Hello in fact I was wrong , sorry. However using ASSP 1.9.5.0(0.0.13) I am seeing odd behaviors
I executed 3 tests , I set maxSize to a low value , 950000 and I sent a zip file of 1.4 MB . Test 1) from Thunderbird email client and Test 2) from gmail webmail , test 3) from a libero.it email . I received 3 different behaviors . test 1) There is no "found message size announcement" with SessionLog set to verbose and there is a repetition of "message exceeds" row. Nov-23-11 13:41:44 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com info: attachment 'exim_mainlog.tar.gz' found for Level-1; Nov-23-11 13:41:44 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com info: 1 attachment found for Level-1; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; Nov-23-11 13:41:53 id-32207-00194 74.125.82.51 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00002] -> /usr/local/assp/okmail/test_00002__8.eml; test 2) same as test 1 but I sent it from gmail WEBMAIL . There is no "found message size announcement" also this time , and there is no collection such as above. Also in this case a random number of "message exceeds" rows . Nov-23-11 13:40:48 id-32207-00190 209.85.220.181 <g...@gmail.com> to: f...@ft.com info: attachment 'exim_mainlog.tar.gz' found for Level-1; Nov-23-11 13:40:48 id-32207-00190 209.85.220.181 <g...@gmail.com> to: f...@ft.com info: 1 attachment found for Level-1; Nov-23-11 13:41:05 id-32207-00190 209.85.220.181 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00001]; Nov-23-11 13:41:05 id-32207-00190 209.85.220.181 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00001]; Nov-23-11 13:41:05 id-32207-00190 209.85.220.181 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00001]; Nov-23-11 13:41:05 id-32207-00190 209.85.220.181 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00001]; Nov-23-11 13:41:05 id-32207-00190 209.85.220.181 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00001]; Nov-23-11 13:41:05 id-32207-00190 209.85.220.181 <g...@gmail.com> to: f...@ft.com [spam found] (message exceeds maxSize 950000 bytes (size)!) [test 00001]; test 3) email sent from libero.it (not gmail) , another behavior (this seems to be correct) Nov-23-11 13:58:24 id-32207-00291 212.52.84.110 <d...@libero.it> info: found message size announcement: 1.91 MByte; Nov-23-11 13:58:24 id-32207-00291 212.52.84.110 <d...@libero.it> error: message exceeds maxSize 95000 bytes (size)!; note I have gmail.com set in maxSMTPdomainIPWL and strictSPFRe Graziano ------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-novd2d _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
