It could be happen that the attachment is outside the range of MaxBytes - 
in this case it will be not detected.

>Amazingly if I write the actual sentence "attachment:01234567.doc" in the 
message body then it 
>triggers the bomb filter.

ASSP is simply doing the same - it adds such string for every found 
attachment to the content that will be analyzed.

Thomas




Von:    Ivano Meneghello <iv...@hypergrid.it>
An:     assp-test@lists.sourceforge.net
Datum:  05.05.2015 14:45
Betreff:        [Assp-test] Attachment name in bombRe



Hello all,

we use ASSP 2.4.3 and we're looking for a way to score email messages by 
attachment name and not 
only by extension.

Anybody knows if the "attachment:filename" form of bombRe and bombReData 
is still working?

I have to ask because, apparently, it's not.

Putting something like:

attachment:01234567\.doc

in either bombReData or bombRe has no effect at all on a test message with 
the file "01234567.doc" 
attached.

Amazingly if I write the actual sentence "attachment:01234567.doc" in the 
message body then it 
triggers the bomb filter.

Any help would be greatly appreciated.


Greetings,

Ivano Meneghello

HyperGrid s.r.l.
V.le Golgi 63 - 27100 Pavia - ITALY
http://www.hypergrid.it

Tel:             +39-0382-528875
Fax:             +39-0382-049303
E-mail:                  iv...@hypergrid.it <mailto:iv...@hypergrid.it>

More than a decade of Digital Security

<http://www.hypergrid.it/socialnetworks>


------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud 
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test






DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************

------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud 
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to