Hi everyone I have "ASSP version 2.6.1  *Fortress*  build 19007" and Plugin 
"ASSP_AFC ver 4.89"

The last two days I have and issue with the attachment plugin and a lot of 
"good" mails started to go to Discarded mail folder and send and error answer 
to senders.

In the log file I saw many errors like "spam attachment (image/ - .png) found 
in MIME part - spam probability" with differents types of image files (png, 
jpg, gif)

To partially "solve" the situation I disable the "AFCDetectSpamAttachRe" option 
and resend the eml files.

Nov-12-19 15:07:47 [Main_Thread] AdminUpdate: [root 127.0.0.1] 
ASSP_AFCDetectSpamAttachRe changed from 'image\/' to ''

Some advice/experience with this kind of issue?

Thanks in advance.

There is  an example of some lines of log file:

Nov-12-19 00:29:15 [Worker_1] Connected: session:5C94EB58 40.107.79.131:55712 > 
192.168.0.13:25 > 192.168.0.25:25
Nov-12-19 00:29:16 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> info: found message size announcement: 77.18 kByte
...
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com [Plugin] calling plugin 
ASSP_AFC
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: spam attachment 
(image/ - image001.png) found in MIME part - spam probability is 0.7307692
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: using user based 
attachment check
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: using user based 
compressed attachment check for image001.png
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: using user based 
attachment check
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: using user based 
compressed attachment check for image002.png
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: using user based 
attachment check
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: using user based 
compressed attachment check for image003.png
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: using user based 
attachment check
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: using user based 
compressed attachment check for image004.png
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: using user based 
attachment check
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: using user based 
compressed attachment check for image005.png
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: logfile 
c:/assp/okmail/Re_Subject_Mail_--140691.eml removed
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com file path changed to  -> 
c:/assp/discarded/Re_Subject_Mail_--140691.eml
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com mail blocked by Plugin 
ASSP_AFC - reason SPAM-attachment
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: logfile 
c:/assp/discarded/Re_Subject_Mail_--140691.eml removed
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com [spam found] 
(SPAM-attachment) [Re Subject Mail] -> 
c:/assp/discarded/Re_Subject_Mail_--140691.eml;
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com [SMTP Status] 421 
<SERVER.mydomain.com> closing transmission
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com info: PB-IP-Score for 
'40.107.79.0' is 0, added -40 in this session
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com finished message - 
received DATA size: 65.11 kByte - sent DATA size: 0 Byte
Nov-12-19 00:29:21 m1-29356-09987 [Worker_1] 40.107.79.131 
<clientu...@somedomain.com> to: localu...@mydomain.com disconnected: 
session:5C94EB58 40.107.79.131 - processing time 6 seconds
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to