70199, TLS, session= Mar 3 12:03:22 server dovecot[55220]: imap(info@southlakeswindows.com)<65216>: Disconnected: Connection closed (UID FETCH finished 0.158 secs ago) in=983, out=23261743, bytes=983/23261743 Mar 3 12:03:22 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=70208, TLS, session= Mar 3 12:03:29 server dovecot[55220]: imap(info@paragoninterior.co.uk)<70179>: Disconnected: Connection closed (FETCH finished 9.260 secs ago) in=154, out=2245, bytes=154/2245 Mar 3 12:03:29 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<70186>: Disconnected: Connection closed (FETCH finished 9.220 secs ago) in=159, out=1316, bytes=159/1316 Mar 3 12:03:29 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<70185><6Mwu8W4vH8IfYM3j>: Disconnected: Connection closed (FETCH finished 9.232 secs ago) in=152, out=1736, bytes=152/1736 Mar 3 12:03:29 server dovecot[55220]: imap(info@paragoninterior.co.uk)<70178>: Disconnected: Connection closed (FETCH finished 9.261 secs ago) in=159, out=1475, bytes=159/1475 Mar 3 12:03:29 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<70188><5NAu8W4vIMIfYM3j>: Disconnected: Connection closed (SELECT finished 9.233 secs ago) in=139, out=1033, bytes=139/1033 Mar 3 12:03:29 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<70187><5NAu8W4vIsIfYM3j>: Disconnected: Connection closed (FETCH finished 9.221 secs ago) in=152, out=1854, bytes=152/1854 Mar 3 12:03:29 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=70228, TLS, session= Mar 3 12:03:29 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=70229, TLS, session= Mar 3 12:03:29 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=70230, TLS, session= Mar 3 12:03:29 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=70231, TLS, session= Mar 3 12:03:29 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=70232, TLS, session=<+RTD8W4vMcIfYM3j> Mar 3 12:03:29 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=70233, TLS, session= Mar 3 12:03:30 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<70197>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 9.005 secs, 2 B in + 10+2 B out, state=wait-input) in=176, out=2270, bytes=176/2270 Mar 3 12:03:30 server dovecot[55220]: imap(info@paragoninterior.co.uk)<70198>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 8.986 secs, 2 B in + 10+2 B out, state=wait-input) in=177, out=3906, bytes=177/3906 Mar 3 12:03:30 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<70199>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 8.987 secs, 2 B in + 10+2 B out, state=wait-input) in=176, out=2185, bytes=176/2185 Mar 3 12:03:30 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=70244, TLS, session= Mar 3 12:03:30 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=70245, TLS, session= Mar 3 12:03:30 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.195, mpid=70246, TLS, session= Mar 3 12:03:35 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=70262, TLS, session= Mar 3 12:03:37 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=70270, TLS, session= Mar 3 12:03:38 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=70271, TLS, session=<9WZJ8m4vx8BawMu0> Mar 3 12:03:38 server dovecot[55220]: imap(info@paragoninterior.co.uk)<70229>: Disconnected: Connection closed (FETCH finished 9.184 secs ago) in=154, out=2245, bytes=154/2245 Mar 3 12:03:38 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<70230>: Disconnected: Connection closed (FETCH finished 9.313 secs ago) in=152, out=1854, bytes=152/1854 Mar 3 12:03:38 server dovecot[55220]: imap(info@paragoninterior.co.uk)<70231>: Disconnected: Connection closed (FETCH finished 9.298 secs ago) in=159, out=1475, bytes=159/1475 Mar 3 12:03:38 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<70228>: Disconnected: Connection closed (FETCH finished 9.299 secs ago) in=152, out=1736, bytes=152/1736 Mar 3 12:03:38 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<70232><+RTD8W4vMcIfYM3j>: Disconnected: Connection closed (FETCH finished 9.299 secs ago) in=159, out=1316, bytes=159/1316 Mar 3 12:03:38 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<70233>: Disconnected: Connection closed (SELECT finished 9.299 secs ago) in=139, out=1033, bytes=139/1033 Mar 3 12:03:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70277, TLS, session= Mar 3 12:03:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70279, TLS, session= Mar 3 12:03:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70278, TLS, session= Mar 3 12:03:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70280, TLS, session= Mar 3 12:03:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70281, TLS, session= Mar 3 12:03:39 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70282, TLS, session= Mar 3 12:03:39 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<55249>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 2157.116 secs, 2 B in + 10+2 B out, state=wait-input) in=584, out=11090, bytes=584/11090 Mar 3 12:03:40 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=70288, TLS, session=<7BVo8m4v8e+d58bG> Mar 3 12:03:40 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<70288><7BVo8m4v8e+d58bG>: Disconnected: Logged out in=38, out=586, bytes=38/586 Mar 3 12:03:42 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<70244>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 11.366 secs, 2 B in + 10+2 B out, state=wait-input) in=140, out=1078, bytes=140/1078 Mar 3 12:03:42 server dovecot[55220]: imap(info@paragoninterior.co.uk)<70245>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 11.353 secs, 2 B in + 10+2 B out, state=wait-input) in=140, out=1104, bytes=140/1104 Mar 3 12:03:42 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<70246>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 11.354 secs, 2 B in + 10+2 B out, state=wait-input) in=140, out=1111, bytes=140/1111 Mar 3 12:03:42 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70295, TLS, session= Mar 3 12:03:42 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70296, TLS, session=<7HyM8m4vR8IfYM3j> Mar 3 12:03:42 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=70297, TLS, session=<6ZWM8m4vSMIfYM3j> Mar 3 12:04:00 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<70271><9WZJ8m4vx8BawMu0>: Disconnected: Logged out in=36, out=583, bytes=36/583 Mar 3 12:04:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=70458, secured, session= Mar 3 12:04:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<70458>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:04:21 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=86.145.109.33, lip=172.31.3.195, mpid=70462, TLS, session= Mar 3 12:04:27 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:53552 to port 783, fd 6 Mar 3 12:04:27 server spamd[35473]: spamd: setuid to as240622a succeeded Mar 3 12:04:27 server spamd[35473]: spamd: checking message for as240622a:1017 Mar 3 12:04:27 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:04:27 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:04:28 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:04:28 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:04:28 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:04:28 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:04:28 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:04:28 server spamd[35473]: spamd: clean message (-2.0/5.0) for as240622a:1017 in 0.7 seconds, 64884 bytes. Mar 3 12:04:28 server spamd[35473]: spamd: result: . -1 - ARC_SIGNED,ARC_VALID,BAYES_00,DKIM_SIGNED,DKIM_VALID,HTML_MESSAGE,KAM_SHORT,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.7,size=64884,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=53552,mid=,bayes=0.000000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:04:28 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:04:28 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<70497>: msgid=: saved mail to INBOX Mar 3 12:04:28 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:04:32 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:42278 to port 783, fd 6 Mar 3 12:04:32 server spamd[35473]: spamd: setuid to fbb20240312a succeeded Mar 3 12:04:32 server spamd[35473]: spamd: checking message <3af89790-ec41-4d3a-bd1d-206edc6c8fc5.ukseller@shop.tiktok.com> for fbb20240312a:1035 Mar 3 12:04:32 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:04:32 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:04:32 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:04:32 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:04:32 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:04:32 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:04:32 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:04:32 server spamd[35473]: spamd: identified spam (15.1/5.0) for fbb20240312a:1035 in 0.7 seconds, 26628 bytes. Mar 3 12:04:32 server spamd[35473]: spamd: result: Y 15 - DKIM_SIGNED,DKIM_VALID,HTML_IMAGE_RATIO_02,HTML_MESSAGE,KAM_EU,KAM_FROM_SPAM,KAM_REALLYHUGEIMGSRC,KAM_SOMETLD_ARE_BAD_TLD,MIME_HTML_ONLY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.7,size=26628,user=fbb20240312a,uid=1035,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=42278,mid=<3af89790-ec41-4d3a-bd1d-206edc6c8fc5.ukseller@shop.tiktok.com>,autolearn=spam autolearn_force=no,shortcircuit=no Mar 3 12:04:32 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:04:32 server dovecot[55220]: lmtp(booking@penninghame.com)<70497>: msgid=<3af89790-ec41-4d3a-bd1d-206edc6c8fc5.ukseller@shop.tiktok.com>: saved mail to INBOX.spam Mar 3 12:04:32 server dovecot[55220]: lmtp(office@penninghame.com)<70497>: msgid=<3af89790-ec41-4d3a-bd1d-206edc6c8fc5.ukseller@shop.tiktok.com>: saved mail to INBOX.spam Mar 3 12:04:32 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:04:56 server dovecot[55220]: imap(estellegleave@partners-in-design.co.uk)<70593>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 12:04:56 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:55276 to port 783, fd 6 Mar 3 12:04:56 server spamd[35473]: spamd: setuid to fb20241023a succeeded Mar 3 12:04:56 server spamd[35473]: spamd: checking message for fb20241023a:1045 Mar 3 12:04:56 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:04:56 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:04:57 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:04:57 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:04:57 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:04:57 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:04:57 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:04:57 server spamd[35473]: spamd: identified spam (14.0/5.0) for fb20241023a:1045 in 0.6 seconds, 4608 bytes. Mar 3 12:04:57 server spamd[35473]: spamd: result: Y 14 - BAYES_99,BAYES_999,CPANEL_LOTS_OF_EMPTY_LINE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FSL_BULK_SIG,HTML_IMAGE_ONLY_16,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,RDNS_NONE,SPF_PASS,URIBL_ABUSE_SURBL,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=4608,user=fb20241023a,uid=1045,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=55276,mid=,bayes=1.000000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:04:57 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:04:57 server dovecot[55220]: lmtp(barbaraproctor@partners-in-design.co.uk)<70497>: msgid=: saved mail to INBOX.spam Mar 3 12:04:57 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:05:07 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:56246 to port 783, fd 6 Mar 3 12:05:07 server spamd[35473]: spamd: setuid to fba20240816a succeeded Mar 3 12:05:07 server spamd[35473]: spamd: checking message for fba20240816a:1044 Mar 3 12:05:07 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:05:07 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:05:07 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:05:07 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:05:07 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:05:07 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:05:07 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:05:07 server spamd[35473]: spamd: clean message (-0.2/5.0) for fba20240816a:1044 in 0.6 seconds, 16035 bytes. Mar 3 12:05:07 server spamd[35473]: spamd: result: . 0 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=16035,user=fba20240816a,uid=1044,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=56246,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:05:07 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:05:07 server dovecot[55220]: lmtp(simon@lignumdesigns.co.uk)<70497>: msgid=: saved mail to INBOX Mar 3 12:05:07 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:05:11 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=70690, TLS, session= Mar 3 12:05:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=70694, TLS, session= Mar 3 12:05:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=70695, TLS, session=<0C7q924vz+DVe4dK> Mar 3 12:05:18 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<70695><0C7q924vz+DVe4dK>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.074 secs, 2 B in + 10+2 B out, state=wait-input) in=361, out=1584, bytes=361/1584 Mar 3 12:05:18 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<70694>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.180 secs, 2 B in + 10+2 B out, state=wait-input) in=425, out=1585, bytes=425/1585 Mar 3 12:05:18 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<70690>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 4.839 secs, 2 B in + 10+2 B out, state=wait-input) in=565, out=31896, bytes=565/31896 Mar 3 12:05:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=70729, secured, session= Mar 3 12:05:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<70729>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:05:31 server dovecot[55220]: imap(lee@precisionheatplumbing.co.uk)<68480>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 238.764 secs, 2 B in + 10+2 B out, state=wait-input) in=503, out=233368, bytes=503/233368 Mar 3 12:05:32 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=70967, TLS, session= Mar 3 12:05:33 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<70967>: Disconnected: Connection closed (LIST finished 0.169 secs ago) in=56, out=1944, bytes=56/1944 Mar 3 12:05:33 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=70994, TLS, session= Mar 3 12:05:33 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<70994>: Disconnected: Connection closed (UID SEARCH finished 0.039 secs ago) in=81, out=1433, bytes=81/1433 Mar 3 12:05:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=71014, TLS, session= Mar 3 12:05:34 server dovecot[55220]: imap-hibernate(accounts@northbuild.co.uk)<55502>: Disconnected: Connection closed in=0, out=176, bytes=0/176 Mar 3 12:05:34 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<71014>: Disconnected: Connection closed (UID FETCH finished 0.029 secs ago) in=182, out=1851, bytes=182/1851 Mar 3 12:05:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=71051, TLS, session= Mar 3 12:05:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=71052, TLS, session= Mar 3 12:05:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=71054, TLS, session= Mar 3 12:05:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=71057, TLS, session= Mar 3 12:05:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=71059, TLS, session= Mar 3 12:05:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=71058, TLS, session= Mar 3 12:05:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=71060, TLS, session= Mar 3 12:05:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=71061, TLS, session= Mar 3 12:05:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=71062, TLS, session=<7VU4+W4vVcIfYM3j> Mar 3 12:05:49 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=71559, TLS, session= Mar 3 12:05:49 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<71559>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 12:05:55 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:43872 to port 783, fd 6 Mar 3 12:05:55 server spamd[35473]: spamd: setuid to fba20240514a succeeded Mar 3 12:05:55 server spamd[35473]: spamd: checking message for fba20240514a:1039 Mar 3 12:05:55 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:05:55 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:05:55 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:05:55 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:05:55 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:05:55 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:05:55 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:05:55 server spamd[35473]: spamd: identified spam (12.9/5.0) for fba20240514a:1039 in 0.6 seconds, 4540 bytes. Mar 3 12:05:55 server spamd[35473]: spamd: result: Y 12 - CPANEL_LOTS_OF_EMPTY_LINE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FSL_BULK_SIG,HTML_IMAGE_ONLY_16,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_PSBL,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,RDNS_NONE,SPF_PASS,URIBL_ABUSE_SURBL,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=4540,user=fba20240514a,uid=1039,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=43872,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:05:55 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:05:55 server dovecot[55220]: lmtp(chris@rosecountyinteriors.co.uk)<70497>: msgid=: saved mail to INBOX.spam Mar 3 12:05:55 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:05:59 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:43880 to port 783, fd 6 Mar 3 12:05:59 server spamd[35473]: spamd: setuid to fb181022a succeeded Mar 3 12:05:59 server spamd[35473]: spamd: checking message <20250303040518.8E4C1B312392A854@northbuild.co.uk> for fb181022a:1019 Mar 3 12:05:59 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:05:59 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:05:59 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:05:59 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:05:59 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:05:59 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:05:59 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:06:00 server spamd[35473]: spamd: identified spam (28.0/5.0) for fb181022a:1019 in 0.9 seconds, 23285 bytes. Mar 3 12:06:00 server spamd[35473]: spamd: result: Y 27 - FROM_IN_TO_AND_SUBJ,FSL_BULK_SIG,HTML_ENTITY_ASCII,HTML_MESSAGE,KAM_COUK,KAM_DMARC_QUARANTINE,KAM_DMARC_STATUS,KAM_INFOUSMEBIZ,KAM_MAILBOX2,KAM_SOMETLD_ARE_BAD_TLD,MIME_HTML_ONLY,PDS_FRNOM_TODOM_DBL_URL,PDS_FRNOM_TODOM_NAKED_TO,PDS_FROM_NAME_TO_DOMAIN,PDS_OTHER_BAD_TLD,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,RDNS_NONE,SPF_HELO_SOFTFAIL,SPF_SOFTFAIL,TO_EQ_FM_DIRECT_MX,TO_NO_BRKTS_FROM_MSSP,TO_NO_BRKTS_NORDNS_HTML,T_MXG_EMAIL_FRAG,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.9,size=23285,user=fb181022a,uid=1019,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=43880,mid=<20250303040518.8E4C1B312392A854@northbuild.co.uk>,autolearn=spam autolearn_force=no,shortcircuit=no Mar 3 12:06:00 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:06:00 server dovecot[55220]: lmtp(info@northbuild.co.uk)<70497>: msgid=<20250303040518.8E4C1B312392A854@northbuild.co.uk>: saved mail to INBOX.spam Mar 3 12:06:00 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:06:07 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<71051>: Disconnected: Connection closed (SELECT finished 32.571 secs ago) in=139, out=1033, bytes=139/1033 Mar 3 12:06:07 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<71058>: Disconnected: Connection closed (FETCH finished 32.464 secs ago) in=152, out=1736, bytes=152/1736 Mar 3 12:06:07 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<71052>: Disconnected: Connection closed (FETCH finished 32.540 secs ago) in=152, out=1854, bytes=152/1854 Mar 3 12:06:07 server dovecot[55220]: imap(info@paragoninterior.co.uk)<71057>: Disconnected: Connection closed (FETCH finished 32.545 secs ago) in=154, out=2245, bytes=154/2245 Mar 3 12:06:07 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<71062><7VU4+W4vVcIfYM3j>: Disconnected: Connection closed (FETCH finished 32.524 secs ago) in=159, out=1316, bytes=159/1316 Mar 3 12:06:07 server dovecot[55220]: imap(info@paragoninterior.co.uk)<71061>: Disconnected: Connection closed (FETCH finished 32.526 secs ago) in=159, out=1475, bytes=159/1475 Mar 3 12:06:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=71656, TLS, session= Mar 3 12:06:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.196, mpid=71657, TLS, session= Mar 3 12:06:12 server dovecot[55220]: imap(info@mwaccess.co.uk)<71656>: Disconnected: Connection closed (LIST finished 0.327 secs ago) in=56, out=1772, bytes=56/1772 Mar 3 12:06:12 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<71657>: Disconnected: Connection closed (LIST finished 0.327 secs ago) in=56, out=1944, bytes=56/1944 Mar 3 12:06:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=71658, TLS, session= Mar 3 12:06:12 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.196, mpid=71659, TLS, session=<86SD+24v4sMzm5mb> Mar 3 12:06:13 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<71659><86SD+24v4sMzm5mb>: Disconnected: Connection closed (UID SEARCH finished 0.083 secs ago) in=81, out=1433, bytes=81/1433 Mar 3 12:06:13 server dovecot[55220]: imap(info@mwaccess.co.uk)<71658>: Disconnected: Connection closed (UID FETCH finished 0.073 secs ago) in=111, out=1582, bytes=111/1582 Mar 3 12:06:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.196, mpid=71663, TLS, session= Mar 3 12:06:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=71664, TLS, session= Mar 3 12:06:13 server dovecot[55220]: imap(logistics@earthtoheaven.co.uk)<71663>: Disconnected: Connection closed (UID FETCH finished 0.027 secs ago) in=182, out=1851, bytes=182/1851 Mar 3 12:06:13 server dovecot[55220]: imap(info@mwaccess.co.uk)<71664>: Disconnected: Connection closed (UID SEARCH finished 0.024 secs ago) in=149, out=1598, bytes=149/1598 Mar 3 12:06:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=71689, secured, session= Mar 3 12:06:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<71689>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:06:23 server spamd[35473]: spamd: connection from localhost [::1]:54154 to port 783, fd 5 Mar 3 12:06:23 server dovecot[55220]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= Mar 3 12:06:23 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:06:23 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=GREETING) Mar 3 12:06:23 server dovecot[55220]: imap-login: Login: user=<__cpanel__service__auth__imap__g8fzvoe_6llcf410>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=71771, secured, session= Mar 3 12:06:23 server dovecot[55220]: imap(__cpanel__service__auth__imap__g8fzvoe_6llcf410)<71771>: Disconnected: Logged out in=11, out=519, bytes=11/519 Mar 3 12:06:29 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:45954 to port 783, fd 6 Mar 3 12:06:29 server spamd[35473]: spamd: setuid to fb20241023a succeeded Mar 3 12:06:29 server spamd[35473]: spamd: checking message <20250303120542.A6D9C1800177@rack56.myspamonline.com> for fb20241023a:1045 Mar 3 12:06:29 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:06:29 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:06:30 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:06:30 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:06:30 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:06:30 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:06:30 server spamd[35473]: spamd: clean message (0.9/5.0) for fb20241023a:1045 in 0.6 seconds, 10924 bytes. Mar 3 12:06:30 server spamd[35473]: spamd: result: . 0 - BAYES_50,HTML_MESSAGE,KAM_DMARC_STATUS,MIME_HTML_ONLY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=10924,user=fb20241023a,uid=1045,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=45954,mid=<20250303120542.A6D9C1800177@rack56.myspamonline.com>,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:06:30 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:06:30 server dovecot[55220]: lmtp(fb20241023a@server.becreativemail.co.uk)<70497>: msgid=<20250303120542.A6D9C1800177@rack56.myspamonline.com>: saved mail to INBOX Mar 3 12:06:30 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:06:30 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:45960 to port 783, fd 6 Mar 3 12:06:30 server spamd[35473]: spamd: setuid to fb20211118a succeeded Mar 3 12:06:30 server spamd[35473]: spamd: checking message for fb20211118a:1007 Mar 3 12:06:30 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:06:30 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:06:31 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:06:31 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:06:31 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:06:31 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:06:31 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:06:31 server spamd[35473]: spamd: clean message (1.3/8.0) for fb20211118a:1007 in 0.7 seconds, 753211 bytes. Mar 3 12:06:31 server spamd[35473]: spamd: result: . 1 - BAYES_50,HTML_MESSAGE,KAM_DMARC_STATUS,KAM_NUMSUBJECT,KAM_SHORT,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.7,size=753211,user=fb20211118a,uid=1007,required_score=8.0,rhost=localhost,raddr=127.0.0.1,rport=45960,mid=,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:06:31 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:06:31 server dovecot[55220]: lmtp(steven@southlakeswindows.com)<70497>: msgid=: saved mail to INBOX Mar 3 12:06:31 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:06:33 server dovecot[55220]: imap(steven@southlakeswindows.com)<70208>: Disconnected: Connection closed (UID FETCH finished 190.162 secs ago) in=745, out=61792, bytes=745/61792 Mar 3 12:06:33 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=71864, TLS, session= Mar 3 12:06:47 server dovecot[55220]: imap(info@southlakeswindows.com)<71864>: Disconnected: Connection closed (UID FETCH finished 0.049 secs ago) in=917, out=345973, bytes=917/345973 Mar 3 12:06:47 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=71911, TLS, session= Mar 3 12:07:09 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:37120 to port 783, fd 6 Mar 3 12:07:09 server spamd[35473]: spamd: setuid to fb181022a succeeded Mar 3 12:07:09 server spamd[35473]: spamd: checking message <20250303230625.47124AC760B13673@develitary.com> for fb181022a:1019 Mar 3 12:07:09 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:07:09 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:07:10 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:07:10 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:07:10 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:07:10 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:07:10 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:07:10 server spamd[35473]: spamd: identified spam (10.6/5.0) for fb181022a:1019 in 0.6 seconds, 10816 bytes. Mar 3 12:07:10 server spamd[35473]: spamd: result: Y 10 - AC_FROM_MANY_DOTS,HTML_EXTRA_CLOSE,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,KAM_DMARC_STATUS,KAM_INFOUSMEBIZ,MIME_HTML_ONLY,RCVD_IN_PSBL,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,RDNS_NONE,SPF_HELO_PASS,SPF_PASS,URIBL_ABUSE_SURBL,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=10816,user=fb181022a,uid=1019,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=37120,mid=<20250303230625.47124AC760B13673@develitary.com>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:07:10 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:07:10 server dovecot[55220]: lmtp(fb181022a@server.becreativemail.co.uk)<70497><6CmaCG6bxWdhEwEAm+Yclw>: msgid=<20250303230625.47124AC760B13673@develitary.com>: saved mail to INBOX.spam Mar 3 12:07:10 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:07:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=72016, TLS, session= Mar 3 12:07:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=72017, TLS, session=<01kh/24vOM4zm5mb> Mar 3 12:07:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=72018, TLS, session= Mar 3 12:07:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.196, mpid=72019, TLS, session= Mar 3 12:07:13 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=72020, TLS, session= Mar 3 12:07:14 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=72024, TLS, session=<2I0s/24vRM4zm5mb> Mar 3 12:07:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=72047, secured, session= Mar 3 12:07:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<72047>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:07:21 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:56788 to port 783, fd 6 Mar 3 12:07:21 server spamd[35473]: spamd: setuid to fb20211118a succeeded Mar 3 12:07:21 server spamd[35473]: spamd: checking message for fb20211118a:1007 Mar 3 12:07:22 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:07:22 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:07:22 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:07:22 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:07:22 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:07:22 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:07:22 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:07:22 server spamd[35473]: spamd: clean message (1.3/8.0) for fb20211118a:1007 in 0.7 seconds, 658072 bytes. Mar 3 12:07:22 server spamd[35473]: spamd: result: . 1 - BAYES_50,HTML_MESSAGE,KAM_DMARC_STATUS,KAM_NUMSUBJECT,KAM_SHORT,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.7,size=658072,user=fb20211118a,uid=1007,required_score=8.0,rhost=localhost,raddr=127.0.0.1,rport=56788,mid=,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:07:22 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:07:22 server dovecot[55220]: lmtp(steven@southlakeswindows.com)<70497>: msgid=: saved mail to INBOX Mar 3 12:07:22 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:07:26 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:56800 to port 783, fd 6 Mar 3 12:07:26 server spamd[35473]: spamd: setuid to fba20240816a succeeded Mar 3 12:07:26 server spamd[35473]: spamd: checking message for fba20240816a:1044 Mar 3 12:07:26 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:07:26 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:07:27 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:07:27 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:07:27 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:07:27 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:07:27 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:07:27 server spamd[35473]: spamd: clean message (-0.2/5.0) for fba20240816a:1044 in 0.6 seconds, 23102 bytes. Mar 3 12:07:27 server spamd[35473]: spamd: result: . 0 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=23102,user=fba20240816a,uid=1044,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=56800,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:07:27 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:07:27 server dovecot[55220]: lmtp(simon@lignumdesigns.co.uk)<70497>: msgid=: saved mail to INBOX Mar 3 12:07:27 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:07:36 server dovecot[55220]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=196.251.67.30, lip=172.31.3.195, session= Mar 3 12:07:47 server dovecot[55220]: imap(faye@domain-authority.co.uk)<72162>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 12:07:47 server dovecot[55220]: imap(faye@becreativemail.co.uk)<72160>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 12:07:47 server dovecot[55220]: imap(faye@omnom.co.uk)<72159><2I0s/24vRM4zm5mb>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 12:07:47 server dovecot[55220]: imap(development@domain-authority.co.uk)<72164><01kh/24vOM4zm5mb>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 12:07:47 server dovecot[55220]: imap(domains@domain-authority.co.uk)<72163>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 12:07:47 server dovecot[55220]: imap(hello@olmate.co.nz)<72161>: Disconnected: Logged out in=11, out=92, bytes=11/92 Mar 3 12:07:50 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:60356 to port 783, fd 6 Mar 3 12:07:50 server spamd[35473]: spamd: setuid to fb20241023a succeeded Mar 3 12:07:50 server spamd[35473]: spamd: checking message <20250303120710.1D8A9180013F@rack56.myspamonline.com> for fb20241023a:1045 Mar 3 12:07:50 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:07:50 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:07:51 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:07:51 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:07:51 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:07:51 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:07:51 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:07:51 server spamd[35473]: spamd: clean message (0.9/5.0) for fb20241023a:1045 in 0.6 seconds, 10920 bytes. Mar 3 12:07:51 server spamd[35473]: spamd: result: . 0 - BAYES_50,HTML_MESSAGE,KAM_DMARC_STATUS,MIME_HTML_ONLY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=10920,user=fb20241023a,uid=1045,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=60356,mid=<20250303120710.1D8A9180013F@rack56.myspamonline.com>,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:07:51 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:07:51 server dovecot[55220]: lmtp(barbaraproctor@partners-in-design.co.uk)<70497>: msgid=<20250303120710.1D8A9180013F@rack56.myspamonline.com>: saved mail to INBOX Mar 3 12:07:51 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:08:00 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:52166 to port 783, fd 6 Mar 3 12:08:00 server spamd[35473]: spamd: setuid to as240622a succeeded Mar 3 12:08:00 server spamd[35473]: spamd: checking message <0.0.111.509.1DB8C33F559D318.0@emx195.instillerhq.com> for as240622a:1017 Mar 3 12:08:00 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:08:00 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:08:01 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:08:01 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:08:01 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:08:01 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:08:01 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:08:01 server spamd[35473]: spamd: clean message (2.1/5.0) for as240622a:1017 in 0.6 seconds, 51730 bytes. Mar 3 12:08:01 server spamd[35473]: spamd: result: . 2 - BAYES_50,CPANEL_LOTS_OF_EMPTY_LINE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,KAM_COUK,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS,URI_NOVOWEL scantime=0.6,size=51730,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=52166,mid=<0.0.111.509.1DB8C33F559D318.0@emx195.instillerhq.com>,bayes=0.500002,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:08:01 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:08:01 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<70497>: msgid=<0.0.111.509.1DB8C33F559D318.0@emx195.instillerhq.com>: saved mail to INBOX Mar 3 12:08:01 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:08:03 server dovecot[55220]: imap(steven@southlakeswindows.com)<71911>: Disconnected: Connection closed (UID MOVE finished 29.210 secs ago) in=1047, out=1597916, bytes=1047/1597916 Mar 3 12:08:03 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=72238, TLS, session= Mar 3 12:08:06 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:50344 to port 783, fd 6 Mar 3 12:08:06 server spamd[35473]: spamd: setuid to fbb20240312a succeeded Mar 3 12:08:06 server spamd[35473]: spamd: checking message for fbb20240312a:1035 Mar 3 12:08:06 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:08:06 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:08:06 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:08:06 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:08:06 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:08:06 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:08:06 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:08:06 server spamd[35473]: spamd: identified spam (15.1/5.0) for fbb20240312a:1035 in 0.6 seconds, 26532 bytes. Mar 3 12:08:06 server spamd[35473]: spamd: result: Y 15 - DKIM_SIGNED,DKIM_VALID,HTML_IMAGE_RATIO_02,HTML_MESSAGE,KAM_EU,KAM_FROM_SPAM,KAM_REALLYHUGEIMGSRC,KAM_SOMETLD_ARE_BAD_TLD,MIME_HTML_ONLY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=26532,user=fbb20240312a,uid=1035,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=50344,mid=,autolearn=spam autolearn_force=no,shortcircuit=no Mar 3 12:08:07 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:08:07 server dovecot[55220]: lmtp(booking@penninghame.com)<70497>: msgid=: saved mail to INBOX.spam Mar 3 12:08:07 server dovecot[55220]: lmtp(office@penninghame.com)<70497>: msgid=: saved mail to INBOX.spam Mar 3 12:08:07 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:08:14 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=72285, TLS, session= Mar 3 12:08:14 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<72285>: Disconnected: Logged out in=34, out=580, bytes=34/580 Mar 3 12:08:15 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=51.155.153.155, lip=172.31.3.195, mpid=72290, TLS, session=<7jjLAm8vFLgzm5mb> Mar 3 12:08:15 server dovecot[55220]: imap(info@mwaccess.co.uk)<72290><7jjLAm8vFLgzm5mb>: Disconnected: Connection closed (SELECT finished 0.178 secs ago) in=115, out=1128, bytes=115/1128 Mar 3 12:08:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=72310, secured, session= Mar 3 12:08:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<72310>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:09:04 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=72485, TLS, session= Mar 3 12:09:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=72545, secured, session= Mar 3 12:09:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<72545>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:09:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=72594, TLS, session= Mar 3 12:09:36 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:37046 to port 783, fd 6 Mar 3 12:09:36 server spamd[35473]: spamd: setuid to as240622a succeeded Mar 3 12:09:36 server spamd[35473]: spamd: checking message <010201955be8c4cf-be5d1b22-f48a-403a-ad83-40345358a0e6-000000@eu-west-1.amazonses.com> for as240622a:1017 Mar 3 12:09:36 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:09:36 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:09:37 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:09:37 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:09:37 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:09:37 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:09:37 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:09:37 server spamd[35473]: spamd: clean message (3.8/5.0) for as240622a:1017 in 0.6 seconds, 38447 bytes. Mar 3 12:09:37 server spamd[35473]: spamd: result: . 