Upgraded, thanks.
I have now an issue with another legitimate attachment:
Mar-17-16 09:37:24 m1-03839-03606 [Worker_4] [TLS-in] [TLS-out]
[Attachment] 212.82.97.124 <sen...@yahoo.it> to: m...@my.tld SPAM FOUND bad
attachment 'CITYLIFE INTERVENTI ESEGUITI 16.03.16.zip' is a 'compressed
file 'CITYLIFE INTERVENTI ESEGUITI 16.03.16.zip' - contains forbidden
executable file CITYLIFE - type: possibly a virus infected file (can't
read)'
the zip file contains a folder (with spaces), containing 6 PDF files (with
spaces), all clean.
So, i removed the spaces from the zip (in folder and file names) and now
the mail gets through as expected.
I think there is an issue with zip attachment with spaces that prevets AFC
from detecting correct file extensions.
Regards,
On Thu, Mar 17, 2016 at 7:36 AM, Thomas Eckardt <thomas.ecka...@thockar.com>
wrote:
> To detect .emz files you need to upgrade MIME::Types at least to version
> 2.13 (CPAN has it).
>
> Thomas
>
>
>
>
> Von: aquilinux <aquili...@gmail.com>
> An: For Users of ASSP <assp-user@lists.sourceforge.net>
> Datum: 16.03.2016 10:08
> Betreff: Re: [Assp-user] bad attachment [...] possibly a virus
> infected file (can't extract archive)'
>
>
>
> thanks Thomas, i upgraded both assp.pl and plugin.
> now i'm facing this:
>
> Mar-16-16 09:56:08 m1-18566-15642 [Worker_5] [TLS-in] [TLS-out]
> [Attachment] 92.246.34.74 <x...@xyz.tld> to: a...@abc.tld SPAM FOUND bad
> attachment 'image001.emz' is a ' - the file extension: '.emz' does not
> match the content based detected file type '''
>
> Mar-16-16 09:56:08 [Worker_5] Warning: possibly a virus infected file
> (can't read) '/opt/assp/tmp/zip_5_1458118567/.10/.10' - Not a directory
>
>
> regards,
> aqx
>
> On Wed, Mar 16, 2016 at 8:13 AM, Thomas Eckardt
> <thomas.ecka...@thockar.com>
> wrote:
>
> > ASSP version 2.4.8(16074) + ASSP_AFC 3.26
> >
> > both available at SF-CVS
> >
> > will fix this.
> >
> > Thomas
> > ps: please use the "ASSP List" assp-t...@lists.sourceforge.net if you
> use
> > a dev version 2.4.8
> >
> >
> >
> >
> > Von: aquilinux <aquili...@gmail.com>
> > An: For Users of ASSP <assp-user@lists.sourceforge.net>
> > Datum: 15.03.2016 15:00
> > Betreff: [Assp-user] bad attachment [...] possibly a virus
> infected
> > file (can't extract archive)'
> >
> >
> >
> > Hi all,
> > I recently enforced attachment blocking with zip inspection but
> legitimate
> > attachements are blocked because of this:
> >
> > Mar-15-16 14:09:55 [Worker_5] Warning: possibly a virus infected file
> > (can't extract archive)
> >
> >
>
> '/opt/assp/tmp/zip_5_1458047395/MSC_Implementation_Activities_15.03.2016.xlsx'
> >
> > Mar-15-16 14:39:15 [Worker_10] Warning: possibly a virus infected file
> > (can't extract archive)
> >
> >
>
> '/opt/assp/tmp/zip_10_1458049154/20150922_GAA_Global_Corporate_Commercial_ok.docx'
> > - - Could not chdir back to start dir '': '
> >
> > Mar-15-16 14:04:22 [Worker_1] Warning: possibly a virus infected file
> > (can't extract archive)
> > '/opt/assp/tmp/zip_1_1458047062/Figures_wo_VolvoTrucks.xlsm' - - Could
> > not
> > chdir back to start dir '': '
> >
> > Mar-15-16 14:08:09 [Worker_1] Warning: possibly a virus infected file
> > (can't extract archive) '/opt/assp/tmp/zip_1_1458047289/errori.zip' - -
> > Could not chdir back to start dir '': '
> >
> > what's happening?
> > ASSP version 2.4.8(16060) + ASSP_AFC 3.19
> >
> > thanks!
> >
> > --
> > "Madness, like small fish, runs in hosts, in vast numbers of instances."
> >
> > Nessuno mi pettina bene come il vento.
> >
> >
>
> ------------------------------------------------------------------------------
> > Transform Data into Opportunity.
> > Accelerate data analysis in your applications with
> > Intel Data Analytics Acceleration Library.
> > Click to learn more.
> > http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
> > _______________________________________________
> > Assp-user mailing list
> > Assp-user@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/assp-user
> >
> >
> >
> >
> > DISCLAIMER:
> > *******************************************************
> > This email and any files transmitted with it may be confidential,
> legally
> > privileged and protected in law and are intended solely for the use of
> the
> >
> > individual to whom it is addressed.
> > This email was multiple times scanned for viruses. There should be no
> > known virus in this email!
> > *******************************************************
> >
> >
> >
> >
>
> ------------------------------------------------------------------------------
> > Transform Data into Opportunity.
> > Accelerate data analysis in your applications with
> > Intel Data Analytics Acceleration Library.
> > Click to learn more.
> > http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
> > _______________________________________________
> > Assp-user mailing list
> > Assp-user@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/assp-user
> >
> >
>
>
> --
> "Madness, like small fish, runs in hosts, in vast numbers of instances."
>
> Nessuno mi pettina bene come il vento.
>
> ------------------------------------------------------------------------------
> Transform Data into Opportunity.
> Accelerate data analysis in your applications with
> Intel Data Analytics Acceleration Library.
> Click to learn more.
> http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
> _______________________________________________
> Assp-user mailing list
> Assp-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential, legally
> privileged and protected in law and are intended solely for the use of the
>
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no
> known virus in this email!
> *******************************************************
>
>
>
> ------------------------------------------------------------------------------
> Transform Data into Opportunity.
> Accelerate data analysis in your applications with
> Intel Data Analytics Acceleration Library.
> Click to learn more.
> http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
> _______________________________________________
> Assp-user mailing list
> Assp-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>
--
"Madness, like small fish, runs in hosts, in vast numbers of instances."
Nessuno mi pettina bene come il vento.
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
