I have encountered an issue with 'DoBlockExes' when upgrading from 1.3.3.1 () to 1.3.3.2 (18) and also in current 1.3.3.2 (21).
This occurs with many, but not all emails - I believe, any emails with mime attachments, even text. Message as per 'SMTP Connections' monitor within assp is accepted fully and then stalls clocking up Inactive time until the connection times out. The mail is never fully accepted by the MTA and the connection is closed. The mails are re-tried by the sending MTA until they fail. CPU usage for perl rises very high while in this state, although the ASSP web interface is still active and other SMTP connections are accepted. ASSP logs: Aug-14-07 18:13:27 Connected: x.x.x.x:2990 -> 192.168.0.2:25 -> 192.168.0.2:125 Aug-14-07 18:13:27 x.x.x.x <[EMAIL PROTECTED]> Message processing skipped: Size 3913953 > 500000 Aug-14-07 18:13:27 x.x.x.x <[EMAIL PROTECTED]> renewing tuplet: (x.x.x.0,domain.com.au) age: 37m 4s Aug-14-07 18:13:27 x.x.x.x <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] recipient accepted: [EMAIL PROTECTED] There is no disconnect in the logs and the email does not make it to the next stage of clamav checking. Turning off DoBlockExes=0 solves this problem. Alternatively turning, say, BlockNPExes=0 allows all NoProcessing emails to go through okay. I am only using GoodAttach and none of these settings were changed for quite some time before this issue. My settings were: DoBlockExes -- External Attachment Blocking : 1 BLOCKEXES -- External Attachment Blocking Level: 4 (Default: 0) BLOCKWLEXES -- Whitelisted & Local Attachment Blocking: 4 (Default: 0) BLOCKNPEXES -- NoProcessing Attachment Blocking: 4 (Default: 0) BadAttachL1 -- Level 1 rejected File Extensions: ad[ep]|asx|ba[st]|chm|cmd|com|cpl|crt|dbx|exe|hlp|ht[ab]|in[fs]|isp|js|jse|l nk|md[abez]|mht|ms[cipt]|nch|pcd|pif|prf|reg|sc[frt]|sh[bs]|vb|vb[es]|wms|ws [cfh] BadAttachL2 -- Level 2 rejected File Extensions: BadAttachL3 -- Level 3 rejected File Extensions: zip GoodAttach -- Level 4 Allowed File Extensions: aba|ai|asc|bhx|bmp|dat|doc|eml|eps|gif|htm|html|ics|jpg|jpeg|hqx|p7m|p7s|pdf |png|pps|ppt|rar|rpt|rtf|snp|tif|tiff|txt|wpd|xls|wmv|zip SuspiciousAttach -- Suspicious File Extensions: ATTACHMENTERROR -- Reply Message to Refuse rejected Attachments: 554 5.7.1 Attachment type is not allowed to prevent viruses. Please ZIP before sending if necessary. (Default: 550 These attachments are not allowed -- Compress before mailing.) [ASSP 1.3.3.2 (21) on Win2k with Perl 5.008004] Nick Kelly ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