3 - BAYES_50,CPANEL_LOTS_OF_EMPTY_LINE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_EU,KAM_INFOUSMEBIZ,KAM_MARKETINGBL_PCCC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=38447,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=37046,mid=<010201955be8c4cf-be5d1b22-f48a-403a-ad83-40345358a0e6-000000@eu-west-1.amazonses.com>,bayes=0.500000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:09:37 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:09:37 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<70497>: msgid=<010201955be8c4cf-be5d1b22-f48a-403a-ad83-40345358a0e6-000000@eu-west-1.amazonses.com>: saved mail to INBOX Mar 3 12:09:37 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:09:37 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=164.39.147.14, lip=172.31.3.195, mpid=72613, TLS, session= Mar 3 12:09:44 server dovecot[55220]: imap(enquiries@ryedalegaragedoors.co.uk)<72613>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.590 secs, 2 B in + 10+2 B out, state=wait-input) in=288, out=2419, bytes=288/2419 Mar 3 12:09:45 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=72637, TLS, session= Mar 3 12:09:46 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=72641, TLS, session=<2RA6CG8vYMIfYM3j> Mar 3 12:09:47 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:55512 to port 783, fd 6 Mar 3 12:09:47 server spamd[35473]: spamd: setuid to fba17102023a succeeded Mar 3 12:09:47 server spamd[35473]: spamd: checking message <41245018289921975224165@DESKTOP-2RA7D79> for fba17102023a:1030 Mar 3 12:09:47 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:09:47 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:09:48 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:09:48 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:09:48 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:09:48 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:09:48 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:09:48 server spamd[35473]: spamd: clean message (-0.1/5.0) for fba17102023a:1030 in 1.5 seconds, 10831 bytes. Mar 3 12:09:48 server spamd[35473]: spamd: result: . 0 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,T_REMOTE_IMAGE,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=1.5,size=10831,user=fba17102023a,uid=1030,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=55512,mid=<41245018289921975224165@DESKTOP-2RA7D79>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:09:48 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:09:48 server dovecot[55220]: lmtp(info@mwaccess.co.uk)<70497>: msgid=<41245018289921975224165@DESKTOP-2RA7D79>: saved mail to INBOX Mar 3 12:09:48 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:09:50 server dovecot[55220]: imap(sedbergh@hanleycaravans.co.uk)<72652>: Disconnected: Logged out in=15, out=135, bytes=15/135 Mar 3 12:09:50 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.98.169.53, lip=172.31.3.195, mpid=72667, TLS, session= Mar 3 12:10:00 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=72720, TLS, session=<37cSCW8vlH9V/+kh> Mar 3 12:10:01 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:48814 to port 783, fd 6 Mar 3 12:10:01 server spamd[35473]: spamd: setuid to afb070223a succeeded Mar 3 12:10:01 server spamd[35473]: spamd: checking message <202503031209.523C9JWw040694@payments-dsworker-mz-blue-wgtz.c.etsy-web-prod.internal> for afb070223a:1025 Mar 3 12:10:01 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:10:01 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:10:01 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:10:01 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:10:01 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:10:01 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:10:01 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:10:01 server spamd[35473]: spamd: clean message (-0.7/8.0) for afb070223a:1025 in 0.7 seconds, 60904 bytes. Mar 3 12:10:01 server spamd[35473]: spamd: result: . 0 - BAYES_00,CPANEL_LOTS_OF_EMPTY_LINE,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_EF,HTML_MESSAGE,KAM_REALLYHUGEIMGSRC,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.7,size=60904,user=afb070223a,uid=1025,required_score=8.0,rhost=localhost,raddr=127.0.0.1,rport=48814,mid=<202503031209.523C9JWw040694@payments-dsworker-mz-blue-wgtz.c.etsy-web-prod.internal>,bayes=0.000000,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:10:01 server dovecot[55220]: lmtp(70497): Connect from local Mar 3 12:10:01 server dovecot[55220]: lmtp(sales@earthtoheaven.co.uk)<70497>: msgid=<202503031209.523C9JWw040694@payments-dsworker-mz-blue-wgtz.c.etsy-web-prod.internal>: saved mail to INBOX Mar 3 12:10:01 server dovecot[55220]: lmtp(70497): Disconnect from local: Logged out (state=READY) Mar 3 12:10:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=72830, secured, session= Mar 3 12:10:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<72830>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:10:22 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=72841, TLS, session= Mar 3 12:10:23 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=72856, TLS, session= Mar 3 12:10:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=72891, TLS, session= Mar 3 12:10:41 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<70295>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 419.072 secs, 2 B in + 10+2 B out, state=wait-input) in=140, out=1095, bytes=140/1095 Mar 3 12:10:41 server dovecot[55220]: imap(info@paragoninterior.co.uk)<70297><6ZWM8m4vSMIfYM3j>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 419.062 secs, 2 B in + 10+2 B out, state=wait-input) in=140, out=1121, bytes=140/1121 Mar 3 12:10:41 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<70296><7HyM8m4vR8IfYM3j>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 419.059 secs, 2 B in + 10+2 B out, state=wait-input) in=140, out=1128, bytes=140/1128 Mar 3 12:10:57 server dovecot[55220]: imap-hibernate(office@penninghame.com)<55502><0MtPtG4vL/heCx5v>: Disconnected: Connection closed in=0, out=97, bytes=0/97 Mar 3 12:11:02 server dovecot[55220]: imap(hello@coffinandurnstore.co.uk)<72841>: Disconnected: Logged out in=954, out=190054, bytes=954/190054 Mar 3 12:11:02 server dovecot[55220]: imap(sales@earthtoheaven.co.uk)<72856>: Disconnected: Logged out in=2095, out=256491, bytes=2095/256491 Mar 3 12:11:12 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:42120 to port 783, fd 6 Mar 3 12:11:12 server spamd[35473]: spamd: setuid to as240622a succeeded Mar 3 12:11:12 server spamd[35473]: spamd: checking message <7610b698-f9f8-4040-afe4-3567b76abf24_c4ffc3d7-547a-4af9-b3a7-b840c9f27595_20250303121030@cardiffcruises.co.uk> for as240622a:1017 Mar 3 12:11:12 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:11:12 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:11:12 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:11:12 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:11:12 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:11:12 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:11:12 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:11:12 server spamd[35473]: spamd: clean message (1.3/5.0) for as240622a:1017 in 0.6 seconds, 17666 bytes. Mar 3 12:11:12 server spamd[35473]: spamd: result: . 1 - BAYES_50,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_IMAGE_RATIO_02,HTML_MESSAGE,KAM_COUK,KAM_EU,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.6,size=17666,user=as240622a,uid=1017,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=42120,mid=<7610b698-f9f8-4040-afe4-3567b76abf24_c4ffc3d7-547a-4af9-b3a7-b840c9f27595_20250303121030@cardiffcruises.co.uk>,bayes=0.500016,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:11:13 server dovecot[55220]: lmtp(73056): Connect from local Mar 3 12:11:13 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<73056>: msgid=<7610b698-f9f8-4040-afe4-3567b76abf24_c4ffc3d7-547a-4af9-b3a7-b840c9f27595_20250303121030@cardiffcruises.co.uk>: saved mail to INBOX Mar 3 12:11:13 server dovecot[55220]: lmtp(73056): Disconnect from local: Logged out (state=READY) Mar 3 12:11:20 server dovecot[55220]: imap(info@southlakeswindows.com)<72238>: Disconnected: Connection closed (UID FETCH finished 0.667 secs ago) in=928, out=346019, bytes=928/346019 Mar 3 12:11:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=73084, TLS, session=<3hjbDW8vIceU/BKD> Mar 3 12:11:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=73087, secured, session=<3T7dDW8vwMYAAAAAAAAAAAAAAAAAAAAB> Mar 3 12:11:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<73087><3T7dDW8vwMYAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:11:43 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=73170, TLS, session= Mar 3 12:11:43 server spamd[35473]: spamd: connection from localhost [::1]:36738 to port 783, fd 5 Mar 3 12:11:43 server dovecot[55220]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= Mar 3 12:11:43 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<73170>: Disconnected: Logged out in=38, out=586, bytes=38/586 Mar 3 12:11:43 server dovecot[55220]: lmtp(73056): Connect from local Mar 3 12:11:43 server dovecot[55220]: lmtp(73056): Disconnect from local: Logged out (state=GREETING) Mar 3 12:11:44 server dovecot[55220]: imap-login: Login: user=<__cpanel__service__auth__imap__g8fzvoe_6llcf410>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=73237, secured, session= Mar 3 12:11:44 server dovecot[55220]: imap(__cpanel__service__auth__imap__g8fzvoe_6llcf410)<73237>: Disconnected: Logged out in=11, out=519, bytes=11/519 Mar 3 12:11:48 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:46324 to port 783, fd 6 Mar 3 12:11:48 server spamd[35473]: spamd: setuid to fbb28102022a succeeded Mar 3 12:11:48 server spamd[35473]: spamd: checking message for fbb28102022a:1022 Mar 3 12:11:48 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:11:48 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:11:49 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:11:49 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:11:49 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:11:49 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:11:49 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:11:49 server spamd[35473]: spamd: clean message (0.9/5.0) for fbb28102022a:1022 in 0.7 seconds, 63658 bytes. Mar 3 12:11:49 server spamd[35473]: spamd: result: . 0 - BAYES_50,DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_COUK,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.7,size=63658,user=fbb28102022a,uid=1022,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=46324,mid=,bayes=0.575161,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:11:49 server dovecot[55220]: lmtp(73056): Connect from local Mar 3 12:11:49 server dovecot[55220]: lmtp(blackadder@hanleycaravans.co.uk)<73056>: msgid=: saved mail to INBOX Mar 3 12:11:49 server dovecot[55220]: lmtp(73056): Disconnect from local: Logged out (state=READY) Mar 3 12:11:49 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=73305, TLS, session= Mar 3 12:11:49 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<73305>: Disconnected: Logged out in=38, out=586, bytes=38/586 Mar 3 12:11:50 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<73284>: Disconnected: Logged out in=36, out=219, bytes=36/219 Mar 3 12:11:50 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.98.204.125, lip=172.31.3.195, mpid=73309, TLS, session=<6h2mD28v4WE0Ysx9> Mar 3 12:11:59 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.157.20, lip=172.31.3.195, mpid=73349, TLS, session= Mar 3 12:12:03 server dovecot[55220]: imap(accounts@northbuild.co.uk)<73094>: Disconnected: Connection closed (No commands sent after unhibernation) in=0, out=64, bytes=0/64 Mar 3 12:12:06 server dovecot[55220]: imap(info@southlakeswindows.com)<73349>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 5.830 secs, 2 B in + 10+2 B out, state=wait-input) in=295, out=15752, bytes=295/15752 Mar 3 12:12:19 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=81.155.165.44, lip=172.31.3.195, mpid=73416, TLS, session= Mar 3 12:12:19 server dovecot[55220]: pop3(sct@southcoasttravel.co.uk)<73416>: Disconnected: Logged out top=0/0, retr=6/328789, del=2/1493, size=1579260576, bytes=106/385758 Mar 3 12:12:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=73421, secured, session=<5oxvEW8v/ooAAAAAAAAAAAAAAAAAAAAB> Mar 3 12:12:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<73421><5oxvEW8v/ooAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:12:24 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=73442, secured, session= Mar 3 12:12:25 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<73442>: Disconnected: Logged out in=82, out=929, bytes=82/929 Mar 3 12:12:25 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=73457, secured, session=<01q4EW8vOOIAAAAAAAAAAAAAAAAAAAAB> Mar 3 12:12:25 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<73457><01q4EW8vOOIAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=129, out=971, bytes=129/971 Mar 3 12:12:25 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=73466, secured, session= Mar 3 12:12:25 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<73466>: Disconnected: Logged out in=362, out=1392, bytes=362/1392 Mar 3 12:12:25 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=73467, secured, session=<5gC/EW8vSOIAAAAAAAAAAAAAAAAAAAAB> Mar 3 12:12:25 server dovecot[55220]: imap(northeast@hanleycaravans.co.uk)<73467><5gC/EW8vSOIAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=464, out=36574, bytes=464/36574 Mar 3 12:12:34 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=31.96.205.227, lip=172.31.3.196, mpid=73497, TLS, session= Mar 3 12:12:42 server dovecot[55220]: lmtp(73056): Connect from local Mar 3 12:12:42 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<73056>: msgid=<00c001db8c35$8e824920$ab86db60$@southcoasttravel.co.uk>: saved mail to INBOX Mar 3 12:12:42 server dovecot[55220]: lmtp(73056): Disconnect from local: Logged out (state=READY) Mar 3 12:12:47 server dovecot[55220]: pop3-login: Login: user=, method=PLAIN, rip=31.94.74.2, lip=172.31.3.195, mpid=73550, session= Mar 3 12:12:48 server dovecot[55220]: pop3(chris@rosecountyinteriors.co.uk)<73550>: Disconnected: Logged out top=0/0, retr=0/0, del=0/349, size=53806501, bytes=22/80 Mar 3 12:12:50 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=213.123.135.74, lip=172.31.3.195, mpid=73561, TLS, session= Mar 3 12:12:57 server dovecot[55220]: imap(simon@lignumdesigns.co.uk)<73561>: Disconnected: Connection closed (IDLE running for 0.001 + waiting input for 3.950 secs, 2 B in + 10+2 B out, state=wait-input) in=589, out=67115, bytes=589/67115 Mar 3 12:13:01 server dovecot[55220]: imap(info@paragoninterior.co.uk)<64545>: Disconnected: Inactivity - no input for 1800 secs in=23, out=550, bytes=23/550 Mar 3 12:13:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=165.227.239.223, lip=172.31.3.196, mpid=73671, TLS, session= Mar 3 12:13:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=73673, secured, session= Mar 3 12:13:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<73673>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:13:33 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=73728, TLS, session= Mar 3 12:13:33 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=73730, TLS, session=<1n/JFW8v48BawMu0> Mar 3 12:13:33 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<73730><1n/JFW8v48BawMu0>: Disconnected: Logged out in=36, out=583, bytes=36/583 Mar 3 12:13:33 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<73728>: Disconnected: Logged out in=36, out=583, bytes=36/583 Mar 3 12:13:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=73813, TLS, session= Mar 3 12:13:55 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=73814, TLS, session= Mar 3 12:13:55 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<73813>: Disconnected: Logged out in=36, out=583, bytes=36/583 Mar 3 12:13:55 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<73814>: Disconnected: Logged out in=36, out=583, bytes=36/583 Mar 3 12:14:06 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:35032 to port 783, fd 6 Mar 3 12:14:06 server spamd[35473]: spamd: setuid to jfa20241216a succeeded Mar 3 12:14:06 server spamd[35473]: spamd: checking message <2F.2F.24101.E7C95C76@i-06d7e4bab5062f12a.mta3vrest.sd.prd.sparkpost> for jfa20241216a:1047 Mar 3 12:14:06 server spamd[62226]: spamd: connection from localhost [127.0.0.1]:35040 to port 783, fd 6 Mar 3 12:14:06 server spamd[62226]: spamd: setuid to jfa20241216a succeeded Mar 3 12:14:06 server spamd[62226]: spamd: checking message <2F.2F.24101.E7C95C76@i-06d7e4bab5062f12a.mta3vrest.sd.prd.sparkpost> for jfa20241216a:1047 Mar 3 12:14:06 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:14:06 server spamd[62226]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:14:06 server spamd[62226]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:14:06 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:14:07 server spamd[62226]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:14:07 server spamd[62226]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:14:07 server spamd[62226]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:14:07 server spamd[62226]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:14:07 server spamd[62226]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:14:07 server spamd[62226]: spamd: clean message (4.3/5.0) for jfa20241216a:1047 in 0.8 seconds, 41737 bytes. Mar 3 12:14:07 server spamd[62226]: spamd: result: . 4 - CPANEL_LOTS_OF_EMPTY_LINE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_EU,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_SOFTFAIL,TVD_PH_SUBJ_META,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.8,size=41737,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=35040,mid=<2F.2F.24101.E7C95C76@i-06d7e4bab5062f12a.mta3vrest.sd.prd.sparkpost>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:14:07 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:14:07 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:14:07 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:14:07 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:14:07 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:14:07 server spamd[35473]: spamd: clean message (4.3/5.0) for jfa20241216a:1047 in 0.9 seconds, 41477 bytes. Mar 3 12:14:07 server spamd[35473]: spamd: result: . 4 - CPANEL_LOTS_OF_EMPTY_LINE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_EU,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_SOFTFAIL,TVD_PH_SUBJ_META,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.9,size=41477,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=35032,mid=<2F.2F.24101.E7C95C76@i-06d7e4bab5062f12a.mta3vrest.sd.prd.sparkpost>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:14:07 server spamd[62226]: spamd: connection from localhost [127.0.0.1]:35056 to port 783, fd 6 Mar 3 12:14:07 server spamd[1460]: prefork: child states: II [... logline repeated 21 times] Mar 3 12:14:07 server spamd[1460]: prefork: child states: BB Mar 3 12:14:07 server spamd[1460]: spamd: server successfully spawned child process, pid 73884 Mar 3 12:14:07 server spamd[1460]: prefork: adjust: 0 idle children less than 1 minimum idle children. Increasing spamd children: 73884 started. Mar 3 12:14:07 server spamd[1460]: prefork: child states: IBS Mar 3 12:14:07 server spamd[62226]: spamd: setuid to jfa20241216a succeeded Mar 3 12:14:07 server spamd[1460]: prefork: child states: IBI Mar 3 12:14:07 server spamd[62226]: spamd: checking message <2F.2F.24101.E7C95C76@i-06d7e4bab5062f12a.mta3vrest.sd.prd.sparkpost> for jfa20241216a:1047 Mar 3 12:14:07 server dovecot[55220]: lmtp(73890): Connect from local Mar 3 12:14:07 server dovecot[55220]: lmtp(73891): Connect from local Mar 3 12:14:07 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<73890>: msgid=<2F.2F.24101.E7C95C76@i-06d7e4bab5062f12a.mta3vrest.sd.prd.sparkpost>: saved mail to INBOX Mar 3 12:14:07 server dovecot[55220]: lmtp(73890): Disconnect from local: Logged out (state=READY) Mar 3 12:14:07 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<73891>: msgid=<2F.2F.24101.E7C95C76@i-06d7e4bab5062f12a.mta3vrest.sd.prd.sparkpost>: saved mail to INBOX Mar 3 12:14:07 server dovecot[55220]: lmtp(73891): Disconnect from local: Logged out (state=READY) Mar 3 12:14:07 server spamd[62226]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:14:07 server spamd[62226]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:14:08 server spamd[62226]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:14:08 server spamd[62226]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:14:08 server spamd[62226]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:14:08 server spamd[62226]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:14:08 server spamd[62226]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:14:08 server spamd[62226]: spamd: clean message (4.3/5.0) for jfa20241216a:1047 in 0.8 seconds, 41477 bytes. Mar 3 12:14:08 server spamd[62226]: spamd: result: . 4 - CPANEL_LOTS_OF_EMPTY_LINE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_EU,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_PASS,SPF_SOFTFAIL,TVD_PH_SUBJ_META,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.8,size=41477,user=jfa20241216a,uid=1047,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=35056,mid=<2F.2F.24101.E7C95C76@i-06d7e4bab5062f12a.mta3vrest.sd.prd.sparkpost>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:14:08 server dovecot[55220]: lmtp(73891): Connect from local Mar 3 12:14:08 server spamd[1460]: prefork: child states: III Mar 3 12:14:08 server spamd[1460]: prefork: adjust: 3 idle children more than 2 maximum idle children. Decreasing spamd children: 73884 killed. Mar 3 12:14:08 server spamd[1460]: prefork: child states: IIK Mar 3 12:14:08 server spamd[1460]: spamd: handled cleanup of child pid [73884] due to SIGCHLD: interrupted, signal 2 (0002) Mar 3 12:14:08 server dovecot[55220]: lmtp(lee@precisionheatplumbing.co.uk)<73891><2CHkIRCdxWejIAEAm+Yclw>: msgid=<2F.2F.24101.E7C95C76@i-06d7e4bab5062f12a.mta3vrest.sd.prd.sparkpost>: saved mail to INBOX Mar 3 12:14:08 server dovecot[55220]: lmtp(73891): Disconnect from local: Logged out (state=READY) Mar 3 12:14:15 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:56224 to port 783, fd 6 Mar 3 12:14:15 server spamd[35473]: spamd: setuid to fb181022a succeeded Mar 3 12:14:15 server spamd[35473]: spamd: checking message for fb181022a:1019 Mar 3 12:14:15 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:14:15 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:14:15 server dovecot[55220]: imap(info@thebedstorekendal.co.uk)<73929>: Disconnected: Logged out in=15, out=136, bytes=15/136 Mar 3 12:14:15 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:14:15 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:14:15 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:14:15 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:14:15 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:14:15 server spamd[35473]: spamd: clean message (2.9/5.0) for fb181022a:1019 in 0.7 seconds, 39231 bytes. Mar 3 12:14:15 server spamd[35473]: spamd: result: . 2 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,KAM_BODY_MARKETINGBL_PCCC,KAM_MARKETINGBL_PCCC,KAM_REALLYHUGEIMGSRC,KAM_SHORT,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS,URIBL_GOLD,URIBL_GREY scantime=0.7,size=39231,user=fb181022a,uid=1019,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=56224,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:14:15 server dovecot[55220]: lmtp(73891): Connect from local Mar 3 12:14:15 server spamd[1460]: prefork: child states: II Mar 3 12:14:15 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.98.216.213, lip=172.31.3.195, mpid=73936, TLS, session= Mar 3 12:14:15 server dovecot[55220]: lmtp(info@northbuild.co.uk)<73891><6HjbNhedxWejIAEAm+Yclw>: msgid=: saved mail to INBOX Mar 3 12:14:15 server dovecot[55220]: lmtp(73891): Disconnect from local: Logged out (state=READY) Mar 3 12:14:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=73953, secured, session= Mar 3 12:14:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<73953>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:14:47 server dovecot[55220]: imap(steven@southlakeswindows.com)<73084><3hjbDW8vIceU/BKD>: Disconnected: Connection closed (UID FETCH finished 205.047 secs ago) in=745, out=61991, bytes=745/61991 Mar 3 12:14:47 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=148.252.18.131, lip=172.31.3.195, mpid=74048, TLS, session= Mar 3 12:14:59 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=74163, TLS, session= Mar 3 12:14:59 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<74163>: Disconnected: Logged out in=36, out=583, bytes=36/583 Mar 3 12:14:59 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=90.192.203.180, lip=172.31.3.195, mpid=74186, TLS, session= Mar 3 12:14:59 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<74186>: Disconnected: Logged out in=36, out=583, bytes=36/583 Mar 3 12:15:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=74410, secured, session= Mar 3 12:15:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<74410>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:15:28 server dovecot[55220]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 3 secs): user=, method=PLAIN, rip=196.251.67.27, lip=172.31.3.195, session= Mar 3 12:15:34 server dovecot[55220]: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=196.251.67.3, lip=172.31.3.195, session= Mar 3 12:15:47 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:35804 to port 783, fd 6 Mar 3 12:15:47 server spamd[35473]: spamd: setuid to fb181022a succeeded Mar 3 12:15:47 server spamd[35473]: spamd: checking message <75924304139841366812325@DESKTOP-T8MR660> for fb181022a:1019 Mar 3 12:15:47 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:15:47 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:15:47 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:15:47 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:15:47 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:15:47 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:15:47 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:15:47 server spamd[35473]: spamd: identified spam (6.1/5.0) for fb181022a:1019 in 0.3 seconds, 7496 bytes. Mar 3 12:15:47 server spamd[35473]: spamd: result: Y 6 - DKIM_ADSP_CUSTOM_MED,FORGED_GMAIL_RCVD,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,FREEMAIL_REPLYTO_END_DIGIT,HTML_MESSAGE,KAM_DMARC_NONE,KAM_DMARC_STATUS,MIME_HTML_ONLY,NML_ADSP_CUSTOM_MED,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_SOFTFAIL,SPOOFED_FREEMAIL,SPOOF_GMAIL_MID,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.3,size=7496,user=fb181022a,uid=1019,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=35804,mid=<75924304139841366812325@DESKTOP-T8MR660>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:15:47 server dovecot[55220]: lmtp(73891): Connect from local Mar 3 12:15:47 server dovecot[55220]: lmtp(info@northbuild.co.uk)<73891><6Aq5HHOdxWejIAEAm+Yclw>: msgid=<75924304139841366812325@DESKTOP-T8MR660>: saved mail to INBOX.spam Mar 3 12:15:47 server dovecot[55220]: lmtp(73891): Disconnect from local: Logged out (state=READY) Mar 3 12:15:47 server spamd[1460]: prefork: child states: II Mar 3 12:15:53 server dovecot[55220]: lmtp(73891): Connect from local Mar 3 12:15:53 server dovecot[55220]: lmtp(sct@southcoasttravel.co.uk)<73891><2F78A3mdxWejIAEAm+Yclw>: msgid=<00cd01db8c36$01cff490$056fddb0$@southcoasttravel.co.uk>: saved mail to INBOX Mar 3 12:15:53 server dovecot[55220]: lmtp(73891): Disconnect from local: Logged out (state=READY) Mar 3 12:16:18 server dovecot[55220]: imap(info@ge-photography.co.uk)<65621>: Disconnected: Inactivity - no input for 1800 secs in=23, out=550, bytes=23/550 Mar 3 12:16:18 server dovecot[55220]: imap(graham@ge-photography.co.uk)<65626>: Disconnected: Inactivity - no input for 1800 secs in=23, out=550, bytes=23/550 Mar 3 12:16:18 server dovecot[55220]: imap(graham@penninghame.com)<65628>: Disconnected: Inactivity - no input for 1800 secs in=23, out=550, bytes=23/550 Mar 3 12:16:20 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=74645, secured, session= Mar 3 12:16:20 server dovecot[55220]: imap(accounts@northbuild.co.uk)<74645>: Disconnected: Logged out in=148, out=1279, bytes=148/1279 Mar 3 12:16:24 server dovecot[55220]: imap(lancashire@hanleycaravans.co.uk)<74663><3X4IrW4v6BE0Yscd>: Disconnected: Logged out in=15, out=135, bytes=15/135 Mar 3 12:16:24 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=52.98.199.29, lip=172.31.3.195, mpid=74665, TLS, session= Mar 3 12:16:26 server dovecot[55220]: pop3-login: Disconnected: Connection closed: read(size=648) failed: Connection reset by peer (no auth attempts in 5 secs): user=<>, rip=52.125.141.16, lip=172.31.3.195, TLS: read(size=648) failed: Connection reset by peer, session= Mar 3 12:16:26 server dovecot[55220]: imap-login: Disconnected: Connection closed: read(size=650) failed: Connection reset by peer (no auth attempts in 5 secs): user=<>, rip=52.125.141.16, lip=172.31.3.195, TLS: read(size=650) failed: Connection reset by peer, session= Mar 3 12:16:29 server dovecot[55220]: lmtp(73891): Connect from local Mar 3 12:16:29 server dovecot[55220]: lmtp(carl@hanleycaravans.co.uk)<73891>: msgid=: saved mail to INBOX Mar 3 12:16:29 server dovecot[55220]: lmtp(73891): Disconnect from local: Logged out (state=READY) Mar 3 12:16:31 server dovecot[55220]: imap-login: Disconnected: Connection closed: read(size=650) failed: Connection reset by peer (no auth attempts in 15 secs): user=<>, rip=52.125.141.16, lip=172.31.3.195, TLS: read(size=650) failed: Connection reset by peer, session=<8BxqIG8vTwQ0fY0Q> Mar 3 12:16:31 server dovecot[55220]: pop3-login: Disconnected: Connection closed: read(size=648) failed: Connection reset by peer (no auth attempts in 15 secs): user=<>, rip=52.125.141.16, lip=172.31.3.195, TLS: read(size=648) failed: Connection reset by peer, session= Mar 3 12:16:42 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:54318 to port 783, fd 6 Mar 3 12:16:42 server spamd[35473]: spamd: setuid to fb181022a succeeded Mar 3 12:16:42 server spamd[35473]: spamd: checking message <20250303174612.012E09EDA8B105FA@gmail.com> for fb181022a:1019 Mar 3 12:16:42 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:16:42 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:16:42 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:16:42 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:16:42 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:16:42 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:16:42 server spamd[35473]: spamd: identified spam (6.1/5.0) for fb181022a:1019 in 0.3 seconds, 7449 bytes. Mar 3 12:16:42 server spamd[35473]: spamd: result: Y 6 - DKIM_ADSP_CUSTOM_MED,FORGED_GMAIL_RCVD,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,FREEMAIL_REPLYTO_END_DIGIT,HTML_MESSAGE,KAM_DMARC_NONE,KAM_DMARC_STATUS,MIME_HTML_ONLY,NML_ADSP_CUSTOM_MED,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_SOFTFAIL,SPOOFED_FREEMAIL,SPOOF_GMAIL_MID scantime=0.3,size=7449,user=fb181022a,uid=1019,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=54318,mid=<20250303174612.012E09EDA8B105FA@gmail.com>,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:16:42 server dovecot[55220]: lmtp(73891): Connect from local Mar 3 12:16:42 server dovecot[55220]: lmtp(info@northbuild.co.uk)<73891>: msgid=<20250303174612.012E09EDA8B105FA@gmail.com>: saved mail to INBOX.spam Mar 3 12:16:42 server dovecot[55220]: lmtp(73891): Disconnect from local: Logged out (state=READY) Mar 3 12:16:42 server spamd[1460]: prefork: child states: II Mar 3 12:16:48 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:54330 to port 783, fd 6 Mar 3 12:16:48 server spamd[35473]: spamd: setuid to fba23102023a succeeded Mar 3 12:16:48 server spamd[35473]: spamd: checking message <9508405849120158677498@WIN-N8RTN6D7JM8> for fba23102023a:1031 Mar 3 12:16:48 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:16:48 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:16:48 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:16:48 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:16:48 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:16:48 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:16:48 server spamd[35473]: spamd: identified spam (9.9/5.0) for fba23102023a:1031 in 0.3 seconds, 5084 bytes. Mar 3 12:16:48 server spamd[35473]: spamd: result: Y 9 - BAYES_60,DKIM_ADSP_CUSTOM_MED,FORGED_GMAIL_RCVD,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,FREEMAIL_REPLYTO_END_DIGIT,GB_FREEMAIL_NUM,GB_GMAIL_NUM,HTML_MESSAGE,KAM_DMARC_NONE,KAM_DMARC_STATUS,NML_ADSP_CUSTOM_MED,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_SOFTFAIL,SPOOFED_FREEMAIL,SPOOF_GMAIL_MID scantime=0.3,size=5084,user=fba23102023a,uid=1031,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=54330,mid=<9508405849120158677498@WIN-N8RTN6D7JM8>,bayes=0.788012,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:16:49 server dovecot[55220]: lmtp(73891): Connect from local Mar 3 12:16:49 server spamd[1460]: prefork: child states: II Mar 3 12:16:49 server dovecot[55220]: lmtp(info@ge-photography.co.uk)<73891>: msgid=<9508405849120158677498@WIN-N8RTN6D7JM8>: saved mail to INBOX.spam Mar 3 12:16:49 server dovecot[55220]: lmtp(73891): Disconnect from local: Logged out (state=READY) Mar 3 12:16:49 server spamd[35473]: spamd: connection from localhost [::1]:39756 to port 783, fd 5 Mar 3 12:16:49 server spamd[1460]: prefork: child states: II Mar 3 12:16:49 server dovecot[55220]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= Mar 3 12:16:49 server dovecot[55220]: lmtp(73891): Connect from local Mar 3 12:16:49 server dovecot[55220]: lmtp(73891): Disconnect from local: Logged out (state=GREETING) Mar 3 12:16:49 server dovecot[55220]: imap-login: Login: user=<__cpanel__service__auth__imap__g8fzvoe_6llcf410>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=74854, secured, session= Mar 3 12:16:49 server dovecot[55220]: imap(__cpanel__service__auth__imap__g8fzvoe_6llcf410)<74854>: Disconnected: Logged out in=11, out=519, bytes=11/519 Mar 3 12:16:52 server dovecot[55220]: imap-login: Login: user=, method=PLAIN, rip=157.231.198.198, lip=172.31.3.195, mpid=75046, TLS, session= Mar 3 12:16:52 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<75044>: Disconnected: Logged out in=768, out=2212, bytes=768/2212 Mar 3 12:16:53 server spamd[35473]: spamd: connection from localhost [127.0.0.1]:39258 to port 783, fd 6 Mar 3 12:16:53 server spamd[35473]: spamd: setuid to fb181022a succeeded Mar 3 12:16:53 server spamd[35473]: spamd: checking message for fb181022a:1019 Mar 3 12:16:53 server spamd[35473]: HashBL: PCCC_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:16:53 server spamd[35473]: HashBL: KAM_MESSAGE_HASHBL_FREEMAIL acl 'freemail' not defined Mar 3 12:16:53 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries) Mar 3 12:16:53 server spamd[35473]: check: dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS hit, creating /root/.spamassassin/dnsblock_zen.spamhaus.