Print Page | Close Window

Change Request

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5394
Printed Date: 09 May 2025 at 9:11am


Topic: Change Request
Posted By: Guests
Subject: Change Request
Date Posted: 29 November 2005 at 1:49pm
Am I just too damn tired or is there no way to NOT quarantine viruses?  If so, can that feature be added?  We are getting killed by viruses and the SQL inserts are really loading the server up and causing very high inbound connections because there is not much CPU left to deal with normal mail.   Having the "Blocked Attachments" come prior to the virus scan would allow me to null known attachments but if I recall, there was a technical problem with that.


Replies:
Posted By: Guests
Date Posted: 30 November 2005 at 12:02am

There should also be a way to nullify NDR's for viruses.  The latest Sober.X aka Sober.AA virus appears to be deliberately causing a DoS styled flood of NDR's to fbi.gov and cia.gov from every mail server it is flooding with its garbage.

I just had to mass deleted about 70 items in our queue folder for Spamfilter that were all attempting to be sent to cia.gov or fbi.gov and are getting their connections dropped...I'm assuming this is either because those two domains are under some extremely heavy loads right now becuase of the virus or their mail administrators have put us on a black list for the flood of NDR's we have been sending them.

Posted By: Guests
Date Posted: 30 November 2005 at 2:58am
Yes, indeed, the triggering order have to be fixed. I still can't get why I have to quarantine a .pif infected attachment when I have set this to :null

Posted By: LogSat
Date Posted: 30 November 2005 at 1:27pm
You are all right, that feature is missing, but should indeed be there. We'll try to create an updated version with the do not quarantine option as soon as possible.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: Guests
Date Posted: 01 December 2005 at 3:14am
Great! And while you're at it ;-) please consider adding an option for not quarantine messages that exceed max RCPT: Sober is really flooding

Posted By: LogSat
Date Posted: 01 December 2005 at 6:46pm
The "emergency" version of SpamFilter with the option to not quarantine or send to NULL virus-infected emails is now available in the registered user area of our website. The build is 2.6.3.495.

Please note that this build was created in reponse to urgent user requests, and has not gone through all the testing we'd normally perform before a pre-release.

Please report any problems to support@logsat.com so we can take care of them as soon as possible.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: Desperado
Date Posted: 01 December 2005 at 7:52pm

Roberto,

THANK YOU!.  So far, all looks good!  Can you expand on the "no" VS "Send To Null" . 

Thanks again.



-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Posted By: Desperado
Date Posted: 02 December 2005 at 5:34pm

Roberto,

Again, Thanks and no problems yet.  QUESTION:  Will the value be read in from the ini if I change the value from a WEB GUI while SpamFilter is running?

NEVER MIND ... Answered my own question and it seems to be YES.

das



-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com


Print Page | Close Window