GrayHat wrote: >> Sep-15-08 07:41:44 id-78904-13972 [Whitelisted] xx.xx.xx.xx >> <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] whitelisted (no bad >> attachments) -> c:\assp/notspam/13972.eml > > ok, now try grepping "id-78904-13972" out of the log so that we > may try looking at the message "track" and attempt to understand > what happened
That was the only entry for the email. Attachment logging is set to verbose. Here are 4 additional emails with a WMV attachment. Two got blocked, two didn't. Sep-15-08 10:30:38 id-89038-05769 [Whitelisted] 75.180.132.123 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] whitelisted (no bad attachments) -> c:\assp/notspam/5769.eml Sep-15-08 10:31:33 id-89093-10913 32.97.182.146 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Regex:White 'blablabla' Sep-15-08 10:31:33 id-89093-10913 32.97.182.146 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] info: attachment 'test.wmv' found for Level-1 Sep-15-08 10:31:33 id-89093-10913 [Attachment] 32.97.182.146 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] [spam found] (bad attachment 'test.wmv') Sep-15-08 10:31:33 id-89093-10913 32.97.182.146 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] [SMTP Error] 550 These attachments are not allowed -- Compress before mailing. Sep-15-08 10:32:05 id-89125-07587 209.86.89.65 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Regex:White 'blbablalb' Sep-15-08 10:32:05 id-89125-07587 [MessageOK] 209.86.89.65 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] MESSAGE OK Sep-15-08 10:36:40 id-89400-11166 72.14.246.248 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] info: attachment 'datagen.wmv' found for Level-1 Sep-15-08 10:36:40 id-89400-11166 [Attachment] 72.14.246.248 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] [spam found] (bad attachment 'datagen.wmv') -> c:\assp/attachments/_--2.eml Sep-15-08 10:36:40 id-89400-11166 72.14.246.248 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] [SMTP Error] 550 These attachments are not allowed -- Compress before mailing. Does anyone else see anything like this with attachment blocking? There may just be something odd going on with my configuration. ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