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny zen.spamhaus.org" to disable queries) Mar 3 12:16:53 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries) Mar 3 12:16:53 server spamd[35473]: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries) Mar 3 12:16:53 server spamd[35473]: check: dns_block_rule URIBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_multi.uribl.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny multi.uribl.com" to disable queries) Mar 3 12:16:53 server spamd[35473]: spamd: clean message (0.5/5.0) for fb181022a:1019 in 0.8 seconds, 1038782 bytes. Mar 3 12:16:53 server spamd[35473]: spamd: result: . 0 - DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,KAM_REALLYHUGEIMGSRC,LOTS_OF_MONEY,MIME_HTML_ONLY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_PASS,T_REMOTE_IMAGE,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS scantime=0.8,size=1038782,user=fb181022a,uid=1019,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=39258,mid=,autolearn=no autolearn_force=no,shortcircuit=no Mar 3 12:16:53 server dovecot[55220]: lmtp(73891): Connect from local Mar 3 12:16:53 server spamd[1460]: prefork: child states: II Mar 3 12:16:53 server dovecot[55220]: lmtp(accounts@northbuild.co.uk)<73891>: msgid=: saved mail to INBOX Mar 3 12:16:53 server dovecot[55220]: lmtp(73891): Disconnect from local: Logged out (state=READY) Mar 3 12:17:02 server dovecot[55220]: lmtp(73891): Connect from local Mar 3 12:17:02 server dovecot[55220]: lmtp(info@northbuild.co.uk)<73891>: msgid=: saved mail to INBOX Mar 3 12:17:02 server dovecot[55220]: lmtp(73891): Disconnect from local: Logged out (state=READY) Mar 3 12:17:09 server dovecot[55216]: master: Warning: Killed with signal 15 (by pid=75170 uid=0 code=kill) Mar 3 12:17:09 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<74730>: Disconnected: Server shutting down. in=125, out=725, bytes=125/725 Mar 3 12:17:09 server dovecot[55220]: imap(jackie@southlakeswindows.com)<73671>: Disconnected: Server shutting down. in=1607, out=1312687, bytes=1607/1312687 Mar 3 12:17:09 server dovecot[55220]: imap(info@paragoninterior.co.uk)<71060>: Disconnected: Server shutting down. in=1233, out=21649, bytes=1233/21649 Mar 3 12:17:09 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<71054>: Disconnected: Server shutting down. in=465, out=8813, bytes=465/8813 Mar 3 12:17:09 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<70278>: Disconnected: Server shutting down. in=159, out=1345, bytes=159/1345 Mar 3 12:17:09 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<68604>: Disconnected: Server shutting down. in=472, out=2767, bytes=472/2767 Mar 3 12:17:09 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<75047><6h2mD28v4WE0Ysx9>: Disconnected: Server shutting down. in=15, out=104, bytes=15/104 Mar 3 12:17:09 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<75046>: Disconnected: Server shutting down. in=24, out=545, bytes=24/545 Mar 3 12:17:09 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<68603>: Disconnected: Server shutting down. in=472, out=2969, bytes=472/2969 Mar 3 12:17:09 server dovecot[55220]: imap(blackadder@hanleycaravans.co.uk)<75045>: Disconnected: Server shutting down. in=142, out=671, bytes=142/671 Mar 3 12:17:09 server dovecot[55220]: imap(will@penninghame.com)<74837><42XP5m4vETYoZKxF>: Disconnected: Server shutting down. in=15, out=101, bytes=15/101 Mar 3 12:17:09 server dovecot[55220]: imap(info@ge-photography.co.uk)<74790><67hPtG4vLPheCx5v>: Disconnected: Server shutting down. in=0, out=125, bytes=0/125 Mar 3 12:17:09 server dovecot[55220]: imap(info@paragoninterior.co.uk)<74742>: Disconnected: Server shutting down. in=0, out=92, bytes=0/92 Mar 3 12:17:09 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<74741>: Disconnected: Server shutting down. in=0, out=90, bytes=0/90 Mar 3 12:17:09 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<74734><87UTp24vC8DZJNVG>: Disconnected: Server shutting down. in=121, out=699, bytes=121/699 Mar 3 12:17:09 server dovecot[55220]: imap(annee@scsplumbingandheating.co.uk)<74733>: Disconnected: Server shutting down. in=121, out=721, bytes=121/721 Mar 3 12:17:09 server dovecot[55220]: imap(lynne@southlakeswindows.com)<55707>: Disconnected: Server shutting down. in=2155, out=107621, bytes=2155/107621 Mar 3 12:17:09 server dovecot[55220]: imap(annee@scsplumbingandheating.co.uk)<74732>: Disconnected: Server shutting down. in=1308, out=2481, bytes=1308/2481 Mar 3 12:17:09 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<74731><9G3tqG4vQMDZJNVG>: Disconnected: Server shutting down. in=761, out=1553, bytes=761/1553 Mar 3 12:17:09 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<68824>: Disconnected: Server shutting down. in=520, out=1404, bytes=520/1404 Mar 3 12:17:09 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<68823><8cvg3m4vrcBawMu0>: Disconnected: Server shutting down. in=518, out=1402, bytes=518/1402 Mar 3 12:17:09 server dovecot[55220]: imap(info@scsplumbingandheating.co.uk)<69037>: Disconnected: Server shutting down. in=22, out=541, bytes=22/541 Mar 3 12:17:09 server dovecot[55220]: imap(annee@scsplumbingandheating.co.uk)<68599>: Disconnected: Server shutting down. in=513, out=3711, bytes=513/3711 Mar 3 12:17:09 server dovecot[55220]: imap(annee@scsplumbingandheating.co.uk)<69117>: Disconnected: Server shutting down. in=82, out=1645, bytes=82/1645 Mar 3 12:17:09 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<69143>: Disconnected: Server shutting down. in=82, out=1366, bytes=82/1366 Mar 3 12:17:09 server dovecot[55220]: imap(info@paragoninterior.co.uk)<70277>: Disconnected: Server shutting down. in=159, out=1504, bytes=159/1504 Mar 3 12:17:09 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<70279>: Disconnected: Server shutting down. in=139, out=1062, bytes=139/1062 Mar 3 12:17:09 server dovecot[55220]: imap(info@paragoninterior.co.uk)<70280>: Disconnected: Server shutting down. in=154, out=2274, bytes=154/2274 Mar 3 12:17:09 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<70281>: Disconnected: Server shutting down. in=152, out=1883, bytes=152/1883 Mar 3 12:17:09 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<70282>: Disconnected: Server shutting down. in=152, out=1765, bytes=152/1765 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(violetbank@hanleycaravans.co.uk)<55502>: Disconnected: Shutting down in=15, out=75, bytes=15/75 Mar 3 12:17:09 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<71059>: Disconnected: Server shutting down. in=444, out=7802, bytes=444/7802 Mar 3 12:17:09 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<72485>: Disconnected: Server shutting down. in=261, out=3313, bytes=261/3313 Mar 3 12:17:09 server dovecot[55220]: imap(info@paragoninterior.co.uk)<72594>: Disconnected: Server shutting down. in=297, out=3514, bytes=297/3514 Mar 3 12:17:09 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<72637>: Disconnected: Server shutting down. in=416, out=4992, bytes=416/4992 Mar 3 12:17:09 server dovecot[55220]: imap(info@paragoninterior.co.uk)<72641><2RA6CG8vYMIfYM3j>: Disconnected: Server shutting down. in=643, out=7965, bytes=643/7965 Mar 3 12:17:09 server dovecot[55220]: imap(ivan@paragoninterior.co.uk)<72891>: Disconnected: Server shutting down. in=316, out=3094, bytes=316/3094 Mar 3 12:17:09 server dovecot[55220]: imap(accounts@paragoninterior.co.uk)<73497>: Disconnected: Server shutting down. in=254, out=2391, bytes=254/2391 Mar 3 12:17:09 server dovecot[55220]: imap(simon@scsplumbingandheating.co.uk)<74729>: Disconnected: Server shutting down. in=917, out=1834, bytes=917/1834 Mar 3 12:17:09 server dovecot[55220]: imap(info@southlakeswindows.com)<74048>: Disconnected: Server shutting down. in=119, out=3809, bytes=119/3809 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(info@hanleycaravans.co.uk)<55502>: Disconnected: Shutting down in=15, out=75, bytes=15/75 Mar 3 12:17:09 server dovecot[55220]: imap(cs@southlakeswindows.com)<55945>: Disconnected: Server shutting down. in=2382, out=1998011, bytes=2382/1998011 Mar 3 12:17:09 server dovecot[55220]: imap(accounts@northbuild.co.uk)<75067>: Disconnected: Server shutting down. in=127, out=1056793, bytes=127/1056793 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(lancashire@hanleycaravans.co.uk)<55502>: Disconnected: Shutting down in=164, out=2240, bytes=164/2240 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(estellegleave@partners-in-design.co.uk)<55502>: Disconnected: Shutting down in=15, out=74, bytes=15/74 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(info@communitysportsarenas.co.uk)<55502>: Disconnected: Shutting down in=15, out=74, bytes=15/74 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(simon@scsplumbingandheating.co.uk)<55502>: Disconnected: Shutting down in=959, out=2012, bytes=959/2012 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(info@scsplumbingandheating.co.uk)<55502>: Disconnected: Shutting down in=735, out=1676, bytes=735/1676 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(info@scsplumbingandheating.co.uk)<55502>: Disconnected: Shutting down in=133, out=704, bytes=133/704 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(simon@scsplumbingandheating.co.uk)<55502>: Disconnected: Shutting down in=133, out=682, bytes=133/682 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(sedbergh@hanleycaravans.co.uk)<55502>: Disconnected: Shutting down in=15, out=74, bytes=15/74 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(accounts@paragoninterior.co.uk)<55502>: Disconnected: Shutting down in=80, out=221, bytes=80/221 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(luke@rmg.org.uk)<55502><+t7erG4vP580YsYt>: Disconnected: Shutting down in=15, out=72, bytes=15/72 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(faye@becreativemail.co.uk)<55502>: Disconnected: Shutting down in=15, out=73, bytes=15/73 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(info@communitysportsarenas.co.uk)<55502>: Disconnected: Shutting down in=22, out=81, bytes=22/81 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(info@thebedstorekendal.co.uk)<55502>: Disconnected: Shutting down in=251, out=2948, bytes=251/2948 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(office@penninghame.com)<55502>: Disconnected: Shutting down in=957, out=23154, bytes=957/23154 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(graham@penninghame.com)<55502>: Disconnected: Shutting down in=198, out=2301, bytes=198/2301 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(jessicalunt@partners-in-design.co.uk)<55502>: Disconnected: Shutting down in=15, out=74, bytes=15/74 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(accounts@hanleycaravans.co.uk)<55502>: Disconnected: Shutting down in=15, out=75, bytes=15/75 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(martyn.lloyd@cubefinancialservices.co.uk)<55502><3iVa224vJrcoY9Tt>: Disconnected: Shutting down in=15, out=74, bytes=15/74 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(ivan@paragoninterior.co.uk)<55502><1vf5TG4v/Mg23b+H>: Disconnected: Shutting down in=80, out=221, bytes=80/221 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(info@thebedstorekendal.co.uk)<55502>: Disconnected: Shutting down in=22, out=81, bytes=22/81 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(sales@earthtoheaven.co.uk)<55502>: Disconnected: Shutting down in=22, out=81, bytes=22/81 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(logistics@earthtoheaven.co.uk)<55502><37cSCW8vlH9V/+kh>: Disconnected: Shutting down in=133, out=1022, bytes=133/1022 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(info@paragoninterior.co.uk)<55502>: Disconnected: Shutting down in=81, out=223, bytes=81/223 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(simon@lignumdesigns.co.uk)<55502>: Disconnected: Shutting down in=200, out=924, bytes=200/924 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(simon@lignumdesigns.co.uk)<55502>: Disconnected: Shutting down in=1205, out=2474, bytes=1205/2474 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(office@penninghame.com)<55502>: Disconnected: Shutting down in=163, out=40940, bytes=163/40940 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(info@scsplumbingandheating.co.uk)<55502><3JIq4m4vhMofcEKY>: Disconnected: Shutting down in=1577, out=517999, bytes=1577/517999 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(logistics@earthtoheaven.co.uk)<55502><7TX6MG4va4lV/+kh>: Disconnected: Shutting down in=22, out=81, bytes=22/81 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(office@penninghame.com)<55502>: Disconnected: Shutting down in=296, out=86391, bytes=296/86391 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(graham@penninghame.com)<55502>: Disconnected: Shutting down in=853, out=29541, bytes=853/29541 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(graham@ge-photography.co.uk)<55502>: Disconnected: Shutting down in=1030, out=58325, bytes=1030/58325 Mar 3 12:17:09 server dovecot[55220]: imap-hibernate(accounts@paragoninterior.co.uk)<55502>: Disconnected: Shutting down in=455, out=44162, bytes=455/44162 Mar 3 12:17:11 server dovecot[55220]: anvil: Warning: Killed with signal 15 (by pid=75174 uid=0 code=kill) Mar 3 12:17:11 server dovecot[55220]: imap-login: Warning: Killed with signal 15 (by pid=75174 uid=0 code=kill) Mar 3 12:17:11 server dovecot[55220]: log(55220): Warning: Killed with signal 15 (by pid=75174 uid=0 code=kill) Mar 3 12:17:11 server dovecot[55220]: log(55220): Warning: Shutting down logging for 'imap-login: ' with 2 clients Mar 3 12:17:11 server dovecot[55220]: log(55220): Warning: Shutting down logging for 'imap: ' with 2 clients Mar 3 12:17:11 server dovecot[75180]: master: Dovecot v2.3.21.1 (d492236fa0) starting up for lmtp, imap, pop3 (core dumps disabled) Mar 3 12:17:11 server dovecot[75184]: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Mar 3 12:17:11 server dovecot[75184]: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so Mar 3 12:17:11 server dovecot[75184]: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Mar 3 12:17:11 server dovecot[75184]: auth: Debug: dict(proxy): dict created (uri=proxy:/usr/local/cpanel/var/cpdoveauthd.sock:cpdoveauthd, base_dir=/var/run/dovecot) Mar 3 12:17:11 server dovecot[75184]: auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Mar 3 12:17:11 server dovecot[75184]: auth: Debug: auth client connected (pid=75182) Mar 3 12:17:11 server dovecot[75184]: auth: Debug: auth client connected (pid=75185) Mar 3 12:17:11 server dovecot[75184]: auth: Debug: auth client connected (pid=75181) Mar 3 12:17:11 server dovecot[75184]: auth: Debug: auth client connected (pid=75186) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: auth client connected (pid=0) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011secured#011rip=77.93.244.156#011lip=172.31.3.195#011nologin#011resp=AGluZm9Ac291dGhsYWtlc3dpbmRvd3MuY29tAG11bTczNDY3 (previous base64 data may contain sensitive data) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: policy(info@southlakeswindows.com,77.93.244.156): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:13 server dovecot[75184]: auth: Debug: policy(info@southlakeswindows.com,77.93.244.156): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$391b8c58856b47af","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"77.93.244.156","remote_port":"0","service":"dovecot","username":"info@southlakeswindows.com","tls":false} Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:16.478 (now: 2025-03-03 12:17:13.478) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer created Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579: Peer pool created Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Peer created Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Started new connection to 127.0.0.1:579 Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: request [Req1: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Creating 1 new connections to handle requests (already 0 usable, connecting to 0, closing 0) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Making new connection 1 of 1 (0 connections exist, 0 pending) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Connecting Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Waiting for connect (fd=24) to finish for max 0 msecs Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: HTTP connection created (1 parallel connections exist) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Client connected (fd=24) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Connected Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Ready for requests Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Successfully connected (1 connections exist, 0 pending) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579: Successfully connected (1 connections exist, 0 pending) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req1: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req1: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: request [Req1: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: request [Req1: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 248, buffered=512) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: request [Req1: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req1: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 5 ms + 0 ms in queue) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: policy(info@southlakeswindows.com,77.93.244.156): Policy response 0 Mar 3 12:17:13 server dovecot[75184]: auth: Debug: dict(info@southlakeswindows.com,77.93.244.156): Performing passdb lookup Mar 3 12:17:13 server dovecot[75184]: auth: Debug: dict(info@southlakeswindows.com,77.93.244.156): cache miss Mar 3 12:17:13 server dovecot[75184]: auth: Debug: policy(info@southlakeswindows.com,77.93.244.156): Policy check action is continue Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: request [Req1: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req1: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: request [Req1: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=1) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: Loading modules from directory: /usr/lib64/dovecot/auth Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): dict created (uri=proxy:/usr/local/cpanel/var/cpdoveauthd.sock:cpdoveauthd, base_dir=/var/run/dovecot) Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): Server accepted connection (fd=13) Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): Sending version handshake Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<1>: Handling PASSV request Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<1>: dict(info@southlakeswindows.com,77.93.244.156): Performing passdb lookup Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up 'shared/dovecot_userdb-smtp/info@southlakeswindows.com' Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up (async) 'shared/dovecot_userdb-smtp/info@southlakeswindows.com' Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock: Connecting Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Client connected (fd=7) Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-smtp/info@southlakeswindows.com': found Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-smtp/info@southlakeswindows.com': found Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<1>: dict(info@southlakeswindows.com,77.93.244.156): Lookup: shared/dovecot_userdb-smtp/info@southlakeswindows.com = {"quota_rule":"*:bytes=10737418240","uid":"1007","userdb_quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","quota_rule2":"INBOX.INBOX:ignore","userdb_quota2_grace":"0","userdb_quota_vsizes":"yes","userdb_user":"info@southlakeswindows.com","home":"/home/fb20211118a/mail/southlakeswindows.com/info","userdb_quota_clone_dict":"file:/home/fb20211118a/mail/southlakeswindows.com/info/dovecot-quota","user":"info@southlakeswindows.com","gid":"1009","userdb_uid":"1007","quota_vsizes":"yes","quota_rule3":"INBOX.Trash:ignore","userdb_password":"{CRYPT}$6$1vpiFmHzS0qPDaXJ$e5VghvuTxbCUqRQskIGdUbneQJZlgHGqeGBwY9nNj3uT4GHHDqjNjfyScTqbkJwhulyeoPF/Il57DXvjNh7e71","userdb_quota":"maildir:Mailbox:ns=INBOX.","quota2_grace":"0","userdb_quota_rule":"*:bytes=10737418240","quota2":"fs:cPanel Account","userdb_mail":"maildir:/home/fb20211118a/mail/southlakeswindows.com/info:UTF-8","userdb_quota_rule3":"INBOX.Trash:ignore","userdb_home":"/home/fb20211118a/mail/southlakeswindows.com/info","quota_clone_dict":"file:/home/fb20211118a/mail/southlakeswindows.com/info/dovecot-quota","userdb_quota2":"fs:cPanel Account","password":"{CRYPT}$6$1vpiFmHzS0qPDaXJ$e5VghvuTxbCUqRQskIGdUbneQJZlgHGqeGBwY9nNj3uT4GHHDqjNjfyScTqbkJwhulyeoPF/Il57DXvjNh7e71","mail":"maildir:/home/fb20211118a/mail/southlakeswindows.com/info:UTF-8","userdb_gid":"1009","quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","quota":"maildir:Mailbox:ns=INBOX.","userdb_quota_rule2":"INBOX.INBOX:ignore"} Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): conn unix:auth-worker (pid=75191,uid=97): auth-worker<1>: dict(info@southlakeswindows.com,77.93.244.156): Password mismatch Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<1>: dict(info@southlakeswindows.com,77.93.244.156): CRYPT(mum73467) != '$6$1vpiFmHzS0qPDaXJ$e5VghvuTxbCUqRQskIGdUbneQJZlgHGqeGBwY9nNj3uT4GHHDqjNjfyScTqbkJwhulyeoPF/Il57DXvjNh7e71' Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<1>: dict(info@southlakeswindows.com,77.93.244.156): Finished passdb lookup Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<1>: Finished: password_mismatch Mar 3 12:17:13 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Disconnected: Connection closed (fd=7) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: dict(info@southlakeswindows.com,77.93.244.156): Finished passdb lookup Mar 3 12:17:13 server dovecot[75184]: auth: Debug: auth(info@southlakeswindows.com,77.93.244.156): Auth request finished Mar 3 12:17:13 server dovecot[75184]: auth: Debug: policy(info@southlakeswindows.com,77.93.244.156): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:13 server dovecot[75184]: auth: Debug: policy(info@southlakeswindows.com,77.93.244.156): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$391b8c58856b47af","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"77.93.244.156","remote_port":"0","service":"dovecot","username":"info@southlakeswindows.com","success":false,"policy_reject":false,"tls":false} Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:16.509 (now: 2025-03-03 12:17:13.509) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: request [Req2: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=1) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req2: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req2: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: request [Req2: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: request [Req2: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 286, buffered=551) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: request [Req2: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req2: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: policy(info@southlakeswindows.com,77.93.244.156): Policy report action finished Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: request [Req2: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req2: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: request [Req2: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:13 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:15 server dovecot[75184]: auth: Debug: client passdb out: FAIL#0111#011user=info@southlakeswindows.com Mar 3 12:17:15 server dovecot[75184]: auth: Debug: auth client connected (pid=0) Mar 3 12:17:15 server dovecot[75184]: auth: Debug: client in: AUTH#0111#011LOGIN#011service=smtp#011secured#011rip=94.206.49.146#011lip=172.31.3.195#011nologin#011resp= (previous base64 data may contain sensitive data) Mar 3 12:17:15 server dovecot[75184]: auth: Debug: client passdb out: CONT#0111#011VXNlcm5hbWU6 Mar 3 12:17:16 server dovecot[75184]: auth: Debug: client in: CONT#0111#011bWFzc291ZA== (previous base64 data may contain sensitive data) Mar 3 12:17:16 server dovecot[75184]: auth: Debug: client passdb out: CONT#0111#011UGFzc3dvcmQ6 Mar 3 12:17:17 server dovecot[75184]: auth: Debug: client in: CONT#0111#011c291dGhjb2FzQDIwMjI= (previous base64 data may contain sensitive data) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: policy(massoud,94.206.49.146): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:17 server dovecot[75184]: auth: Debug: policy(massoud,94.206.49.146): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$302c5d71f80e4715","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"94.206.49.146","remote_port":"0","service":"dovecot","username":"massoud","tls":false} Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:20.033 (now: 2025-03-03 12:17:17.033) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: request [Req3: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req3: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req3: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: request [Req3: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: request [Req3: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 229, buffered=493) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: request [Req3: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req3: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 2 ms + 0 ms in queue) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: policy(massoud,94.206.49.146): Policy response 0 Mar 3 12:17:17 server dovecot[75184]: auth: Debug: dict(massoud,94.206.49.146): Performing passdb lookup Mar 3 12:17:17 server dovecot[75184]: auth: Debug: dict(massoud,94.206.49.146): cache miss Mar 3 12:17:17 server dovecot[75184]: auth: Debug: policy(massoud,94.206.49.146): Policy check action is continue Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: request [Req3: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req3: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: request [Req3: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=1) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:17 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<2>: Handling PASSV request Mar 3 12:17:17 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<2>: dict(massoud,94.206.49.146): Performing passdb lookup Mar 3 12:17:17 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up 'shared/dovecot_userdb-smtp/massoud' Mar 3 12:17:17 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up (async) 'shared/dovecot_userdb-smtp/massoud' Mar 3 12:17:17 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Connecting Mar 3 12:17:17 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Client connected (fd=7) Mar 3 12:17:17 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-smtp/massoud': not found Mar 3 12:17:17 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-smtp/massoud': not found Mar 3 12:17:17 server dovecot[75184]: auth-worker(75205): conn unix:auth-worker (pid=75191,uid=97): auth-worker<2>: dict(massoud,94.206.49.146): unknown user Mar 3 12:17:17 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<2>: dict(massoud,94.206.49.146): Finished passdb lookup Mar 3 12:17:17 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<2>: Finished: user_unknown Mar 3 12:17:17 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Disconnected: Connection closed (fd=7) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: dict(massoud,94.206.49.146): Finished passdb lookup Mar 3 12:17:17 server dovecot[75184]: auth: Debug: auth(massoud,94.206.49.146): Auth request finished Mar 3 12:17:17 server dovecot[75184]: auth: Debug: policy(massoud,94.206.49.146): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:17 server dovecot[75184]: auth: Debug: policy(massoud,94.206.49.146): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$302c5d71f80e4715","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"94.206.49.146","remote_port":"0","service":"dovecot","username":"massoud","success":false,"policy_reject":false,"tls":false} Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:20.043 (now: 2025-03-03 12:17:17.043) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: request [Req4: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=1) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req4: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req4: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: request [Req4: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: request [Req4: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 267, buffered=532) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: request [Req4: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req4: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 2 ms + 0 ms in queue) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: policy(massoud,94.206.49.146): Policy report action finished Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: request [Req4: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req4: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: request [Req4: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:17 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write encrypted extensions Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write server certificate verify Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Mar 3 12:17:18 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Mar 3 12:17:19 server dovecot[75184]: auth: Debug: client passdb out: FAIL#0111#011user=massoud Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read finished Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x20, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully Mar 3 12:17:19 server dovecot[75184]: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured=tls#011session=2VxBI28vYWwoYzN9#011lip=172.31.3.195#011rip=40.99.51.125#011lport=993#011rport=27745#011local_name=mail.becreativemail.co.uk#011resp=AGJlY3JlYXRpdmVAbm9ydGhidWlsZC5jby51awBCZUNyZWF0aXZFQDEyMw== (previous base64 data may contain sensitive data) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"40.99.51.125","remote_port":"27745","service":"dovecot","username":"becreative@northbuild.co.uk","tls":true} Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:22.625 (now: 2025-03-03 12:17:19.625) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req5: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req5: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req5: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req5: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req5: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 253, buffered=517) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req5: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req5: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 2 ms + 0 ms in queue) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Policy response 0 Mar 3 12:17:19 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Performing passdb lookup Mar 3 12:17:19 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): cache miss Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Policy check action is continue Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req5: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req5: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req5: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=1) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<3>: Handling PASSV request Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<3>: dict(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Performing passdb lookup Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up 'shared/dovecot_userdb-imap/becreative@northbuild.co.uk' Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up (async) 'shared/dovecot_userdb-imap/becreative@northbuild.co.uk' Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Connecting Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Client connected (fd=7) Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/becreative@northbuild.co.uk': found Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/becreative@northbuild.co.uk': found Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<3>: dict(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Lookup: shared/dovecot_userdb-imap/becreative@northbuild.co.uk = {"userdb_uid":"1019","quota_vsizes":"yes","quota2_grace":"0","userdb_quota":"maildir:Mailbox:ns=INBOX.","userdb_password":"{CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1","quota_rule3":"INBOX.Trash:ignore","quota2":"fs:cPanel Account","userdb_quota_rule":"*:bytes=1073741824","userdb_mail":"maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8","quota_rule":"*:bytes=1073741824","quota_rule2":"INBOX.INBOX:ignore","userdb_quota2_grace":"0","userdb_quota_vsizes":"yes","uid":"1019","userdb_quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","home":"/home/fb181022a/mail/northbuild.co.uk/becreative","userdb_user":"becreative@northbuild.co.uk","gid":"1021","userdb_quota_clone_dict":"file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota","user":"becreative@northbuild.co.uk","quota":"maildir:Mailbox:ns=INBOX.","quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","userdb_quota_rule2":"INBOX.INBOX:ignore","userdb_quota_rule3":"INBOX.Trash:ignore","userdb_home":"/home/fb181022a/mail/northbuild.co.uk/becreative","userdb_quota2":"fs:cPanel Account","password":"{CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1","quota_clone_dict":"file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota","mail":"maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8","userdb_gid":"1021"} Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<3>: dict(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Finished passdb lookup Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<3>: Finished Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Disconnected: Connection closed (fd=7) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Finished passdb lookup Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"40.99.51.125","remote_port":"27745","service":"dovecot","username":"becreative@northbuild.co.uk","tls":true} Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:22.636 (now: 2025-03-03 12:17:19.636) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req6: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req6: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req6: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req6: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req6: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 253, buffered=517) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req6: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req6: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Policy response 0 Mar 3 12:17:19 server dovecot[75184]: auth: Debug: auth(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Auth request finished Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"40.99.51.125","remote_port":"27745","service":"dovecot","username":"becreative@northbuild.co.uk","success":true,"policy_reject":false,"tls":true} Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req7: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: client passdb out: OK#0111#011user=becreative@northbuild.co.uk#011quota_vsizes=yes#011quota2_grace=0#011quota_rule3=INBOX.Trash:ignore#011quota2=fs:cPanel Account#011quota_rule=*:bytes=1073741824#011quota_rule2=INBOX.INBOX:ignore#011uid=1019#011home=/home/fb181022a/mail/northbuild.co.uk/becreative#011gid=1021#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8 Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Policy check action is continue Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req6: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req6: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:22.637 (now: 2025-03-03 12:17:19.637) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req6: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req7: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req7: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req7: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req7: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 290, buffered=555) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req7: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req7: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 4 ms + 0 ms in queue) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Policy report action finished Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req7: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req7: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req7: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: master in: REQUEST#01115466497#01175186#0111#011f630f0f9893c1fb6a9d3bd27aa94564b#011session_pid=75236#011request_auth_token Mar 3 12:17:19 server dovecot[75184]: auth: Debug: prefetch(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Performing userdb lookup Mar 3 12:17:19 server dovecot[75184]: auth: Debug: prefetch(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): success Mar 3 12:17:19 server dovecot[75184]: auth: Debug: prefetch(becreative@northbuild.co.uk,40.99.51.125,<2VxBI28vYWwoYzN9>): Finished userdb lookup Mar 3 12:17:19 server dovecot[75184]: auth: Debug: master userdb out: USER#01115466497#011becreative@northbuild.co.uk#011uid=1019#011quota=maildir:Mailbox:ns=INBOX.