2011:03:01-05:11:00 acenn exim-out[24558]: 2011-03-01 05:11:00 End queue run: pid=24558
2011:03:01-05:11:30 acenn exim-in[7423]: 2011-03-01 05:11:30 SMTP connection from [207.211.34.65]:56487 (TCP/IP connection count = 1)
2011:03:01-05:11:32 acenn exim-in[24562]: 2011-03-01 05:11:32 [207.211.34.65] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:11:35 acenn exim-in[24562]: 2011-03-01 05:11:35 1PuCic-0006OA-0d DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:11:35 acenn exim-in[24562]: 2011-03-01 05:11:35 1PuCic-0006OA-0d malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:11:35 acenn exim-in[24562]: 2011-03-01 05:11:35 1PuCic-0006OA-0d H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:56487 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:11:35 acenn exim-in[24562]: 2011-03-01 05:11:35 1PuCic-0006OA-0d malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:11:35 acenn exim-in[24562]: [1\29] 2011-03-01 05:11:35 1PuCic-0006OA-0d H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:56487 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:11:35 acenn exim-in[24562]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:11:35 acenn exim-in[24562]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:11:35 acenn exim-in[24562]: [4\29] P Received: from r65.web.sophos.com ([207.211.34.65]:56487 helo=web.sophos.com)
2011:03:01-05:11:35 acenn exim-in[24562]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:11:35 acenn exim-in[24562]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:11:35 acenn exim-in[24562]: [7\29] 	id 1PuCic-0006OA-0d
2011:03:01-05:11:35 acenn exim-in[24562]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:11:34 +0530
2011:03:01-05:11:35 acenn exim-in[24562]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:11:35 acenn exim-in[24562]: [10\29] 	s=marketing;
2011:03:01-05:11:35 acenn exim-in[24562]: [11\29] 	d=sophos.com;
2011:03:01-05:11:35 acenn exim-in[24562]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:11:35 acenn exim-in[24562]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:11:35 acenn exim-in[24562]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:11:35 acenn exim-in[24562]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:11:35 acenn exim-in[24562]: [16\29] 	s=marketing;
2011:03:01-05:11:35 acenn exim-in[24562]: [17\29] 	d=sophos.com;
2011:03:01-05:11:35 acenn exim-in[24562]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:11:35 acenn exim-in[24562]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:11:35 acenn exim-in[24562]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:11:35 acenn exim-in[24562]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:11:35 acenn exim-in[24562]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:11:35 acenn exim-in[24562]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:11:35 acenn exim-in[24562]: [24\29]   MIME-Version: 1.0
2011:03:01-05:11:35 acenn exim-in[24562]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:11:35 acenn exim-in[24562]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:11:35 acenn exim-in[24562]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:11:35 acenn exim-in[24562]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:11:35 acenn exim-in[24562]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:11:35 acenn exim-in[24562]: 2011-03-01 05:11:35 SMTP connection from r65.web.sophos.com (web.sophos.com) [207.211.34.65]:56487 lost
2011:03:01-05:11:37 acenn exim-in[7423]: 2011-03-01 05:11:37 SMTP connection from [207.211.34.67]:58431 (TCP/IP connection count = 1)
2011:03:01-05:11:39 acenn exim-in[24567]: 2011-03-01 05:11:39 [207.211.34.67] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:11:40 acenn exim-in[24567]: 2011-03-01 05:11:40 1PuCih-0006OF-1m DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:11:40 acenn exim-in[24567]: 2011-03-01 05:11:40 1PuCih-0006OF-1m malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:11:40 acenn exim-in[24567]: 2011-03-01 05:11:40 1PuCih-0006OF-1m H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:58431 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:11:40 acenn exim-in[24567]: 2011-03-01 05:11:40 1PuCih-0006OF-1m malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:11:40 acenn exim-in[24567]: [1\29] 2011-03-01 05:11:40 1PuCih-0006OF-1m H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:58431 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:11:40 acenn exim-in[24567]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:11:40 acenn exim-in[24567]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:11:40 acenn exim-in[24567]: [4\29] P Received: from r67.web.sophos.com ([207.211.34.67]:58431 helo=web.sophos.com)
2011:03:01-05:11:40 acenn exim-in[24567]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:11:40 acenn exim-in[24567]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:11:40 acenn exim-in[24567]: [7\29] 	id 1PuCih-0006OF-1m
2011:03:01-05:11:40 acenn exim-in[24567]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:11:40 +0530
2011:03:01-05:11:40 acenn exim-in[24567]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:11:40 acenn exim-in[24567]: [10\29] 	s=marketing;
2011:03:01-05:11:40 acenn exim-in[24567]: [11\29] 	d=sophos.com;
2011:03:01-05:11:40 acenn exim-in[24567]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:11:40 acenn exim-in[24567]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:11:40 acenn exim-in[24567]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:11:40 acenn exim-in[24567]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:11:40 acenn exim-in[24567]: [16\29] 	s=marketing;
2011:03:01-05:11:40 acenn exim-in[24567]: [17\29] 	d=sophos.com;
2011:03:01-05:11:40 acenn exim-in[24567]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:11:40 acenn exim-in[24567]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:11:40 acenn exim-in[24567]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:11:40 acenn exim-in[24567]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:11:40 acenn exim-in[24567]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:11:40 acenn exim-in[24567]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:11:40 acenn exim-in[24567]: [24\29]   MIME-Version: 1.0
2011:03:01-05:11:40 acenn exim-in[24567]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:11:40 acenn exim-in[24567]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:11:40 acenn exim-in[24567]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:11:40 acenn exim-in[24567]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:11:40 acenn exim-in[24567]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:11:40 acenn exim-in[24567]: 2011-03-01 05:11:40 SMTP connection from r67.web.sophos.com (web.sophos.com) [207.211.34.67]:58431 lost
2011:03:01-05:11:42 acenn exim-in[7423]: 2011-03-01 05:11:42 SMTP connection from [207.211.34.66]:62376 (TCP/IP connection count = 1)
2011:03:01-05:11:44 acenn exim-in[24570]: 2011-03-01 05:11:44 [207.211.34.66] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:11:45 acenn exim-in[24570]: 2011-03-01 05:11:45 1PuCim-0006OI-1V DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:11:45 acenn exim-in[24570]: 2011-03-01 05:11:45 1PuCim-0006OI-1V malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:11:45 acenn exim-in[24570]: 2011-03-01 05:11:45 1PuCim-0006OI-1V H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:62376 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:11:45 acenn exim-in[24570]: 2011-03-01 05:11:45 1PuCim-0006OI-1V malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:11:45 acenn exim-in[24570]: [1\29] 2011-03-01 05:11:45 1PuCim-0006OI-1V H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:62376 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:11:45 acenn exim-in[24570]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:11:45 acenn exim-in[24570]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:11:45 acenn exim-in[24570]: [4\29] P Received: from r66.web.sophos.com ([207.211.34.66]:62376 helo=web.sophos.com)
2011:03:01-05:11:45 acenn exim-in[24570]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:11:45 acenn exim-in[24570]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:11:45 acenn exim-in[24570]: [7\29] 	id 1PuCim-0006OI-1V
2011:03:01-05:11:45 acenn exim-in[24570]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:11:45 +0530
2011:03:01-05:11:45 acenn exim-in[24570]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:11:45 acenn exim-in[24570]: [10\29] 	s=marketing;
2011:03:01-05:11:45 acenn exim-in[24570]: [11\29] 	d=sophos.com;
2011:03:01-05:11:45 acenn exim-in[24570]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:11:45 acenn exim-in[24570]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:11:45 acenn exim-in[24570]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:11:45 acenn exim-in[24570]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:11:45 acenn exim-in[24570]: [16\29] 	s=marketing;
2011:03:01-05:11:45 acenn exim-in[24570]: [17\29] 	d=sophos.com;
2011:03:01-05:11:45 acenn exim-in[24570]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:11:45 acenn exim-in[24570]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:11:45 acenn exim-in[24570]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:11:45 acenn exim-in[24570]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:11:45 acenn exim-in[24570]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:11:45 acenn exim-in[24570]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:11:45 acenn exim-in[24570]: [24\29]   MIME-Version: 1.0
2011:03:01-05:11:45 acenn exim-in[24570]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:11:45 acenn exim-in[24570]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:11:45 acenn exim-in[24570]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:11:45 acenn exim-in[24570]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:11:45 acenn exim-in[24570]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:11:45 acenn exim-in[24570]: 2011-03-01 05:11:45 SMTP connection from r66.web.sophos.com (web.sophos.com) [207.211.34.66]:62376 lost
2011:03:01-05:11:52 acenn exim-in[7423]: 2011-03-01 05:11:52 SMTP connection from [207.211.34.65]:59483 (TCP/IP connection count = 1)
2011:03:01-05:11:53 acenn exim-in[24581]: 2011-03-01 05:11:53 [207.211.34.65] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:11:54 acenn exim-in[24581]: 2011-03-01 05:11:54 1PuCiv-0006OT-1m DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:11:54 acenn exim-in[24581]: 2011-03-01 05:11:54 1PuCiv-0006OT-1m malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:11:54 acenn exim-in[24581]: 2011-03-01 05:11:54 1PuCiv-0006OT-1m H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:59483 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:11:54 acenn exim-in[24581]: 2011-03-01 05:11:54 1PuCiv-0006OT-1m malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:11:54 acenn exim-in[24581]: [1\29] 2011-03-01 05:11:54 1PuCiv-0006OT-1m H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:59483 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:11:54 acenn exim-in[24581]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:11:54 acenn exim-in[24581]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:11:54 acenn exim-in[24581]: [4\29] P Received: from r65.web.sophos.com ([207.211.34.65]:59483 helo=web.sophos.com)
