Re: [Assp-test] Attachment blocking stopping outgoing emails, but Local Blocking is set to 'no check'

Thanks Thomas. > On 16 Nov 2016, at 11:48 pm, Thomas Eckardt > wrote: > > please post the complete > > Content-Disposition: attachment; . > > header of this mail. The attachment part of the message starts: --Apple-Mail-59494190-EAB3-47FE-B0E6-8182

Re: [Assp-test] Attachment blocking stopping outgoing emails, but Local Blocking is set to 'no check'

ent mailing list Datum: 15.11.2016 01:02 Betreff: [Assp-test] Attachment blocking stopping outgoing emails, but Local Blocking is set to 'no check' Version 2.5.4(16318) BlockWLExes is set to ‘no check’ but a local user was unable to send a password-protected zip file: Nov-15-16 10:45:

[Assp-test] Attachment blocking stopping outgoing emails, but Local Blocking is set to 'no check'

Version 2.5.4(16318) BlockWLExes is set to ‘no check’ but a local user was unable to send a password-protected zip file: Nov-15-16 10:45:11 id-67111-00658 [Worker_2] [TLS-out] 127.0.0.1 to: recipi...@gmail.com [Plugin] calling plugin ASSP_AFC Nov-15-16 10:45:11 [Worker_2] Warning: possibly vir

Re: [Assp-test] Attachment blocking and ClamAV suspicious only

>> Thomas >> >> >> >> >> Von:K Post >> An: ASSP development mailing list >> Datum: 12.03.2016 20:16 >> Betreff:[Assp-test] Attachment blocking and ClamAV suspicious only >> >> >> >> 2 questions: >

Re: [Assp-test] Attachment blocking and ClamAV suspicious only

sp. > > 'vsValencePB' > > RTMF: > > 'SuspiciousVirus' It is possible to weight such results. . > > > Thomas > > > > > Von:K Post > An: ASSP development mailing list > Datum: 12.03.2016 20:16 > Betreff:

Re: [Assp-test] Attachment blocking and ClamAV suspicious only

K Post An: ASSP development mailing list Datum: 12.03.2016 20:16 Betreff: [Assp-test] Attachment blocking and ClamAV suspicious only 2 questions: 1) I've been doing some ClamAV testing. It mostly works, but I've also seen: [VIRUS][scoring] 149.202.232.193 to: vi

Re: [Assp-test] Attachment blocking and ClamAV suspicious only

Also, testing here: http://www.emailsecuritycheck.net/index.html test 2, which is the eicar executable inside of a zip, gets through (but caught by our Exchange servers) - shouldn't Clamd catch this with ASSP_AFC? DoASSP_AFC is enabled, do both, decompression level set to 12. test 5. which is i

[Assp-test] Attachment blocking and ClamAV suspicious only

2 questions: 1) I've been doing some ClamAV testing. It mostly works, but I've also seen: [VIRUS][scoring] 149.202.232.193 to: virust...@ourdomain.org 'Eicar-Test-Signature' passing the virus check because of only suspicious virus 'Eicar' Is there a way to tell ClamAV or ASSP to reject even sus

Re: [Assp-test] Attachment blocking

t; Thomas >> >> >> >> >> Von:K Post >> An: ASSP development mailing list >> Datum: 17.02.2015 22:52 >> Betreff:Re: [Assp-test] Attachment blocking >> >> >> >> I can't figure this out to save my life. Is there s

Re: [Assp-test] Attachment blocking

as Eckardt wrote: > Everything works like expected (- as I can see -) if > 'ASSP_AFCReplBadAttach' is switched to 'ON'. > > expect means: like described in the doc (GUI) > > Thomas > > > > > Von:K Post > An: ASSP development mailing

Re: [Assp-test] Attachment blocking

Everything works like expected (- as I can see -) if 'ASSP_AFCReplBadAttach' is switched to 'ON'. expect means: like described in the doc (GUI) Thomas Von:K Post An: ASSP development mailing list Datum: 17.02.2015 22:52 Betreff: Re: [Assp-test] Atta

Re: [Assp-test] Attachment blocking

Thanks for testing. Interesting - mine had #7 from EmailSecurityCheck.net attachment stripped (maybe it's a protected zip or something). Do you use the AFC plugin? Did you add dll to your regex? No idea why mine would slip through - I wonder if something is buggered up with 15.025. I know Th

Re: [Assp-test] Attachment blocking

K Post wrote: > Thanks Doug! > > Do you think you could add in dll (Windows Dynamic Link Library) and run > the tests at > http://www.emailsecuritycheck.net/index.html and > I received 3,4,5 of 7 which were .bat tests, which means |ba[st] didn't work. The .dll test was blocked. Doug -- Ben Fr

Re: [Assp-test] Attachment blocking

Thanks Doug! Do you think you could add in dll (Windows Dynamic Link Library) and run the tests at http://www.emailsecuritycheck.net/index.html and http://www.aleph-tec.com/eicar/ On Tue, Feb 17, 2015 at 7:37 PM, K Post wrote: > I'm able to block attachements but not with the [] in the BadAtt

