Print Page | Close Window

BlockBlankEmailsWithAttachments

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6184
Printed Date: 14 March 2025 at 3:56am


Topic: BlockBlankEmailsWithAttachments
Posted By: IKILLSPAM1
Subject: BlockBlankEmailsWithAttachments
Date Posted: 07 August 2007 at 10:23am

I have downloaded and applied the latest .703 EXE's. After starting SFI back up, I did not see BlockBlankEmailsWithAttachments=*.pdf in the INI file so I added that just below the other PDF scanning options. I started the exe and have been monitoring things. It does not appear to be working. Am I missing something?

 

 


Replies:
Posted By: Desperado
Date Posted: 07 August 2007 at 11:41am
It may be that there is some small (Non printing) HTML code.  Roberto is working on that.

-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Posted By: IKILLSPAM1
Date Posted: 07 August 2007 at 11:44am

Dan can you provide some text as to what the Log will contain when it uses this new functionality, just so I can quickly scan the log to see if its working. As of right now, I see emails coming in, blank with PDFs attached and they are not getting blocked.

 

Thanks

Posted By: Desperado
Date Posted: 07 August 2007 at 11:53am
08/07/07 06:32:08:233 -- (5376) Detected blank email with specified attachment

-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Posted By: IKILLSPAM1
Date Posted: 07 August 2007 at 11:59am

Thank you. As suspected I cannot find that string in my logs.

Can you just confirm that simply having the latest build and

BlockBlankEmailsWithAttachments=*.pdf,*.zip

In my .ini, directly below the SpamPDFMaxPixelHeight=1600  option

is all I need for this to work?

Did I put the BlockBlank text too far into the .ini ? Should it be further up?

Thanks again

Posted By: Desperado
Date Posted: 07 August 2007 at 12:28pm

From the GUI, hit the "Save Settings Button.  This will remove the old setting and put the new one in if it is not there (or is spelled wrong or something). 

It really doesn't matter where it is so long as it is under "[server settings]" 
BlockBlankEmailsWithAttachments=*.pdf,*.xls,*.zip



-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Posted By: IKILLSPAM1
Date Posted: 07 August 2007 at 12:44pm

Interesting. I removed the line that I added, after doublechecking for accuracy, which it was correctly typed. I then from the GUI hit save settings. It then placed this option back into the .ini but way down at the bottom. So maybe your assumption as to where it needs to be placed is invalid? Not sure yet if its now working as I havent received any possibilities but Im sure within a few minutes I will.

I will post back.  If nothing else, thanks for the tip on hitting save settings in the GUI. I didnt realize it autopopulates the INI file if it sees newly available options missing.

Posted By: Desperado
Date Posted: 07 August 2007 at 1:03pm
Mine is near the bottom ... right before the "[Error Response]" section.  Below that is "[NVC]" then "[Authentication settings]" then "[proxy settings]".  I do not think it matters but I believe it should be somewhere in the "[server settings]" section.  I will defer that to Logsat Support however.

-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Posted By: LogSat
Date Posted: 07 August 2007 at 3:52pm
The placement of the various ini entries is not relevant, as long as they are in the correct section. A section will be indicated by a line like:

[section name]

In this particular case, the "BlockBlankEmailsWithAttachments" entry, like most of the other "hidden" settings in SpamFilter, must be placed in the [server settings] section.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: IKILLSPAM1
Date Posted: 07 August 2007 at 4:18pm

It appears it has blocked 2 emails in the last few hours. I however have already received 2 such emails since that time, so it works and it doesnt work. Any idea why its kinda working? The two that I received are .pdf attachments, 10kb and 15kb in size. Stock ads. One is 4pgs long other is 5pgs. If I recall these pdf's dont get scanned if its over 2 pages? Are people increasing this to catch this? Is that a wise decision?

 

Thanks as always

Posted By: LogSat
Date Posted: 07 August 2007 at 7:54pm
We'd rather not get in too many details publicly, as spammers may monitor the forum.

We released a new pre-release build (3.5.4.704) in the registered user area that should help catch the ones being missed.

Please emails us privately if you'd like more details on the changes.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: __M__
Date Posted: 12 August 2007 at 10:36pm
Over the last few days we have noticed PDF spam coming in with the *.fdf extension (another Adobe format).

We have obviously been able to use the BlockBlankEmailsWithAttachments setting to work around this (for blank messages) but I'd thought I'd throw the observation out there in particular for Roberto & Co to ensure that this file extension type is also being scanned like a PDF.


Print Page | Close Window