I've hit a case where an email from a whitelisted address is blocked as
spam.
Desired result: Email passes, minus the bad attachment(s). Is this
possible?
Log entries:
Jan-20-21 09:23:00 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> info: found message size announcement: 11.37 kByte
Jan-20-21 09:23:00 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> Message-Score: added -10 (tlsValencePB) for
SSL-TLS-connection-OK, total score for this message is now -10
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> to: us...@destdomain.com Whitelisted sender
address: us...@sourcedomain.com for recipient us...@destdomain.com
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> to: us...@destdomain.com Message-Score: added
-15 (pbwValencePB) for In Penalty White Box, total score for this
message is now -25
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> to: us...@destdomain.com Message-Score: added
-15 (pbwValencePB) for (OIP: 68.178.252.11) In Penalty White Box, total
score for this message is now -40
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> to: us...@destdomain.com [Plugin] calling
plugin ASSP_AFC
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> to: us...@destdomain.com info: using user based
attachment check
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] [Attachment]
68.178.252.48 <us...@sourcedomain.com> to: us...@destdomain.com SPAM
FOUND bad attachment 'untitled' cause: 'bad filename extension '''
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] [Attachment]
68.178.252.48 <us...@sourcedomain.com> to: us...@destdomain.com SPAM
FOUND replaced bad attachment 'untitled' cause: 'bad filename extension
''' with 'untitled.txt'
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> to: us...@destdomain.com info: using user based
attachment check
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] [Attachment]
68.178.252.48 <us...@sourcedomain.com> to: us...@destdomain.com SPAM
FOUND bad attachment 'untitled' cause: 'bad filename extension '''
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] [Attachment]
68.178.252.48 <us...@sourcedomain.com> to: us...@destdomain.com SPAM
FOUND replaced bad attachment 'untitled' cause: 'bad filename extension
''' with 'untitled.txt'
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> to: us...@destdomain.com info: 2 attachments
found for Level-1
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> to: us...@destdomain.com whitelisted (bad
attachment 'untitled' cause: 'bad filename extension ''')
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> to: us...@destdomain.com info: logfile
/usr/share/assp/notspam/9003.eml removed
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> to: us...@destdomain.com file path changed to
-> /usr/share/assp/discarded/9003--8266010.eml
Jan-20-21 09:23:01 m1-52580-09003 [Worker_5] [TLS-in] 68.178.252.48
<us...@sourcedomain.com> to: us...@destdomain.com [spam found] bad
attachment 'untitled' cause: 'bad filename extension ''' [RE Mailing
List] -> /usr/share/assp/discarded/9003--8266010.eml
- Bob
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
