I just noticed that some attachments are getting through without being blocked at all.
I have DoBlockExes set to Block. BlockExes is Level 1, as is BlockWLExes. My BadAttachL1 is: exe|sc[frt]|pif|vb[es]|js|jse|ws[fh]|sh[sb]|lnk|bat|cmd|com|ht[ab]|pps|cpl|md[abez]|ms[cipt]|reg I just got a "PPS" file from someone who sent it to a mailing list hosted on my mail server. It went through ASSP fine, and was received by the mail server. However, the mail server then tried to send it out to all the recipients, not hosted on my server. ASSP blocked each delivery attempt: Apr-22-09 18:33:59 FS-39634-05105 [Worker_14] 192.168.0.60 <[email protected]> to: [email protected] info: 1 attachment found for Level-1 Apr-22-09 18:33:59 FS-39634-05105 [Worker_14] [Attachment] 192.168.0.60 <[email protected]> to: [email protected] [spam found] (bad attachment filename.pps') [Subject goes here]; My question is, why did ASSP allow it through to my mail server in the first place, then turn around and block it when my server tried to send it back out? Hmmm...I think I just found the answer. Here's when the message was received: Apr-22-09 12:23:43 FS-17423-09593 [Worker_3] 206.108.253.118 <[email protected]> message proxied without processing - message size (5678238) is above 500000 (npSize). So why did it not block it on the way in, but did block the exact same message on the way out? My npSize and npSizeOut are both set to 500000. ------------------------------------------------------------------------------ Stay on top of everything new and different, both inside and around Java (TM) technology - register by April 22, and save $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco. 300 plus technical and hands-on sessions. Register today. Use priority code J9JMT32. http://p.sf.net/sfu/p _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
