OK, here's a more comprehensive report of the multiple problems with DoFileScan in ASSP 1.5.1.0 0.08.
1. asspl.pl contains calls to $ThreadYield(), on lines 17786 and 17794, but $ThreadYield is not defined anywhere. For further testing I commented out these two bad lines. 2. The FileScanBad regex matches erroneously, as the following log lines suggest (email addresses changed for privacy reasons): Mar-22-09 10:09:34 id-16573-07653 65.54.246.175 <[email protected]> to: [email protected] MessageScore is now -25, after adding -25 (SPFpass) Mar-22-09 10:09:34 id-16573-07653 65.54.246.175 <[email protected]> to: [email protected] diagnostic: FileScan will run Mar-22-09 10:09:34 id-16573-07653 65.54.246.175 <[email protected]> to: [email protected] diagnostic: FileScan returned Mar-22-09 10:09:34 id-16573-07653 65.54.246.175 <[email protected]> to: [email protected] FileScan: scanned 4069 bytes in whitelisted message Mar-22-09 10:09:34 id-16573-07653 65.54.246.175 <[email protected]> to: [email protected] MessageScore is now 25, after adding 50 (virus detected: 'FileScan' - ) Mar-22-09 10:09:34 id-16573-07653 [VIRUS] 65.54.246.175 <[email protected]> to: [email protected] [spam found] (virus detected: 'FileScan' - ) [Test]; The relevant config settings are as follows: DoFileScan:=1 FileScanDir:=d:\assp\virusscan FileScanCMD:="C:\Program Files\ClamWin\bin\ClamScan.exe" -d "C:\Documents and Settings\All Users\.clamwin\db" --remove --stdout FILENAME FileScanBad:=Infected files: [1-9]+ FileScanGood:=Infected files: 0 3. ASSP returns an invalid SMTP response to the sending MTA, as seen here by the NDR generated by the sender's MTA: Reporting-MTA: dns;bay0-omc2-s39.bay0.hotmail.com Received-From-MTA: dns;BAY116-W52 Arrival-Date: Sun, 22 Mar 2009 03:09:32 -0700 Final-Recipient: rfc822;[email protected] Action: failed Status: 5.5.0 Diagnostic-Code: smtp;500 Non RFC-compliant response received ---- It is clear this code has not been tested in the slightest, and I am amazed it could be offered as part of a so-called RC release. ------------------------------------------------------------------------------ Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are powering Web 2.0 with engaging, cross-platform capabilities. Quickly and easily build your RIAs with Flex Builder, the Eclipse(TM)based development software that enables intelligent coding and step-through debugging. Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
