Strange attachment blocking despite to White Address and Level

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Strange attachment blocking despite to White Address and Level

Katip
v2.5.4(16347)

attachment blocking normally works well. however i noticed the following today (this i think happened again one or 2 times recently but i'm not sure):

24.12.2016 13:57:14 id-77033-00267 [Worker_1] xx.xx.45.5 [hidden email] to: [hidden email] Whitelisted sender address: [hidden email] for recipient [hidden email]
24.12.2016 13:57:17 id-77033-00267 [Worker_1] xx.xx.45.5 [hidden email] to: [hidden email] info: 4 attachments found for Level-2
24.12.2016 13:57:32 id-77033-00267 [Worker_1] [MessageOK] xx.xx.45.5 [hidden email] to: [hidden email] message ok - (whitelistdb) - [FW: subject etc...]
24.12.2016 13:57:49 id-77033-00267 [Worker_1] xx.xx.45.5 [hidden email] to: [hidden email] [SMTP Reply] 250 Queued (35.392 seconds)

however mail arrived tagged [Attachment] in the Subject and with this headers:
X-Assp-Tag: Attachment
X-Assp-Spam: YES
X-Spam-Status: YES
X-Assp-Spam-Reason: bad attachment 'Untitled_20161223_211643.pdf'

settings:
DoBlockExes = Block
BlockWLExes = Level 2
and "pdf" is not included in Level 1 or 2, but 3.
(and no AFC, it's disabled)

any thoughts??

Katip


------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/intel
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Strange attachment blocking despite to White Address and Level

Thomas Eckardt/eck
>v2.5.4(16347)

>attachment blocking normally works well. however i noticed the following today (this i think happened again one or 2 times recently but i'm not >sure):

I'll try to make the code much more clear. There may be cases (combinations of level definitions) where the result is unexpected.

Thomas

DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/intel
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test