2011:03:01-05:11:54 acenn exim-in[24581]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:11:54 acenn exim-in[24581]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:11:54 acenn exim-in[24581]: [7\29] 	id 1PuCiv-0006OT-1m
2011:03:01-05:11:54 acenn exim-in[24581]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:11:54 +0530
2011:03:01-05:11:54 acenn exim-in[24581]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:11:54 acenn exim-in[24581]: [10\29] 	s=marketing;
2011:03:01-05:11:54 acenn exim-in[24581]: [11\29] 	d=sophos.com;
2011:03:01-05:11:54 acenn exim-in[24581]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:11:54 acenn exim-in[24581]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:11:54 acenn exim-in[24581]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:11:54 acenn exim-in[24581]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:11:54 acenn exim-in[24581]: [16\29] 	s=marketing;
2011:03:01-05:11:54 acenn exim-in[24581]: [17\29] 	d=sophos.com;
2011:03:01-05:11:54 acenn exim-in[24581]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:11:54 acenn exim-in[24581]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:11:54 acenn exim-in[24581]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:11:54 acenn exim-in[24581]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:11:54 acenn exim-in[24581]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:11:54 acenn exim-in[24581]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:11:54 acenn exim-in[24581]: [24\29]   MIME-Version: 1.0
2011:03:01-05:11:54 acenn exim-in[24581]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:11:54 acenn exim-in[24581]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:11:54 acenn exim-in[24581]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:11:54 acenn exim-in[24581]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:11:54 acenn exim-in[24581]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:11:54 acenn exim-in[24581]: 2011-03-01 05:11:54 SMTP connection from r65.web.sophos.com (web.sophos.com) [207.211.34.65]:59483 lost
2011:03:01-05:12:00 acenn exim-out[24584]: 2011-03-01 05:12:00 Start queue run: pid=24584
2011:03:01-05:12:00 acenn exim-out[24584]: 2011-03-01 05:12:00 End queue run: pid=24584
2011:03:01-05:12:05 acenn exim-in[7423]: 2011-03-01 05:12:05 SMTP connection from [207.211.34.66]:61267 (TCP/IP connection count = 1)
2011:03:01-05:12:06 acenn exim-in[24586]: 2011-03-01 05:12:06 [207.211.34.66] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:12:07 acenn exim-in[24586]: 2011-03-01 05:12:07 1PuCj8-0006OY-1z DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:12:07 acenn exim-in[24586]: 2011-03-01 05:12:07 1PuCj8-0006OY-1z malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:12:07 acenn exim-in[24586]: 2011-03-01 05:12:07 1PuCj8-0006OY-1z H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:61267 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:12:07 acenn exim-in[24586]: 2011-03-01 05:12:07 1PuCj8-0006OY-1z malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:12:07 acenn exim-in[24586]: [1\29] 2011-03-01 05:12:07 1PuCj8-0006OY-1z H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:61267 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:12:07 acenn exim-in[24586]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:12:07 acenn exim-in[24586]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:12:07 acenn exim-in[24586]: [4\29] P Received: from r66.web.sophos.com ([207.211.34.66]:61267 helo=web.sophos.com)
2011:03:01-05:12:07 acenn exim-in[24586]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:12:07 acenn exim-in[24586]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:12:07 acenn exim-in[24586]: [7\29] 	id 1PuCj8-0006OY-1z
2011:03:01-05:12:07 acenn exim-in[24586]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:12:07 +0530
2011:03:01-05:12:07 acenn exim-in[24586]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:12:07 acenn exim-in[24586]: [10\29] 	s=marketing;
2011:03:01-05:12:07 acenn exim-in[24586]: [11\29] 	d=sophos.com;
2011:03:01-05:12:07 acenn exim-in[24586]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:12:07 acenn exim-in[24586]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:12:07 acenn exim-in[24586]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:12:07 acenn exim-in[24586]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:12:07 acenn exim-in[24586]: [16\29] 	s=marketing;
2011:03:01-05:12:07 acenn exim-in[24586]: [17\29] 	d=sophos.com;
2011:03:01-05:12:07 acenn exim-in[24586]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:12:07 acenn exim-in[24586]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:12:07 acenn exim-in[24586]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:12:07 acenn exim-in[24586]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:12:07 acenn exim-in[24586]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:12:07 acenn exim-in[24586]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:12:07 acenn exim-in[24586]: [24\29]   MIME-Version: 1.0
2011:03:01-05:12:07 acenn exim-in[24586]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:12:07 acenn exim-in[24586]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:12:07 acenn exim-in[24586]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:12:07 acenn exim-in[24586]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:12:07 acenn exim-in[24586]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:12:07 acenn exim-in[24586]: 2011-03-01 05:12:07 SMTP connection from r66.web.sophos.com (web.sophos.com) [207.211.34.66]:61267 lost
2011:03:01-05:12:26 acenn exim-in[7423]: 2011-03-01 05:12:26 SMTP connection from [207.211.34.66]:52159 (TCP/IP connection count = 1)
2011:03:01-05:12:27 acenn exim-in[24590]: 2011-03-01 05:12:27 [207.211.34.66] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:12:29 acenn exim-in[24590]: 2011-03-01 05:12:29 1PuCjT-0006Oc-1p DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:12:29 acenn exim-in[24590]: 2011-03-01 05:12:29 1PuCjT-0006Oc-1p malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:12:29 acenn exim-in[24590]: 2011-03-01 05:12:29 1PuCjT-0006Oc-1p H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:52159 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:12:29 acenn exim-in[24590]: 2011-03-01 05:12:29 1PuCjT-0006Oc-1p malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:12:29 acenn exim-in[24590]: [1\29] 2011-03-01 05:12:29 1PuCjT-0006Oc-1p H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:52159 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:12:29 acenn exim-in[24590]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:12:29 acenn exim-in[24590]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:12:29 acenn exim-in[24590]: [4\29] P Received: from r66.web.sophos.com ([207.211.34.66]:52159 helo=web.sophos.com)
2011:03:01-05:12:29 acenn exim-in[24590]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:12:29 acenn exim-in[24590]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:12:29 acenn exim-in[24590]: [7\29] 	id 1PuCjT-0006Oc-1p
2011:03:01-05:12:29 acenn exim-in[24590]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:12:29 +0530
2011:03:01-05:12:29 acenn exim-in[24590]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:12:29 acenn exim-in[24590]: [10\29] 	s=marketing;
2011:03:01-05:12:29 acenn exim-in[24590]: [11\29] 	d=sophos.com;
2011:03:01-05:12:29 acenn exim-in[24590]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:12:29 acenn exim-in[24590]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:12:29 acenn exim-in[24590]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:12:29 acenn exim-in[24590]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:12:29 acenn exim-in[24590]: [16\29] 	s=marketing;
2011:03:01-05:12:29 acenn exim-in[24590]: [17\29] 	d=sophos.com;
2011:03:01-05:12:29 acenn exim-in[24590]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:12:29 acenn exim-in[24590]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:12:29 acenn exim-in[24590]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:12:29 acenn exim-in[24590]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:12:29 acenn exim-in[24590]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:12:29 acenn exim-in[24590]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:12:29 acenn exim-in[24590]: [24\29]   MIME-Version: 1.0
2011:03:01-05:12:29 acenn exim-in[24590]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:12:29 acenn exim-in[24590]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:12:29 acenn exim-in[24590]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:12:29 acenn exim-in[24590]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:12:29 acenn exim-in[24590]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:12:30 acenn exim-in[24590]: 2011-03-01 05:12:30 SMTP connection from r66.web.sophos.com (web.sophos.com) [207.211.34.66]:52159 lost
2011:03:01-05:12:31 acenn exim-in[7423]: 2011-03-01 05:12:31 SMTP connection from [207.211.34.67]:51046 (TCP/IP connection count = 1)
2011:03:01-05:12:32 acenn exim-in[24595]: 2011-03-01 05:12:32 [207.211.34.67] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:12:33 acenn exim-in[24595]: 2011-03-01 05:12:33 1PuCjY-0006Oh-1o DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:12:33 acenn exim-in[24595]: 2011-03-01 05:12:33 1PuCjY-0006Oh-1o malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:12:33 acenn exim-in[24595]: 2011-03-01 05:12:33 1PuCjY-0006Oh-1o H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:51046 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:12:33 acenn exim-in[24595]: 2011-03-01 05:12:33 1PuCjY-0006Oh-1o malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:12:33 acenn exim-in[24595]: [1\29] 2011-03-01 05:12:33 1PuCjY-0006Oh-1o H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:51046 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:12:33 acenn exim-in[24595]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:12:33 acenn exim-in[24595]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:12:33 acenn exim-in[24595]: [4\29] P Received: from r67.web.sophos.com ([207.211.34.67]:51046 helo=web.sophos.com)
2011:03:01-05:12:33 acenn exim-in[24595]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:12:33 acenn exim-in[24595]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:12:33 acenn exim-in[24595]: [7\29] 	id 1PuCjY-0006Oh-1o
2011:03:01-05:12:33 acenn exim-in[24595]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:12:33 +0530
2011:03:01-05:12:33 acenn exim-in[24595]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:12:33 acenn exim-in[24595]: [10\29] 	s=marketing;
2011:03:01-05:12:33 acenn exim-in[24595]: [11\29] 	d=sophos.com;
2011:03:01-05:12:33 acenn exim-in[24595]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:12:33 acenn exim-in[24595]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:12:33 acenn exim-in[24595]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:12:33 acenn exim-in[24595]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:12:33 acenn exim-in[24595]: [16\29] 	s=marketing;
