[2026.06.26] 01:50:04.076 [52.103.2.4][33695234] Connection initiated
[2026.06.26] 01:50:04.076 [52.103.2.4][33695234] rsp: 220 REMOVED
[2026.06.26] 01:50:04.076 [52.103.2.4][33695234] connected at 6/26/2026 1:50:04 AM
[2026.06.26] 01:50:04.076 [52.103.2.4][33695234] Country code: US
[2026.06.26] 01:50:04.148 [52.103.2.4][33695234] cmd: EHLO BYAPR05CU005.outbound.protection.outlook.com
[2026.06.26] 01:50:04.148 [52.103.2.4][33695234] rsp: 250-REMOVED Hello [52.103.2.4]250-SIZE 139810133250-AUTH PLAIN LOGIN CRAM-MD5250-STARTTLS250-8BITMIME250-SMTPUTF8250-DSN250 OK
[2026.06.26] 01:50:04.219 [52.103.2.4][33695234] cmd: STARTTLS
[2026.06.26] 01:50:04.219 [52.103.2.4][33695234] rsp: 220 Start TLS negotiation
[2026.06.26] 01:50:04.445 [52.103.2.4][33695234] cmd: EHLO BYAPR05CU005.outbound.protection.outlook.com
[2026.06.26] 01:50:04.445 [52.103.2.4][33695234] rsp: 250-REMOVED Hello [52.103.2.4]250-SIZE 139810133250-AUTH PLAIN LOGIN CRAM-MD5250-8BITMIME250-SMTPUTF8250-DSN250 OK
[2026.06.26] 01:50:04.518 [52.103.2.4][33695234] cmd: MAIL FROM:<REMOVED@hotmail.com> SIZE=28431
[2026.06.26] 01:50:04.518 [52.103.2.4][33695234] senderEmail(1): REMOVED@hotmail.com
[2026.06.26] 01:50:04.805 [52.103.2.4][33695234] rsp: 554 Sending address not accepted due to spam filter
[2026.06.26] 01:50:04.805 [52.103.2.4][33695234] Mail rejected due to SMTP Spam Blocking: _SPF (10,None), Null Sender (30,failed)
[2026.06.26] 01:50:04.902 [52.103.2.4][33695234] cmd: QUIT
[2026.06.26] 01:50:04.902 [52.103.2.4][33695234] rsp: 221 OK
[2026.06.26] 01:50:04.902 [52.103.2.4][33695234] disconnected at 6/26/2026 1:50:04 AM
Sample SMTP transaction. Below is an SMTP transaction for the same sender, on the same gateway with the same settings just a few days ago...
[2026.06.23] 02:53:55.524 [52.103.23.25][35852085] Connection initiated
[2026.06.23] 02:53:55.524 [52.103.23.25][35852085] rsp: 220 REMOVED
[2026.06.23] 02:53:55.524 [52.103.23.25][35852085] connected at 6/23/2026 2:53:55 AM
[2026.06.23] 02:53:55.524 [52.103.23.25][35852085] Country code: US
[2026.06.23] 02:53:55.586 [52.103.23.25][35852085] cmd: EHLO PH7PR06CU001.outbound.protection.outlook.com
[2026.06.23] 02:53:55.586 [52.103.23.25][35852085] rsp: 250-REMOVEDHello [52.103.23.25]250-SIZE 139810133250-AUTH PLAIN LOGIN CRAM-MD5250-STARTTLS250-8BITMIME250-SMTPUTF8250-DSN250 OK
[2026.06.23] 02:53:55.647 [52.103.23.25][35852085] cmd: STARTTLS
[2026.06.23] 02:53:55.647 [52.103.23.25][35852085] rsp: 220 Start TLS negotiation
[2026.06.23] 02:53:55.841 [52.103.23.25][35852085] cmd: EHLO PH7PR06CU001.outbound.protection.outlook.com
[2026.06.23] 02:53:55.841 [52.103.23.25][35852085] rsp: 250-REMOVEDHello [52.103.23.25]250-SIZE 139810133250-AUTH PLAIN LOGIN CRAM-MD5250-8BITMIME250-SMTPUTF8250-DSN250 OK
[2026.06.23] 02:53:55.919 [52.103.23.25][35852085] cmd: RSET
[2026.06.23] 02:53:55.919 [52.103.23.25][35852085] rsp: 250 OK
[2026.06.23] 02:53:55.996 [52.103.23.25][35852085] cmd: MAIL FROM:<REMOVED@hotmail.com> SIZE=28592
[2026.06.23] 02:53:55.996 [52.103.23.25][35852085] senderEmail(1): REMOVED@hotmail.com
[2026.06.23] 02:53:56.545 [52.103.23.25][35852085] rsp: 250 OK <REMOVED@hotmail.com> Sender ok
[2026.06.23] 02:53:56.545 [52.103.23.25][35852085] Sender accepted. Weight: 0. Block threshold: 30.
[2026.06.23] 02:53:56.622 [52.103.23.25][35852085] cmd: RCPT TO:<sales@REMOVED>
[2026.06.23] 02:53:57.104 [52.103.23.25][35852085] rsp: 250 OK <sales@REMOVED> Recipient ok
[2026.06.23] 02:53:57.182 [52.103.23.25][35852085] cmd: DATA
[2026.06.23] 02:53:57.182 [52.103.23.25][35852085] Performing PTR host name lookup for 52.103.23.25
[2026.06.23] 02:53:57.182 [52.103.23.25][35852085] PTR host name for 52.103.23.25 resolved as mail-westus3azolkn19010025.outbound.protection.outlook.com
[2026.06.23] 02:53:57.182 [52.103.23.25][35852085] rsp: 354 Start mail input; end with <CRLF>.<CRLF>
[2026.06.23] 02:53:57.260 [52.103.23.25][35852085] senderEmail(2): REMOVED@hotmail.com parsed using FROM: REMOVED <REMOVED@hotmail.com>
[2026.06.23] 02:53:57.260 [52.103.23.25][35852085] Sender accepted. Weight: 0. Block threshold: 30.
[2026.06.23] 02:53:57.383 [52.103.23.25][35852085] DMARC Results: Passed (Domain: hotmail.com, Reason: SPF: True, DKIM: True, Alignments: 2, Domain: hotmail.com), Reason: SPF: True, DKIM: True, Alignments: 2, Domain: hotmail.com, Reject? False
[2026.06.23] 02:53:57.383 [52.103.23.25][35852085] rsp: 250 OK
[2026.06.23] 02:53:57.383 [52.103.23.25][35852085] Received message size: 11423 bytes
[2026.06.23] 02:53:57.384 [52.103.23.25][35852085] Successfully wrote to the HDR file. (/var/lib/smartermail/Spool/SubSpool7/22408763.hdr)
[2026.06.23] 02:53:57.384 [52.103.23.25][35852085] Data transfer succeeded, writing mail to 22408763.eml (MessageID: <LV2PR19MB9973293BB2982D6A547642600D9EEE2@LV2PR19MB997329.namprd19.prod.outlook.com>)
[2026.06.23] 02:53:57.488 [52.103.23.25][35852085] cmd: QUIT
[2026.06.23] 02:53:57.488 [52.103.23.25][35852085] rsp: 221 OK
[2026.06.23] 02:53:57.488 [52.103.23.25][35852085] disconnected at 6/23/2026 2:53:57 AM