#011password={CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1#011quota_rule=*:bytes=1073741824#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8#011quota2_grace=0#011quota_vsizes=yes#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011quota_rule2=INBOX.INBOX:ignore#011quota_rule3=INBOX.Trash:ignore#011home=/home/fb181022a/mail/northbuild.co.uk/becreative#011quota2=fs:cPanel Account#011gid=1021#011auth_mech=PLAIN#011auth_token=58885470cdd3eb8771c58a839bde43c1c014a7bc Mar 3 12:17:19 server dovecot[75184]: imap-login: Login: user=, method=PLAIN, rip=40.99.51.125, lip=172.31.3.195, mpid=75236, TLS, session=<2VxBI28vYWwoYzN9> Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Module loaded: /usr/lib64/dovecot/lib20_virtual_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Added userdb setting: mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Added userdb setting: plugin/password= Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Added userdb setting: plugin/quota2=fs:cPanel Account Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Added userdb setting: plugin/quota2_grace=0 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=1073741824 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Added userdb setting: plugin/quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Added userdb setting: plugin/quota_rule3=INBOX.Trash:ignore Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Added userdb setting: plugin/quota_vsizes=yes Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Effective uid=1019, gid=1021, home=/home/fb181022a/mail/northbuild.co.uk/becreative Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Quota rule: root=Mailbox mailbox=* bytes=1073741824 messages=0 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Quota rule: root=Mailbox mailbox=INBOX.INBOX ignored Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Quota grace: root=Mailbox bytes=107374182 (10%) Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Quota root: name=cPanel Account backend=fs args= Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Quota grace: root=cPanel Account bytes=0 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: dict(file): dict created (uri=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota, base_dir=/var/run/dovecot) Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: open(/proc/self/io) failed: Permission denied Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Namespace spam: type=private, prefix=spam, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/becreative@northbuild.co.uk/spam Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/spam, index=/home/fb181022a/mail/northbuild.co.uk/becreative/mail/virtual/becreative@northbuild.co.uk/spam, indexpvt=, control=, inbox=, alt= Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: quota-fs: fs quota add mailbox dir = /usr/local/cpanel/etc/dovecot/virtual/spam Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: quota-fs: fs quota block device = /dev/nvme0n1p1 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: quota-fs: fs quota mount point = / Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: quota-fs: fs quota mount type = xfs Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl: acl username = becreative@northbuild.co.uk Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl: owner = 1 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/becreative@northbuild.co.uk/sent Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/fb181022a/mail/northbuild.co.uk/becreative/mail/virtual/becreative@northbuild.co.uk/sent, indexpvt=, control=, inbox=, alt= Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl: acl username = becreative@northbuild.co.uk Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl: owner = 1 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: maildir++: root=/home/fb181022a/mail/northbuild.co.uk/becreative, index=, indexpvt=, control=, inbox=/home/fb181022a/mail/northbuild.co.uk/becreative, alt= Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl: acl username = becreative@northbuild.co.uk Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl: owner = 1 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Mar 3 12:17:19 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: quota: quota_over_flag check: quota2_over_script unset - skipping Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write key exchange Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS read client key exchange Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS read client key exchange Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS read client key exchange Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS read client key exchange Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client key exchange Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read change cipher spec Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read finished Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully Mar 3 12:17:19 server dovecot[75184]: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured=tls#011session=HdpFI28vb8kfYLmG#011lip=172.31.3.195#011rip=31.96.185.134#011lport=993#011rport=51567#011local_name=server.becreativemail.co.uk#011resp=aW5mb0BwYXJhZ29uaW50ZXJpb3IuY28udWsAaW5mb0BwYXJhZ29uaW50ZXJpb3IuY28udWsAc291bmQ1JDMzZ29sZGVuRm94IQ== (previous base64 data may contain sensitive data) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$b582e1b8ac92dba5","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"31.96.185.134","remote_port":"51567","service":"dovecot","username":"info@paragoninterior.co.uk","tls":true} Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:22.919 (now: 2025-03-03 12:17:19.919) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req8: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req8: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req8: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req8: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req8: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 253, buffered=517) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req8: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req8: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 2 ms + 0 ms in queue) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy response 0 Mar 3 12:17:19 server dovecot[75184]: auth: Debug: dict(info@paragoninterior.co.uk,31.96.185.134,): Performing passdb lookup Mar 3 12:17:19 server dovecot[75184]: auth: Debug: dict(info@paragoninterior.co.uk,31.96.185.134,): cache miss Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy check action is continue Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req8: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req8: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req8: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=1) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<4>: Handling PASSV request Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<4>: dict(info@paragoninterior.co.uk,31.96.185.134,): Performing passdb lookup Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up 'shared/dovecot_userdb-imap/info@paragoninterior.co.uk' Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up (async) 'shared/dovecot_userdb-imap/info@paragoninterior.co.uk' Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Connecting Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Client connected (fd=7) Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/info@paragoninterior.co.uk': found Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/info@paragoninterior.co.uk': found Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<4>: dict(info@paragoninterior.co.uk,31.96.185.134,): Lookup: shared/dovecot_userdb-imap/info@paragoninterior.co.uk = {"userdb_quota_rule2":"INBOX.INBOX:ignore","quota":"maildir:Mailbox:ns=INBOX.","quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","mail":"maildir:/home/fba20241206a/mail/paragoninterior.co.uk/info:UTF-8","userdb_gid":"1048","userdb_quota_rule3":"INBOX.Trash:ignore","userdb_home":"/home/fba20241206a/mail/paragoninterior.co.uk/info","userdb_quota2":"fs:cPanel Account","password":"{CRYPT}$6$z01Lf0mVwv30wF0k$uq0AZdSSK7tVRMqbJQngd2fuas/n1Ck/K7Ui/bn4c7Ge3Vceo/DnplfLbYlMSv81GR.eIBWVtTQRIGplk2Sfd/","quota_clone_dict":"file:/home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-quota","quota2":"fs:cPanel Account","userdb_quota_rule":"*:bytes=21474836480","userdb_mail":"maildir:/home/fba20241206a/mail/paragoninterior.co.uk/info:UTF-8","quota_vsizes":"yes","userdb_uid":"1046","quota2_grace":"0","userdb_quota":"maildir:Mailbox:ns=INBOX.","userdb_password":"{CRYPT}$6$z01Lf0mVwv30wF0k$uq0AZdSSK7tVRMqbJQngd2fuas/n1Ck/K7Ui/bn4c7Ge3Vceo/DnplfLbYlMSv81GR.eIBWVtTQRIGplk2Sfd/","quota_rule3":"INBOX.Trash:ignore","home":"/home/fba20241206a/mail/paragoninterior.co.uk/info","userdb_user":"info@paragoninterior.co.uk","gid":"1048","userdb_quota_clone_dict":"file:/home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-quota","user":"info@paragoninterior.co.uk","quota_rule":"*:bytes=21474836480","quota_rule2":"INBOX.INBOX:ignore","userdb_quota_vsizes":"yes","userdb_quota2_grace":"0","uid":"1046","userdb_quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded"} Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<4>: dict(info@paragoninterior.co.uk,31.96.185.134,): Finished passdb lookup Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<4>: Finished Mar 3 12:17:19 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Disconnected: Connection closed (fd=7) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: dict(info@paragoninterior.co.uk,31.96.185.134,): Finished passdb lookup Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$b582e1b8ac92dba5","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"31.96.185.134","remote_port":"51567","service":"dovecot","username":"info@paragoninterior.co.uk","tls":true} Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:22.931 (now: 2025-03-03 12:17:19.931) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req9: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req9: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req9: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req9: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req9: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 253, buffered=517) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req9: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req9: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy response 0 Mar 3 12:17:19 server dovecot[75184]: auth: Debug: auth(info@paragoninterior.co.uk,31.96.185.134,): Auth request finished Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$b582e1b8ac92dba5","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"31.96.185.134","remote_port":"51567","service":"dovecot","username":"info@paragoninterior.co.uk","success":true,"policy_reject":false,"tls":true} Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req10: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: client passdb out: OK#0111#011user=info@paragoninterior.co.uk#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011mail=maildir:/home/fba20241206a/mail/paragoninterior.co.uk/info:UTF-8#011quota_clone_dict=file:/home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-quota#011quota2=fs:cPanel Account#011quota_vsizes=yes#011quota2_grace=0#011quota_rule3=INBOX.Trash:ignore#011home=/home/fba20241206a/mail/paragoninterior.co.uk/info#011gid=1048#011quota_rule=*:bytes=21474836480#011quota_rule2=INBOX.INBOX:ignore#011uid=1046 Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy check action is continue Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req9: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req9: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:22.932 (now: 2025-03-03 12:17:19.932) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req9: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req10: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req10: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req10: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req10: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 290, buffered=555) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req10: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req10: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy report action finished Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req10: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req10: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: request [Req10: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:19 server dovecot[75184]: auth: Debug: master in: REQUEST#011376832001#01175182#0111#01157c2dc418a02c0a354a635e74e639556#011session_pid=75238#011request_auth_token Mar 3 12:17:19 server dovecot[75184]: auth: Debug: prefetch(info@paragoninterior.co.uk,31.96.185.134,): Performing userdb lookup Mar 3 12:17:19 server dovecot[75184]: auth: Debug: prefetch(info@paragoninterior.co.uk,31.96.185.134,): success Mar 3 12:17:19 server dovecot[75184]: auth: Debug: prefetch(info@paragoninterior.co.uk,31.96.185.134,): Finished userdb lookup Mar 3 12:17:19 server dovecot[75184]: auth: Debug: master userdb out: USER#011376832001#011info@paragoninterior.co.uk#011quota_rule2=INBOX.INBOX:ignore#011gid=1048#011quota_rule3=INBOX.Trash:ignore#011home=/home/fba20241206a/mail/paragoninterior.co.uk/info#011quota2=fs:cPanel Account#011quota_rule=*:bytes=21474836480#011mail=maildir:/home/fba20241206a/mail/paragoninterior.co.uk/info:UTF-8#011uid=1046#011quota=maildir:Mailbox:ns=INBOX.#011password={CRYPT}$6$z01Lf0mVwv30wF0k$uq0AZdSSK7tVRMqbJQngd2fuas/n1Ck/K7Ui/bn4c7Ge3Vceo/DnplfLbYlMSv81GR.eIBWVtTQRIGplk2Sfd/#011quota_clone_dict=file:/home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-quota#011quota_vsizes=yes#011quota2_grace=0#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011auth_mech=PLAIN#011auth_token=9c536f0df132a72da01366d5a7f245933b7c77c8 Mar 3 12:17:19 server dovecot[75184]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.195, mpid=75238, TLS, session= Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Module loaded: /usr/lib64/dovecot/lib20_virtual_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Added userdb setting: mail=maildir:/home/fba20241206a/mail/paragoninterior.co.uk/info:UTF-8 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Added userdb setting: plugin/password= Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Added userdb setting: plugin/quota2=fs:cPanel Account Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Added userdb setting: plugin/quota2_grace=0 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-quota Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=21474836480 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Added userdb setting: plugin/quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Added userdb setting: plugin/quota_rule3=INBOX.Trash:ignore Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Added userdb setting: plugin/quota_vsizes=yes Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Effective uid=1046, gid=1048, home=/home/fba20241206a/mail/paragoninterior.co.uk/info Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Quota rule: root=Mailbox mailbox=* bytes=21474836480 messages=0 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Quota rule: root=Mailbox mailbox=INBOX.INBOX ignored Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Quota grace: root=Mailbox bytes=2147483648 (10%) Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Quota root: name=cPanel Account backend=fs args= Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Quota grace: root=cPanel Account bytes=0 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: dict(file): dict created (uri=file:/home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-quota, base_dir=/var/run/dovecot) Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: open(/proc/self/io) failed: Permission denied Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Namespace spam: type=private, prefix=spam, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/info@paragoninterior.co.uk/spam Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/spam, index=/home/fba20241206a/mail/paragoninterior.co.uk/info/mail/virtual/info@paragoninterior.co.uk/spam, indexpvt=, control=, inbox=, alt= Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: quota-fs: fs quota add mailbox dir = /usr/local/cpanel/etc/dovecot/virtual/spam Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: quota-fs: fs quota block device = /dev/nvme0n1p1 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: quota-fs: fs quota mount point = / Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: quota-fs: fs quota mount type = xfs Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl: acl username = info@paragoninterior.co.uk Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl: owner = 1 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/info@paragoninterior.co.uk/sent Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/fba20241206a/mail/paragoninterior.co.uk/info/mail/virtual/info@paragoninterior.co.uk/sent, indexpvt=, control=, inbox=, alt= Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl: acl username = info@paragoninterior.co.uk Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl: owner = 1 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/fba20241206a/mail/paragoninterior.co.uk/info:UTF-8 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: maildir++: root=/home/fba20241206a/mail/paragoninterior.co.uk/info, index=, indexpvt=, control=, inbox=/home/fba20241206a/mail/paragoninterior.co.uk/info, alt= Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl: acl username = info@paragoninterior.co.uk Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl: owner = 1 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: quota: quota_over_flag check: quota2_over_script unset - skipping Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: Mailbox INBOX: Mailbox opened Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file cache_secs=86400/INBOX not found Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file /home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-acl not found Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write key exchange Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file cache_secs=86400/INBOX.Drafts not found Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file /home/fba20241206a/mail/paragoninterior.co.uk/info/.Drafts/dovecot-acl not found Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file cache_secs=86400/INBOX.spam not found Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file /home/fba20241206a/mail/paragoninterior.co.uk/info/.spam/dovecot-acl not found Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file cache_secs=86400/INBOX.Trash not found Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file /home/fba20241206a/mail/paragoninterior.co.uk/info/.Trash/dovecot-acl not found Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file cache_secs=86400/INBOX.Sent not found Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file /home/fba20241206a/mail/paragoninterior.co.uk/info/.Sent/dovecot-acl not found Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS read client key exchange Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS read client key exchange Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS read client key exchange Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS read client key exchange Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client key exchange Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read change cipher spec Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read finished Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully Mar 3 12:17:19 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file cache_secs=86400/ not found Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file cache_secs=86400/INBOX.Archive not found Mar 3 12:17:19 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75238>: Debug: acl vfile: file /home/fba20241206a/mail/paragoninterior.co.uk/info/.Archive/dovecot-acl not found Mar 3 12:17:20 server dovecot[75184]: auth: Debug: client in: AUTH#0112#011PLAIN#011service=imap#011secured=tls#011session=ih5HI28vcMkfYLmG#011lip=172.31.3.195#011rip=31.96.185.134#011lport=993#011rport=51568#011local_name=server.becreativemail.co.uk#011resp=aW5mb0BwYXJhZ29uaW50ZXJpb3IuY28udWsAaW5mb0BwYXJhZ29uaW50ZXJpb3IuY28udWsAc291bmQ1JDMzZ29sZGVuRm94IQ== (previous base64 data may contain sensitive data) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$b582e1b8ac92dba5","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"31.96.185.134","remote_port":"51568","service":"dovecot","username":"info@paragoninterior.co.uk","tls":true} Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:23.002 (now: 2025-03-03 12:17:20.002) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req11: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req11: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req11: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req11: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req11: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 253, buffered=517) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req11: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req11: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy response 0 Mar 3 12:17:20 server dovecot[75184]: auth: Debug: dict(info@paragoninterior.co.uk,31.96.185.134,): Performing passdb lookup Mar 3 12:17:20 server dovecot[75184]: auth: Debug: dict(info@paragoninterior.co.uk,31.96.185.134,): cache hit: {CRYPT}$6$z01Lf0mVwv30wF0k$uq0AZdSSK7tVRMqbJQngd2fuas/n1Ck/K7Ui/bn4c7Ge3Vceo/DnplfLbYlMSv81GR.eIBWVtTQRIGplk2Sfd/#011userdb_quota_rule2=INBOX.INBOX:ignore#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011mail=maildir:/home/fba20241206a/mail/paragoninterior.co.uk/info:UTF-8#011userdb_gid=1048#011userdb_quota_rule3=INBOX.Trash:ignore#011userdb_home=/home/fba20241206a/mail/paragoninterior.co.uk/info#011userdb_quota2=fs:cPanel Account#011quota_clone_dict=file:/home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-quota#011quota2=fs:cPanel Account#011userdb_quota_rule=*:bytes=21474836480#011userdb_mail=maildir:/home/fba20241206a/mail/paragoninterior.co.uk/info:UTF-8#011quota_vsizes=yes#011userdb_uid=1046#011quota2_grace=0#011userdb_quota=maildir:Mailbox:ns=INBOX.#011userdb_password={CRYPT}$6$z01Lf0mVwv30wF0k$uq0AZdSSK7tVRMqbJQngd2fuas/n1Ck/K7Ui/bn4c7Ge3Vceo/DnplfLbYlMSv81GR.eIBWVtTQRIGplk2Sfd/#011quota_rule3=INBOX.Trash:ignore#011home=/home/fba20241206a/mail/paragoninterior.co.uk/info#011userdb_user=info@paragoninterior.co.uk#011gid=1048#011userdb_quota_clone_dict=file:/home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-quota#011user=info@paragoninterior.co.uk#011quota_rule=*:bytes=21474836480#011quota_rule2=INBOX.INBOX:ignore#011userdb_quota_vsizes=yes#011userdb_quota2_grace=0#011uid=1046#011userdb_quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:20 server dovecot[75184]: auth: Debug: dict(info@paragoninterior.co.uk,31.96.185.134,): Finished passdb lookup Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$b582e1b8ac92dba5","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"31.96.185.134","remote_port":"51568","service":"dovecot","username":"info@paragoninterior.co.uk","tls":true} Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req12: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=2) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy check action is continue Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req11: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req11: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:23.003 (now: 2025-03-03 12:17:20.003) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req11: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req12: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req12: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req12: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req12: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 253, buffered=517) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req12: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req12: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 4 ms in queue) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy response 0 Mar 3 12:17:20 server dovecot[75184]: auth: Debug: auth(info@paragoninterior.co.uk,31.96.185.134,): Auth request finished Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$b582e1b8ac92dba5","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"31.96.185.134","remote_port":"51568","service":"dovecot","username":"info@paragoninterior.co.uk","success":true,"policy_reject":false,"tls":true} Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req13: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: client passdb out: OK#0112#011user=info@paragoninterior.co.uk#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011mail=maildir:/home/fba20241206a/mail/paragoninterior.co.uk/info:UTF-8#011quota_clone_dict=file:/home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-quota#011quota2=fs:cPanel Account#011quota_vsizes=yes#011quota2_grace=0#011quota_rule3=INBOX.Trash:ignore#011home=/home/fba20241206a/mail/paragoninterior.co.uk/info#011gid=1048#011quota_rule=*:bytes=21474836480#011quota_rule2=INBOX.INBOX:ignore#011uid=1046 Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy check action is continue Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req12: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req12: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:23.009 (now: 2025-03-03 12:17:20.009) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req12: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req13: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req13: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req13: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req13: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 290, buffered=555) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req13: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req13: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(info@paragoninterior.co.uk,31.96.185.134,): Policy report action finished Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req13: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req13: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req13: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: master in: REQUEST#0113213230081#01175186#0112#011f630f0f9893c1fb6a9d3bd27aa94564b#011session_pid=75239#011request_auth_token Mar 3 12:17:20 server dovecot[75184]: auth: Debug: prefetch(info@paragoninterior.co.uk,31.96.185.134,): Performing userdb lookup Mar 3 12:17:20 server dovecot[75184]: auth: Debug: prefetch(info@paragoninterior.co.uk,31.96.185.134,): success Mar 3 12:17:20 server dovecot[75184]: auth: Debug: prefetch(info@paragoninterior.co.uk,31.96.185.134,): Finished userdb lookup Mar 3 12:17:20 server dovecot[75184]: auth: Debug: master userdb out: USER#0113213230081#011info@paragoninterior.co.uk#011quota_rule2=INBOX.INBOX:ignore#011gid=1048#011quota_rule3=INBOX.Trash:ignore#011home=/home/fba20241206a/mail/paragoninterior.co.uk/info#011quota2=fs:cPanel Account#011quota_rule=*:bytes=21474836480#011mail=maildir:/home/fba20241206a/mail/paragoninterior.co.uk/info:UTF-8#011uid=1046#011quota=maildir:Mailbox:ns=INBOX.#011password={CRYPT}$6$z01Lf0mVwv30wF0k$uq0AZdSSK7tVRMqbJQngd2fuas/n1Ck/K7Ui/bn4c7Ge3Vceo/DnplfLbYlMSv81GR.eIBWVtTQRIGplk2Sfd/#011quota_clone_dict=file:/home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-quota#011quota_vsizes=yes#011quota2_grace=0#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011auth_mech=PLAIN#011auth_token=a89ed15e86e85a18d15c3339ea2ef0b327f12fc5 Mar 3 12:17:20 server dovecot[75184]: imap-login: Login: user=, method=PLAIN, rip=31.96.185.134, lip=172.31.3.195, mpid=75239, TLS, session= Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Module loaded: /usr/lib64/dovecot/lib20_virtual_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Added userdb setting: mail=maildir:/home/fba20241206a/mail/paragoninterior.co.uk/info:UTF-8 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Added userdb setting: plugin/password= Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Added userdb setting: plugin/quota2=fs:cPanel Account Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Added userdb setting: plugin/quota2_grace=0 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-quota Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=21474836480 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Added userdb setting: plugin/quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Added userdb setting: plugin/quota_rule3=INBOX.Trash:ignore Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Added userdb setting: plugin/quota_vsizes=yes Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Effective uid=1046, gid=1048, home=/home/fba20241206a/mail/paragoninterior.co.uk/info Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Quota rule: root=Mailbox mailbox=* bytes=21474836480 messages=0 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Quota rule: root=Mailbox mailbox=INBOX.INBOX ignored Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Quota grace: root=Mailbox bytes=2147483648 (10%) Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Quota root: name=cPanel Account backend=fs args= Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Quota grace: root=cPanel Account bytes=0 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: dict(file): dict created (uri=file:/home/fba20241206a/mail/paragoninterior.co.uk/info/dovecot-quota, base_dir=/var/run/dovecot) Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: open(/proc/self/io) failed: Permission denied Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Namespace spam: type=private, prefix=spam, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/info@paragoninterior.co.uk/spam Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/spam, index=/home/fba20241206a/mail/paragoninterior.co.uk/info/mail/virtual/info@paragoninterior.co.uk/spam, indexpvt=, control=, inbox=, alt= Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: quota-fs: fs quota add mailbox dir = /usr/local/cpanel/etc/dovecot/virtual/spam Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: quota-fs: fs quota block device = /dev/nvme0n1p1 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: quota-fs: fs quota mount point = / Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: quota-fs: fs quota mount type = xfs Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl: acl username = info@paragoninterior.co.uk Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl: owner = 1 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/info@paragoninterior.co.uk/sent Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/fba20241206a/mail/paragoninterior.co.uk/info/mail/virtual/info@paragoninterior.co.uk/sent, indexpvt=, control=, inbox=, alt= Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl: acl username = info@paragoninterior.co.uk Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl: owner = 1 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/fba20241206a/mail/paragoninterior.co.uk/info:UTF-8 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: maildir++: root=/home/fba20241206a/mail/paragoninterior.co.uk/info, index=, indexpvt=, control=, inbox=/home/fba20241206a/mail/paragoninterior.co.uk/info, alt= Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl: acl username = info@paragoninterior.co.uk Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl: owner = 1 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: quota: quota_over_flag check: quota2_over_script unset - skipping Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: Mailbox INBOX.Trash: Mailbox opened Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl vfile: file cache_secs=86400/INBOX.Trash not found Mar 3 12:17:20 server dovecot[75184]: imap(info@paragoninterior.co.uk)<75239>: Debug: acl vfile: file /home/fba20241206a/mail/paragoninterior.co.uk/info/.Trash/dovecot-acl not found Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: client in: AUTH#0113#011PLAIN#011service=imap#011secured#011session=qkVRI28vauMAAAAAAAAAAAAAAAAAAAAB#011lip=::1#011rip=::1#011lport=143#011rport=58218#011resp=AGFjY291bnRzQG5vcnRoYnVpbGQuY28udWsAZnJpZGF5MiE4OG5ld0Nhc3RsZQ== (previous base64 data may contain sensitive data) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,::1,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,::1,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$652b75cc08343d58","database":"mail","local_host":"::1","local_port":"143","remote_host":"::1","remote_port":"58218","service":"dovecot","username":"accounts@northbuild.co.uk","tls":false} Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:23.668 (now: 2025-03-03 12:17:20.668) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req14: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req14: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req14: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req14: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req14: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 234, buffered=498) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req14: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req14: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 4 ms + 0 ms in queue) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,::1,): Policy response 0 Mar 3 12:17:20 server dovecot[75184]: auth: Debug: dict(accounts@northbuild.co.uk,::1,): Performing passdb lookup Mar 3 12:17:20 server dovecot[75184]: auth: Debug: dict(accounts@northbuild.co.uk,::1,): cache miss Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,::1,): Policy check action is continue Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req14: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req14: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req14: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=1) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:20 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<5>: Handling PASSV request Mar 3 12:17:20 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<5>: dict(accounts@northbuild.co.uk,::1,): Performing passdb lookup Mar 3 12:17:20 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up 'shared/dovecot_userdb-imap/accounts@northbuild.co.uk' Mar 3 12:17:20 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up (async) 'shared/dovecot_userdb-imap/accounts@northbuild.co.uk' Mar 3 12:17:20 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Connecting Mar 3 12:17:20 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Client connected (fd=7) Mar 3 12:17:20 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/accounts@northbuild.co.uk': found Mar 3 12:17:20 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/accounts@northbuild.co.uk': found Mar 3 12:17:20 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<5>: dict(accounts@northbuild.co.uk,::1,): Lookup: shared/dovecot_userdb-imap/accounts@northbuild.co.uk = {"userdb_quota_rule2":"INBOX.INBOX:ignore","quota":"maildir:Mailbox:ns=INBOX.","quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","mail":"maildir:/home/fb181022a/mail/northbuild.co.uk/accounts:UTF-8","userdb_gid":"1021","userdb_quota_rule3":"INBOX.Trash:ignore","userdb_home":"/home/fb181022a/mail/northbuild.co.uk/accounts","userdb_quota2":"fs:cPanel Account","password":"{CRYPT}$6$Cwr18xbKJfqI3KrZ$WzZPKTaSFfGayDeUeuLwhEaFd8sF.Ndk0qr3QvzcLPraLcdcoWHH7jSz1uyJtThOv5pcs37ZpEoQSdydg0Xnr1","quota_clone_dict":"file:/home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-quota","quota2":"fs:cPanel Account","userdb_quota_rule":"*:bytes=32212254720","userdb_mail":"maildir:/home/fb181022a/mail/northbuild.co.uk/accounts:UTF-8","quota_vsizes":"yes","userdb_uid":"1019","quota2_grace":"0","userdb_password":"{CRYPT}$6$Cwr18xbKJfqI3KrZ$WzZPKTaSFfGayDeUeuLwhEaFd8sF.Ndk0qr3QvzcLPraLcdcoWHH7jSz1uyJtThOv5pcs37ZpEoQSdydg0Xnr1","userdb_quota":"maildir:Mailbox:ns=INBOX.","quota_rule3":"INBOX.Trash:ignore","home":"/home/fb181022a/mail/northbuild.co.uk/accounts","userdb_user":"accounts@northbuild.co.uk","gid":"1021","userdb_quota_clone_dict":"file:/home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-quota","user":"accounts@northbuild.co.uk","quota_rule":"*:bytes=32212254720","quota_rule2":"INBOX.INBOX:ignore","userdb_quota_vsizes":"yes","userdb_quota2_grace":"0","uid":"1019","userdb_quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded"} Mar 3 12:17:20 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<5>: dict(accounts@northbuild.co.uk,::1,): Finished passdb lookup Mar 3 12:17:20 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<5>: Finished Mar 3 12:17:20 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Disconnected: Connection closed (fd=7) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: dict(accounts@northbuild.co.uk,::1,): Finished passdb lookup Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,::1,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,::1,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$652b75cc08343d58","database":"mail","local_host":"::1","local_port":"143","remote_host":"::1","remote_port":"58218","service":"dovecot","username":"accounts@northbuild.co.uk","tls":false} Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:23.681 (now: 2025-03-03 12:17:20.681) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req15: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req15: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req15: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req15: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req15: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 234, buffered=498) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req15: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req15: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,::1,): Policy response 0 Mar 3 12:17:20 server dovecot[75184]: auth: Debug: auth(accounts@northbuild.co.uk,::1,): Auth request finished Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,::1,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,::1,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$652b75cc08343d58","database":"mail","local_host":"::1","local_port":"143","remote_host":"::1","remote_port":"58218","service":"dovecot","username":"accounts@northbuild.co.uk","success":true,"policy_reject":false,"tls":false} Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req16: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: client passdb out: OK#0113#011user=accounts@northbuild.co.uk#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/accounts:UTF-8#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-quota#011quota2=fs:cPanel Account#011quota_vsizes=yes#011quota2_grace=0#011quota_rule3=INBOX.Trash:ignore#011home=/home/fb181022a/mail/northbuild.co.uk/accounts#011gid=1021#011quota_rule=*:bytes=32212254720#011quota_rule2=INBOX.INBOX:ignore#011uid=1019 Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,::1,): Policy check action is continue Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req15: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req15: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:23.682 (now: 2025-03-03 12:17:20.682) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req15: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req16: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req16: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req16: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req16: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 271, buffered=536) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req16: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req16: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 3 ms + 0 ms in queue) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,::1,): Policy report action finished Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req16: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req16: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: request [Req16: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:20 server dovecot[75184]: auth: Debug: master in: REQUEST#011232914945#01175186#0113#011f630f0f9893c1fb6a9d3bd27aa94564b#011session_pid=75245#011request_auth_token Mar 3 12:17:20 server dovecot[75184]: auth: Debug: prefetch(accounts@northbuild.co.uk,::1,): Performing userdb lookup Mar 3 12:17:20 server dovecot[75184]: auth: Debug: prefetch(accounts@northbuild.co.uk,::1,): success Mar 3 12:17:20 server dovecot[75184]: auth: Debug: prefetch(accounts@northbuild.co.uk,::1,): Finished userdb lookup Mar 3 12:17:20 server dovecot[75184]: auth: Debug: master userdb out: USER#011232914945#011accounts@northbuild.co.uk#011quota_rule2=INBOX.INBOX:ignore#011gid=1021#011quota_rule3=INBOX.Trash:ignore#011home=/home/fb181022a/mail/northbuild.co.uk/accounts#011quota2=fs:cPanel Account#011quota_rule=*:bytes=32212254720#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/accounts:UTF-8#011uid=1019#011password={CRYPT}$6$Cwr18xbKJfqI3KrZ$WzZPKTaSFfGayDeUeuLwhEaFd8sF.Ndk0qr3QvzcLPraLcdcoWHH7jSz1uyJtThOv5pcs37ZpEoQSdydg0Xnr1#011quota=maildir:Mailbox:ns=INBOX.