2011:03:01-05:12:33 acenn exim-in[24595]: [17\29] 	d=sophos.com;
2011:03:01-05:12:33 acenn exim-in[24595]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:12:33 acenn exim-in[24595]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:12:33 acenn exim-in[24595]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:12:33 acenn exim-in[24595]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:12:33 acenn exim-in[24595]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:12:33 acenn exim-in[24595]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:12:33 acenn exim-in[24595]: [24\29]   MIME-Version: 1.0
2011:03:01-05:12:33 acenn exim-in[24595]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:12:33 acenn exim-in[24595]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:12:33 acenn exim-in[24595]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:12:33 acenn exim-in[24595]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:12:33 acenn exim-in[24595]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:12:33 acenn exim-in[24595]: 2011-03-01 05:12:33 SMTP connection from r67.web.sophos.com (web.sophos.com) [207.211.34.67]:51046 lost
2011:03:01-05:12:35 acenn exim-in[7423]: 2011-03-01 05:12:35 SMTP connection from [207.211.34.65]:54597 (TCP/IP connection count = 1)
2011:03:01-05:12:36 acenn exim-in[24598]: 2011-03-01 05:12:36 [207.211.34.65] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:12:37 acenn exim-in[24598]: 2011-03-01 05:12:37 1PuCjc-0006Ok-1m DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:12:37 acenn exim-in[24598]: 2011-03-01 05:12:37 1PuCjc-0006Ok-1m malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:12:37 acenn exim-in[24598]: 2011-03-01 05:12:37 1PuCjc-0006Ok-1m H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:54597 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:12:37 acenn exim-in[24598]: 2011-03-01 05:12:37 1PuCjc-0006Ok-1m malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:12:37 acenn exim-in[24598]: [1\29] 2011-03-01 05:12:37 1PuCjc-0006Ok-1m H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:54597 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:12:37 acenn exim-in[24598]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:12:37 acenn exim-in[24598]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:12:37 acenn exim-in[24598]: [4\29] P Received: from r65.web.sophos.com ([207.211.34.65]:54597 helo=web.sophos.com)
2011:03:01-05:12:37 acenn exim-in[24598]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:12:37 acenn exim-in[24598]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:12:37 acenn exim-in[24598]: [7\29] 	id 1PuCjc-0006Ok-1m
2011:03:01-05:12:37 acenn exim-in[24598]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:12:37 +0530
2011:03:01-05:12:37 acenn exim-in[24598]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:12:37 acenn exim-in[24598]: [10\29] 	s=marketing;
2011:03:01-05:12:37 acenn exim-in[24598]: [11\29] 	d=sophos.com;
2011:03:01-05:12:37 acenn exim-in[24598]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:12:37 acenn exim-in[24598]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:12:37 acenn exim-in[24598]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:12:37 acenn exim-in[24598]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:12:37 acenn exim-in[24598]: [16\29] 	s=marketing;
2011:03:01-05:12:37 acenn exim-in[24598]: [17\29] 	d=sophos.com;
2011:03:01-05:12:37 acenn exim-in[24598]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:12:37 acenn exim-in[24598]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:12:37 acenn exim-in[24598]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:12:37 acenn exim-in[24598]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:12:37 acenn exim-in[24598]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:12:37 acenn exim-in[24598]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:12:37 acenn exim-in[24598]: [24\29]   MIME-Version: 1.0
2011:03:01-05:12:37 acenn exim-in[24598]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:12:37 acenn exim-in[24598]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:12:37 acenn exim-in[24598]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:12:37 acenn exim-in[24598]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:12:37 acenn exim-in[24598]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:12:37 acenn exim-in[24598]: 2011-03-01 05:12:37 SMTP connection from r65.web.sophos.com (web.sophos.com) [207.211.34.65]:54597 lost
2011:03:01-05:13:00 acenn exim-out[24602]: 2011-03-01 05:13:00 Start queue run: pid=24602
2011:03:01-05:13:00 acenn exim-out[24602]: 2011-03-01 05:13:00 End queue run: pid=24602
2011:03:01-05:13:12 acenn exim-in[7423]: 2011-03-01 05:13:12 SMTP connection from [207.211.34.65]:53371 (TCP/IP connection count = 1)
2011:03:01-05:13:13 acenn exim-in[24604]: 2011-03-01 05:13:13 [207.211.34.65] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:13:14 acenn exim-in[24604]: 2011-03-01 05:13:14 1PuCkD-0006Oq-1u DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:13:14 acenn exim-in[24604]: 2011-03-01 05:13:14 1PuCkD-0006Oq-1u malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:13:14 acenn exim-in[24604]: 2011-03-01 05:13:14 1PuCkD-0006Oq-1u H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:53371 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:13:14 acenn exim-in[24604]: 2011-03-01 05:13:14 1PuCkD-0006Oq-1u malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:13:14 acenn exim-in[24604]: [1\29] 2011-03-01 05:13:14 1PuCkD-0006Oq-1u H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:53371 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:13:14 acenn exim-in[24604]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:13:14 acenn exim-in[24604]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:13:14 acenn exim-in[24604]: [4\29] P Received: from r65.web.sophos.com ([207.211.34.65]:53371 helo=web.sophos.com)
2011:03:01-05:13:14 acenn exim-in[24604]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:13:14 acenn exim-in[24604]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:13:14 acenn exim-in[24604]: [7\29] 	id 1PuCkD-0006Oq-1u
2011:03:01-05:13:14 acenn exim-in[24604]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:13:14 +0530
2011:03:01-05:13:14 acenn exim-in[24604]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:13:14 acenn exim-in[24604]: [10\29] 	s=marketing;
2011:03:01-05:13:14 acenn exim-in[24604]: [11\29] 	d=sophos.com;
2011:03:01-05:13:14 acenn exim-in[24604]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:13:14 acenn exim-in[24604]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:13:14 acenn exim-in[24604]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:13:14 acenn exim-in[24604]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:13:14 acenn exim-in[24604]: [16\29] 	s=marketing;
2011:03:01-05:13:14 acenn exim-in[24604]: [17\29] 	d=sophos.com;
2011:03:01-05:13:14 acenn exim-in[24604]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:13:14 acenn exim-in[24604]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:13:14 acenn exim-in[24604]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:13:14 acenn exim-in[24604]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:13:14 acenn exim-in[24604]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:13:14 acenn exim-in[24604]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:13:14 acenn exim-in[24604]: [24\29]   MIME-Version: 1.0
2011:03:01-05:13:14 acenn exim-in[24604]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:13:14 acenn exim-in[24604]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:13:14 acenn exim-in[24604]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:13:14 acenn exim-in[24604]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:13:14 acenn exim-in[24604]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:13:14 acenn exim-in[24604]: 2011-03-01 05:13:14 SMTP connection from r65.web.sophos.com (web.sophos.com) [207.211.34.65]:53371 lost
2011:03:01-05:13:16 acenn exim-in[7423]: 2011-03-01 05:13:16 SMTP connection from [207.211.34.67]:50369 (TCP/IP connection count = 1)
2011:03:01-05:13:17 acenn exim-in[24608]: 2011-03-01 05:13:17 [207.211.34.67] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:13:18 acenn exim-in[24608]: 2011-03-01 05:13:18 1PuCkH-0006Ou-1p DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:13:18 acenn exim-in[24608]: 2011-03-01 05:13:18 1PuCkH-0006Ou-1p malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:13:18 acenn exim-in[24608]: 2011-03-01 05:13:18 1PuCkH-0006Ou-1p H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:50369 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:13:18 acenn exim-in[24608]: 2011-03-01 05:13:18 1PuCkH-0006Ou-1p malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:13:18 acenn exim-in[24608]: [1\29] 2011-03-01 05:13:18 1PuCkH-0006Ou-1p H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:50369 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:13:18 acenn exim-in[24608]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:13:18 acenn exim-in[24608]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:13:18 acenn exim-in[24608]: [4\29] P Received: from r67.web.sophos.com ([207.211.34.67]:50369 helo=web.sophos.com)
2011:03:01-05:13:18 acenn exim-in[24608]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:13:18 acenn exim-in[24608]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:13:18 acenn exim-in[24608]: [7\29] 	id 1PuCkH-0006Ou-1p
2011:03:01-05:13:18 acenn exim-in[24608]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:13:18 +0530
2011:03:01-05:13:18 acenn exim-in[24608]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:13:18 acenn exim-in[24608]: [10\29] 	s=marketing;
2011:03:01-05:13:18 acenn exim-in[24608]: [11\29] 	d=sophos.com;
2011:03:01-05:13:18 acenn exim-in[24608]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:13:18 acenn exim-in[24608]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:13:18 acenn exim-in[24608]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:13:18 acenn exim-in[24608]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:13:18 acenn exim-in[24608]: [16\29] 	s=marketing;
2011:03:01-05:13:18 acenn exim-in[24608]: [17\29] 	d=sophos.com;
2011:03:01-05:13:18 acenn exim-in[24608]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:13:18 acenn exim-in[24608]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:13:18 acenn exim-in[24608]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:13:18 acenn exim-in[24608]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:13:18 acenn exim-in[24608]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:13:18 acenn exim-in[24608]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:13:18 acenn exim-in[24608]: [24\29]   MIME-Version: 1.0
2011:03:01-05:13:18 acenn exim-in[24608]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:13:18 acenn exim-in[24608]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:13:18 acenn exim-in[24608]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:13:18 acenn exim-in[24608]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:13:18 acenn exim-in[24608]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:13:18 acenn exim-in[24608]: 2011-03-01 05:13:18 SMTP connection from r67.web.sophos.com (web.sophos.com) [207.211.34.67]:50369 lost
