It's me, again.
I think we have a regression somewhere in attachment detection...
extension not detected and mail not stored.... :(
Mar-23-16 14:36:32 [Worker_1] 94.80.95.229 [SMTP Reply] 220 EAIT - Keep it
legit, or keep out
Mar-23-16 14:36:32 [Worker_1] 94.80.95.229 [SMTP Reply] 250 DSN
Mar-23-16 14:36:33 m1-40193-34031 [Worker_1] [TLS-out] 94.80.95.229
<sen...@remote.tld> [SMTP Reply] 250 2.1.0 Ok
Mar-23-16 14:36:33 m1-40193-34031 [Worker_1] [TLS-out] 94.80.95.229
<sen...@remote.tld> to: r...@local.tld [SMTP Reply] 250 2.1.5 Ok
Mar-23-16 14:36:33 m1-40193-34031 [Worker_1] [TLS-out] 94.80.95.229
<sen...@remote.tld> to: r...@local.tld [SMTP Reply] 354 End data with
<CR><LF>.<CR><LF>
Mar-23-16 14:36:33 m1-40193-34031 [Worker_1] [TLS-out] 94.80.95.229
<sen...@remote.tld> to: r...@local.tld Whitelisted sender address:
sen...@remote.tld for recipient r...@local.tld
Mar-23-16 14:36:33 m1-40193-34031 [Worker_1] [TLS-out] 94.80.95.229
<sen...@remote.tld> to: r...@local.tld Admininfo: whitelist addition:
sen...@remote.tld - AutoWhite on sent mail by sen...@remote.tld
Mar-23-16 14:36:34 m1-40193-34031 [Worker_1] [TLS-out] 94.80.95.229
<sen...@remote.tld> to: r...@local.tld [Plugin] calling plugin ASSP_AFC
Mar-23-16 14:36:34 m1-40193-34031 [Worker_1] [TLS-out] 94.80.95.229
<sen...@remote.tld> to: r...@local.tld info: attachment FA34501
FABBRICATO.docx found for Level-1
Mar-23-16 14:36:34 m1-40193-34031 [Worker_1] [TLS-out] 94.80.95.229
<sen...@remote.tld> to: r...@local.tld info: using user based compressed
attachment check
Mar-23-16 14:36:34 [Worker_1] Info: will detect executables in compressed
files
Mar-23-16 14:36:34 [Worker_1] Info: analyzing compressed file
/opt/assp/tmp/zip_1_1458740194/FA34501_FABBRICATO.docx at zip-level 0
Mar-23-16 14:36:34 [Worker_1] Info: looking for filetype in: .zip
Mar-23-16 14:36:34 [Worker_1] Info: found compressed file with type: 'zip'
Mar-23-16 14:36:35 [Worker_1] Warning: possibly a virus infected file
(can't extract archive)
'/opt/assp/tmp/zip_1_1458740194/FA34501_FABBRICATO.docx' - - Could not
chdir back to start dir '': '
Mar-23-16 14:36:35 m1-40193-34031 [Worker_1] [TLS-out] [Attachment]
94.80.95.229 <sen...@remote.tld> to: r...@local.tld SPAM FOUND bad
attachment 'FA34501 FABBRICATO.docx' is a 'possibly a virus infected file
(can't extract archive)'
Mar-23-16 14:36:35 m1-40193-34031 [Worker_1] [TLS-out] [Attachment]
94.80.95.229 <sen...@remote.tld> to: r...@local.tld info: Plugin ASSP_AFC
has set the collection parameter to '6'
Mar-23-16 14:36:35 m1-40193-34031 [Worker_1] [TLS-out] [Attachment]
94.80.95.229 <sen...@remote.tld> to: r...@local.tld mail blocked by Plugin
ASSP_AFC - reason BadAttachment
Mar-23-16 14:36:35 m1-40193-34031 [Worker_1] [TLS-out] [Attachment]
94.80.95.229 <sen...@remote.tld> to: r...@local.tld [spam found]
(BadAttachment) [nuovo prodotto Fabbricato 2 0];
Mar-23-16 14:36:35 m1-40193-34031 [Worker_1] [TLS-out] 94.80.95.229
<sen...@remote.tld> to: r...@local.tld [SMTP Reply] 250 OK
Mar-23-16 14:36:35 m1-40193-34031 [Worker_1] [TLS-out] 94.80.95.229
<sen...@remote.tld> to: r...@local.tld [SMTP Reply] 221 <myassp> closing
transmission
regards,
aqx
On Tue, Mar 22, 2016 at 12:39 PM, Andrew Porter <a...@defsdoor.org> wrote:
> On 22/03/16 11:29, Thomas Eckardt wrote:
> > Fine - as I told you, this was a very simple stupid mistake - I must
> > have been somehow mentally deranged.
>
> Hey - you don't have to be mentally deranged to work around here
>
>
> But it sure helps ;) :p
>
>
>
>
> ------------------------------------------------------------------------------
> Transform Data into Opportunity.
> Accelerate data analysis in your applications with
> Intel Data Analytics Acceleration Library.
> Click to learn more.
> http://pubads.g.doubleclick.net/gampad/clk?id=278785351&iu=/4140
> _______________________________________________
> Assp-user mailing list
> Assp-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
--
"Madness, like small fish, runs in hosts, in vast numbers of instances."
Nessuno mi pettina bene come il vento.
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785351&iu=/4140
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
