Hi people I have a problem with some kind of zip files that we receive from a site in the Amazon AWS, but when I tested with the same zip file from my domain I receive the same error (inside the zip file are an image and a pdf).
I have ASSP version 2.6.3 *SPAM-Evaporator* build 20002, with ASSP_AFC version 5.26 and in another server AFC 5.18, both with Centos 7, perl 5.30.3 In the AFC configuration "Block Encrypted Compressed Attachments (ASSP_AFCblockEncryptedZIP)<javascript:void(0);>" is enabled I think for that option I receive de error "possibly virus infected file (can't extract archive)" When I update to AFC 5.26 I start to view in the log file more context to the error: Jan-15-21 16:40:22 m1-39622-01478 [Worker_1] [TLS-in] [TLS-out] 152.168.3.26 <leandro.cas...@externaldomain.com.ar> info: found message size announcement: 182.14 kByte Jan-15-21 16:40:22 [Worker_1] leandro.cas...@externaldomain.com.ar matches @externalDomain.com.ar in whiteListedDomains Jan-15-21 16:40:23 m1-39622-01478 [Worker_1] [TLS-in] [TLS-out] 152.168.3.26 <leandro.cas...@externaldomain.com.ar> to: filtros...@asspserverdomain.com.ar Whitelisted sender Domain: @externalDomain.com.ar Jan-15-21 16:40:24 m1-39622-01478 [Worker_1] [TLS-in] [TLS-out] 152.168.3.26 <leandro.cas...@externaldomain.com.ar> to: filtros...@asspserverdomain.com.ar[Plugin] calling plugin ASSP_AFC Jan-15-21 16:40:24 [Worker_1] Warning: possibly virus infected file (can't read entry in archive header) '/opt/assp/tmp/zip_1_1610739624.27276/prueba2LEO.zip' - <-20> - Pathname cannot be converted from UTF-8 to current locale. Jan-15-21 16:40:24 [Worker_1] Warning: warn - libarchive extract '/opt/assp/tmp/zip_1_1610739624.27276/prueba2LEO.zip' - <-20> - Pathname cannot be converted from UTF-8 to current locale. Jan-15-21 16:40:24 [Worker_1] Warning: possibly virus infected file (can't extract archive using 7z [open3: close(main::STDIN) failed: Bad file descriptor at /opt/perl/lib/site_perl/5.30.3/IPC/Cmd.pm line 1531 thread 2. ]) '/opt/assp/tmp/zip_1_1610739624.27276/prueba2LEO.zip' - Invalid or incomplete multibyte or wide character - Jan-15-21 16:40:24 m1-39622-01478 [Worker_1] [TLS-in] [TLS-out] [Attachment] 152.168.3.26 <leandro.cas...@externaldomain.com.ar> to: filtros...@asspserverdomain.com.arSPAM FOUND bad attachment 'prueba2LEO.zip' cause: 'possibly virus infected file (can't extract archive)' Anyone have a clue about what cause the problem? When I send the same file to another server with AFC 5.18 show fewer lines, only the "can't extract archive" thing nothing about the errors in bold font I describe before. Thanks in advance. Bye. Leandro.
_______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user