2011:03:01-05:13:20 acenn exim-in[7423]: 2011-03-01 05:13:20 SMTP connection from [207.211.34.66]:64025 (TCP/IP connection count = 1)
2011:03:01-05:13:21 acenn exim-in[24611]: 2011-03-01 05:13:21 [207.211.34.66] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:13:22 acenn exim-in[24611]: 2011-03-01 05:13:22 1PuCkL-0006Ox-1n DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:13:22 acenn exim-in[24611]: 2011-03-01 05:13:22 1PuCkL-0006Ox-1n malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:13:22 acenn exim-in[24611]: 2011-03-01 05:13:22 1PuCkL-0006Ox-1n H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:64025 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:13:22 acenn exim-in[24611]: 2011-03-01 05:13:22 1PuCkL-0006Ox-1n malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:13:22 acenn exim-in[24611]: [1\29] 2011-03-01 05:13:22 1PuCkL-0006Ox-1n H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:64025 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:13:22 acenn exim-in[24611]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:13:22 acenn exim-in[24611]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:13:22 acenn exim-in[24611]: [4\29] P Received: from r66.web.sophos.com ([207.211.34.66]:64025 helo=web.sophos.com)
2011:03:01-05:13:22 acenn exim-in[24611]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:13:22 acenn exim-in[24611]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:13:22 acenn exim-in[24611]: [7\29] 	id 1PuCkL-0006Ox-1n
2011:03:01-05:13:22 acenn exim-in[24611]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:13:22 +0530
2011:03:01-05:13:22 acenn exim-in[24611]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:13:22 acenn exim-in[24611]: [10\29] 	s=marketing;
2011:03:01-05:13:22 acenn exim-in[24611]: [11\29] 	d=sophos.com;
2011:03:01-05:13:22 acenn exim-in[24611]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:13:22 acenn exim-in[24611]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:13:22 acenn exim-in[24611]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:13:22 acenn exim-in[24611]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:13:22 acenn exim-in[24611]: [16\29] 	s=marketing;
2011:03:01-05:13:22 acenn exim-in[24611]: [17\29] 	d=sophos.com;
2011:03:01-05:13:22 acenn exim-in[24611]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:13:22 acenn exim-in[24611]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:13:22 acenn exim-in[24611]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:13:22 acenn exim-in[24611]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:13:22 acenn exim-in[24611]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:13:22 acenn exim-in[24611]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:13:22 acenn exim-in[24611]: [24\29]   MIME-Version: 1.0
2011:03:01-05:13:22 acenn exim-in[24611]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:13:22 acenn exim-in[24611]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:13:22 acenn exim-in[24611]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:13:22 acenn exim-in[24611]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:13:22 acenn exim-in[24611]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:13:22 acenn exim-in[24611]: 2011-03-01 05:13:22 SMTP connection from r66.web.sophos.com (web.sophos.com) [207.211.34.66]:64025 lost
2011:03:01-05:14:00 acenn exim-out[24624]: 2011-03-01 05:14:00 Start queue run: pid=24624
2011:03:01-05:14:00 acenn exim-out[24624]: 2011-03-01 05:14:00 End queue run: pid=24624
2011:03:01-05:14:29 acenn exim-in[7423]: 2011-03-01 05:14:29 SMTP connection from [207.211.34.67]:56731 (TCP/IP connection count = 1)
2011:03:01-05:14:30 acenn exim-in[24627]: 2011-03-01 05:14:30 [207.211.34.67] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:14:31 acenn exim-in[24627]: 2011-03-01 05:14:31 1PuClS-0006PD-1y DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:14:31 acenn exim-in[24627]: 2011-03-01 05:14:31 1PuClS-0006PD-1y malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:14:31 acenn exim-in[24627]: 2011-03-01 05:14:31 1PuClS-0006PD-1y H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:56731 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:14:31 acenn exim-in[24627]: 2011-03-01 05:14:31 1PuClS-0006PD-1y malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:14:31 acenn exim-in[24627]: [1\29] 2011-03-01 05:14:31 1PuClS-0006PD-1y H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:56731 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:14:31 acenn exim-in[24627]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:14:31 acenn exim-in[24627]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:14:31 acenn exim-in[24627]: [4\29] P Received: from r67.web.sophos.com ([207.211.34.67]:56731 helo=web.sophos.com)
2011:03:01-05:14:31 acenn exim-in[24627]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:14:31 acenn exim-in[24627]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:14:31 acenn exim-in[24627]: [7\29] 	id 1PuClS-0006PD-1y
2011:03:01-05:14:31 acenn exim-in[24627]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:14:31 +0530
2011:03:01-05:14:31 acenn exim-in[24627]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:14:31 acenn exim-in[24627]: [10\29] 	s=marketing;
2011:03:01-05:14:31 acenn exim-in[24627]: [11\29] 	d=sophos.com;
2011:03:01-05:14:31 acenn exim-in[24627]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:14:31 acenn exim-in[24627]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:14:31 acenn exim-in[24627]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:14:31 acenn exim-in[24627]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:14:31 acenn exim-in[24627]: [16\29] 	s=marketing;
2011:03:01-05:14:31 acenn exim-in[24627]: [17\29] 	d=sophos.com;
2011:03:01-05:14:31 acenn exim-in[24627]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:14:31 acenn exim-in[24627]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:14:31 acenn exim-in[24627]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:14:31 acenn exim-in[24627]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:14:31 acenn exim-in[24627]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:14:31 acenn exim-in[24627]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:14:31 acenn exim-in[24627]: [24\29]   MIME-Version: 1.0
2011:03:01-05:14:31 acenn exim-in[24627]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:14:31 acenn exim-in[24627]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:14:31 acenn exim-in[24627]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:14:31 acenn exim-in[24627]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:14:31 acenn exim-in[24627]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:14:31 acenn exim-in[24627]: 2011-03-01 05:14:31 SMTP connection from r67.web.sophos.com (web.sophos.com) [207.211.34.67]:56731 lost
2011:03:01-05:14:33 acenn exim-in[7423]: 2011-03-01 05:14:33 SMTP connection from [207.211.34.65]:64995 (TCP/IP connection count = 1)
2011:03:01-05:14:34 acenn exim-in[24632]: 2011-03-01 05:14:34 [207.211.34.65] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:14:35 acenn exim-in[24632]: 2011-03-01 05:14:35 1PuClW-0006PI-1y DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:14:35 acenn exim-in[24632]: 2011-03-01 05:14:35 1PuClW-0006PI-1y malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:14:35 acenn exim-in[24632]: 2011-03-01 05:14:35 1PuClW-0006PI-1y H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:64995 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:14:35 acenn exim-in[24632]: 2011-03-01 05:14:35 1PuClW-0006PI-1y malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:14:35 acenn exim-in[24632]: [1\29] 2011-03-01 05:14:35 1PuClW-0006PI-1y H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:64995 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:14:35 acenn exim-in[24632]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:14:35 acenn exim-in[24632]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:14:35 acenn exim-in[24632]: [4\29] P Received: from r65.web.sophos.com ([207.211.34.65]:64995 helo=web.sophos.com)
2011:03:01-05:14:35 acenn exim-in[24632]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:14:35 acenn exim-in[24632]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:14:35 acenn exim-in[24632]: [7\29] 	id 1PuClW-0006PI-1y
2011:03:01-05:14:35 acenn exim-in[24632]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:14:35 +0530
2011:03:01-05:14:35 acenn exim-in[24632]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:14:35 acenn exim-in[24632]: [10\29] 	s=marketing;
2011:03:01-05:14:35 acenn exim-in[24632]: [11\29] 	d=sophos.com;
2011:03:01-05:14:35 acenn exim-in[24632]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:14:35 acenn exim-in[24632]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:14:35 acenn exim-in[24632]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:14:35 acenn exim-in[24632]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:14:35 acenn exim-in[24632]: [16\29] 	s=marketing;
2011:03:01-05:14:35 acenn exim-in[24632]: [17\29] 	d=sophos.com;
2011:03:01-05:14:35 acenn exim-in[24632]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:14:35 acenn exim-in[24632]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:14:35 acenn exim-in[24632]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:14:35 acenn exim-in[24632]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:14:35 acenn exim-in[24632]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:14:35 acenn exim-in[24632]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:14:35 acenn exim-in[24632]: [24\29]   MIME-Version: 1.0
2011:03:01-05:14:35 acenn exim-in[24632]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:14:35 acenn exim-in[24632]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:14:35 acenn exim-in[24632]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:14:35 acenn exim-in[24632]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:14:35 acenn exim-in[24632]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:14:35 acenn exim-in[24632]: 2011-03-01 05:14:35 SMTP connection from r65.web.sophos.com (web.sophos.com) [207.211.34.65]:64995 lost
2011:03:01-05:14:37 acenn exim-in[7423]: 2011-03-01 05:14:37 SMTP connection from [207.211.34.66]:55297 (TCP/IP connection count = 1)
2011:03:01-05:14:38 acenn exim-in[24635]: 2011-03-01 05:14:38 [207.211.34.66] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:14:39 acenn exim-in[24635]: 2011-03-01 05:14:39 1PuCla-0006PL-1t DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:14:39 acenn exim-in[24635]: 2011-03-01 05:14:39 1PuCla-0006PL-1t malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:14:39 acenn exim-in[24635]: 2011-03-01 05:14:39 1PuCla-0006PL-1t H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:55297 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:14:39 acenn exim-in[24635]: 2011-03-01 05:14:39 1PuCla-0006PL-1t malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:14:39 acenn exim-in[24635]: [1\29] 2011-03-01 05:14:39 1PuCla-0006PL-1t H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:55297 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:14:39 acenn exim-in[24635]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:14:39 acenn exim-in[24635]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:14:39 acenn exim-in[24635]: [4\29] P Received: from r66.web.sophos.com ([207.211.34.66]:55297 helo=web.sophos.com)
