ASSP v1.3.3.2(8) This problem appears when there is a simultaneous Whitelisted/Local and NoProcessing match. It did not occur in previous versions, and no settings regarding attachment lists or block settings have been made recently.
Level 4 (internal:GoodAttach) attachments are being blocked outbound for Whitelisted/Local (internal:BlockWLExes). I am seeing this particularly with outbound attached .gif's. "gif" is in my GoodAttach list (shown below), and is not listed in any of my BadAttach* lists. maillog (local user sending email outbound): ---------- Aug-9-07 08:18:44 X.X.X.X <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Bad Attachment(Noprocessing): logo.gif Aug-9-07 08:18:44 X.X.X.X <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Regex:BadAttachment(local/white) 'logo.gif' ---------- assp.cfg: ---------- DoBlockExes=1 BlockExes=2 BlockWLExes=4 BlockNPExes=2 BadAttachL1=ad[ep]|as[fx]|ba[st]|bin|chm|cmd|com|cpl|crt|csh|dbx|dll|docm|dotm|dotx|exe|fxp|hiv|hlp|ht[abm]|html|in[fs]|isp|js|jse|ksh|lnk|md[abetwz]|mht|ms[chipt]|nch|obj|ocx|oft|ops|ovl|pcd|pif|pl|potm|ppa|ppam|ppsm|pptm|prf|ps1|reg|sc[frt]|sh|sh[bs]|sys|url|vb|vb[es]|vs[st]|vxd|wm[dsvz]|ws[cfh]|xla|xlam|xlsm|xltm BadAttachL2=pdf|zip GoodAttach=ai|asc|bhx|bmp|csv|dat|doc|docx|eml|eps|gif|hqx|ics|indd|jpeg|jpg|pdf|pm6|ppt|pptx|pub|rar|rpt|rtf|sit|snp|tif|tiff|txt|vcf|vcs|vsd|wpd|xls|xlsx|zip ---------- Can anyone confirm this? ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
