BlockBlankEmailsWithAttachments |
Post Reply 
|
| Author | |
IKILLSPAM1 
Groupie 
Joined: 02 May 2007 Location: United States Status: Offline Points: 70 |
 Post Options
 Thanks(0)
 Quote Reply
 Topic: BlockBlankEmailsWithAttachmentsPosted: 07 August 2007 at 10:23am |
|
I have downloaded and applied the latest .703 EXE's. After starting SFI back up, I did not see BlockBlankEmailsWithAttachments=*.pdf in the INI file so I added that just below the other PDF scanning options. I started the exe and have been monitoring things. It does not appear to be working. Am I missing something?
|
|
 |
|
|
Desperado
Senior Member 
Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
Post Options
Thanks(0)
Quote Reply
Posted: 07 August 2007 at 11:41am |
|
It may be that there is some small (Non printing) HTML code. Roberto is working on that.
|
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
|
|
|
IKILLSPAM1
Groupie
Joined: 02 May 2007 Location: United States Status: Offline Points: 70 |
Post Options
Thanks(0)
Quote Reply
Posted: 07 August 2007 at 11:44am |
|
Dan can you provide some text as to what the Log will contain when it uses this new functionality, just so I can quickly scan the log to see if its working. As of right now, I see emails coming in, blank with PDFs attached and they are not getting blocked.
Thanks |
|
|
|
|
Desperado
Senior Member
Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
Post Options
Thanks(0)
Quote Reply
Posted: 07 August 2007 at 11:53am |
|
08/07/07 06:32:08:233 -- (5376) Detected blank email with specified attachment
|
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
|
|
|
IKILLSPAM1
Groupie
Joined: 02 May 2007 Location: United States Status: Offline Points: 70 |
Post Options
Thanks(0)
Quote Reply
Posted: 07 August 2007 at 11:59am |
|
Thank you. As suspected I cannot find that string in my logs. Can you just confirm that simply having the latest build and In my .ini, directly below the SpamPDFMaxPixelHeight=1600 option is all I need for this to work? Did I put the BlockBlank text too far into the .ini ? Should it be further up? Thanks again |
|
|
|
|
Desperado
Senior Member
Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
Post Options
Thanks(0)
Quote Reply
Posted: 07 August 2007 at 12:28pm |
|
From the GUI, hit the "Save Settings Button. This will remove the old setting and put the new one in if it is not there (or is spelled wrong or something). It really doesn't matter where it is so long as it is under "[server settings]" Edited by Desperado |
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
|
|
|
IKILLSPAM1
Groupie
Joined: 02 May 2007 Location: United States Status: Offline Points: 70 |
Post Options
Thanks(0)
Quote Reply
Posted: 07 August 2007 at 12:44pm |
|
Interesting. I removed the line that I added, after doublechecking for accuracy, which it was correctly typed. I then from the GUI hit save settings. It then placed this option back into the .ini but way down at the bottom. So maybe your assumption as to where it needs to be placed is invalid? Not sure yet if its now working as I havent received any possibilities but Im sure within a few minutes I will. I will post back. If nothing else, thanks for the tip on hitting save settings in the GUI. I didnt realize it autopopulates the INI file if it sees newly available options missing. |
|
|
|
|
Desperado
Senior Member
Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
Post Options
Thanks(0)
Quote Reply
Posted: 07 August 2007 at 1:03pm |
|
Mine is near the bottom ... right before the "[Error Response]" section. Below that is "[NVC]" then "[Authentication settings]" then "[proxy settings]". I do not think it matters but I believe it should be somewhere in the "[server settings]" section. I will defer that to Logsat Support however.
|
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
|
|
|
LogSat
Admin Group 
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 07 August 2007 at 3:52pm |
|
The placement of the various ini entries is not relevant, as long as they are in the correct section. A section will be indicated by a line like:
[section name] In this particular case, the "BlockBlankEmailsWithAttachments" entry, like most of the other "hidden" settings in SpamFilter, must be placed in the [server settings] section. |
|
|
|
|
IKILLSPAM1
Groupie
Joined: 02 May 2007 Location: United States Status: Offline Points: 70 |
Post Options
Thanks(0)
Quote Reply
Posted: 07 August 2007 at 4:18pm |
|
It appears it has blocked 2 emails in the last few hours. I however have already received 2 such emails since that time, so it works and it doesnt work. Any idea why its kinda working? The two that I received are .pdf attachments, 10kb and 15kb in size. Stock ads. One is 4pgs long other is 5pgs. If I recall these pdf's dont get scanned if its over 2 pages? Are people increasing this to catch this? Is that a wise decision?
Thanks as always |
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 07 August 2007 at 7:54pm |
|
We'd rather not get in too many details publicly, as spammers may monitor the forum.
We released a new pre-release build (3.5.4.704) in the registered user area that should help catch the ones being missed. Please emails us privately if you'd like more details on the changes. |
|
|
|
|
__M__
Groupie
Joined: 30 August 2006 Location: Australia Status: Offline Points: 75 |
Post Options
Thanks(0)
Quote Reply
Posted: 12 August 2007 at 10:36pm |
|
Over the last few days we have noticed PDF spam coming in with the *.fdf extension (another Adobe format).
We have obviously been able to use the BlockBlankEmailsWithAttachments setting to work around this (for blank messages) but I'd thought I'd throw the observation out there in particular for Roberto & Co to ensure that this file extension type is also being scanned like a PDF. |
|
|
|
Topic Options|
Post Reply
|
|
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.105 seconds.