2011:03:01-05:14:39 acenn exim-in[24635]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:14:39 acenn exim-in[24635]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:14:39 acenn exim-in[24635]: [7\29] 	id 1PuCla-0006PL-1t
2011:03:01-05:14:39 acenn exim-in[24635]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:14:39 +0530
2011:03:01-05:14:39 acenn exim-in[24635]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:14:39 acenn exim-in[24635]: [10\29] 	s=marketing;
2011:03:01-05:14:39 acenn exim-in[24635]: [11\29] 	d=sophos.com;
2011:03:01-05:14:39 acenn exim-in[24635]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:14:39 acenn exim-in[24635]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:14:39 acenn exim-in[24635]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:14:39 acenn exim-in[24635]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:14:39 acenn exim-in[24635]: [16\29] 	s=marketing;
2011:03:01-05:14:39 acenn exim-in[24635]: [17\29] 	d=sophos.com;
2011:03:01-05:14:39 acenn exim-in[24635]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:14:39 acenn exim-in[24635]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:14:39 acenn exim-in[24635]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:14:39 acenn exim-in[24635]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:14:39 acenn exim-in[24635]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:14:39 acenn exim-in[24635]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:14:39 acenn exim-in[24635]: [24\29]   MIME-Version: 1.0
2011:03:01-05:14:39 acenn exim-in[24635]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:14:39 acenn exim-in[24635]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:14:39 acenn exim-in[24635]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:14:39 acenn exim-in[24635]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:14:39 acenn exim-in[24635]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:14:39 acenn exim-in[24635]: 2011-03-01 05:14:39 SMTP connection from r66.web.sophos.com (web.sophos.com) [207.211.34.66]:55297 lost
2011:03:01-05:15:00 acenn exim-out[24639]: 2011-03-01 05:15:00 Start queue run: pid=24639
2011:03:01-05:15:00 acenn exim-out[24639]: 2011-03-01 05:15:00 End queue run: pid=24639
2011:03:01-05:16:00 acenn exim-out[24829]: 2011-03-01 05:16:00 Start queue run: pid=24829
2011:03:01-05:16:00 acenn exim-out[24829]: 2011-03-01 05:16:00 End queue run: pid=24829
2011:03:01-05:16:42 acenn exim-in[7423]: 2011-03-01 05:16:42 SMTP connection from [207.211.34.65]:62942 (TCP/IP connection count = 1)
2011:03:01-05:16:43 acenn exim-in[24834]: 2011-03-01 05:16:43 [207.211.34.65] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:16:44 acenn exim-in[24834]: 2011-03-01 05:16:44 1PuCnb-0006SY-1q DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:16:44 acenn exim-in[24834]: 2011-03-01 05:16:44 1PuCnb-0006SY-1q malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:16:44 acenn exim-in[24834]: 2011-03-01 05:16:44 1PuCnb-0006SY-1q H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:62942 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:16:44 acenn exim-in[24834]: 2011-03-01 05:16:44 1PuCnb-0006SY-1q malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:16:44 acenn exim-in[24834]: [1\29] 2011-03-01 05:16:44 1PuCnb-0006SY-1q H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:62942 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:16:44 acenn exim-in[24834]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:16:44 acenn exim-in[24834]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:16:44 acenn exim-in[24834]: [4\29] P Received: from r65.web.sophos.com ([207.211.34.65]:62942 helo=web.sophos.com)
2011:03:01-05:16:44 acenn exim-in[24834]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:16:44 acenn exim-in[24834]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:16:44 acenn exim-in[24834]: [7\29] 	id 1PuCnb-0006SY-1q
2011:03:01-05:16:44 acenn exim-in[24834]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:16:44 +0530
2011:03:01-05:16:44 acenn exim-in[24834]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:16:44 acenn exim-in[24834]: [10\29] 	s=marketing;
2011:03:01-05:16:44 acenn exim-in[24834]: [11\29] 	d=sophos.com;
2011:03:01-05:16:44 acenn exim-in[24834]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:16:44 acenn exim-in[24834]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:16:44 acenn exim-in[24834]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:16:44 acenn exim-in[24834]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:16:44 acenn exim-in[24834]: [16\29] 	s=marketing;
2011:03:01-05:16:44 acenn exim-in[24834]: [17\29] 	d=sophos.com;
2011:03:01-05:16:44 acenn exim-in[24834]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:16:44 acenn exim-in[24834]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:16:44 acenn exim-in[24834]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:16:44 acenn exim-in[24834]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:16:44 acenn exim-in[24834]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:16:44 acenn exim-in[24834]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:16:44 acenn exim-in[24834]: [24\29]   MIME-Version: 1.0
2011:03:01-05:16:44 acenn exim-in[24834]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:16:44 acenn exim-in[24834]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:16:44 acenn exim-in[24834]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:16:44 acenn exim-in[24834]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:16:44 acenn exim-in[24834]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:16:44 acenn exim-in[24834]: 2011-03-01 05:16:44 SMTP connection from r65.web.sophos.com (web.sophos.com) [207.211.34.65]:62942 lost
2011:03:01-05:16:46 acenn exim-in[7423]: 2011-03-01 05:16:46 SMTP connection from [207.211.34.67]:61118 (TCP/IP connection count = 1)
2011:03:01-05:16:47 acenn exim-in[24838]: 2011-03-01 05:16:47 [207.211.34.67] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:16:48 acenn exim-in[24838]: 2011-03-01 05:16:48 1PuCnf-0006Sc-1k DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:16:48 acenn exim-in[24838]: 2011-03-01 05:16:48 1PuCnf-0006Sc-1k malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:16:48 acenn exim-in[24838]: 2011-03-01 05:16:48 1PuCnf-0006Sc-1k H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:61118 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:16:48 acenn exim-in[24838]: 2011-03-01 05:16:48 1PuCnf-0006Sc-1k malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:16:48 acenn exim-in[24838]: [1\29] 2011-03-01 05:16:48 1PuCnf-0006Sc-1k H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:61118 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:16:48 acenn exim-in[24838]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:16:48 acenn exim-in[24838]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:16:48 acenn exim-in[24838]: [4\29] P Received: from r67.web.sophos.com ([207.211.34.67]:61118 helo=web.sophos.com)
2011:03:01-05:16:48 acenn exim-in[24838]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:16:48 acenn exim-in[24838]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:16:48 acenn exim-in[24838]: [7\29] 	id 1PuCnf-0006Sc-1k
2011:03:01-05:16:48 acenn exim-in[24838]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:16:48 +0530
2011:03:01-05:16:48 acenn exim-in[24838]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:16:48 acenn exim-in[24838]: [10\29] 	s=marketing;
2011:03:01-05:16:48 acenn exim-in[24838]: [11\29] 	d=sophos.com;
2011:03:01-05:16:48 acenn exim-in[24838]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:16:48 acenn exim-in[24838]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:16:48 acenn exim-in[24838]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:16:48 acenn exim-in[24838]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:16:48 acenn exim-in[24838]: [16\29] 	s=marketing;
2011:03:01-05:16:48 acenn exim-in[24838]: [17\29] 	d=sophos.com;
2011:03:01-05:16:48 acenn exim-in[24838]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:16:48 acenn exim-in[24838]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:16:48 acenn exim-in[24838]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:16:48 acenn exim-in[24838]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:16:48 acenn exim-in[24838]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:16:48 acenn exim-in[24838]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:16:48 acenn exim-in[24838]: [24\29]   MIME-Version: 1.0
2011:03:01-05:16:48 acenn exim-in[24838]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:16:48 acenn exim-in[24838]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:16:48 acenn exim-in[24838]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:16:48 acenn exim-in[24838]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:16:48 acenn exim-in[24838]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:16:48 acenn exim-in[24838]: 2011-03-01 05:16:48 SMTP connection from r67.web.sophos.com (web.sophos.com) [207.211.34.67]:61118 lost
2011:03:01-05:16:50 acenn exim-in[7423]: 2011-03-01 05:16:50 SMTP connection from [207.211.34.66]:60558 (TCP/IP connection count = 1)
2011:03:01-05:16:51 acenn exim-in[24841]: 2011-03-01 05:16:51 [207.211.34.66] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:16:52 acenn exim-in[24841]: 2011-03-01 05:16:52 1PuCnj-0006Sf-1q DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:16:52 acenn exim-in[24841]: 2011-03-01 05:16:52 1PuCnj-0006Sf-1q malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:16:52 acenn exim-in[24841]: 2011-03-01 05:16:52 1PuCnj-0006Sf-1q H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:60558 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:16:52 acenn exim-in[24841]: 2011-03-01 05:16:52 1PuCnj-0006Sf-1q malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:16:52 acenn exim-in[24841]: [1\29] 2011-03-01 05:16:52 1PuCnj-0006Sf-1q H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:60558 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:16:52 acenn exim-in[24841]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:16:52 acenn exim-in[24841]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:16:52 acenn exim-in[24841]: [4\29] P Received: from r66.web.sophos.com ([207.211.34.66]:60558 helo=web.sophos.com)
2011:03:01-05:16:52 acenn exim-in[24841]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:16:52 acenn exim-in[24841]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:16:52 acenn exim-in[24841]: [7\29] 	id 1PuCnj-0006Sf-1q
2011:03:01-05:16:52 acenn exim-in[24841]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:16:52 +0530
2011:03:01-05:16:52 acenn exim-in[24841]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:16:52 acenn exim-in[24841]: [10\29] 	s=marketing;
2011:03:01-05:16:52 acenn exim-in[24841]: [11\29] 	d=sophos.com;