Re: [Assp-test] Attachment blocking

I'm able to block attachements but not with the [] in the BadAttachlevel1 field. Instead of ad[be] I'm using adb|ade for example. I don't know if this has anything to do with the previousl report by someone that regexp seems to be wonky in 15025... Bug or something I'm missing? Also, I've bee

Re: [Assp-test] Attachment blocking

K Post wrote: > I can't figure this out to save my life. Is there something wrong with the > regex? If external is set to level 2 and block, how would mails like this > I didn't have reg in my list, but added it just for a test and it was blocked. My setup below: ASSP version 2.4.4(15004) ls

Re: [Assp-test] Attachment blocking

I can't figure this out to save my life. Is there something wrong with the regex? If external is set to level 2 and block, how would mails like this get pushed through? It's not just .reg files, it's anything that I've tested including .bat. Thanks On Thu, Feb 12, 2015 at 9:58 PM, K Post wrot

[Assp-test] Attachment blocking

15025 running on a windows box in my lab. I just tried sending an email from gmail with a .reg file attached to it. Also tried with a .bat file. The emails arrive even though I have reg and bat files blocked. The gmail account is whitelisted, but I've tried with non-whitelisted accounts too. I

Re: [Assp-test] Attachment Blocking Behavior

t; An: ASSP development mailing list > Datum: 18.10.2014 10:38 > Betreff:Re: [Assp-test] Attachment Blocking Behavior > > > > I'm currently on version b14258. > > I checked the changelog and didn't see anything that looked like it > would affect

Re: [Assp-test] Attachment Blocking Behavior

There is currently no chance to workaround this issue - wait for the next version, which will fix this. Thomas Von:"Mr. Courtney Creighton" An: ASSP development mailing list Datum: 18.10.2014 10:38 Betreff: Re: [Assp-test] Attachment Blocking Behavior I'

Re: [Assp-test] Attachment Blocking Behavior

> Thomas > > > > Von:"Mr. Courtney Creighton" > An: assp-test@lists.sourceforge.net > Datum: 17.10.2014 10:27 > Betreff:[Assp-test] Attachment Blocking Behavior > > > > Hi, > > Apparently Attachment Blocking is not behaving the way

Re: [Assp-test] Attachment Blocking Behavior

What ASSP version are you using? Thomas Von:"Mr. Courtney Creighton" An: assp-test@lists.sourceforge.net Datum: 17.10.2014 10:27 Betreff: [Assp-test] Attachment Blocking Behavior Hi, Apparently Attachment Blocking is not behaving the way I had expected. It se

[Assp-test] Attachment Blocking Behavior

Hi, Apparently Attachment Blocking is not behaving the way I had expected. It seems that I haven't really sent attachments smaller than my noProcessingSize before, since I didn't notice this much sooner, when I added Level 3 to block zips. So I have configured: (DoBlockExes) = block (BlockExes

[Assp-test] Attachment blocking fails depending on...??

2.3.3(13276) This passes attachment blocking (zip included in relevant level): (headers) --=a__rsosskq_86_09_33 Content-Type: multipart/alternative; boundary="=_rsosskq_86_09_33" --=_rsosskq_86_09_33 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding:

Re: [Assp-test] Attachment blocking

BadAttachL1 needs to be set to this "\.exe$|\.scr$|\.pif$|\.vb[es]$|\.js$|\.jse$|\.ws[fh]$|\.sh[sb]$|\.lnk$| \.bat$|\.cmd$|\.com$|\.ht[ab]$|\.prf$|\.cpl$" to yield to correct behaviour. Regards Paul On Sat, 2010-04-17 at 23:52 +0200, Paul Schutte wrote: > In the web interface it says :"The dot .

Re: [Assp-test] Attachment blocking

In the web interface it says :"The dot . is assumed to precede these, so don't include it." But it seems to work as expected when I precede each extension with \. like "\.com" Hope this is useful feedback. Regards Paul On Sat, 2010-04-17 at 17:45 +0200, Paul Schutte wrote: > Hello. > > I am e

[Assp-test] Attachment blocking

Hello. I am experiencing some problems with the attachment blocking. It works fine for the most part, but if an attached file is named exaplescom.doc, it gets blocked as well. It seems like the com part is matched even within the filename. I am running ASSP version 2.0.2 (1.0.10) this also happe

Re: [Assp-test] Attachment Blocking Returns 250 OK ?

Paul Houlbrooke wrote: > What would cause an email that is failing because of an attachment it > contains returning a 250 OK status instead of AttachmentError? > > > Sep-15-09 11:23:10 Connected: 209.86.89.63:44544 -> 192.168.1.91:25 -> > 192.168.1.91:125 > Sep-15-09 11:23:10 id-28190-09251 209.8

Re: [Assp-test] Attachment Blocking Returns 250 OK ?

Fritz Borgstedt wrote: > It is coming from an ISP and the option > ->Send 250 OK To ISP/Secondary MX Servers (send250OKISP) > > is set ? > > > Shit, your right.. the account I was sending from also happens to be my ISP.