#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-quota#011quota_vsizes=yes#011quota2_grace=0#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011auth_mech=PLAIN#011auth_token=a4c2c82ee1cd1d7c7e682f6de20b2601a7fb9f99 Mar 3 12:17:20 server dovecot[75184]: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=75245, secured, session= Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Module loaded: /usr/lib64/dovecot/lib20_virtual_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Added userdb setting: mail=maildir:/home/fb181022a/mail/northbuild.co.uk/accounts:UTF-8 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Added userdb setting: plugin/password= Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Added userdb setting: plugin/quota2=fs:cPanel Account Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Added userdb setting: plugin/quota2_grace=0 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-quota Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=32212254720 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Added userdb setting: plugin/quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Added userdb setting: plugin/quota_rule3=INBOX.Trash:ignore Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Added userdb setting: plugin/quota_vsizes=yes Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Effective uid=1019, gid=1021, home=/home/fb181022a/mail/northbuild.co.uk/accounts Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Quota rule: root=Mailbox mailbox=* bytes=32212254720 messages=0 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Quota rule: root=Mailbox mailbox=INBOX.INBOX ignored Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Quota grace: root=Mailbox bytes=3221225472 (10%) Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Quota root: name=cPanel Account backend=fs args= Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Quota grace: root=cPanel Account bytes=0 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: dict(file): dict created (uri=file:/home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-quota, base_dir=/var/run/dovecot) Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: open(/proc/self/io) failed: Permission denied Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Namespace spam: type=private, prefix=spam, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/accounts@northbuild.co.uk/spam Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/spam, index=/home/fb181022a/mail/northbuild.co.uk/accounts/mail/virtual/accounts@northbuild.co.uk/spam, indexpvt=, control=, inbox=, alt= Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: quota-fs: fs quota add mailbox dir = /usr/local/cpanel/etc/dovecot/virtual/spam Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: quota-fs: fs quota block device = /dev/nvme0n1p1 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: quota-fs: fs quota mount point = / Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: quota-fs: fs quota mount type = xfs Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl: acl username = accounts@northbuild.co.uk Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl: owner = 1 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/accounts@northbuild.co.uk/sent Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/fb181022a/mail/northbuild.co.uk/accounts/mail/virtual/accounts@northbuild.co.uk/sent, indexpvt=, control=, inbox=, alt= Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl: acl username = accounts@northbuild.co.uk Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl: owner = 1 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/fb181022a/mail/northbuild.co.uk/accounts:UTF-8 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: maildir++: root=/home/fb181022a/mail/northbuild.co.uk/accounts, index=, indexpvt=, control=, inbox=/home/fb181022a/mail/northbuild.co.uk/accounts, alt= Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl: acl username = accounts@northbuild.co.uk Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl: owner = 1 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: quota: quota_over_flag check: quota2_over_script unset - skipping Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Mailbox INBOX: Mailbox opened Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl vfile: file cache_secs=86400/INBOX not found Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: acl vfile: file /home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-acl not found Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: Mailbox INBOX: Mailbox opened Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Disconnected: Logged out in=651, out=79195, bytes=651/79195 Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: User session is finished Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: dict(file): Waiting for dict to finish pending operations Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: dict(file): Waiting for dict to finish pending operations Mar 3 12:17:20 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75245>: Debug: dict(file): dict destroyed Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:20 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: auth client connected (pid=0) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: client in: AUTH#0111#011LOGIN#011service=smtp#011secured#011rip=40.99.51.125#011lip=172.31.3.195#011nologin#011resp=YmVjcmVhdGl2ZUBub3J0aGJ1aWxkLmNvLnVr (previous base64 data may contain sensitive data) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: client passdb out: CONT#0111#011UGFzc3dvcmQ6 Mar 3 12:17:21 server dovecot[75184]: auth: Debug: client in: CONT#0111#011QmVDcmVhdGl2RUAxMjM= (previous base64 data may contain sensitive data) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:21 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"40.99.51.125","remote_port":"0","service":"dovecot","username":"becreative@northbuild.co.uk","tls":false} Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:24.923 (now: 2025-03-03 12:17:21.923) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req17: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req17: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req17: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req17: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req17: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 248, buffered=512) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req17: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req17: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy response 0 Mar 3 12:17:21 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125): Performing passdb lookup Mar 3 12:17:21 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125): cache miss Mar 3 12:17:21 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy check action is continue Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req17: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req17: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req17: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=1) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:21 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<6>: Handling PASSV request Mar 3 12:17:21 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<6>: dict(becreative@northbuild.co.uk,40.99.51.125): Performing passdb lookup Mar 3 12:17:21 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up 'shared/dovecot_userdb-smtp/becreative@northbuild.co.uk' Mar 3 12:17:21 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up (async) 'shared/dovecot_userdb-smtp/becreative@northbuild.co.uk' Mar 3 12:17:21 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Connecting Mar 3 12:17:21 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Client connected (fd=7) Mar 3 12:17:21 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-smtp/becreative@northbuild.co.uk': found Mar 3 12:17:21 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-smtp/becreative@northbuild.co.uk': found Mar 3 12:17:21 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<6>: dict(becreative@northbuild.co.uk,40.99.51.125): Lookup: shared/dovecot_userdb-smtp/becreative@northbuild.co.uk = {"quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","quota":"maildir:Mailbox:ns=INBOX.","userdb_quota_rule2":"INBOX.INBOX:ignore","quota_clone_dict":"file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota","userdb_quota2":"fs:cPanel Account","password":"{CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1","userdb_quota_rule3":"INBOX.Trash:ignore","userdb_home":"/home/fb181022a/mail/northbuild.co.uk/becreative","mail":"maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8","userdb_gid":"1021","userdb_password":"{CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1","quota_rule3":"INBOX.Trash:ignore","userdb_quota":"maildir:Mailbox:ns=INBOX.","quota2_grace":"0","quota_vsizes":"yes","userdb_uid":"1019","userdb_mail":"maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8","userdb_quota_rule":"*:bytes=1073741824","quota2":"fs:cPanel Account","uid":"1019","userdb_quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","quota_rule2":"INBOX.INBOX:ignore","userdb_quota_vsizes":"yes","userdb_quota2_grace":"0","quota_rule":"*:bytes=1073741824","userdb_quota_clone_dict":"file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota","user":"becreative@northbuild.co.uk","gid":"1021","userdb_user":"becreative@northbuild.co.uk","home":"/home/fb181022a/mail/northbuild.co.uk/becreative"} Mar 3 12:17:21 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<6>: dict(becreative@northbuild.co.uk,40.99.51.125): Finished passdb lookup Mar 3 12:17:21 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<6>: Finished Mar 3 12:17:21 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Disconnected: Connection closed (fd=7) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125): Finished passdb lookup Mar 3 12:17:21 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:21 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"40.99.51.125","remote_port":"0","service":"dovecot","username":"becreative@northbuild.co.uk","tls":false} Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:24.933 (now: 2025-03-03 12:17:21.933) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req18: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req18: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req18: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req18: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req18: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 248, buffered=512) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req18: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req18: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy response 0 Mar 3 12:17:21 server dovecot[75184]: auth: Debug: auth(becreative@northbuild.co.uk,40.99.51.125): Auth request finished Mar 3 12:17:21 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:21 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"40.99.51.125","remote_port":"0","service":"dovecot","username":"becreative@northbuild.co.uk","success":true,"policy_reject":false,"tls":false} Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req19: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: client passdb out: OK#0111#011user=becreative@northbuild.co.uk#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota=maildir:Mailbox:ns=INBOX.#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8#011quota_rule3=INBOX.Trash:ignore#011quota2_grace=0#011quota_vsizes=yes#011quota2=fs:cPanel Account#011uid=1019#011quota_rule2=INBOX.INBOX:ignore#011quota_rule=*:bytes=1073741824#011gid=1021#011home=/home/fb181022a/mail/northbuild.co.uk/becreative Mar 3 12:17:21 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy check action is continue Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req18: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req18: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:24.935 (now: 2025-03-03 12:17:21.935) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req18: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req19: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req19: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req19: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req19: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 285, buffered=550) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req19: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req19: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 2 ms + 0 ms in queue) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy report action finished Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req19: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req19: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: request [Req19: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:21 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:22 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:22 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:22 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:22 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:22 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:22 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Disconnected: Logged out in=63, out=1081, bytes=63/1081 Mar 3 12:17:22 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: User session is finished Mar 3 12:17:22 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: dict(file): Waiting for dict to finish pending operations Mar 3 12:17:22 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: dict(file): Waiting for dict to finish pending operations Mar 3 12:17:22 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75236><2VxBI28vYWwoYzN9>: Debug: dict(file): dict destroyed Mar 3 12:17:22 server dovecot[75184]: imap-login: Debug: SSL alert: close notify Mar 3 12:17:24 server dovecot[75184]: auth: Debug: auth client connected (pid=0) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: client in: AUTH#0111#011LOGIN#011service=smtp#011secured#011rip=148.252.18.131#011lip=172.31.3.195#011nologin#011resp= (previous base64 data may contain sensitive data) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: client passdb out: CONT#0111#011VXNlcm5hbWU6 Mar 3 12:17:24 server dovecot[75184]: auth: Debug: client in: CONT#0111#011Y3NAc291dGhsYWtlc3dpbmRvd3MuY29t (previous base64 data may contain sensitive data) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: client passdb out: CONT#0111#011UGFzc3dvcmQ6 Mar 3 12:17:24 server dovecot[75184]: auth: Debug: client in: CONT#0111#011aGFwcHkhODk1TG9jYWw= (previous base64 data may contain sensitive data) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: policy(cs@southlakeswindows.com,148.252.18.131): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:24 server dovecot[75184]: auth: Debug: policy(cs@southlakeswindows.com,148.252.18.131): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$74d4527b2a052817","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"148.252.18.131","remote_port":"0","service":"dovecot","username":"cs@southlakeswindows.com","tls":false} Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:27.380 (now: 2025-03-03 12:17:24.380) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req20: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req20: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req20: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req20: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req20: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 247, buffered=511) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req20: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req20: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: policy(cs@southlakeswindows.com,148.252.18.131): Policy response 0 Mar 3 12:17:24 server dovecot[75184]: auth: Debug: dict(cs@southlakeswindows.com,148.252.18.131): Performing passdb lookup Mar 3 12:17:24 server dovecot[75184]: auth: Debug: dict(cs@southlakeswindows.com,148.252.18.131): cache miss Mar 3 12:17:24 server dovecot[75184]: auth: Debug: policy(cs@southlakeswindows.com,148.252.18.131): Policy check action is continue Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req20: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req20: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req20: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=1) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<7>: Handling PASSV request Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<7>: dict(cs@southlakeswindows.com,148.252.18.131): Performing passdb lookup Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up 'shared/dovecot_userdb-smtp/cs@southlakeswindows.com' Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up (async) 'shared/dovecot_userdb-smtp/cs@southlakeswindows.com' Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Connecting Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Client connected (fd=7) Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-smtp/cs@southlakeswindows.com': found Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-smtp/cs@southlakeswindows.com': found Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<7>: dict(cs@southlakeswindows.com,148.252.18.131): Lookup: shared/dovecot_userdb-smtp/cs@southlakeswindows.com = {"userdb_quota_rule2":"INBOX.INBOX:ignore","quota":"maildir:Mailbox:ns=INBOX.","quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","mail":"maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8","userdb_gid":"1009","userdb_quota_rule3":"INBOX.Trash:ignore","userdb_home":"/home/fb20211118a/mail/southlakeswindows.com/cs","userdb_quota2":"fs:cPanel Account","password":"{CRYPT}$6$l77owEWS4EhoDu8d$u66zsSo58raH0UdT8a2KfFqDVectvkpj3surgSpUgmvfvzaSB1M5eKLUhP13.ZFOnIQFl4DHyFEj2YGa7Ku5W1","quota_clone_dict":"file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota","quota2":"fs:cPanel Account","userdb_quota_rule":"*:bytes=10737418240","userdb_mail":"maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8","userdb_uid":"1007","quota_vsizes":"yes","quota2_grace":"0","userdb_password":"{CRYPT}$6$l77owEWS4EhoDu8d$u66zsSo58raH0UdT8a2KfFqDVectvkpj3surgSpUgmvfvzaSB1M5eKLUhP13.ZFOnIQFl4DHyFEj2YGa7Ku5W1","quota_rule3":"INBOX.Trash:ignore","userdb_quota":"maildir:Mailbox:ns=INBOX.","home":"/home/fb20211118a/mail/southlakeswindows.com/cs","userdb_user":"cs@southlakeswindows.com","gid":"1009","userdb_quota_clone_dict":"file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota","user":"cs@southlakeswindows.com","quota_rule":"*:bytes=10737418240","quota_rule2":"INBOX.INBOX:ignore","userdb_quota2_grace":"0","userdb_quota_vsizes":"yes","uid":"1007","userdb_quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded"} Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<7>: dict(cs@southlakeswindows.com,148.252.18.131): Finished passdb lookup Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<7>: Finished Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Disconnected: Connection closed (fd=7) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: dict(cs@southlakeswindows.com,148.252.18.131): Finished passdb lookup Mar 3 12:17:24 server dovecot[75184]: auth: Debug: policy(cs@southlakeswindows.com,148.252.18.131): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:24 server dovecot[75184]: auth: Debug: policy(cs@southlakeswindows.com,148.252.18.131): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$74d4527b2a052817","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"148.252.18.131","remote_port":"0","service":"dovecot","username":"cs@southlakeswindows.com","tls":false} Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:27.390 (now: 2025-03-03 12:17:24.390) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req21: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req21: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req21: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req21: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req21: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 247, buffered=511) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req21: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req21: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: policy(cs@southlakeswindows.com,148.252.18.131): Policy response 0 Mar 3 12:17:24 server dovecot[75184]: auth: Debug: auth(cs@southlakeswindows.com,148.252.18.131): Auth request finished Mar 3 12:17:24 server dovecot[75184]: auth: Debug: policy(cs@southlakeswindows.com,148.252.18.131): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:24 server dovecot[75184]: auth: Debug: policy(cs@southlakeswindows.com,148.252.18.131): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$74d4527b2a052817","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"148.252.18.131","remote_port":"0","service":"dovecot","username":"cs@southlakeswindows.com","success":true,"policy_reject":false,"tls":false} Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req22: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: client passdb out: OK#0111#011user=cs@southlakeswindows.com#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011mail=maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8#011quota_clone_dict=file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota#011quota2=fs:cPanel Account#011quota_vsizes=yes#011quota2_grace=0#011quota_rule3=INBOX.Trash:ignore#011home=/home/fb20211118a/mail/southlakeswindows.com/cs#011gid=1009#011quota_rule=*:bytes=10737418240#011quota_rule2=INBOX.INBOX:ignore#011uid=1007 Mar 3 12:17:24 server dovecot[75184]: auth: Debug: policy(cs@southlakeswindows.com,148.252.18.131): Policy check action is continue Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req21: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req21: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:27.391 (now: 2025-03-03 12:17:24.391) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req21: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req22: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req22: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req22: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req22: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 284, buffered=549) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req22: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req22: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: policy(cs@southlakeswindows.com,148.252.18.131): Policy report action finished Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req22: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req22: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: request [Req22: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: auth-master: userdb lookup(cs@southlakeswindows.com): Started userdb lookup Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: auth-master: conn unix:/var/run/dovecot/auth-userdb: Connecting Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: auth-master: conn unix:/var/run/dovecot/auth-userdb (pid=75180,uid=0): Client connected (fd=14) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: master in: USER#0111#011cs@southlakeswindows.com#011service=quota-status Mar 3 12:17:24 server dovecot[75184]: auth: Debug: prefetch(cs@southlakeswindows.com): Performing userdb lookup Mar 3 12:17:24 server dovecot[75184]: auth: Debug: prefetch(cs@southlakeswindows.com): passdb didn't return userdb entries, trying the next userdb Mar 3 12:17:24 server dovecot[75184]: auth: Debug: prefetch(cs@southlakeswindows.com): Finished userdb lookup Mar 3 12:17:24 server dovecot[75184]: auth: Debug: dict(cs@southlakeswindows.com): Performing userdb lookup Mar 3 12:17:24 server dovecot[75184]: auth: Debug: dict(cs@southlakeswindows.com): userdb cache miss Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<8>: Handling USER request Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<8>: dict(cs@southlakeswindows.com): Performing userdb lookup Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up 'shared/dovecot_userdb-quota-status/cs@southlakeswindows.com' Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up (async) 'shared/dovecot_userdb-quota-status/cs@southlakeswindows.com' Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Connecting Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Client connected (fd=7) Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-quota-status/cs@southlakeswindows.com': found Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-quota-status/cs@southlakeswindows.com': found Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<8>: dict(cs@southlakeswindows.com): Lookup: shared/dovecot_userdb-quota-status/cs@southlakeswindows.com = {"userdb_quota_rule2":"INBOX.INBOX:ignore","quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","quota":"maildir:Mailbox:ns=INBOX.","userdb_gid":"1009","mail":"maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8","quota_clone_dict":"file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota","password":"{CRYPT}$6$l77owEWS4EhoDu8d$u66zsSo58raH0UdT8a2KfFqDVectvkpj3surgSpUgmvfvzaSB1M5eKLUhP13.ZFOnIQFl4DHyFEj2YGa7Ku5W1","userdb_quota2":"fs:cPanel Account","userdb_home":"/home/fb20211118a/mail/southlakeswindows.com/cs","userdb_quota_rule3":"INBOX.Trash:ignore","userdb_mail":"maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8","userdb_quota_rule":"*:bytes=10737418240","quota2":"fs:cPanel Account","userdb_password":"{CRYPT}$6$l77owEWS4EhoDu8d$u66zsSo58raH0UdT8a2KfFqDVectvkpj3surgSpUgmvfvzaSB1M5eKLUhP13.ZFOnIQFl4DHyFEj2YGa7Ku5W1","userdb_quota":"maildir:Mailbox:ns=INBOX.","quota_rule3":"INBOX.Trash:ignore","quota2_grace":"0","userdb_uid":"1007","quota_vsizes":"yes","user":"cs@southlakeswindows.com","userdb_quota_clone_dict":"file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota","gid":"1009","userdb_user":"cs@southlakeswindows.com","home":"/home/fb20211118a/mail/southlakeswindows.com/cs","userdb_quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","uid":"1007","userdb_quota2_grace":"0","userdb_quota_vsizes":"yes","quota_rule2":"INBOX.INBOX:ignore","quota_rule":"*:bytes=10737418240"} Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<8>: dict(cs@southlakeswindows.com): Finished userdb lookup Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<8>: Finished Mar 3 12:17:24 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Disconnected: Connection closed (fd=7) Mar 3 12:17:24 server dovecot[75184]: auth: Debug: dict(cs@southlakeswindows.com): Finished userdb lookup Mar 3 12:17:24 server dovecot[75184]: auth: Debug: userdb out: USER#0111#011cs@southlakeswindows.com#011userdb_quota_rule2=INBOX.INBOX:ignore#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota=maildir:Mailbox:ns=INBOX.#011userdb_gid=1009#011mail=maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8#011quota_clone_dict=file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota#011password={CRYPT}$6$l77owEWS4EhoDu8d$u66zsSo58raH0UdT8a2KfFqDVectvkpj3surgSpUgmvfvzaSB1M5eKLUhP13.ZFOnIQFl4DHyFEj2YGa7Ku5W1#011userdb_quota2=fs:cPanel Account#011userdb_home=/home/fb20211118a/mail/southlakeswindows.com/cs#011userdb_quota_rule3=INBOX.Trash:ignore#011userdb_mail=maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8#011userdb_quota_rule=*:bytes=10737418240#011quota2=fs:cPanel Account#011userdb_password={CRYPT}$6$l77owEWS4EhoDu8d$u66zsSo58raH0UdT8a2KfFqDVectvkpj3surgSpUgmvfvzaSB1M5eKLUhP13.ZFOnIQFl4DHyFEj2YGa7Ku5W1#011userdb_quota=maildir:Mailbox:ns=INBOX.#011quota_rule3=INBOX.Trash:ignore#011quota2_grace=0#011userdb_uid=1007#011quota_vsizes=yes#011userdb_quota_clone_dict=file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota#011gid=1009#011userdb_user=cs@southlakeswindows.com#011home=/home/fb20211118a/mail/southlakeswindows.com/cs#011userdb_quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011uid=1007#011userdb_quota2_grace=0#011userdb_quota_vsizes=yes#011quota_rule2=INBOX.INBOX:ignore#011quota_rule=*:bytes=10737418240 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: auth-master: userdb lookup(cs@southlakeswindows.com): auth USER input: cs@southlakeswindows.com userdb_quota_rule2=INBOX.INBOX:ignore quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded quota=maildir:Mailbox:ns=INBOX. userdb_gid=1009 mail=maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8 quota_clone_dict=file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota password= userdb_quota2=fs:cPanel Account userdb_home=/home/fb20211118a/mail/southlakeswindows.com/cs userdb_quota_rule3=INBOX.Trash:ignore userdb_mail=maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8 userdb_quota_rule=*:bytes=10737418240 quota2=fs:cPanel Account userdb_password= userdb_quota=maildir:Mailbox:ns=INBOX. quota_rule3=INBOX.Trash:ignore quota2_grace=0 userdb_uid=1007 quota_vsizes=yes userdb_quota_clone_dict=file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota gid=1009 userdb_user=cs@southlakeswindows.com home=/home/fb20211118a/mail/southlakeswindows.com/cs userdb_quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded uid=1007 userdb_quota2_grace=0 userdb_quota_vsizes=yes quota_rule2=INBOX.INBOX:ignore quota_rule=*:bytes=10737418240 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: auth-master: userdb lookup(cs@southlakeswindows.com): Finished userdb lookup (username=cs@southlakeswindows.com userdb_quota_rule2=INBOX.INBOX:ignore quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded quota=maildir:Mailbox:ns=INBOX. userdb_gid=1009 mail=maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8 quota_clone_dict=file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota password={CRYPT}$6$l77owEWS4EhoDu8d$u66zsSo58raH0UdT8a2KfFqDVectvkpj3surgSpUgmvfvzaSB1M5eKLUhP13.ZFOnIQFl4DHyFEj2YGa7Ku5W1 userdb_quota2=fs:cPanel Account userdb_home=/home/fb20211118a/mail/southlakeswindows.com/cs userdb_quota_rule3=INBOX.Trash:ignore userdb_mail=maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8 userdb_quota_rule=*:bytes=10737418240 quota2=fs:cPanel Account userdb_password={CRYPT}$6$l77owEWS4EhoDu8d$u66zsSo58raH0UdT8a2KfFqDVectvkpj3surgSpUgmvfvzaSB1M5eKLUhP13.ZFOnIQFl4DHyFEj2YGa7Ku5W1 userdb_quota=maildir:Mailbox:ns=INBOX. quota_rule3=INBOX.Trash:ignore quota2_grace=0 userdb_uid=1007 quota_vsizes=yes userdb_quota_clone_dict=file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota gid=1009 userdb_user=cs@southlakeswindows.com home=/home/fb20211118a/mail/southlakeswindows.com/cs userdb_quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded uid=1007 userdb_quota2_grace=0 userdb_quota_vsizes=yes quota_rule2=INBOX.INBOX:ignore quota_rule=*:bytes=10737418240) Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: mail=maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/password= Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/quota2=fs:cPanel Account Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/quota2_grace=0 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=10737418240 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/quota_rule3=INBOX.Trash:ignore Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/quota_vsizes=yes Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_gid=1009 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_home=/home/fb20211118a/mail/southlakeswindows.com/cs Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_mail=maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_password= Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_quota2=fs:cPanel Account Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_quota2_grace=0 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_quota_clone_dict=file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_quota_rule=*:bytes=10737418240 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_quota_rule3=INBOX.Trash:ignore Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_quota_vsizes=yes Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_uid=1007 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264><>: Debug: Added userdb setting: plugin/userdb_user=cs@southlakeswindows.com Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: Effective uid=1007, gid=1009, home=/home/fb20211118a/mail/southlakeswindows.com/cs Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: Quota rule: root=Mailbox mailbox=* bytes=10737418240 messages=0 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: Quota rule: root=Mailbox mailbox=INBOX.INBOX ignored Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: Quota grace: root=Mailbox bytes=1073741824 (10%) Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: Quota root: name=cPanel Account backend=fs args= Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: Quota grace: root=cPanel Account bytes=0 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: dict(file): dict created (uri=file:/home/fb20211118a/mail/southlakeswindows.com/cs/dovecot-quota, base_dir=/var/run/dovecot) Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/fb20211118a/mail/southlakeswindows.com/cs:UTF-8 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: maildir++: root=/home/fb20211118a/mail/southlakeswindows.com/cs, index=, indexpvt=, control=, inbox=/home/fb20211118a/mail/southlakeswindows.com/cs, alt= Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: quota-fs: fs quota add mailbox dir = /home/fb20211118a/mail/southlakeswindows.com/cs Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: quota-fs: fs quota block device = /dev/nvme0n1p1 Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: quota-fs: fs quota mount point = / Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: quota-fs: fs quota mount type = xfs Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: quota: quota_over_flag check: quota2_over_script unset - skipping Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: User session is finished Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: dict(file): Waiting for dict to finish pending operations Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: dict(file): Waiting for dict to finish pending operations Mar 3 12:17:24 server dovecot[75184]: quota-status(cs@southlakeswindows.com)<75264>: Debug: dict(file): dict destroyed Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:24 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write encrypted extensions Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write server certificate verify Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read finished Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x20, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:25 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully Mar 3 12:17:26 server dovecot[75184]: auth: Debug: client in: AUTH#0112#011PLAIN#011service=imap#011secured=tls#011session=M6ijI28vdmMoYzN9#011lip=172.31.3.195#011rip=40.99.51.125#011lport=993#011rport=25462#011local_name=mail.northbuild.co.uk#011resp=AGJlY3JlYXRpdmVAbm9ydGhidWlsZC5jby51awBCZUNyZWF0aXZFQDEyMw== (previous base64 data may contain sensitive data) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:26 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"40.99.51.125","remote_port":"25462","service":"dovecot","username":"becreative@northbuild.co.uk","tls":true} Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:29.067 (now: 2025-03-03 12:17:26.067) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req23: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req23: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req23: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req23: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req23: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 253, buffered=517) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req23: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req23: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy response 0 Mar 3 12:17:26 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125,): Performing passdb lookup Mar 3 12:17:26 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125,): cache hit: {CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1#011userdb_uid=1019#011quota_vsizes=yes#011quota2_grace=0#011userdb_quota=maildir:Mailbox:ns=INBOX.