2011:03:01-05:16:52 acenn exim-in[24841]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:16:52 acenn exim-in[24841]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:16:52 acenn exim-in[24841]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:16:52 acenn exim-in[24841]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:16:52 acenn exim-in[24841]: [16\29] 	s=marketing;
2011:03:01-05:16:52 acenn exim-in[24841]: [17\29] 	d=sophos.com;
2011:03:01-05:16:52 acenn exim-in[24841]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:16:52 acenn exim-in[24841]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:16:52 acenn exim-in[24841]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:16:52 acenn exim-in[24841]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:16:52 acenn exim-in[24841]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:16:52 acenn exim-in[24841]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:16:52 acenn exim-in[24841]: [24\29]   MIME-Version: 1.0
2011:03:01-05:16:52 acenn exim-in[24841]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:16:52 acenn exim-in[24841]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:16:52 acenn exim-in[24841]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:16:52 acenn exim-in[24841]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:16:52 acenn exim-in[24841]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:16:52 acenn exim-in[24841]: 2011-03-01 05:16:52 SMTP connection from r66.web.sophos.com (web.sophos.com) [207.211.34.66]:60558 lost
2011:03:01-05:17:00 acenn exim-out[24844]: 2011-03-01 05:17:00 Start queue run: pid=24844
2011:03:01-05:17:00 acenn exim-out[24844]: 2011-03-01 05:17:00 End queue run: pid=24844
2011:03:01-05:18:00 acenn exim-out[24893]: 2011-03-01 05:18:00 Start queue run: pid=24893
2011:03:01-05:18:00 acenn exim-out[24893]: 2011-03-01 05:18:00 End queue run: pid=24893
2011:03:01-05:18:55 acenn exim-in[7423]: 2011-03-01 05:18:55 SMTP connection from [207.211.34.66]:54434 (TCP/IP connection count = 1)
2011:03:01-05:18:56 acenn exim-in[24899]: 2011-03-01 05:18:56 [207.211.34.66] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:18:57 acenn exim-in[24899]: 2011-03-01 05:18:57 1PuCpk-0006Tb-2V DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:18:57 acenn exim-in[24899]: 2011-03-01 05:18:57 1PuCpk-0006Tb-2V malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:18:57 acenn exim-in[24899]: 2011-03-01 05:18:57 1PuCpk-0006Tb-2V H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:54434 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:18:57 acenn exim-in[24899]: 2011-03-01 05:18:57 1PuCpk-0006Tb-2V malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:18:57 acenn exim-in[24899]: [1\29] 2011-03-01 05:18:57 1PuCpk-0006Tb-2V H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:54434 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:18:57 acenn exim-in[24899]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:18:57 acenn exim-in[24899]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:18:57 acenn exim-in[24899]: [4\29] P Received: from r66.web.sophos.com ([207.211.34.66]:54434 helo=web.sophos.com)
2011:03:01-05:18:57 acenn exim-in[24899]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:18:57 acenn exim-in[24899]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:18:57 acenn exim-in[24899]: [7\29] 	id 1PuCpk-0006Tb-2V
2011:03:01-05:18:57 acenn exim-in[24899]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:18:57 +0530
2011:03:01-05:18:57 acenn exim-in[24899]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:18:57 acenn exim-in[24899]: [10\29] 	s=marketing;
2011:03:01-05:18:57 acenn exim-in[24899]: [11\29] 	d=sophos.com;
2011:03:01-05:18:57 acenn exim-in[24899]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:18:57 acenn exim-in[24899]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:18:57 acenn exim-in[24899]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:18:57 acenn exim-in[24899]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:18:57 acenn exim-in[24899]: [16\29] 	s=marketing;
2011:03:01-05:18:57 acenn exim-in[24899]: [17\29] 	d=sophos.com;
2011:03:01-05:18:57 acenn exim-in[24899]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:18:57 acenn exim-in[24899]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:18:57 acenn exim-in[24899]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:18:57 acenn exim-in[24899]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:18:57 acenn exim-in[24899]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:18:57 acenn exim-in[24899]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:18:57 acenn exim-in[24899]: [24\29]   MIME-Version: 1.0
2011:03:01-05:18:57 acenn exim-in[24899]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:18:57 acenn exim-in[24899]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:18:57 acenn exim-in[24899]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:18:57 acenn exim-in[24899]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:18:57 acenn exim-in[24899]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:18:57 acenn exim-in[24899]: 2011-03-01 05:18:57 SMTP connection from r66.web.sophos.com (web.sophos.com) [207.211.34.66]:54434 lost
2011:03:01-05:18:59 acenn exim-in[7423]: 2011-03-01 05:18:59 SMTP connection from [207.211.34.65]:58071 (TCP/IP connection count = 1)
2011:03:01-05:19:00 acenn exim-out[24903]: 2011-03-01 05:19:00 Start queue run: pid=24903
2011:03:01-05:19:00 acenn exim-out[24903]: 2011-03-01 05:19:00 End queue run: pid=24903
2011:03:01-05:19:00 acenn exim-in[24902]: 2011-03-01 05:19:00 [207.211.34.65] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:19:01 acenn exim-in[24902]: 2011-03-01 05:19:01 1PuCpo-0006Te-20 DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:19:01 acenn exim-in[24902]: 2011-03-01 05:19:01 1PuCpo-0006Te-20 malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:19:01 acenn exim-in[24902]: 2011-03-01 05:19:01 1PuCpo-0006Te-20 H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:58071 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:19:01 acenn exim-in[24902]: 2011-03-01 05:19:01 1PuCpo-0006Te-20 malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:19:01 acenn exim-in[24902]: [1\29] 2011-03-01 05:19:01 1PuCpo-0006Te-20 H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:58071 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:19:01 acenn exim-in[24902]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:19:01 acenn exim-in[24902]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:19:01 acenn exim-in[24902]: [4\29] P Received: from r65.web.sophos.com ([207.211.34.65]:58071 helo=web.sophos.com)
2011:03:01-05:19:01 acenn exim-in[24902]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:19:01 acenn exim-in[24902]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:19:01 acenn exim-in[24902]: [7\29] 	id 1PuCpo-0006Te-20
2011:03:01-05:19:01 acenn exim-in[24902]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:19:01 +0530
2011:03:01-05:19:01 acenn exim-in[24902]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:19:01 acenn exim-in[24902]: [10\29] 	s=marketing;
2011:03:01-05:19:01 acenn exim-in[24902]: [11\29] 	d=sophos.com;
2011:03:01-05:19:01 acenn exim-in[24902]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:19:01 acenn exim-in[24902]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:19:01 acenn exim-in[24902]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:19:01 acenn exim-in[24902]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:19:01 acenn exim-in[24902]: [16\29] 	s=marketing;
2011:03:01-05:19:01 acenn exim-in[24902]: [17\29] 	d=sophos.com;
2011:03:01-05:19:01 acenn exim-in[24902]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:19:01 acenn exim-in[24902]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:19:01 acenn exim-in[24902]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:19:01 acenn exim-in[24902]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:19:01 acenn exim-in[24902]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:19:01 acenn exim-in[24902]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:19:01 acenn exim-in[24902]: [24\29]   MIME-Version: 1.0
2011:03:01-05:19:01 acenn exim-in[24902]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:19:01 acenn exim-in[24902]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:19:01 acenn exim-in[24902]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:19:01 acenn exim-in[24902]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:19:01 acenn exim-in[24902]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:19:01 acenn exim-in[24902]: 2011-03-01 05:19:01 SMTP connection from r65.web.sophos.com (web.sophos.com) [207.211.34.65]:58071 lost
2011:03:01-05:19:03 acenn exim-in[7423]: 2011-03-01 05:19:03 SMTP connection from [207.211.34.67]:65256 (TCP/IP connection count = 1)
2011:03:01-05:19:04 acenn exim-in[24907]: 2011-03-01 05:19:04 [207.211.34.67] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:19:05 acenn exim-in[24907]: 2011-03-01 05:19:05 1PuCps-0006Tj-1r DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:19:05 acenn exim-in[24907]: 2011-03-01 05:19:05 1PuCps-0006Tj-1r malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:19:05 acenn exim-in[24907]: 2011-03-01 05:19:05 1PuCps-0006Tj-1r H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:65256 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:19:05 acenn exim-in[24907]: 2011-03-01 05:19:05 1PuCps-0006Tj-1r malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:19:05 acenn exim-in[24907]: [1\29] 2011-03-01 05:19:05 1PuCps-0006Tj-1r H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:65256 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:19:05 acenn exim-in[24907]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:19:05 acenn exim-in[24907]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:19:05 acenn exim-in[24907]: [4\29] P Received: from r67.web.sophos.com ([207.211.34.67]:65256 helo=web.sophos.com)
2011:03:01-05:19:05 acenn exim-in[24907]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:19:05 acenn exim-in[24907]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:19:05 acenn exim-in[24907]: [7\29] 	id 1PuCps-0006Tj-1r
2011:03:01-05:19:05 acenn exim-in[24907]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:19:05 +0530
2011:03:01-05:19:05 acenn exim-in[24907]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:19:05 acenn exim-in[24907]: [10\29] 	s=marketing;
2011:03:01-05:19:05 acenn exim-in[24907]: [11\29] 	d=sophos.com;
2011:03:01-05:19:05 acenn exim-in[24907]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:19:05 acenn exim-in[24907]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:19:05 acenn exim-in[24907]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:19:05 acenn exim-in[24907]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:19:05 acenn exim-in[24907]: [16\29] 	s=marketing;
2011:03:01-05:19:05 acenn exim-in[24907]: [17\29] 	d=sophos.com;
2011:03:01-05:19:05 acenn exim-in[24907]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:19:05 acenn exim-in[24907]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:19:05 acenn exim-in[24907]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:19:05 acenn exim-in[24907]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:19:05 acenn exim-in[24907]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:19:05 acenn exim-in[24907]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:19:05 acenn exim-in[24907]: [24\29]   MIME-Version: 1.0