Re: [Assp-test] Attachment Blocking Returns 250 OK ?

It is coming from an ISP and the option ->Send 250 OK To ISP/Secondary MX Servers (send250OKISP) is set ? -- Come build with us! The BlackBerry® Developer Conference in SF, CA is the only developer event you need to at

[Assp-test] Attachment Blocking Returns 250 OK ?

What would cause an email that is failing because of an attachment it contains returning a 250 OK status instead of AttachmentError? Sep-15-09 11:23:10 Connected: 209.86.89.63:44544 -> 192.168.1.91:25 -> 192.168.1.91:125 Sep-15-09 11:23:10 id-28190-09251 209.86.89.63 to: r...@test2.com recipi

Re: [Assp-test] Attachment blocking not working at all.

development mailing list > Subject: Re: [Assp-test] Attachment blocking not working at all. > > ASSP development mailing list > schreibt: >> >> After seeing this entry I decided to try setting everyone to level 4 >> and >> completely clearing the level

Re: [Assp-test] Attachment blocking not working at all.

ASSP development mailing list schreibt: > >After seeing this entry I decided to try setting everyone to level 4 >and >completely clearing the level4 field so every attachment should be >blocked.. ??? You can put "xxx" into level 4, by that preventing all others . ---

Re: [Assp-test] Attachment blocking not working at all.

erick County Government, IIT pdick...@fredco-md.net 301-600-2399/x12399 > From: GrayHat > Reply-To: GrayHat , ASSP development mailing list > > Date: Fri, 17 Apr 2009 14:38:44 +0200 > To: ASSP development mailing list > Subject: Re: [Assp-test] Attachment blocking not work

Re: [Assp-test] Attachment blocking not working at all.

> After seeing this entry I decided to try setting everyone to level 4 and > completely clearing the level4 field so every attachment should be > blocked.. Zip came in just fine.. Ugh.. I think that while upgrading from a version from another the config file got somewhat "screwed" and since AS

Re: [Assp-test] Attachment blocking not working at all.

I found this in the log for level 2.. DOC? Where is it picking up doc?? Apr-17-09 08:02:42 id-69761-14968 72.14.252.154 to: pbry...@fredco-md.net info: attachment 'LETTER FROM MAYO KENNEDY.doc' found for Level-1 After seeing this entry I decided to try setting everyone to level 4 and complet

[Assp-test] Attachment blocking not working at all.

At least for zip files. I¹ve tried the following strings on both level 1 and level 2, setting all to use the level I was testing with. Blocking IS set. Verbose logging of attachments is set. zip|ad[ep]|asx|ba[st]|chm|cmd|com|cpl|crt|dbx|exe|hlp|ht[ab]|in[fs]|isp|js|j se|lnk|md[abez]|mht|ms[ci

Re: [Assp-test] Attachment blocking question

ASSP development mailing list schreibt: > >Doesn't appear to work although it should. Any other ideas? Set it to Level 4, and put into Level 4 xyz. -- This SF.net email is sponsored by: High Quality Requirements in a Co

Re: [Assp-test] Attachment blocking question

At 4:00 AM +0200 4/7/09, Fritz Borgstedt wrote: >ASSP development mailing list >schreibt: >>I am a need for a particular facility to block all attachments. Would >>setting BadAttachL1 to .* block all attachments? > >Please try it. Doesn't appear to work although it should. Any other ideas? Tom

Re: [Assp-test] Attachment blocking question

ASSP development mailing list schreibt: >I am a need for a particular facility to block all attachments. Would >setting BadAttachL1 to .* block all attachments? Set Level to 4 and put xxx in it. -- This SF.net email i

Re: [Assp-test] Attachment blocking question

ASSP development mailing list schreibt: >I am a need for a particular facility to block all attachments. Would >setting BadAttachL1 to .* block all attachments? Please try it. -- This SF.net email is sponsored by: High

[Assp-test] Attachment blocking question

I am a need for a particular facility to block all attachments. Would setting BadAttachL1 to .* block all attachments? TIA Tom -- This SF.net email is sponsored by: High Quality Requirements in a Collaborative Environmen

[Assp-test] Attachment blocking not returning smtp error

Attachment blocking is not returning an SMTP error. The email gets blocked, but no message is sent back to the sender letting them know there email was blocked. The email appears to just vanish. DoBlockExes = block BlockExes = level 1 BadAttachL1 = includes exe AttachmentError = "554 - Delivery

Re: [Assp-test] Attachment Blocking Request

On 8/8/2008, Hill, Brett ([EMAIL PROTECTED]) wrote: > I have not used ASSP's attachment blocking yet, because I have had other > means for doing that. One thing I would like to see is the option to, > instead of out right blocking the email, inserting a text file in place > of the attachment that

[Assp-test] Attachment Blocking Request

I have not used ASSP's attachment blocking yet, because I have had other means for doing that. One thing I would like to see is the option to, instead of out right blocking the email, inserting a text file in place of the attachment that was meant to be blocked. And in that text file would be an