#011userdb_password={CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1#011quota_rule3=INBOX.Trash:ignore#011quota2=fs:cPanel Account#011userdb_quota_rule=*:bytes=1073741824#011userdb_mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8#011quota_rule=*:bytes=1073741824#011quota_rule2=INBOX.INBOX:ignore#011userdb_quota2_grace=0#011userdb_quota_vsizes=yes#011uid=1019#011userdb_quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011home=/home/fb181022a/mail/northbuild.co.uk/becreative#011userdb_user=becreative@northbuild.co.uk#011gid=1021#011userdb_quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011user=becreative@northbuild.co.uk#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011userdb_quota_rule2=INBOX.INBOX:ignore#011userdb_quota_rule3=INBOX.Trash:ignore#011userdb_home=/home/fb181022a/mail/northbuild.co.uk/becreative#011userdb_quota2=fs:cPanel Account#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8#011userdb_gid=1021 Mar 3 12:17:26 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125,): Finished passdb lookup Mar 3 12:17:26 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:26 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"40.99.51.125","remote_port":"25462","service":"dovecot","username":"becreative@northbuild.co.uk","tls":true} Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req24: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=2) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy check action is continue Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req23: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req23: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:29.068 (now: 2025-03-03 12:17:26.068) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req23: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req24: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req24: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req24: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req24: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 253, buffered=517) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req24: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req24: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 3 ms in queue) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy response 0 Mar 3 12:17:26 server dovecot[75184]: auth: Debug: auth(becreative@northbuild.co.uk,40.99.51.125,): Auth request finished Mar 3 12:17:26 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:26 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"40.99.51.125","remote_port":"25462","service":"dovecot","username":"becreative@northbuild.co.uk","success":true,"policy_reject":false,"tls":true} Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req25: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: client passdb out: OK#0112#011user=becreative@northbuild.co.uk#011quota_vsizes=yes#011quota2_grace=0#011quota_rule3=INBOX.Trash:ignore#011quota2=fs:cPanel Account#011quota_rule=*:bytes=1073741824#011quota_rule2=INBOX.INBOX:ignore#011uid=1019#011home=/home/fb181022a/mail/northbuild.co.uk/becreative#011gid=1021#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8 Mar 3 12:17:26 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy check action is continue Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req24: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req24: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:29.072 (now: 2025-03-03 12:17:26.072) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req24: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req25: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req25: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req25: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req25: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 290, buffered=555) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req25: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req25: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy report action finished Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req25: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req25: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: request [Req25: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:26 server dovecot[75184]: auth: Debug: master in: REQUEST#0111748500481#01175182#0112#01157c2dc418a02c0a354a635e74e639556#011session_pid=75277#011request_auth_token Mar 3 12:17:26 server dovecot[75184]: auth: Debug: prefetch(becreative@northbuild.co.uk,40.99.51.125,): Performing userdb lookup Mar 3 12:17:26 server dovecot[75184]: auth: Debug: prefetch(becreative@northbuild.co.uk,40.99.51.125,): success Mar 3 12:17:26 server dovecot[75184]: auth: Debug: prefetch(becreative@northbuild.co.uk,40.99.51.125,): Finished userdb lookup Mar 3 12:17:26 server dovecot[75184]: auth: Debug: master userdb out: USER#0111748500481#011becreative@northbuild.co.uk#011uid=1019#011quota=maildir:Mailbox:ns=INBOX.#011password={CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1#011quota_rule=*:bytes=1073741824#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8#011quota2_grace=0#011quota_vsizes=yes#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011quota_rule2=INBOX.INBOX:ignore#011quota_rule3=INBOX.Trash:ignore#011home=/home/fb181022a/mail/northbuild.co.uk/becreative#011quota2=fs:cPanel Account#011gid=1021#011auth_mech=PLAIN#011auth_token=9e51e96ae8424a84ef62e901d990e4053d3bc09d Mar 3 12:17:26 server dovecot[75184]: imap-login: Login: user=, method=PLAIN, rip=40.99.51.125, lip=172.31.3.195, mpid=75277, TLS, session= Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Module loaded: /usr/lib64/dovecot/lib20_virtual_plugin.so Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Added userdb setting: mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Added userdb setting: plugin/password= Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Added userdb setting: plugin/quota2=fs:cPanel Account Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Added userdb setting: plugin/quota2_grace=0 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=1073741824 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Added userdb setting: plugin/quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Added userdb setting: plugin/quota_rule3=INBOX.Trash:ignore Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Added userdb setting: plugin/quota_vsizes=yes Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Effective uid=1019, gid=1021, home=/home/fb181022a/mail/northbuild.co.uk/becreative Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Quota rule: root=Mailbox mailbox=* bytes=1073741824 messages=0 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Quota rule: root=Mailbox mailbox=INBOX.INBOX ignored Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Quota grace: root=Mailbox bytes=107374182 (10%) Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Quota root: name=cPanel Account backend=fs args= Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Quota grace: root=cPanel Account bytes=0 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: dict(file): dict created (uri=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota, base_dir=/var/run/dovecot) Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: open(/proc/self/io) failed: Permission denied Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Namespace spam: type=private, prefix=spam, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/becreative@northbuild.co.uk/spam Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/spam, index=/home/fb181022a/mail/northbuild.co.uk/becreative/mail/virtual/becreative@northbuild.co.uk/spam, indexpvt=, control=, inbox=, alt= Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: quota-fs: fs quota add mailbox dir = /usr/local/cpanel/etc/dovecot/virtual/spam Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: quota-fs: fs quota block device = /dev/nvme0n1p1 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: quota-fs: fs quota mount point = / Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: quota-fs: fs quota mount type = xfs Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl: acl username = becreative@northbuild.co.uk Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl: owner = 1 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/becreative@northbuild.co.uk/sent Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/fb181022a/mail/northbuild.co.uk/becreative/mail/virtual/becreative@northbuild.co.uk/sent, indexpvt=, control=, inbox=, alt= Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl: acl username = becreative@northbuild.co.uk Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl: owner = 1 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: maildir++: root=/home/fb181022a/mail/northbuild.co.uk/becreative, index=, indexpvt=, control=, inbox=/home/fb181022a/mail/northbuild.co.uk/becreative, alt= Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl: acl username = becreative@northbuild.co.uk Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl: owner = 1 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Mar 3 12:17:26 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: quota: quota_over_flag check: quota2_over_script unset - skipping Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:26 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:27 server dovecot[75184]: auth: Debug: auth client connected (pid=0) Mar 3 12:17:27 server dovecot[75184]: auth: Debug: client in: AUTH#0111#011LOGIN#011service=smtp#011secured#011rip=40.99.51.125#011lip=172.31.3.195#011nologin#011resp=YmVjcmVhdGl2ZUBub3J0aGJ1aWxkLmNvLnVr (previous base64 data may contain sensitive data) Mar 3 12:17:27 server dovecot[75184]: auth: Debug: client passdb out: CONT#0111#011UGFzc3dvcmQ6 Mar 3 12:17:28 server dovecot[75184]: auth: Debug: client in: CONT#0111#011QmVDcmVhdGl2RUAxMjM= (previous base64 data may contain sensitive data) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:28 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"40.99.51.125","remote_port":"0","service":"dovecot","username":"becreative@northbuild.co.uk","tls":false} Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:31.039 (now: 2025-03-03 12:17:28.039) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req26: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req26: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req26: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req26: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req26: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 248, buffered=512) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req26: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req26: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy response 0 Mar 3 12:17:28 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125): Performing passdb lookup Mar 3 12:17:28 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125): cache hit: {CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota=maildir:Mailbox:ns=INBOX.#011userdb_quota_rule2=INBOX.INBOX:ignore#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011userdb_quota2=fs:cPanel Account#011userdb_quota_rule3=INBOX.Trash:ignore#011userdb_home=/home/fb181022a/mail/northbuild.co.uk/becreative#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8#011userdb_gid=1021#011userdb_password={CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1#011quota_rule3=INBOX.Trash:ignore#011userdb_quota=maildir:Mailbox:ns=INBOX.#011quota2_grace=0#011quota_vsizes=yes#011userdb_uid=1019#011userdb_mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8#011userdb_quota_rule=*:bytes=1073741824#011quota2=fs:cPanel Account#011uid=1019#011userdb_quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota_rule2=INBOX.INBOX:ignore#011userdb_quota_vsizes=yes#011userdb_quota2_grace=0#011quota_rule=*:bytes=1073741824#011userdb_quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011user=becreative@northbuild.co.uk#011gid=1021#011userdb_user=becreative@northbuild.co.uk#011home=/home/fb181022a/mail/northbuild.co.uk/becreative Mar 3 12:17:28 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125): Finished passdb lookup Mar 3 12:17:28 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:28 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"40.99.51.125","remote_port":"0","service":"dovecot","username":"becreative@northbuild.co.uk","tls":false} Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req27: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=2) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy check action is continue Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req26: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req26: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:31.040 (now: 2025-03-03 12:17:28.040) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req26: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req27: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req27: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req27: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req27: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 248, buffered=512) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req27: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req27: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 3 ms in queue) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy response 0 Mar 3 12:17:28 server dovecot[75184]: auth: Debug: auth(becreative@northbuild.co.uk,40.99.51.125): Auth request finished Mar 3 12:17:28 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:28 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"0","remote_host":"40.99.51.125","remote_port":"0","service":"dovecot","username":"becreative@northbuild.co.uk","success":true,"policy_reject":false,"tls":false} Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req28: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: client passdb out: OK#0111#011user=becreative@northbuild.co.uk#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota=maildir:Mailbox:ns=INBOX.#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8#011quota_rule3=INBOX.Trash:ignore#011quota2_grace=0#011quota_vsizes=yes#011quota2=fs:cPanel Account#011uid=1019#011quota_rule2=INBOX.INBOX:ignore#011quota_rule=*:bytes=1073741824#011gid=1021#011home=/home/fb181022a/mail/northbuild.co.uk/becreative Mar 3 12:17:28 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy check action is continue Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req27: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req27: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:31.044 (now: 2025-03-03 12:17:28.044) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req27: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req28: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req28: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req28: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req28: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 285, buffered=550) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req28: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req28: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125): Policy report action finished Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req28: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req28: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: request [Req28: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:28 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:28 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Disconnected: Logged out in=63, out=1081, bytes=63/1081 Mar 3 12:17:28 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: User session is finished Mar 3 12:17:28 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: dict(file): Waiting for dict to finish pending operations Mar 3 12:17:28 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: dict(file): Waiting for dict to finish pending operations Mar 3 12:17:28 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75277>: Debug: dict(file): dict destroyed Mar 3 12:17:28 server dovecot[75184]: imap-login: Debug: SSL alert: close notify Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write encrypted extensions Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read finished Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x20, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:29 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully Mar 3 12:17:30 server dovecot[75184]: auth: Debug: client in: AUTH#0113#011PLAIN#011service=imap#011secured=tls#011session=GtnkI28vpm8oYzN9#011lip=172.31.3.195#011rip=40.99.51.125#011lport=993#011rport=28582#011local_name=mail.northbuild.co.uk#011resp=AGJlY3JlYXRpdmVAbm9ydGhidWlsZC5jby51awBCZUNyZWF0aXZFQDEyMw== (previous base64 data may contain sensitive data) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:30 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"40.99.51.125","remote_port":"28582","service":"dovecot","username":"becreative@northbuild.co.uk","tls":true} Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:33.339 (now: 2025-03-03 12:17:30.339) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req29: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req29: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req29: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req29: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req29: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 253, buffered=517) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req29: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req29: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy response 0 Mar 3 12:17:30 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125,): Performing passdb lookup Mar 3 12:17:30 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125,): cache hit: {CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1#011userdb_uid=1019#011quota_vsizes=yes#011quota2_grace=0#011userdb_quota=maildir:Mailbox:ns=INBOX.#011userdb_password={CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1#011quota_rule3=INBOX.Trash:ignore#011quota2=fs:cPanel Account#011userdb_quota_rule=*:bytes=1073741824#011userdb_mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8#011quota_rule=*:bytes=1073741824#011quota_rule2=INBOX.INBOX:ignore#011userdb_quota2_grace=0#011userdb_quota_vsizes=yes#011uid=1019#011userdb_quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011home=/home/fb181022a/mail/northbuild.co.uk/becreative#011userdb_user=becreative@northbuild.co.uk#011gid=1021#011userdb_quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011user=becreative@northbuild.co.uk#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011userdb_quota_rule2=INBOX.INBOX:ignore#011userdb_quota_rule3=INBOX.Trash:ignore#011userdb_home=/home/fb181022a/mail/northbuild.co.uk/becreative#011userdb_quota2=fs:cPanel Account#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8#011userdb_gid=1021 Mar 3 12:17:30 server dovecot[75184]: auth: Debug: dict(becreative@northbuild.co.uk,40.99.51.125,): Finished passdb lookup Mar 3 12:17:30 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:30 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"40.99.51.125","remote_port":"28582","service":"dovecot","username":"becreative@northbuild.co.uk","tls":true} Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req30: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=2) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy check action is continue Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req29: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req29: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:33.340 (now: 2025-03-03 12:17:30.340) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req29: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req30: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req30: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req30: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req30: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 253, buffered=517) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req30: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req30: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 3 ms in queue) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy response 0 Mar 3 12:17:30 server dovecot[75184]: auth: Debug: auth(becreative@northbuild.co.uk,40.99.51.125,): Auth request finished Mar 3 12:17:30 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:30 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$0a3e2419b9ccce03","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"40.99.51.125","remote_port":"28582","service":"dovecot","username":"becreative@northbuild.co.uk","success":true,"policy_reject":false,"tls":true} Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req31: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: client passdb out: OK#0113#011user=becreative@northbuild.co.uk#011quota_vsizes=yes#011quota2_grace=0#011quota_rule3=INBOX.Trash:ignore#011quota2=fs:cPanel Account#011quota_rule=*:bytes=1073741824#011quota_rule2=INBOX.INBOX:ignore#011uid=1019#011home=/home/fb181022a/mail/northbuild.co.uk/becreative#011gid=1021#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8 Mar 3 12:17:30 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy check action is continue Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req30: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req30: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:33.344 (now: 2025-03-03 12:17:30.344) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req30: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req31: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req31: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req31: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req31: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 290, buffered=555) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req31: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req31: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: policy(becreative@northbuild.co.uk,40.99.51.125,): Policy report action finished Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req31: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req31: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: request [Req31: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:30 server dovecot[75184]: auth: Debug: master in: REQUEST#0112582773761#01175182#0113#01157c2dc418a02c0a354a635e74e639556#011session_pid=75292#011request_auth_token Mar 3 12:17:30 server dovecot[75184]: auth: Debug: prefetch(becreative@northbuild.co.uk,40.99.51.125,): Performing userdb lookup Mar 3 12:17:30 server dovecot[75184]: auth: Debug: prefetch(becreative@northbuild.co.uk,40.99.51.125,): success Mar 3 12:17:30 server dovecot[75184]: auth: Debug: prefetch(becreative@northbuild.co.uk,40.99.51.125,): Finished userdb lookup Mar 3 12:17:30 server dovecot[75184]: auth: Debug: master userdb out: USER#0112582773761#011becreative@northbuild.co.uk#011uid=1019#011quota=maildir:Mailbox:ns=INBOX.#011password={CRYPT}$6$HuLeC7LIqzuxeMa6$juyeMoCgE51Y1Aun5EpooEKPCmX3cZsJ0D0wZMdpbdC0jOvE8Ab1c5fSmyZ2UVjq3xSrVQlRw8qw2TmQ8OaKa1#011quota_rule=*:bytes=1073741824#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8#011quota2_grace=0#011quota_vsizes=yes#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota#011quota_rule2=INBOX.INBOX:ignore#011quota_rule3=INBOX.Trash:ignore#011home=/home/fb181022a/mail/northbuild.co.uk/becreative#011quota2=fs:cPanel Account#011gid=1021#011auth_mech=PLAIN#011auth_token=ecbd38eca8e29c924f77eb2fac1548615ac54055 Mar 3 12:17:30 server dovecot[75184]: imap-login: Login: user=, method=PLAIN, rip=40.99.51.125, lip=172.31.3.195, mpid=75292, TLS, session= Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Module loaded: /usr/lib64/dovecot/lib20_virtual_plugin.so Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Added userdb setting: mail=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Added userdb setting: plugin/password= Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Added userdb setting: plugin/quota2=fs:cPanel Account Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Added userdb setting: plugin/quota2_grace=0 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=1073741824 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Added userdb setting: plugin/quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Added userdb setting: plugin/quota_rule3=INBOX.Trash:ignore Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Added userdb setting: plugin/quota_vsizes=yes Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Effective uid=1019, gid=1021, home=/home/fb181022a/mail/northbuild.co.uk/becreative Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Quota rule: root=Mailbox mailbox=* bytes=1073741824 messages=0 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Quota rule: root=Mailbox mailbox=INBOX.INBOX ignored Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Quota grace: root=Mailbox bytes=107374182 (10%) Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Quota root: name=cPanel Account backend=fs args= Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Quota grace: root=cPanel Account bytes=0 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: dict(file): dict created (uri=file:/home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-quota, base_dir=/var/run/dovecot) Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: open(/proc/self/io) failed: Permission denied Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Namespace spam: type=private, prefix=spam, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/becreative@northbuild.co.uk/spam Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/spam, index=/home/fb181022a/mail/northbuild.co.uk/becreative/mail/virtual/becreative@northbuild.co.uk/spam, indexpvt=, control=, inbox=, alt= Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: quota-fs: fs quota add mailbox dir = /usr/local/cpanel/etc/dovecot/virtual/spam Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: quota-fs: fs quota block device = /dev/nvme0n1p1 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: quota-fs: fs quota mount point = / Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: quota-fs: fs quota mount type = xfs Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl: acl username = becreative@northbuild.co.uk Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl: owner = 1 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/becreative@northbuild.co.uk/sent Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/fb181022a/mail/northbuild.co.uk/becreative/mail/virtual/becreative@northbuild.co.uk/sent, indexpvt=, control=, inbox=, alt= Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl: acl username = becreative@northbuild.co.uk Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl: owner = 1 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/fb181022a/mail/northbuild.co.uk/becreative:UTF-8 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: maildir++: root=/home/fb181022a/mail/northbuild.co.uk/becreative, index=, indexpvt=, control=, inbox=/home/fb181022a/mail/northbuild.co.uk/becreative, alt= Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl: acl username = becreative@northbuild.co.uk Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl: owner = 1 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Mar 3 12:17:30 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: quota: quota_over_flag check: quota2_over_script unset - skipping Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:30 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write key exchange Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client key exchange Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read change cipher spec Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read finished Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully Mar 3 12:17:31 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully Mar 3 12:17:31 server dovecot[75184]: auth: Debug: client in: AUTH#0114#011PLAIN#011service=imap#011secured=tls#011session=lL3zI28vG+8+6Den#011lip=172.31.3.195#011rip=62.232.55.167#011lport=993#011rport=61211#011local_name=mail.earthtoheaven.co.uk#011resp=AHNhbGVzQGVhcnRodG9oZWF2ZW4uY28udWsAZ29sZGVuNyE1c2hvdXRUcmFpbg== (previous base64 data may contain sensitive data) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: policy(sales@earthtoheaven.co.uk,62.232.55.167,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:31 server dovecot[75184]: auth: Debug: policy(sales@earthtoheaven.co.uk,62.232.55.167,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$bb995dde9d331e2a","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"62.232.55.167","remote_port":"61211","service":"dovecot","username":"sales@earthtoheaven.co.uk","tls":true} Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:34.315 (now: 2025-03-03 12:17:31.315) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req32: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req32: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req32: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req32: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req32: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 252, buffered=516) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req32: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req32: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: policy(sales@earthtoheaven.co.uk,62.232.55.167,): Policy response 0 Mar 3 12:17:31 server dovecot[75184]: auth: Debug: dict(sales@earthtoheaven.co.uk,62.232.55.167,): Performing passdb lookup Mar 3 12:17:31 server dovecot[75184]: auth: Debug: dict(sales@earthtoheaven.co.uk,62.232.55.167,): cache miss Mar 3 12:17:31 server dovecot[75184]: auth: Debug: policy(sales@earthtoheaven.co.uk,62.232.55.167,): Policy check action is continue Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req32: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req32: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req32: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=1) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:31 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<9>: Handling PASSV request Mar 3 12:17:31 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<9>: dict(sales@earthtoheaven.co.uk,62.232.55.167,): Performing passdb lookup Mar 3 12:17:31 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up 'shared/dovecot_userdb-imap/sales@earthtoheaven.co.uk' Mar 3 12:17:31 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up (async) 'shared/dovecot_userdb-imap/sales@earthtoheaven.co.uk' Mar 3 12:17:31 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Connecting Mar 3 12:17:31 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Client connected (fd=7) Mar 3 12:17:31 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/sales@earthtoheaven.co.uk': found Mar 3 12:17:31 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/sales@earthtoheaven.co.uk': found Mar 3 12:17:31 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<9>: dict(sales@earthtoheaven.co.uk,62.232.55.167,): Lookup: shared/dovecot_userdb-imap/sales@earthtoheaven.co.uk = {"userdb_quota_rule2":"INBOX.INBOX:ignore","quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","quota":"maildir:Mailbox:ns=INBOX.","userdb_gid":"1027","mail":"maildir:/home/afb070223a/mail/earthtoheaven.co.uk/sales:UTF-8","quota_clone_dict":"file:/home/afb070223a/mail/earthtoheaven.co.uk/sales/dovecot-quota","password":"{CRYPT}$6$okgHml9iNCHn.kv2$.Y.MyVIKq/BIQ2t9fvtOhtZj8EfqLWVq.FDzsldYJ3n0jdIf4w0XvB7PiM9Ozt4tVA0upKPSDwyj19FgxKQBJ0","userdb_quota2":"fs:cPanel Account","userdb_home":"/home/afb070223a/mail/earthtoheaven.co.uk/sales","userdb_quota_rule3":"INBOX.Trash:ignore","userdb_mail":"maildir:/home/afb070223a/mail/earthtoheaven.co.uk/sales:UTF-8","userdb_quota_rule":"*:bytes=10737418240","quota2":"fs:cPanel Account","userdb_password":"{CRYPT}$6$okgHml9iNCHn.kv2$.Y.MyVIKq/BIQ2t9fvtOhtZj8EfqLWVq.FDzsldYJ3n0jdIf4w0XvB7PiM9Ozt4tVA0upKPSDwyj19FgxKQBJ0","userdb_quota":"maildir:Mailbox:ns=INBOX.","quota_rule3":"INBOX.Trash:ignore","quota2_grace":"0","userdb_uid":"1025","quota_vsizes":"yes","user":"sales@earthtoheaven.co.uk","userdb_quota_clone_dict":"file:/home/afb070223a/mail/earthtoheaven.co.uk/sales/dovecot-quota","gid":"1027","userdb_user":"sales@earthtoheaven.co.uk","home":"/home/afb070223a/mail/earthtoheaven.co.uk/sales","userdb_quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","uid":"1025","userdb_quota2_grace":"0","userdb_quota_vsizes":"yes","quota_rule2":"INBOX.INBOX:ignore","quota_rule":"*:bytes=10737418240"} Mar 3 12:17:31 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<9>: dict(sales@earthtoheaven.co.uk,62.232.55.167,): Finished passdb lookup Mar 3 12:17:31 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<9>: Finished Mar 3 12:17:31 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Disconnected: Connection closed (fd=7) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: dict(sales@earthtoheaven.co.uk,62.232.55.167,): Finished passdb lookup Mar 3 12:17:31 server dovecot[75184]: auth: Debug: policy(sales@earthtoheaven.co.uk,62.232.55.167,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:31 server dovecot[75184]: auth: Debug: policy(sales@earthtoheaven.co.uk,62.232.55.167,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$bb995dde9d331e2a","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"62.232.55.167","remote_port":"61211","service":"dovecot","username":"sales@earthtoheaven.co.uk","tls":true} Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:34.326 (now: 2025-03-03 12:17:31.326) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req33: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req33: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req33: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req33: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req33: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 252, buffered=516) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req33: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req33: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: policy(sales@earthtoheaven.co.uk,62.232.55.167,): Policy response 0 Mar 3 12:17:31 server dovecot[75184]: auth: Debug: auth(sales@earthtoheaven.co.uk,62.232.55.167,): Auth request finished Mar 3 12:17:31 server dovecot[75184]: auth: Debug: policy(sales@earthtoheaven.co.uk,62.232.55.167,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:31 server dovecot[75184]: auth: Debug: policy(sales@earthtoheaven.co.uk,62.232.55.167,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$bb995dde9d331e2a","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"62.232.55.167","remote_port":"61211","service":"dovecot","username":"sales@earthtoheaven.co.uk","success":true,"policy_reject":false,"tls":true} Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req34: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: client passdb out: OK#0114#011user=sales@earthtoheaven.co.uk#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota=maildir:Mailbox:ns=INBOX.