2011:03:01-05:19:05 acenn exim-in[24907]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:19:05 acenn exim-in[24907]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:19:05 acenn exim-in[24907]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:19:05 acenn exim-in[24907]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:19:05 acenn exim-in[24907]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:19:05 acenn exim-in[24907]: 2011-03-01 05:19:05 SMTP connection from r67.web.sophos.com (web.sophos.com) [207.211.34.67]:65256 lost
2011:03:01-05:20:00 acenn exim-out[24919]: 2011-03-01 05:20:00 Start queue run: pid=24919
2011:03:01-05:20:00 acenn exim-out[24919]: 2011-03-01 05:20:00 End queue run: pid=24919
2011:03:01-05:21:00 acenn exim-out[24950]: 2011-03-01 05:21:00 Start queue run: pid=24950
2011:03:01-05:21:00 acenn exim-out[24950]: 2011-03-01 05:21:00 End queue run: pid=24950
2011:03:01-05:21:08 acenn exim-in[7423]: 2011-03-01 05:21:08 SMTP connection from [207.211.34.65]:61234 (TCP/IP connection count = 1)
2011:03:01-05:21:09 acenn exim-in[24952]: 2011-03-01 05:21:09 [207.211.34.65] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:21:10 acenn exim-in[24952]: 2011-03-01 05:21:10 1PuCrt-0006US-1o DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:21:10 acenn exim-in[24952]: 2011-03-01 05:21:10 1PuCrt-0006US-1o malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:21:10 acenn exim-in[24952]: 2011-03-01 05:21:10 1PuCrt-0006US-1o H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:61234 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:21:10 acenn exim-in[24952]: 2011-03-01 05:21:10 1PuCrt-0006US-1o malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:21:10 acenn exim-in[24952]: [1\29] 2011-03-01 05:21:10 1PuCrt-0006US-1o H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:61234 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:21:10 acenn exim-in[24952]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:21:10 acenn exim-in[24952]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:21:10 acenn exim-in[24952]: [4\29] P Received: from r65.web.sophos.com ([207.211.34.65]:61234 helo=web.sophos.com)
2011:03:01-05:21:10 acenn exim-in[24952]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:21:10 acenn exim-in[24952]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:21:10 acenn exim-in[24952]: [7\29] 	id 1PuCrt-0006US-1o
2011:03:01-05:21:10 acenn exim-in[24952]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:21:10 +0530
2011:03:01-05:21:10 acenn exim-in[24952]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:21:10 acenn exim-in[24952]: [10\29] 	s=marketing;
2011:03:01-05:21:10 acenn exim-in[24952]: [11\29] 	d=sophos.com;
2011:03:01-05:21:10 acenn exim-in[24952]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:21:10 acenn exim-in[24952]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:21:10 acenn exim-in[24952]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:21:10 acenn exim-in[24952]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:21:10 acenn exim-in[24952]: [16\29] 	s=marketing;
2011:03:01-05:21:10 acenn exim-in[24952]: [17\29] 	d=sophos.com;
2011:03:01-05:21:10 acenn exim-in[24952]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:21:10 acenn exim-in[24952]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:21:10 acenn exim-in[24952]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:21:10 acenn exim-in[24952]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:21:10 acenn exim-in[24952]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:21:10 acenn exim-in[24952]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:21:10 acenn exim-in[24952]: [24\29]   MIME-Version: 1.0
2011:03:01-05:21:10 acenn exim-in[24952]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:21:10 acenn exim-in[24952]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:21:10 acenn exim-in[24952]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:21:10 acenn exim-in[24952]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:21:10 acenn exim-in[24952]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:21:10 acenn exim-in[24952]: 2011-03-01 05:21:10 SMTP connection from r65.web.sophos.com (web.sophos.com) [207.211.34.65]:61234 lost
2011:03:01-05:21:12 acenn exim-in[7423]: 2011-03-01 05:21:12 SMTP connection from [207.211.34.66]:63887 (TCP/IP connection count = 1)
2011:03:01-05:21:13 acenn exim-in[24960]: 2011-03-01 05:21:13 [207.211.34.66] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:21:14 acenn exim-in[24960]: 2011-03-01 05:21:14 1PuCrx-0006Ua-1j DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:21:14 acenn exim-in[24960]: 2011-03-01 05:21:14 1PuCrx-0006Ua-1j malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:21:14 acenn exim-in[24960]: 2011-03-01 05:21:14 1PuCrx-0006Ua-1j H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:63887 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:21:14 acenn exim-in[24960]: 2011-03-01 05:21:14 1PuCrx-0006Ua-1j malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:21:14 acenn exim-in[24960]: [1\29] 2011-03-01 05:21:14 1PuCrx-0006Ua-1j H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:63887 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:21:14 acenn exim-in[24960]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:21:14 acenn exim-in[24960]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:21:14 acenn exim-in[24960]: [4\29] P Received: from r66.web.sophos.com ([207.211.34.66]:63887 helo=web.sophos.com)
2011:03:01-05:21:14 acenn exim-in[24960]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:21:14 acenn exim-in[24960]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:21:14 acenn exim-in[24960]: [7\29] 	id 1PuCrx-0006Ua-1j
2011:03:01-05:21:14 acenn exim-in[24960]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:21:14 +0530
2011:03:01-05:21:14 acenn exim-in[24960]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:21:14 acenn exim-in[24960]: [10\29] 	s=marketing;
2011:03:01-05:21:14 acenn exim-in[24960]: [11\29] 	d=sophos.com;
2011:03:01-05:21:14 acenn exim-in[24960]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:21:14 acenn exim-in[24960]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:21:14 acenn exim-in[24960]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:21:14 acenn exim-in[24960]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:21:14 acenn exim-in[24960]: [16\29] 	s=marketing;
2011:03:01-05:21:14 acenn exim-in[24960]: [17\29] 	d=sophos.com;
2011:03:01-05:21:14 acenn exim-in[24960]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:21:14 acenn exim-in[24960]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:21:14 acenn exim-in[24960]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:21:14 acenn exim-in[24960]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:21:14 acenn exim-in[24960]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:21:14 acenn exim-in[24960]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:21:14 acenn exim-in[24960]: [24\29]   MIME-Version: 1.0
2011:03:01-05:21:14 acenn exim-in[24960]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:21:14 acenn exim-in[24960]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:21:14 acenn exim-in[24960]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:21:14 acenn exim-in[24960]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:21:14 acenn exim-in[24960]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:21:14 acenn exim-in[24960]: 2011-03-01 05:21:14 SMTP connection from r66.web.sophos.com (web.sophos.com) [207.211.34.66]:63887 lost
2011:03:01-05:21:16 acenn exim-in[7423]: 2011-03-01 05:21:16 SMTP connection from [207.211.34.67]:55704 (TCP/IP connection count = 1)
2011:03:01-05:21:17 acenn exim-in[24964]: 2011-03-01 05:21:17 [207.211.34.67] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:21:18 acenn exim-in[24964]: 2011-03-01 05:21:18 1PuCs1-0006Ue-1r DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:21:18 acenn exim-in[24964]: 2011-03-01 05:21:18 1PuCs1-0006Ue-1r malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:21:18 acenn exim-in[24964]: 2011-03-01 05:21:18 1PuCs1-0006Ue-1r H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:55704 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:21:18 acenn exim-in[24964]: 2011-03-01 05:21:18 1PuCs1-0006Ue-1r malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:21:18 acenn exim-in[24964]: [1\29] 2011-03-01 05:21:18 1PuCs1-0006Ue-1r H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:55704 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:21:18 acenn exim-in[24964]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:21:18 acenn exim-in[24964]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:21:18 acenn exim-in[24964]: [4\29] P Received: from r67.web.sophos.com ([207.211.34.67]:55704 helo=web.sophos.com)
2011:03:01-05:21:18 acenn exim-in[24964]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:21:18 acenn exim-in[24964]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:21:18 acenn exim-in[24964]: [7\29] 	id 1PuCs1-0006Ue-1r
2011:03:01-05:21:18 acenn exim-in[24964]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:21:18 +0530
2011:03:01-05:21:18 acenn exim-in[24964]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:21:18 acenn exim-in[24964]: [10\29] 	s=marketing;
2011:03:01-05:21:18 acenn exim-in[24964]: [11\29] 	d=sophos.com;
2011:03:01-05:21:18 acenn exim-in[24964]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:21:18 acenn exim-in[24964]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:21:18 acenn exim-in[24964]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:21:18 acenn exim-in[24964]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:21:18 acenn exim-in[24964]: [16\29] 	s=marketing;
2011:03:01-05:21:18 acenn exim-in[24964]: [17\29] 	d=sophos.com;
2011:03:01-05:21:18 acenn exim-in[24964]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:21:18 acenn exim-in[24964]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:21:18 acenn exim-in[24964]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:21:18 acenn exim-in[24964]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:21:18 acenn exim-in[24964]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:21:18 acenn exim-in[24964]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:21:18 acenn exim-in[24964]: [24\29]   MIME-Version: 1.0
2011:03:01-05:21:18 acenn exim-in[24964]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:21:18 acenn exim-in[24964]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:21:18 acenn exim-in[24964]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:21:18 acenn exim-in[24964]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:21:18 acenn exim-in[24964]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:21:19 acenn exim-in[24964]: 2011-03-01 05:21:19 SMTP connection from r67.web.sophos.com (web.sophos.com) [207.211.34.67]:55704 lost
2011:03:01-05:22:00 acenn exim-out[24970]: 2011-03-01 05:22:00 Start queue run: pid=24970
