Thomas,

i'm afraid there is something foul with filenames with extended chars again. here some more loglines:

15.04.2017 19:28:35 id-73707-03273 [Worker_1] [Attachment] 40.92.70.55 <qwe...@hotmail.com> to: ke...@domain.com SPAM FOUND bad attachment '?ATI.pdf' 15.04.2017 19:28:35 id-73707-03273 [Worker_1] 40.92.70.55 <qwe...@hotmail.com> to: ke...@domain.com Message-Score: added 35 (baValencePB) for bad attachment '?ATI.pdf', total score for this message is now 35 15.04.2017 19:28:35 id-73707-03273 [Worker_1] [Attachment] 40.92.70.55 <qwe...@hotmail.com> to: ke...@domain.com mail blocked by Plugin ASSP_AFC - reason BadAttachment 15.04.2017 19:28:35 id-73707-03273 [Worker_1] [Attachment] 40.92.70.55 <qwe...@hotmail.com> to: ke...@domain.com [spam found] (BadAttachment) [çatı t-1];

i'm almost sure that exact file name was "çatı t-1.pdf" (it makes best sense). however it's first logged as "ÇATI.pdf" only, but then supposed to be "çatı t-1" without any filename extension.
unfortunately mail is not available to see what it really was.

Katip

-------- Original Message --------
Subject: Re: [Assp-test] AFC plugin again
From: Thomas Eckardt <thomas.ecka...@thockar.com>
To: ASSP development mailing list <assp-test@lists.sourceforge.net>
Date: Sun, 16 Apr 2017 08:58:00 +0200
Set 'SessionLog' to diagnostic and show the complete loglines for such a mail.

15.04.2017 19:28:35 id-73707-03273 [Worker_1] [Attachment] 40.92.70.55
<qwe...@hotmail.com> to: ke...@domain.com [spam found] (BadAttachment)
[çatı t-1];

this shows, that there is no logging level set for this mail -> result is no collection

Thomas





Von: katip <ka...@katip.com>
An: ASSP development mailing list <assp-test@lists.sourceforge.net>
Datum: 16.04.2017 04:15
Betreff: [Assp-test] AFC plugin again
------------------------------------------------------------------------




another AFC issue..

detection is ok. sender was external (not whitelisted) and pdf is set to
block. however message is totally lost after receipt, despite all
blocked attachment levels set to "discard folder & sendAllSpam"

15.04.2017 19:28:35 id-73707-03273 [Worker_1] [Attachment] 40.92.70.55
<qwe...@hotmail.com> to: ke...@domain.com mail blocked by Plugin
ASSP_AFC - reason BadAttachment
15.04.2017 19:28:35 id-73707-03273 [Worker_1] [Attachment] 40.92.70.55
<qwe...@hotmail.com> to: ke...@domain.com [spam found] (BadAttachment)
[çatı t-1];
15.04.2017 19:28:35 id-73707-03273 [Worker_1] 40.92.70.55
<qwe...@hotmail.com> to: ke...@domain.com [SMTP Reply] 250 OK
15.04.2017 19:28:35 id-73707-03273 [Worker_1] 40.92.70.55
<qwe...@hotmail.com> to: ke...@domain.com finished message - received
DATA size: 289.58 kByte - sent DATA size: 0 Byte

without AFC, collections to discard folder and CCspam are fine. fyi..

Katip





------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************



------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot


_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to