#011mail=maildir:/home/afb070223a/mail/earthtoheaven.co.uk/sales:UTF-8#011quota_clone_dict=file:/home/afb070223a/mail/earthtoheaven.co.uk/sales/dovecot-quota#011quota2=fs:cPanel Account#011quota_rule3=INBOX.Trash:ignore#011quota2_grace=0#011quota_vsizes=yes#011gid=1027#011home=/home/afb070223a/mail/earthtoheaven.co.uk/sales#011uid=1025#011quota_rule2=INBOX.INBOX:ignore#011quota_rule=*:bytes=10737418240 Mar 3 12:17:31 server dovecot[75184]: auth: Debug: policy(sales@earthtoheaven.co.uk,62.232.55.167,): Policy check action is continue Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req33: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req33: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:34.328 (now: 2025-03-03 12:17:31.328) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req33: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req34: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req34: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req34: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req34: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 289, buffered=554) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req34: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req34: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 2 ms + 0 ms in queue) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: policy(sales@earthtoheaven.co.uk,62.232.55.167,): Policy report action finished Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req34: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req34: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: request [Req34: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:31 server dovecot[75184]: auth: Debug: master in: REQUEST#01131850497#01175182#0114#01157c2dc418a02c0a354a635e74e639556#011session_pid=75297#011request_auth_token Mar 3 12:17:31 server dovecot[75184]: auth: Debug: prefetch(sales@earthtoheaven.co.uk,62.232.55.167,): Performing userdb lookup Mar 3 12:17:31 server dovecot[75184]: auth: Debug: prefetch(sales@earthtoheaven.co.uk,62.232.55.167,): success Mar 3 12:17:31 server dovecot[75184]: auth: Debug: prefetch(sales@earthtoheaven.co.uk,62.232.55.167,): Finished userdb lookup Mar 3 12:17:31 server dovecot[75184]: auth: Debug: master userdb out: USER#01131850497#011sales@earthtoheaven.co.uk#011quota_rule2=INBOX.INBOX:ignore#011gid=1027#011quota2=fs:cPanel Account#011home=/home/afb070223a/mail/earthtoheaven.co.uk/sales#011quota_rule3=INBOX.Trash:ignore#011mail=maildir:/home/afb070223a/mail/earthtoheaven.co.uk/sales:UTF-8#011quota_rule=*:bytes=10737418240#011password={CRYPT}$6$okgHml9iNCHn.kv2$.Y.MyVIKq/BIQ2t9fvtOhtZj8EfqLWVq.FDzsldYJ3n0jdIf4w0XvB7PiM9Ozt4tVA0upKPSDwyj19FgxKQBJ0#011quota=maildir:Mailbox:ns=INBOX.#011uid=1025#011quota_clone_dict=file:/home/afb070223a/mail/earthtoheaven.co.uk/sales/dovecot-quota#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota2_grace=0#011quota_vsizes=yes#011auth_mech=PLAIN#011auth_token=9d30be0b26269b7801916196cde47fc3a99c914a Mar 3 12:17:31 server dovecot[75184]: imap-login: Login: user=, method=PLAIN, rip=62.232.55.167, lip=172.31.3.195, mpid=75297, TLS, session= Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Module loaded: /usr/lib64/dovecot/lib20_virtual_plugin.so Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Added userdb setting: mail=maildir:/home/afb070223a/mail/earthtoheaven.co.uk/sales:UTF-8 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Added userdb setting: plugin/password= Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Added userdb setting: plugin/quota2=fs:cPanel Account Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Added userdb setting: plugin/quota2_grace=0 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/afb070223a/mail/earthtoheaven.co.uk/sales/dovecot-quota Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=10737418240 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Added userdb setting: plugin/quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Added userdb setting: plugin/quota_rule3=INBOX.Trash:ignore Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Added userdb setting: plugin/quota_vsizes=yes Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Effective uid=1025, gid=1027, home=/home/afb070223a/mail/earthtoheaven.co.uk/sales Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Quota rule: root=Mailbox mailbox=* bytes=10737418240 messages=0 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Quota rule: root=Mailbox mailbox=INBOX.INBOX ignored Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Quota grace: root=Mailbox bytes=1073741824 (10%) Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Quota root: name=cPanel Account backend=fs args= Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Quota grace: root=cPanel Account bytes=0 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: dict(file): dict created (uri=file:/home/afb070223a/mail/earthtoheaven.co.uk/sales/dovecot-quota, base_dir=/var/run/dovecot) Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: open(/proc/self/io) failed: Permission denied Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Namespace spam: type=private, prefix=spam, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/sales@earthtoheaven.co.uk/spam Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/spam, index=/home/afb070223a/mail/earthtoheaven.co.uk/sales/mail/virtual/sales@earthtoheaven.co.uk/spam, indexpvt=, control=, inbox=, alt= Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: quota-fs: fs quota add mailbox dir = /usr/local/cpanel/etc/dovecot/virtual/spam Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: quota-fs: fs quota block device = /dev/nvme0n1p1 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: quota-fs: fs quota mount point = / Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: quota-fs: fs quota mount type = xfs Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl: acl username = sales@earthtoheaven.co.uk Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl: owner = 1 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/sales@earthtoheaven.co.uk/sent Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/afb070223a/mail/earthtoheaven.co.uk/sales/mail/virtual/sales@earthtoheaven.co.uk/sent, indexpvt=, control=, inbox=, alt= Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl: acl username = sales@earthtoheaven.co.uk Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl: owner = 1 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/afb070223a/mail/earthtoheaven.co.uk/sales:UTF-8 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: maildir++: root=/home/afb070223a/mail/earthtoheaven.co.uk/sales, index=, indexpvt=, control=, inbox=/home/afb070223a/mail/earthtoheaven.co.uk/sales, alt= Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl: acl username = sales@earthtoheaven.co.uk Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl: owner = 1 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: quota: quota_over_flag check: quota2_over_script unset - skipping Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: Mailbox INBOX: Mailbox opened Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl vfile: file cache_secs=86400/INBOX not found Mar 3 12:17:31 server dovecot[75184]: imap(sales@earthtoheaven.co.uk)<75297>: Debug: acl vfile: file /home/afb070223a/mail/earthtoheaven.co.uk/sales/dovecot-acl not found Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:31 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file cache_secs=86400/INBOX not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file /home/fb181022a/mail/northbuild.co.uk/becreative/dovecot-acl not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file cache_secs=86400/ not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file cache_secs=86400/INBOX.Drafts not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file /home/fb181022a/mail/northbuild.co.uk/becreative/.Drafts/dovecot-acl not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file cache_secs=86400/INBOX.spam not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file /home/fb181022a/mail/northbuild.co.uk/becreative/.spam/dovecot-acl not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file cache_secs=86400/INBOX.Trash not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file /home/fb181022a/mail/northbuild.co.uk/becreative/.Trash/dovecot-acl not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file cache_secs=86400/INBOX.Sent not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file /home/fb181022a/mail/northbuild.co.uk/becreative/.Sent/dovecot-acl not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file cache_secs=86400/INBOX.Archive not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file /home/fb181022a/mail/northbuild.co.uk/becreative/.Archive/dovecot-acl not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file cache_secs=86400/INBOX.Junk not found Mar 3 12:17:31 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: acl vfile: file /home/fb181022a/mail/northbuild.co.uk/becreative/.Junk/dovecot-acl not found Mar 3 12:17:32 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX.Sent: Mailbox opened Mar 3 12:17:32 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX.Archive: Mailbox opened Mar 3 12:17:32 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX.Drafts: Mailbox opened Mar 3 12:17:32 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX.Trash: Mailbox opened Mar 3 12:17:33 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX.spam: Mailbox opened Mar 3 12:17:33 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX.Junk: Mailbox opened Mar 3 12:17:33 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX: Mailbox opened Mar 3 12:17:33 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX.Sent: Mailbox opened Mar 3 12:17:34 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX.Archive: Mailbox opened Mar 3 12:17:34 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX.Drafts: Mailbox opened Mar 3 12:17:34 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX.Trash: Mailbox opened Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write key exchange Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client key exchange Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read change cipher spec Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read finished Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully Mar 3 12:17:34 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully Mar 3 12:17:35 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX.spam: Mailbox opened Mar 3 12:17:35 server dovecot[75184]: auth: Debug: client in: AUTH#0115#011PLAIN#011service=imap#011secured=tls#011session=Z9wsJG8vkvgfYBpx#011lip=172.31.3.195#011rip=31.96.26.113#011lport=993#011rport=63634#011local_name=server.becreativemail.co.uk#011resp=AGluZm9AdGhlYmVkc3RvcmVrZW5kYWwuY28udWsAcHJvZHVjZSEzMTREYW5jZQ== (previous base64 data may contain sensitive data) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: policy(info@thebedstorekendal.co.uk,31.96.26.113,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:35 server dovecot[75184]: auth: Debug: policy(info@thebedstorekendal.co.uk,31.96.26.113,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$82d93742c62d9119","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"31.96.26.113","remote_port":"63634","service":"dovecot","username":"info@thebedstorekendal.co.uk","tls":true} Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:38.059 (now: 2025-03-03 12:17:35.059) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req35: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req35: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req35: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req35: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req35: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 254, buffered=518) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req35: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req35: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 2 ms + 0 ms in queue) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: policy(info@thebedstorekendal.co.uk,31.96.26.113,): Policy response 0 Mar 3 12:17:35 server dovecot[75184]: auth: Debug: dict(info@thebedstorekendal.co.uk,31.96.26.113,): Performing passdb lookup Mar 3 12:17:35 server dovecot[75184]: auth: Debug: dict(info@thebedstorekendal.co.uk,31.96.26.113,): cache miss Mar 3 12:17:35 server dovecot[75184]: auth: Debug: policy(info@thebedstorekendal.co.uk,31.96.26.113,): Policy check action is continue Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req35: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req35: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req35: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=1) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:35 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<10>: Handling PASSV request Mar 3 12:17:35 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<10>: dict(info@thebedstorekendal.co.uk,31.96.26.113,): Performing passdb lookup Mar 3 12:17:35 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up 'shared/dovecot_userdb-imap/info@thebedstorekendal.co.uk' Mar 3 12:17:35 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up (async) 'shared/dovecot_userdb-imap/info@thebedstorekendal.co.uk' Mar 3 12:17:35 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Connecting Mar 3 12:17:35 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Client connected (fd=7) Mar 3 12:17:35 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/info@thebedstorekendal.co.uk': found Mar 3 12:17:35 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/info@thebedstorekendal.co.uk': found Mar 3 12:17:35 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<10>: dict(info@thebedstorekendal.co.uk,31.96.26.113,): Lookup: shared/dovecot_userdb-imap/info@thebedstorekendal.co.uk = {"gid":"1015","user":"info@thebedstorekendal.co.uk","userdb_quota_clone_dict":"file:/home/yo170122a/mail/thebedstorekendal.co.uk/info/dovecot-quota","home":"/home/yo170122a/mail/thebedstorekendal.co.uk/info","userdb_user":"info@thebedstorekendal.co.uk","userdb_quota2_grace":"0","userdb_quota_vsizes":"yes","quota_rule2":"INBOX.INBOX:ignore","userdb_quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","uid":"1013","quota_rule":"*:bytes=10737418240","userdb_mail":"maildir:/home/yo170122a/mail/thebedstorekendal.co.uk/info:UTF-8","quota2":"fs:cPanel Account","userdb_quota_rule":"*:bytes=10737418240","quota2_grace":"0","userdb_quota":"maildir:Mailbox:ns=INBOX.","userdb_password":"{CRYPT}$6$ASXRSob8YYQNvtqv$RA/iGIZP0FMP63OU1/30WdmdOAo4SbsUOOC9s/89FiNcXIIoH6N5UboJ7DpyTmjYB2iL7MfYlxggGxMdzAoOu0","quota_rule3":"INBOX.Trash:ignore","quota_vsizes":"yes","userdb_uid":"1013","userdb_gid":"1015","mail":"maildir:/home/yo170122a/mail/thebedstorekendal.co.uk/info:UTF-8","password":"{CRYPT}$6$ASXRSob8YYQNvtqv$RA/iGIZP0FMP63OU1/30WdmdOAo4SbsUOOC9s/89FiNcXIIoH6N5UboJ7DpyTmjYB2iL7MfYlxggGxMdzAoOu0","userdb_quota2":"fs:cPanel Account","quota_clone_dict":"file:/home/yo170122a/mail/thebedstorekendal.co.uk/info/dovecot-quota","userdb_home":"/home/yo170122a/mail/thebedstorekendal.co.uk/info","userdb_quota_rule3":"INBOX.Trash:ignore","userdb_quota_rule2":"INBOX.INBOX:ignore","quota":"maildir:Mailbox:ns=INBOX.","quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded"} Mar 3 12:17:35 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<10>: dict(info@thebedstorekendal.co.uk,31.96.26.113,): Finished passdb lookup Mar 3 12:17:35 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<10>: Finished Mar 3 12:17:35 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Disconnected: Connection closed (fd=7) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: dict(info@thebedstorekendal.co.uk,31.96.26.113,): Finished passdb lookup Mar 3 12:17:35 server dovecot[75184]: auth: Debug: policy(info@thebedstorekendal.co.uk,31.96.26.113,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:35 server dovecot[75184]: auth: Debug: policy(info@thebedstorekendal.co.uk,31.96.26.113,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$82d93742c62d9119","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"31.96.26.113","remote_port":"63634","service":"dovecot","username":"info@thebedstorekendal.co.uk","tls":true} Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:38.070 (now: 2025-03-03 12:17:35.070) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req36: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req36: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req36: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req36: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req36: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 254, buffered=518) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req36: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req36: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: policy(info@thebedstorekendal.co.uk,31.96.26.113,): Policy response 0 Mar 3 12:17:35 server dovecot[75184]: auth: Debug: auth(info@thebedstorekendal.co.uk,31.96.26.113,): Auth request finished Mar 3 12:17:35 server dovecot[75184]: auth: Debug: policy(info@thebedstorekendal.co.uk,31.96.26.113,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:35 server dovecot[75184]: auth: Debug: policy(info@thebedstorekendal.co.uk,31.96.26.113,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$82d93742c62d9119","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"31.96.26.113","remote_port":"63634","service":"dovecot","username":"info@thebedstorekendal.co.uk","success":true,"policy_reject":false,"tls":true} Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req37: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: client passdb out: OK#0115#011user=info@thebedstorekendal.co.uk#011gid=1015#011home=/home/yo170122a/mail/thebedstorekendal.co.uk/info#011quota_rule2=INBOX.INBOX:ignore#011uid=1013#011quota_rule=*:bytes=10737418240#011quota2=fs:cPanel Account#011quota2_grace=0#011quota_rule3=INBOX.Trash:ignore#011quota_vsizes=yes#011mail=maildir:/home/yo170122a/mail/thebedstorekendal.co.uk/info:UTF-8#011quota_clone_dict=file:/home/yo170122a/mail/thebedstorekendal.co.uk/info/dovecot-quota#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:35 server dovecot[75184]: auth: Debug: policy(info@thebedstorekendal.co.uk,31.96.26.113,): Policy check action is continue Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req36: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req36: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:38.071 (now: 2025-03-03 12:17:35.071) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req36: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req37: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req37: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req37: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req37: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 291, buffered=556) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req37: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req37: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: policy(info@thebedstorekendal.co.uk,31.96.26.113,): Policy report action finished Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req37: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req37: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: request [Req37: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:35 server dovecot[75184]: auth: Debug: master in: REQUEST#011388890625#01175182#0115#01157c2dc418a02c0a354a635e74e639556#011session_pid=75312#011request_auth_token Mar 3 12:17:35 server dovecot[75184]: auth: Debug: prefetch(info@thebedstorekendal.co.uk,31.96.26.113,): Performing userdb lookup Mar 3 12:17:35 server dovecot[75184]: auth: Debug: prefetch(info@thebedstorekendal.co.uk,31.96.26.113,): success Mar 3 12:17:35 server dovecot[75184]: auth: Debug: prefetch(info@thebedstorekendal.co.uk,31.96.26.113,): Finished userdb lookup Mar 3 12:17:35 server dovecot[75184]: auth: Debug: master userdb out: USER#011388890625#011info@thebedstorekendal.co.uk#011quota_clone_dict=file:/home/yo170122a/mail/thebedstorekendal.co.uk/info/dovecot-quota#011quota2_grace=0#011quota_vsizes=yes#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011mail=maildir:/home/yo170122a/mail/thebedstorekendal.co.uk/info:UTF-8#011quota_rule=*:bytes=10737418240#011quota=maildir:Mailbox:ns=INBOX.#011password={CRYPT}$6$ASXRSob8YYQNvtqv$RA/iGIZP0FMP63OU1/30WdmdOAo4SbsUOOC9s/89FiNcXIIoH6N5UboJ7DpyTmjYB2iL7MfYlxggGxMdzAoOu0#011uid=1013#011gid=1015#011quota2=fs:cPanel Account#011home=/home/yo170122a/mail/thebedstorekendal.co.uk/info#011quota_rule3=INBOX.Trash:ignore#011quota_rule2=INBOX.INBOX:ignore#011auth_mech=PLAIN#011auth_token=71e30274e96a7b93ffcf069e4ff8d1431d95f952 Mar 3 12:17:35 server dovecot[75184]: imap-login: Login: user=, method=PLAIN, rip=31.96.26.113, lip=172.31.3.195, mpid=75312, TLS, session= Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Module loaded: /usr/lib64/dovecot/lib20_virtual_plugin.so Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Added userdb setting: mail=maildir:/home/yo170122a/mail/thebedstorekendal.co.uk/info:UTF-8 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Added userdb setting: plugin/password= Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Added userdb setting: plugin/quota2=fs:cPanel Account Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Added userdb setting: plugin/quota2_grace=0 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/yo170122a/mail/thebedstorekendal.co.uk/info/dovecot-quota Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=10737418240 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Added userdb setting: plugin/quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Added userdb setting: plugin/quota_rule3=INBOX.Trash:ignore Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Added userdb setting: plugin/quota_vsizes=yes Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Effective uid=1013, gid=1015, home=/home/yo170122a/mail/thebedstorekendal.co.uk/info Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Quota rule: root=Mailbox mailbox=* bytes=10737418240 messages=0 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Quota rule: root=Mailbox mailbox=INBOX.INBOX ignored Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Quota grace: root=Mailbox bytes=1073741824 (10%) Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Quota root: name=cPanel Account backend=fs args= Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Quota grace: root=cPanel Account bytes=0 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: dict(file): dict created (uri=file:/home/yo170122a/mail/thebedstorekendal.co.uk/info/dovecot-quota, base_dir=/var/run/dovecot) Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: open(/proc/self/io) failed: Permission denied Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Namespace spam: type=private, prefix=spam, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/info@thebedstorekendal.co.uk/spam Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/spam, index=/home/yo170122a/mail/thebedstorekendal.co.uk/info/mail/virtual/info@thebedstorekendal.co.uk/spam, indexpvt=, control=, inbox=, alt= Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: quota-fs: fs quota add mailbox dir = /usr/local/cpanel/etc/dovecot/virtual/spam Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: quota-fs: fs quota block device = /dev/nvme0n1p1 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: quota-fs: fs quota mount point = / Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: quota-fs: fs quota mount type = xfs Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl: acl username = info@thebedstorekendal.co.uk Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl: owner = 1 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/info@thebedstorekendal.co.uk/sent Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/yo170122a/mail/thebedstorekendal.co.uk/info/mail/virtual/info@thebedstorekendal.co.uk/sent, indexpvt=, control=, inbox=, alt= Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl: acl username = info@thebedstorekendal.co.uk Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl: owner = 1 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/yo170122a/mail/thebedstorekendal.co.uk/info:UTF-8 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: maildir++: root=/home/yo170122a/mail/thebedstorekendal.co.uk/info, index=, indexpvt=, control=, inbox=/home/yo170122a/mail/thebedstorekendal.co.uk/info, alt= Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl: acl username = info@thebedstorekendal.co.uk Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl: owner = 1 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: quota: quota_over_flag check: quota2_over_script unset - skipping Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: Mailbox INBOX: Mailbox opened Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl vfile: file cache_secs=86400/INBOX not found Mar 3 12:17:35 server dovecot[75184]: imap(info@thebedstorekendal.co.uk)<75312>: Debug: acl vfile: file /home/yo170122a/mail/thebedstorekendal.co.uk/info/dovecot-acl not found Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:35 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:35 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX.Junk: Mailbox opened Mar 3 12:17:35 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX: Mailbox opened Mar 3 12:17:35 server dovecot[75184]: imap(becreative@northbuild.co.uk)<75292>: Debug: Mailbox INBOX: Mailbox opened Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write key exchange Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client key exchange Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read change cipher spec Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read finished Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write key exchange Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client key exchange Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read change cipher spec Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read finished Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully Mar 3 12:17:38 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully Mar 3 12:17:38 server dovecot[75184]: auth: Debug: client in: AUTH#0116#011PLAIN#011service=imap#011secured=tls#011session=VwVoJG8vYdlV/+kh#011lip=172.31.3.195#011rip=85.255.233.33#011lport=993#011rport=55649#011local_name=mail.earthtoheaven.co.uk#011resp=AGxvZ2lzdGljc0BlYXJ0aHRvaGVhdmVuLmNvLnVrAHNub3c4ITR5ZXN0ZXJkYXlDbG9jaw== (previous base64 data may contain sensitive data) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(logistics@earthtoheaven.co.uk,85.255.233.33,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(logistics@earthtoheaven.co.uk,85.255.233.33,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$2494e2b97a7cf037","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"85.255.233.33","remote_port":"55649","service":"dovecot","username":"logistics@earthtoheaven.co.uk","tls":true} Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:41.936 (now: 2025-03-03 12:17:38.936) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req38: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req38: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req38: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req38: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req38: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 256, buffered=520) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req38: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req38: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(logistics@earthtoheaven.co.uk,85.255.233.33,): Policy response 0 Mar 3 12:17:38 server dovecot[75184]: auth: Debug: dict(logistics@earthtoheaven.co.uk,85.255.233.33,): Performing passdb lookup Mar 3 12:17:38 server dovecot[75184]: auth: Debug: dict(logistics@earthtoheaven.co.uk,85.255.233.33,): cache miss Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(logistics@earthtoheaven.co.uk,85.255.233.33,): Policy check action is continue Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req38: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req38: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req38: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=1) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:38 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<11>: Handling PASSV request Mar 3 12:17:38 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<11>: dict(logistics@earthtoheaven.co.uk,85.255.233.33,): Performing passdb lookup Mar 3 12:17:38 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up 'shared/dovecot_userdb-imap/logistics@earthtoheaven.co.uk' Mar 3 12:17:38 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up (async) 'shared/dovecot_userdb-imap/logistics@earthtoheaven.co.uk' Mar 3 12:17:38 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Connecting Mar 3 12:17:38 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Client connected (fd=7) Mar 3 12:17:38 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/logistics@earthtoheaven.co.uk': found Mar 3 12:17:38 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/logistics@earthtoheaven.co.uk': found Mar 3 12:17:38 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<11>: dict(logistics@earthtoheaven.co.uk,85.255.233.33,): Lookup: shared/dovecot_userdb-imap/logistics@earthtoheaven.co.uk = {"userdb_mail":"maildir:/home/afb070223a/mail/earthtoheaven.co.uk/logistics:UTF-8","quota2":"fs:cPanel Account","userdb_quota_rule":"*:bytes=10737418240","quota2_grace":"0","quota_rule3":"INBOX.Trash:ignore","userdb_password":"{CRYPT}$6$hMplOI3eeRq7gf3l$1rr3qNKR8dTQLAYT1pbZqWqIh3gnjVGWD/nC8MaH6Ho.UwKOTftXQL0XZuRuz2ddyi4zB/ThmQReMshzWvz0t.","userdb_quota":"maildir:Mailbox:ns=INBOX.","userdb_uid":"1025","quota_vsizes":"yes","gid":"1027","userdb_quota_clone_dict":"file:/home/afb070223a/mail/earthtoheaven.co.uk/logistics/dovecot-quota","user":"logistics@earthtoheaven.co.uk","home":"/home/afb070223a/mail/earthtoheaven.co.uk/logistics","userdb_user":"logistics@earthtoheaven.co.uk","quota_rule2":"INBOX.INBOX:ignore","userdb_quota2_grace":"0","userdb_quota_vsizes":"yes","uid":"1025","userdb_quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","quota_rule":"*:bytes=10737418240","userdb_quota_rule2":"INBOX.INBOX:ignore","quota":"maildir:Mailbox:ns=INBOX.","quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","mail":"maildir:/home/afb070223a/mail/earthtoheaven.co.uk/logistics:UTF-8","userdb_gid":"1027","userdb_quota2":"fs:cPanel Account","password":"{CRYPT}$6$hMplOI3eeRq7gf3l$1rr3qNKR8dTQLAYT1pbZqWqIh3gnjVGWD/nC8MaH6Ho.UwKOTftXQL0XZuRuz2ddyi4zB/ThmQReMshzWvz0t.","quota_clone_dict":"file:/home/afb070223a/mail/earthtoheaven.co.uk/logistics/dovecot-quota","userdb_quota_rule3":"INBOX.Trash:ignore","userdb_home":"/home/afb070223a/mail/earthtoheaven.co.uk/logistics"} Mar 3 12:17:38 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<11>: dict(logistics@earthtoheaven.co.uk,85.255.233.33,): Finished passdb lookup Mar 3 12:17:38 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<11>: Finished Mar 3 12:17:38 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Disconnected: Connection closed (fd=7) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: dict(logistics@earthtoheaven.co.uk,85.255.233.33,): Finished passdb lookup Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(logistics@earthtoheaven.co.uk,85.255.233.33,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(logistics@earthtoheaven.co.uk,85.255.233.33,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$2494e2b97a7cf037","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"85.255.233.33","remote_port":"55649","service":"dovecot","username":"logistics@earthtoheaven.co.uk","tls":true} Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:41.946 (now: 2025-03-03 12:17:38.946) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req39: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req39: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req39: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req39: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req39: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 256, buffered=520) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req39: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req39: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(logistics@earthtoheaven.co.uk,85.255.233.33,): Policy response 0 Mar 3 12:17:38 server dovecot[75184]: auth: Debug: auth(logistics@earthtoheaven.co.uk,85.255.233.33,): Auth request finished Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(logistics@earthtoheaven.co.uk,85.255.233.33,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(logistics@earthtoheaven.co.uk,85.255.233.33,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$2494e2b97a7cf037","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"85.255.233.33","remote_port":"55649","service":"dovecot","username":"logistics@earthtoheaven.co.uk","success":true,"policy_reject":false,"tls":true} Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req40: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: client passdb out: OK#0116#011user=logistics@earthtoheaven.co.uk#011quota2=fs:cPanel Account#011quota2_grace=0#011quota_rule3=INBOX.Trash:ignore#011quota_vsizes=yes#011gid=1027#011home=/home/afb070223a/mail/earthtoheaven.co.uk/logistics#011quota_rule2=INBOX.INBOX:ignore#011uid=1025#011quota_rule=*:bytes=10737418240#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011mail=maildir:/home/afb070223a/mail/earthtoheaven.co.uk/logistics:UTF-8#011quota_clone_dict=file:/home/afb070223a/mail/earthtoheaven.co.uk/logistics/dovecot-quota Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(logistics@earthtoheaven.co.uk,85.255.233.33,): Policy check action is continue Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req39: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req39: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:41.948 (now: 2025-03-03 12:17:38.948) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req39: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req40: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req40: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req40: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req40: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 293, buffered=558) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req40: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req40: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 2 ms + 0 ms in queue) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(logistics@earthtoheaven.co.uk,85.255.233.33,): Policy report action finished Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req40: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req40: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req40: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: master in: REQUEST#0111719402497#01175182#0116#01157c2dc418a02c0a354a635e74e639556#011session_pid=75323#011request_auth_token Mar 3 12:17:38 server dovecot[75184]: auth: Debug: prefetch(logistics@earthtoheaven.co.uk,85.255.233.33,): Performing userdb lookup Mar 3 12:17:38 server dovecot[75184]: auth: Debug: prefetch(logistics@earthtoheaven.co.uk,85.255.233.33,): success Mar 3 12:17:38 server dovecot[75184]: auth: Debug: prefetch(logistics@earthtoheaven.co.uk,85.255.233.33,): Finished userdb lookup Mar 3 12:17:38 server dovecot[75184]: auth: Debug: master userdb out: USER#0111719402497#011logistics@earthtoheaven.co.uk#011mail=maildir:/home/afb070223a/mail/earthtoheaven.co.uk/logistics:UTF-8#011quota_rule=*:bytes=10737418240#011password={CRYPT}$6$hMplOI3eeRq7gf3l$1rr3qNKR8dTQLAYT1pbZqWqIh3gnjVGWD/nC8MaH6Ho.UwKOTftXQL0XZuRuz2ddyi4zB/ThmQReMshzWvz0t.