2011:03:01-05:22:00 acenn exim-out[24970]: 2011-03-01 05:22:00 End queue run: pid=24970
2011:03:01-05:23:00 acenn exim-out[25119]: 2011-03-01 05:23:00 Start queue run: pid=25119
2011:03:01-05:23:00 acenn exim-out[25119]: 2011-03-01 05:23:00 End queue run: pid=25119
2011:03:01-05:23:21 acenn exim-in[7423]: 2011-03-01 05:23:21 SMTP connection from [207.211.34.66]:50556 (TCP/IP connection count = 1)
2011:03:01-05:23:22 acenn exim-in[25145]: 2011-03-01 05:23:22 [207.211.34.66] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:23:23 acenn exim-in[25145]: 2011-03-01 05:23:23 1PuCu2-0006XZ-1x DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:23:23 acenn exim-in[25145]: 2011-03-01 05:23:23 1PuCu2-0006XZ-1x malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:23:23 acenn exim-in[25145]: 2011-03-01 05:23:23 1PuCu2-0006XZ-1x H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:50556 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:23:23 acenn exim-in[25145]: 2011-03-01 05:23:23 1PuCu2-0006XZ-1x malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:23:23 acenn exim-in[25145]: [1\29] 2011-03-01 05:23:23 1PuCu2-0006XZ-1x H=r66.web.sophos.com (web.sophos.com) [207.211.34.66]:50556 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:23:23 acenn exim-in[25145]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:23:23 acenn exim-in[25145]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:23:23 acenn exim-in[25145]: [4\29] P Received: from r66.web.sophos.com ([207.211.34.66]:50556 helo=web.sophos.com)
2011:03:01-05:23:23 acenn exim-in[25145]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:23:23 acenn exim-in[25145]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:23:23 acenn exim-in[25145]: [7\29] 	id 1PuCu2-0006XZ-1x
2011:03:01-05:23:23 acenn exim-in[25145]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:23:23 +0530
2011:03:01-05:23:23 acenn exim-in[25145]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:23:23 acenn exim-in[25145]: [10\29] 	s=marketing;
2011:03:01-05:23:23 acenn exim-in[25145]: [11\29] 	d=sophos.com;
2011:03:01-05:23:23 acenn exim-in[25145]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:23:23 acenn exim-in[25145]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:23:23 acenn exim-in[25145]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:23:23 acenn exim-in[25145]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:23:23 acenn exim-in[25145]: [16\29] 	s=marketing;
2011:03:01-05:23:23 acenn exim-in[25145]: [17\29] 	d=sophos.com;
2011:03:01-05:23:23 acenn exim-in[25145]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:23:23 acenn exim-in[25145]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:23:23 acenn exim-in[25145]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:23:23 acenn exim-in[25145]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:23:23 acenn exim-in[25145]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:23:23 acenn exim-in[25145]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:23:23 acenn exim-in[25145]: [24\29]   MIME-Version: 1.0
2011:03:01-05:23:23 acenn exim-in[25145]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:23:23 acenn exim-in[25145]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:23:23 acenn exim-in[25145]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:23:23 acenn exim-in[25145]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:23:23 acenn exim-in[25145]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:23:23 acenn exim-in[25145]: 2011-03-01 05:23:23 SMTP connection from r66.web.sophos.com (web.sophos.com) [207.211.34.66]:50556 lost
2011:03:01-05:23:25 acenn exim-in[7423]: 2011-03-01 05:23:25 SMTP connection from [207.211.34.67]:60139 (TCP/IP connection count = 1)
2011:03:01-05:23:26 acenn exim-in[25148]: 2011-03-01 05:23:26 [207.211.34.67] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:23:27 acenn exim-in[25148]: 2011-03-01 05:23:27 1PuCu6-0006Xc-1s DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:23:27 acenn exim-in[25148]: 2011-03-01 05:23:27 1PuCu6-0006Xc-1s malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:23:27 acenn exim-in[25148]: 2011-03-01 05:23:27 1PuCu6-0006Xc-1s H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:60139 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:23:27 acenn exim-in[25148]: 2011-03-01 05:23:27 1PuCu6-0006Xc-1s malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:23:27 acenn exim-in[25148]: [1\29] 2011-03-01 05:23:27 1PuCu6-0006Xc-1s H=r67.web.sophos.com (web.sophos.com) [207.211.34.67]:60139 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:23:27 acenn exim-in[25148]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:23:27 acenn exim-in[25148]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:23:27 acenn exim-in[25148]: [4\29] P Received: from r67.web.sophos.com ([207.211.34.67]:60139 helo=web.sophos.com)
2011:03:01-05:23:27 acenn exim-in[25148]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:23:27 acenn exim-in[25148]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:23:27 acenn exim-in[25148]: [7\29] 	id 1PuCu6-0006Xc-1s
2011:03:01-05:23:27 acenn exim-in[25148]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:23:27 +0530
2011:03:01-05:23:27 acenn exim-in[25148]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:23:27 acenn exim-in[25148]: [10\29] 	s=marketing;
2011:03:01-05:23:27 acenn exim-in[25148]: [11\29] 	d=sophos.com;
2011:03:01-05:23:27 acenn exim-in[25148]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:23:27 acenn exim-in[25148]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:23:27 acenn exim-in[25148]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:23:27 acenn exim-in[25148]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:23:27 acenn exim-in[25148]: [16\29] 	s=marketing;
2011:03:01-05:23:27 acenn exim-in[25148]: [17\29] 	d=sophos.com;
2011:03:01-05:23:27 acenn exim-in[25148]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:23:27 acenn exim-in[25148]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:23:27 acenn exim-in[25148]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:23:27 acenn exim-in[25148]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:23:27 acenn exim-in[25148]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:23:27 acenn exim-in[25148]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:23:27 acenn exim-in[25148]: [24\29]   MIME-Version: 1.0
2011:03:01-05:23:27 acenn exim-in[25148]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:23:27 acenn exim-in[25148]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:23:27 acenn exim-in[25148]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:23:27 acenn exim-in[25148]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:23:27 acenn exim-in[25148]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:23:27 acenn exim-in[25148]: 2011-03-01 05:23:27 SMTP connection from r67.web.sophos.com (web.sophos.com) [207.211.34.67]:60139 lost
2011:03:01-05:23:29 acenn exim-in[7423]: 2011-03-01 05:23:29 SMTP connection from [207.211.34.65]:58925 (TCP/IP connection count = 1)
2011:03:01-05:23:30 acenn exim-in[25151]: 2011-03-01 05:23:30 [207.211.34.65] F=<sophos@web.sophos.com> R=<shrxxxxx@mydomain.com> Verifying recipient address with callout
2011:03:01-05:23:32 acenn exim-in[25151]: 2011-03-01 05:23:32 1PuCuA-0006Xf-1p DKIM: d=sophos.com s=marketing c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2011:03:01-05:23:32 acenn exim-in[25151]: 2011-03-01 05:23:32 1PuCuA-0006Xf-1p malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:23:32 acenn exim-in[25151]: 2011-03-01 05:23:32 1PuCuA-0006Xf-1p H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:58925 Warning: ACL "warn" statement skipped: condition test deferred
2011:03:01-05:23:32 acenn exim-in[25151]: 2011-03-01 05:23:32 1PuCuA-0006Xf-1p malware acl condition: cssd: cssd returned malformed result (missing colon): 200 OK
2011:03:01-05:23:32 acenn exim-in[25151]: [1\29] 2011-03-01 05:23:32 1PuCuA-0006Xf-1p H=r65.web.sophos.com (web.sophos.com) [207.211.34.65]:58925 F=<sophos@web.sophos.com> temporarily rejected after DATA
2011:03:01-05:23:32 acenn exim-in[25151]: [2\29] Envelope-from: <sophos@web.sophos.com>
2011:03:01-05:23:32 acenn exim-in[25151]: [3\29] Envelope-to: <shrxxxxx@mydomain.com>
2011:03:01-05:23:32 acenn exim-in[25151]: [4\29] P Received: from r65.web.sophos.com ([207.211.34.65]:58925 helo=web.sophos.com)
2011:03:01-05:23:32 acenn exim-in[25151]: [5\29] 	by mail.mydomain.com with esmtp (Exim 4.74)
2011:03:01-05:23:32 acenn exim-in[25151]: [6\29] 	(envelope-from <sophos@web.sophos.com>)
2011:03:01-05:23:32 acenn exim-in[25151]: [7\29] 	id 1PuCuA-0006Xf-1p
2011:03:01-05:23:32 acenn exim-in[25151]: [8\29] 	for shrxxxxx@mydomain.com; Tue, 01 Mar 2011 05:23:32 +0530
2011:03:01-05:23:32 acenn exim-in[25151]: [9\29]   DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
2011:03:01-05:23:32 acenn exim-in[25151]: [10\29] 	s=marketing;
2011:03:01-05:23:32 acenn exim-in[25151]: [11\29] 	d=sophos.com;
2011:03:01-05:23:32 acenn exim-in[25151]: [12\29] 	h=domainkey-signature:from:date:subject:to:mime-version:x-mailer:reply-to:message-id:content-type;
2011:03:01-05:23:32 acenn exim-in[25151]: [13\29] 	bh=trDLHBKo1xA0A35pgx5D6mk++EEoBMEuhHHmrFRc0yk=;
2011:03:01-05:23:32 acenn exim-in[25151]: [14\29] 	b=jgwOLkDDe9qhljI9mxDl4HXg50dNvcch7Vi8aezng50bH+pBAJlmfGSkowePZugNAOnlAQV9FdG4d7qHWGtAnmDOegHiCyy1kMpj32K3k+JKgnYGfd4+ChPpZcf/ClatSdts9RZdTGsKhfEG8WG5iMYm3juwmrBIRQgtmIOcrEA=
2011:03:01-05:23:32 acenn exim-in[25151]: [15\29]   DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
2011:03:01-05:23:32 acenn exim-in[25151]: [16\29] 	s=marketing;
2011:03:01-05:23:32 acenn exim-in[25151]: [17\29] 	d=sophos.com;
2011:03:01-05:23:32 acenn exim-in[25151]: [18\29] 	h=From:Date:Subject:To:MIME-Version:X-Mailer:Reply-To:Message-ID:Content-Type;
2011:03:01-05:23:32 acenn exim-in[25151]: [19\29] 	b=cTi3eieIuARgNlCPtSC3SbsKSuUeiNfl1Y9z07uhDqXcINF1DKW1+HPaIfKErWD2ZUTy+5B5futOuytPAqJFFcesc+y2qTx3bvEdm3ofQ8ptyxg3Jr9PhEa7693Hc+mcdqcIeuH/E3twROLTO3NpbO6T6KLKm34+XA6gl/oZ8Sc=
2011:03:01-05:23:32 acenn exim-in[25151]: [20\29] F From: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:23:32 acenn exim-in[25151]: [21\29]   Date: Mon, 28 Feb 2011 18:41:27 -0500
2011:03:01-05:23:32 acenn exim-in[25151]: [22\29]   Subject: Sophos enews (28 February 2011)
2011:03:01-05:23:32 acenn exim-in[25151]: [23\29] T To: <shrxxxxx@mydomain.com>
2011:03:01-05:23:32 acenn exim-in[25151]: [24\29]   MIME-Version: 1.0
2011:03:01-05:23:32 acenn exim-in[25151]: [25\29]   X-Mailer: nlserver, Build 5.50.6021
2011:03:01-05:23:32 acenn exim-in[25151]: [26\29] R Reply-To: "Sophos" <sophosenews@sophos.com>
2011:03:01-05:23:32 acenn exim-in[25151]: [27\29] I Message-ID: <NMID-105-41078965-700514840-sophos-AA==@web.sophos.com>
2011:03:01-05:23:32 acenn exim-in[25151]: [28\29]   Content-Type: multipart/alternative;
2011:03:01-05:23:32 acenn exim-in[25151]: [29/29] 	boundary="----=_NextPart_321_3F8FF4A8.3F8FF4A8"
2011:03:01-05:23:32 acenn exim-in[25151]: 2011-03-01 05:23:32 SMTP connection from r65.web.sophos.com (web.sophos.com) [207.211.34.65]:58925 lost
2011:03:01-05:24:00 acenn exim-out[25157]: 2011-03-01 05:24:00 Start queue run: pid=25157
2011:03:01-05:24:00 acenn exim-out[25157]: 2011-03-01 05:24:00 End queue run: pid=25157