>but think about AV "false positives";

AV "false positives" - is not really an assp problem, first this must be 
fixed in the AV-software scanning exceptions. btw: never saw such thing

Because reports are not scanned by assp, the only way is to rename the 
file to a report-file-name. for example

n1000023345.eml

This is safe, because only system- or assp admins are able to this. FC 
(file commander GUI) could be used for example.
Such a file name could not be forced/spoofed by a spammer - or better : 
will never be created by assp because of any setting or mail subject. Only 
reports created by assp are named this way.

Thomas







Von:    Grayhat <gray...@gmx.net>
An:     assp-test@lists.sourceforge.net
Datum:  22.10.2014 17:01
Betreff:        Re: [Assp-test] fixes in assp 2.4.4 build 14295



:: On Wed, 22 Oct 2014 16:03:05 +0200
::
<titc.5372cf6baa.of7b87b0fb.218efdb5-onc1257d79.004a1b98-c1257d79.004d2...@thockar.com>
 
::
Thomas Eckardt <thomas.ecka...@thockar.com> wrote:


> used by the rebuildspamdb to make the spam detection more accuate.
> Only the resend is dangerous - an infected file should not (never) be
> resent.

uhm... well, in general I'd agree, but think about AV "false
positives"; in such cases having the ability to get the email may be
quite useful :)

------------------------------------------------------------------------------
Comprehensive Server Monitoring with Site24x7.
Monitor 10 servers for $9/Month.
Get alerted through email, SMS, voice calls or mobile push notifications.
Take corrective actions from your mobile device.
http://p.sf.net/sfu/Zoho
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test





DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************

------------------------------------------------------------------------------
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to