#011quota=maildir:Mailbox:ns=INBOX.#011uid=1025#011quota_clone_dict=file:/home/afb070223a/mail/earthtoheaven.co.uk/logistics/dovecot-quota#011quota2_grace=0#011quota_vsizes=yes#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota_rule2=INBOX.INBOX:ignore#011gid=1027#011quota2=fs:cPanel Account#011quota_rule3=INBOX.Trash:ignore#011home=/home/afb070223a/mail/earthtoheaven.co.uk/logistics#011auth_mech=PLAIN#011auth_token=8fea23e9ba09ac78f31ef82b1c23f02187ea5041 Mar 3 12:17:38 server dovecot[75184]: imap-login: Login: user=, method=PLAIN, rip=85.255.233.33, lip=172.31.3.195, mpid=75323, TLS, session= Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Module loaded: /usr/lib64/dovecot/lib20_virtual_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Added userdb setting: mail=maildir:/home/afb070223a/mail/earthtoheaven.co.uk/logistics:UTF-8 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Added userdb setting: plugin/password= Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Added userdb setting: plugin/quota2=fs:cPanel Account Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Added userdb setting: plugin/quota2_grace=0 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/afb070223a/mail/earthtoheaven.co.uk/logistics/dovecot-quota Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=10737418240 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Added userdb setting: plugin/quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Added userdb setting: plugin/quota_rule3=INBOX.Trash:ignore Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Added userdb setting: plugin/quota_vsizes=yes Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Effective uid=1025, gid=1027, home=/home/afb070223a/mail/earthtoheaven.co.uk/logistics Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Quota rule: root=Mailbox mailbox=* bytes=10737418240 messages=0 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Quota rule: root=Mailbox mailbox=INBOX.INBOX ignored Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Quota grace: root=Mailbox bytes=1073741824 (10%) Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Quota root: name=cPanel Account backend=fs args= Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Quota grace: root=cPanel Account bytes=0 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: dict(file): dict created (uri=file:/home/afb070223a/mail/earthtoheaven.co.uk/logistics/dovecot-quota, base_dir=/var/run/dovecot) Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: open(/proc/self/io) failed: Permission denied Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Namespace spam: type=private, prefix=spam, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/logistics@earthtoheaven.co.uk/spam Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/spam, index=/home/afb070223a/mail/earthtoheaven.co.uk/logistics/mail/virtual/logistics@earthtoheaven.co.uk/spam, indexpvt=, control=, inbox=, alt= Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: quota-fs: fs quota add mailbox dir = /usr/local/cpanel/etc/dovecot/virtual/spam Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: quota-fs: fs quota block device = /dev/nvme0n1p1 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: quota-fs: fs quota mount point = / Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: quota-fs: fs quota mount type = xfs Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl: acl username = logistics@earthtoheaven.co.uk Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl: owner = 1 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/logistics@earthtoheaven.co.uk/sent Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/afb070223a/mail/earthtoheaven.co.uk/logistics/mail/virtual/logistics@earthtoheaven.co.uk/sent, indexpvt=, control=, inbox=, alt= Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl: acl username = logistics@earthtoheaven.co.uk Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl: owner = 1 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/afb070223a/mail/earthtoheaven.co.uk/logistics:UTF-8 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: maildir++: root=/home/afb070223a/mail/earthtoheaven.co.uk/logistics, index=, indexpvt=, control=, inbox=/home/afb070223a/mail/earthtoheaven.co.uk/logistics, alt= Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl: acl username = logistics@earthtoheaven.co.uk Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl: owner = 1 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Mar 3 12:17:38 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: quota: quota_over_flag check: quota2_over_script unset - skipping Mar 3 12:17:38 server dovecot[75184]: auth: Debug: client in: AUTH#0117#011PLAIN#011service=imap#011secured=tls#011session=y7doJG8vSOuVMqn8#011lip=172.31.3.195#011rip=149.50.169.252#011lport=993#011rport=60232#011local_name=mail.northbuild.co.uk#011resp=AGFjY291bnRzQG5vcnRoYnVpbGQuY28udWsAZnJpZGF5MiE4OG5ld0Nhc3RsZQ== (previous base64 data may contain sensitive data) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,149.50.169.252,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,149.50.169.252,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$652b75cc08343d58","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"149.50.169.252","remote_port":"60232","service":"dovecot","username":"accounts@northbuild.co.uk","tls":true} Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:41.981 (now: 2025-03-03 12:17:38.981) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req41: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req41: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req41: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req41: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req41: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 253, buffered=517) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req41: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req41: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,149.50.169.252,): Policy response 0 Mar 3 12:17:38 server dovecot[75184]: auth: Debug: dict(accounts@northbuild.co.uk,149.50.169.252,): Performing passdb lookup Mar 3 12:17:38 server dovecot[75184]: auth: Debug: dict(accounts@northbuild.co.uk,149.50.169.252,): cache hit: {CRYPT}$6$Cwr18xbKJfqI3KrZ$WzZPKTaSFfGayDeUeuLwhEaFd8sF.Ndk0qr3QvzcLPraLcdcoWHH7jSz1uyJtThOv5pcs37ZpEoQSdydg0Xnr1#011userdb_quota_rule2=INBOX.INBOX:ignore#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/accounts:UTF-8#011userdb_gid=1021#011userdb_quota_rule3=INBOX.Trash:ignore#011userdb_home=/home/fb181022a/mail/northbuild.co.uk/accounts#011userdb_quota2=fs:cPanel Account#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-quota#011quota2=fs:cPanel Account#011userdb_quota_rule=*:bytes=32212254720#011userdb_mail=maildir:/home/fb181022a/mail/northbuild.co.uk/accounts:UTF-8#011quota_vsizes=yes#011userdb_uid=1019#011quota2_grace=0#011userdb_password={CRYPT}$6$Cwr18xbKJfqI3KrZ$WzZPKTaSFfGayDeUeuLwhEaFd8sF.Ndk0qr3QvzcLPraLcdcoWHH7jSz1uyJtThOv5pcs37ZpEoQSdydg0Xnr1#011userdb_quota=maildir:Mailbox:ns=INBOX.#011quota_rule3=INBOX.Trash:ignore#011home=/home/fb181022a/mail/northbuild.co.uk/accounts#011userdb_user=accounts@northbuild.co.uk#011gid=1021#011userdb_quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-quota#011user=accounts@northbuild.co.uk#011quota_rule=*:bytes=32212254720#011quota_rule2=INBOX.INBOX:ignore#011userdb_quota_vsizes=yes#011userdb_quota2_grace=0#011uid=1019#011userdb_quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:38 server dovecot[75184]: auth: Debug: dict(accounts@northbuild.co.uk,149.50.169.252,): Finished passdb lookup Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,149.50.169.252,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,149.50.169.252,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$652b75cc08343d58","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"149.50.169.252","remote_port":"60232","service":"dovecot","username":"accounts@northbuild.co.uk","tls":true} Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req42: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=2) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,149.50.169.252,): Policy check action is continue Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req41: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req41: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:41.983 (now: 2025-03-03 12:17:38.983) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req41: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req42: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req42: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req42: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req42: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 253, buffered=517) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req42: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req42: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 4 ms in queue) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,149.50.169.252,): Policy response 0 Mar 3 12:17:38 server dovecot[75184]: auth: Debug: auth(accounts@northbuild.co.uk,149.50.169.252,): Auth request finished Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,149.50.169.252,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,149.50.169.252,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$652b75cc08343d58","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"149.50.169.252","remote_port":"60232","service":"dovecot","username":"accounts@northbuild.co.uk","success":true,"policy_reject":false,"tls":true} Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req43: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: client passdb out: OK#0117#011user=accounts@northbuild.co.uk#011quota=maildir:Mailbox:ns=INBOX.#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/accounts:UTF-8#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-quota#011quota2=fs:cPanel Account#011quota_vsizes=yes#011quota2_grace=0#011quota_rule3=INBOX.Trash:ignore#011home=/home/fb181022a/mail/northbuild.co.uk/accounts#011gid=1021#011quota_rule=*:bytes=32212254720#011quota_rule2=INBOX.INBOX:ignore#011uid=1019 Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,149.50.169.252,): Policy check action is continue Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req42: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req42: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:41.988 (now: 2025-03-03 12:17:38.988) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req42: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req43: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req43: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req43: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req43: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 290, buffered=555) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req43: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req43: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: policy(accounts@northbuild.co.uk,149.50.169.252,): Policy report action finished Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req43: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req43: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: request [Req43: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:38 server dovecot[75184]: auth: Debug: master in: REQUEST#0113576168449#01175182#0117#01157c2dc418a02c0a354a635e74e639556#011session_pid=75324#011request_auth_token Mar 3 12:17:38 server dovecot[75184]: auth: Debug: prefetch(accounts@northbuild.co.uk,149.50.169.252,): Performing userdb lookup Mar 3 12:17:38 server dovecot[75184]: auth: Debug: prefetch(accounts@northbuild.co.uk,149.50.169.252,): success Mar 3 12:17:38 server dovecot[75184]: auth: Debug: prefetch(accounts@northbuild.co.uk,149.50.169.252,): Finished userdb lookup Mar 3 12:17:38 server dovecot[75184]: auth: Debug: master userdb out: USER#0113576168449#011accounts@northbuild.co.uk#011quota_rule2=INBOX.INBOX:ignore#011gid=1021#011quota_rule3=INBOX.Trash:ignore#011home=/home/fb181022a/mail/northbuild.co.uk/accounts#011quota2=fs:cPanel Account#011quota_rule=*:bytes=32212254720#011mail=maildir:/home/fb181022a/mail/northbuild.co.uk/accounts:UTF-8#011uid=1019#011password={CRYPT}$6$Cwr18xbKJfqI3KrZ$WzZPKTaSFfGayDeUeuLwhEaFd8sF.Ndk0qr3QvzcLPraLcdcoWHH7jSz1uyJtThOv5pcs37ZpEoQSdydg0Xnr1#011quota=maildir:Mailbox:ns=INBOX.#011quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-quota#011quota_vsizes=yes#011quota2_grace=0#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011auth_mech=PLAIN#011auth_token=fde0f79412984d6acc42517f24529a34a0638e9c Mar 3 12:17:38 server dovecot[75184]: imap-login: Login: user=, method=PLAIN, rip=149.50.169.252, lip=172.31.3.195, mpid=75324, TLS, session= Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Module loaded: /usr/lib64/dovecot/lib20_virtual_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Added userdb setting: mail=maildir:/home/fb181022a/mail/northbuild.co.uk/accounts:UTF-8 Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Added userdb setting: plugin/password= Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Added userdb setting: plugin/quota2=fs:cPanel Account Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Added userdb setting: plugin/quota2_grace=0 Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-quota Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=32212254720 Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Added userdb setting: plugin/quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Added userdb setting: plugin/quota_rule3=INBOX.Trash:ignore Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Added userdb setting: plugin/quota_vsizes=yes Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Effective uid=1019, gid=1021, home=/home/fb181022a/mail/northbuild.co.uk/accounts Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. Mar 3 12:17:38 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Quota rule: root=Mailbox mailbox=* bytes=32212254720 messages=0 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Quota rule: root=Mailbox mailbox=INBOX.INBOX ignored Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Quota grace: root=Mailbox bytes=3221225472 (10%) Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Quota root: name=cPanel Account backend=fs args= Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Quota grace: root=cPanel Account bytes=0 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: dict(file): dict created (uri=file:/home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-quota, base_dir=/var/run/dovecot) Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: open(/proc/self/io) failed: Permission denied Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Namespace spam: type=private, prefix=spam, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/accounts@northbuild.co.uk/spam Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/spam, index=/home/fb181022a/mail/northbuild.co.uk/accounts/mail/virtual/accounts@northbuild.co.uk/spam, indexpvt=, control=, inbox=, alt= Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: quota-fs: fs quota add mailbox dir = /usr/local/cpanel/etc/dovecot/virtual/spam Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: quota-fs: fs quota block device = /dev/nvme0n1p1 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: quota-fs: fs quota mount point = / Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: quota-fs: fs quota mount type = xfs Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl: acl username = accounts@northbuild.co.uk Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl: owner = 1 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/accounts@northbuild.co.uk/sent Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/fb181022a/mail/northbuild.co.uk/accounts/mail/virtual/accounts@northbuild.co.uk/sent, indexpvt=, control=, inbox=, alt= Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl: acl username = accounts@northbuild.co.uk Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl: owner = 1 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/fb181022a/mail/northbuild.co.uk/accounts:UTF-8 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: maildir++: root=/home/fb181022a/mail/northbuild.co.uk/accounts, index=, indexpvt=, control=, inbox=/home/fb181022a/mail/northbuild.co.uk/accounts, alt= Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl: acl username = accounts@northbuild.co.uk Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl: owner = 1 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: quota: quota_over_flag check: quota2_over_script unset - skipping Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: Mailbox INBOX: Mailbox opened Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl vfile: file cache_secs=86400/INBOX not found Mar 3 12:17:39 server dovecot[75184]: imap(accounts@northbuild.co.uk)<75324>: Debug: acl vfile: file /home/fb181022a/mail/northbuild.co.uk/accounts/dovecot-acl not found Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked) Mar 3 12:17:39 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: Mailbox INBOX: Mailbox opened Mar 3 12:17:39 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl vfile: file cache_secs=86400/INBOX not found Mar 3 12:17:39 server dovecot[75184]: imap(logistics@earthtoheaven.co.uk)<75323>: Debug: acl vfile: file /home/afb070223a/mail/earthtoheaven.co.uk/logistics/dovecot-acl not found Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write key exchange Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3/TLS write server done Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server done Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client key exchange Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read change cipher spec Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read finished Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully Mar 3 12:17:39 server dovecot[75184]: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully Mar 3 12:17:39 server dovecot[75184]: auth: Debug: client in: AUTH#0118#011PLAIN#011service=imap#011secured=tls#011session=xHRtJG8vvvNeC8f9#011lip=172.31.3.195#011rip=94.11.199.253#011lport=993#011rport=62398#011local_name=mail.becreativemail.co.uk#011resp=AGluZm9AY29tbXVuaXR5c3BvcnRzYXJlbmFzLmNvLnVrAExpb25oZWFydDY5IQ== (previous base64 data may contain sensitive data) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: policy(info@communitysportsarenas.co.uk,94.11.199.253,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:39 server dovecot[75184]: auth: Debug: policy(info@communitysportsarenas.co.uk,94.11.199.253,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$97db4e3be7f45cb3","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"94.11.199.253","remote_port":"62398","service":"dovecot","username":"info@communitysportsarenas.co.uk","tls":true} Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host created Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session created Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:42.292 (now: 2025-03-03 12:17:39.292) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: peer 127.0.0.1:579 (shared): Peer reused Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Setting up connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Linked queue http://127.0.0.1:579 (1 queues linked) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req44: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req44: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req44: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req44: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req44: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 259, buffered=523) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req44: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req44: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 2 ms + 0 ms in queue) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: policy(info@communitysportsarenas.co.uk,94.11.199.253,): Policy response 0 Mar 3 12:17:39 server dovecot[75184]: auth: Debug: dict(info@communitysportsarenas.co.uk,94.11.199.253,): Performing passdb lookup Mar 3 12:17:39 server dovecot[75184]: auth: Debug: dict(info@communitysportsarenas.co.uk,94.11.199.253,): cache miss Mar 3 12:17:39 server dovecot[75184]: auth: Debug: policy(info@communitysportsarenas.co.uk,94.11.199.253,): Policy check action is continue Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req44: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req44: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req44: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=1) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:39 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<12>: Handling PASSV request Mar 3 12:17:39 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<12>: dict(info@communitysportsarenas.co.uk,94.11.199.253,): Performing passdb lookup Mar 3 12:17:39 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up 'shared/dovecot_userdb-imap/info@communitysportsarenas.co.uk' Mar 3 12:17:39 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Looking up (async) 'shared/dovecot_userdb-imap/info@communitysportsarenas.co.uk' Mar 3 12:17:39 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Connecting Mar 3 12:17:39 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Client connected (fd=7) Mar 3 12:17:39 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/info@communitysportsarenas.co.uk': found Mar 3 12:17:39 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): Lookup finished for 'shared/dovecot_userdb-imap/info@communitysportsarenas.co.uk': found Mar 3 12:17:39 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<12>: dict(info@communitysportsarenas.co.uk,94.11.199.253,): Lookup: shared/dovecot_userdb-imap/info@communitysportsarenas.co.uk = {"userdb_user":"info@communitysportsarenas.co.uk","home":"/home/fbb20240405b/mail/communitysportsarenas.co.uk/info","userdb_quota_clone_dict":"file:/home/fbb20240405b/mail/communitysportsarenas.co.uk/info/dovecot-quota","user":"info@communitysportsarenas.co.uk","gid":"1039","quota_rule":"*:bytes=10737418240","uid":"1037","userdb_quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","quota_rule2":"INBOX.INBOX:ignore","userdb_quota_vsizes":"yes","userdb_quota2_grace":"0","userdb_quota_rule":"*:bytes=10737418240","quota2":"fs:cPanel Account","userdb_mail":"maildir:/home/fbb20240405b/mail/communitysportsarenas.co.uk/info:UTF-8","userdb_uid":"1037","quota_vsizes":"yes","quota_rule3":"INBOX.Trash:ignore","userdb_password":"{CRYPT}$6$Ct2XEIc6Ay9Lt2y.$7YF0GzfLspjTNHy1SBGN5.N51e9BULxBcjSMKJ16e0rl4fEIi/HBqnRNP9VxycZ/b.ACxiNYrRmWjBjtxZ/9i.","userdb_quota":"maildir:Mailbox:ns=INBOX.","quota2_grace":"0","mail":"maildir:/home/fbb20240405b/mail/communitysportsarenas.co.uk/info:UTF-8","userdb_gid":"1039","userdb_quota_rule3":"INBOX.Trash:ignore","userdb_home":"/home/fbb20240405b/mail/communitysportsarenas.co.uk/info","quota_clone_dict":"file:/home/fbb20240405b/mail/communitysportsarenas.co.uk/info/dovecot-quota","userdb_quota2":"fs:cPanel Account","password":"{CRYPT}$6$Ct2XEIc6Ay9Lt2y.$7YF0GzfLspjTNHy1SBGN5.N51e9BULxBcjSMKJ16e0rl4fEIi/HBqnRNP9VxycZ/b.ACxiNYrRmWjBjtxZ/9i.","userdb_quota_rule2":"INBOX.INBOX:ignore","quota_status_overquota":"552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded","quota":"maildir:Mailbox:ns=INBOX."} Mar 3 12:17:39 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<12>: dict(info@communitysportsarenas.co.uk,94.11.199.253,): Finished passdb lookup Mar 3 12:17:39 server dovecot[75184]: auth-worker(75205): Debug: conn unix:auth-worker (pid=75191,uid=97): auth-worker<12>: Finished Mar 3 12:17:39 server dovecot[75184]: auth-worker(75205): Debug: dict(proxy): conn unix:/usr/local/cpanel/var/cpdoveauthd.sock (pid=1323,uid=0): Disconnected: Connection closed (fd=7) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: dict(info@communitysportsarenas.co.uk,94.11.199.253,): Finished passdb lookup Mar 3 12:17:39 server dovecot[75184]: auth: Debug: policy(info@communitysportsarenas.co.uk,94.11.199.253,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=allow Mar 3 12:17:39 server dovecot[75184]: auth: Debug: policy(info@communitysportsarenas.co.uk,94.11.199.253,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$97db4e3be7f45cb3","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"94.11.199.253","remote_port":"62398","service":"dovecot","username":"info@communitysportsarenas.co.uk","tls":true} Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:42.303 (now: 2025-03-03 12:17:39.303) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req45: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Submitted (requests left=1) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req45: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req45: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req45: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Sent header Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req45: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Send more (sent 259, buffered=523) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req45: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished sending payload Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req45: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: OK (took 0 ms + 0 ms in queue) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: policy(info@communitysportsarenas.co.uk,94.11.199.253,): Policy response 0 Mar 3 12:17:39 server dovecot[75184]: auth: Debug: auth(info@communitysportsarenas.co.uk,94.11.199.253,): Auth request finished Mar 3 12:17:39 server dovecot[75184]: auth: Debug: policy(info@communitysportsarenas.co.uk,94.11.199.253,): Policy request http://127.0.0.1:579/dovecot-auth-policy?command=report Mar 3 12:17:39 server dovecot[75184]: auth: Debug: policy(info@communitysportsarenas.co.uk,94.11.199.253,): Policy server request JSON: {"auth_database":"mail","authtoken_hash":"$0$0$97db4e3be7f45cb3","database":"mail","local_host":"172.31.3.195","local_port":"993","remote_host":"94.11.199.253","remote_port":"62398","service":"dovecot","username":"info@communitysportsarenas.co.uk","success":true,"policy_reject":false,"tls":true} Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Using existing connection to 127.0.0.1:579 (1 requests pending) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req46: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Submitted (requests left=2) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: client passdb out: OK#0118#011user=info@communitysportsarenas.co.uk#011home=/home/fbb20240405b/mail/communitysportsarenas.co.uk/info#011gid=1039#011quota_rule=*:bytes=10737418240#011uid=1037#011quota_rule2=INBOX.INBOX:ignore#011quota2=fs:cPanel Account#011quota_vsizes=yes#011quota_rule3=INBOX.Trash:ignore#011quota2_grace=0#011mail=maildir:/home/fbb20240405b/mail/communitysportsarenas.co.uk/info:UTF-8#011quota_clone_dict=file:/home/fbb20240405b/mail/communitysportsarenas.co.uk/info/dovecot-quota#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:39 server dovecot[75184]: auth: Debug: policy(info@communitysportsarenas.co.uk,94.11.199.253,): Policy check action is continue Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req45: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Finished Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req45: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow] Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Set request timeout to 2025-03-03 12:17:42.304 (now: 2025-03-03 12:17:39.304) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req45: POST http://127.0.0.1:579/dovecot-auth-policy?command=allow]: Free (requests left=2) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Using 1 idle connections to handle 1 requests (1 total connections ready) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Connection to peer 127.0.0.1:579 claimed request [Req46: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Claimed request [Req46: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req46: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Sent header Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req46: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Send more (sent 296, buffered=561) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req46: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished sending payload Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No more requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Got 200 response for request [Req46: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: OK (took 1 ms + 0 ms in queue) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: policy(info@communitysportsarenas.co.uk,94.11.199.253,): Policy report action finished Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: Response payload stream destroyed (0 ms after initial response) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req46: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Finished Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Dropping request [Req46: POST http://127.0.0.1:579/dovecot-auth-policy?command=report] Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: request [Req46: POST http://127.0.0.1:579/dovecot-auth-policy?command=report]: Free (requests left=1) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: No requests to service for this peer (1 connections exist, 0 pending) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: conn 127.0.0.1:579 [1]: No more requests queued; going idle (timeout = 10000 msecs) Mar 3 12:17:39 server dovecot[75184]: auth: Debug: master in: REQUEST#0111704591361#01175182#0118#01157c2dc418a02c0a354a635e74e639556#011session_pid=75330#011request_auth_token Mar 3 12:17:39 server dovecot[75184]: auth: Debug: prefetch(info@communitysportsarenas.co.uk,94.11.199.253,): Performing userdb lookup Mar 3 12:17:39 server dovecot[75184]: auth: Debug: prefetch(info@communitysportsarenas.co.uk,94.11.199.253,): success Mar 3 12:17:39 server dovecot[75184]: auth: Debug: prefetch(info@communitysportsarenas.co.uk,94.11.199.253,): Finished userdb lookup Mar 3 12:17:39 server dovecot[75184]: auth: Debug: master userdb out: USER#0111704591361#011info@communitysportsarenas.co.uk#011quota_clone_dict=file:/home/fbb20240405b/mail/communitysportsarenas.co.uk/info/dovecot-quota#011quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded#011quota_vsizes=yes#011quota2_grace=0#011quota_rule=*:bytes=10737418240#011mail=maildir:/home/fbb20240405b/mail/communitysportsarenas.co.uk/info:UTF-8#011uid=1037#011password={CRYPT}$6$Ct2XEIc6Ay9Lt2y.$7YF0GzfLspjTNHy1SBGN5.N51e9BULxBcjSMKJ16e0rl4fEIi/HBqnRNP9VxycZ/b.ACxiNYrRmWjBjtxZ/9i.#011quota=maildir:Mailbox:ns=INBOX.#011gid=1039#011quota_rule3=INBOX.Trash:ignore#011home=/home/fbb20240405b/mail/communitysportsarenas.co.uk/info#011quota2=fs:cPanel Account#011quota_rule2=INBOX.INBOX:ignore#011auth_mech=PLAIN#011auth_token=b7c73a69b68718f6c5a22faaff44b3354bf866a2 Mar 3 12:17:39 server dovecot[75184]: imap-login: Login: user=, method=PLAIN, rip=94.11.199.253, lip=172.31.3.195, mpid=75330, TLS, session= Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Module loaded: /usr/lib64/dovecot/lib20_virtual_plugin.so Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Module loaded: /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Added userdb setting: mail=maildir:/home/fbb20240405b/mail/communitysportsarenas.co.uk/info:UTF-8 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Added userdb setting: plugin/password= Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Added userdb setting: plugin/quota2=fs:cPanel Account Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Added userdb setting: plugin/quota2_grace=0 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/fbb20240405b/mail/communitysportsarenas.co.uk/info/dovecot-quota Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=10737418240 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Added userdb setting: plugin/quota_rule2=INBOX.INBOX:ignore Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Added userdb setting: plugin/quota_rule3=INBOX.Trash:ignore Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Added userdb setting: plugin/quota_vsizes=yes Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Effective uid=1037, gid=1039, home=/home/fbb20240405b/mail/communitysportsarenas.co.uk/info Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Quota rule: root=Mailbox mailbox=* bytes=10737418240 messages=0 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Quota rule: root=Mailbox mailbox=INBOX.INBOX ignored Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Quota grace: root=Mailbox bytes=1073741824 (10%) Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Quota root: name=cPanel Account backend=fs args= Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Quota grace: root=cPanel Account bytes=0 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: dict(file): dict created (uri=file:/home/fbb20240405b/mail/communitysportsarenas.co.uk/info/dovecot-quota, base_dir=/var/run/dovecot) Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: open(/proc/self/io) failed: Permission denied Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Namespace spam: type=private, prefix=spam, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/info@communitysportsarenas.co.uk/spam Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/spam, index=/home/fbb20240405b/mail/communitysportsarenas.co.uk/info/mail/virtual/info@communitysportsarenas.co.uk/spam, indexpvt=, control=, inbox=, alt= Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: quota-fs: fs quota add mailbox dir = /usr/local/cpanel/etc/dovecot/virtual/spam Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: quota-fs: fs quota block device = /dev/nvme0n1p1 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: quota-fs: fs quota mount point = / Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: quota-fs: fs quota mount type = xfs Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl: acl username = info@communitysportsarenas.co.uk Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl: owner = 1 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/info@communitysportsarenas.co.uk/sent Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/fbb20240405b/mail/communitysportsarenas.co.uk/info/mail/virtual/info@communitysportsarenas.co.uk/sent, indexpvt=, control=, inbox=, alt= Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl: acl username = info@communitysportsarenas.co.uk Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl: owner = 1 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/fbb20240405b/mail/communitysportsarenas.co.uk/info:UTF-8 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: maildir++: root=/home/fbb20240405b/mail/communitysportsarenas.co.uk/info, index=, indexpvt=, control=, inbox=/home/fbb20240405b/mail/communitysportsarenas.co.uk/info, alt= Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl: initializing backend with data: vfile:cache_secs=86400 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl: acl username = info@communitysportsarenas.co.uk Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl: owner = 1 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl vfile: Global ACL legacy directory: cache_secs=86400 Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: quota: quota_over_flag check: quota2_over_script unset - skipping Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: Mailbox INBOX: Mailbox opened Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl vfile: file cache_secs=86400/INBOX not found Mar 3 12:17:39 server dovecot[75184]: imap(info@communitysportsarenas.co.uk)<75330>: Debug: acl vfile: file /home/fbb20240405b/mail/communitysportsarenas.co.uk/info/dovecot-acl not found Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Idle host timed out Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host destroy Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client: host 127.0.0.1: Host session destroy Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: queue http://127.0.0.1:579: Destroy Mar 3 12:17:39 server dovecot[75184]: auth: Debug: http-client[1]: peer 127.0.0.1:579: Unlinked queue http://127.0.0.1:579 (0 queues linked)