Thanks for the report Kevin. We were actually already aware of the problem before releasing the beta, but choose to make the beta public anyways since this could have helped users in reducing the harm by the latest strands of viruses these days.

We'll try to have that fixed soon.

Roberto F.
LogSat Software

Hi Roberto, I have a bug to report.

When I click to not quaruntine keywords and file attachments. Nothing gets put in. I have watched spamfilter catch emails that meet other filters IE. Email TO and Email From black list, spamfilter says it will quaruntine the message, but it never makes it.

I am running on windows 2000 server, using sql 2000 on a seperate server and running the latest beta.

Kevin

George,

First of all thanks for the report! As I just replied to Jim on this same thread, we were actually already aware of the problem before releasing the beta, but choose to make the beta public anyways since this could have helped users in reducing the harm by the latest strands of viruses these days.

We'll try to have that fixed soon. Right now as you noticed the keywords' quarantine box is the one (erraneously) controlling the attachment rule..

Roberto F.
LogSat Software

Thanks for the report Jim. We were actually already aware of the problem before releasing the beta, but choose to make the beta public anyways since this could have helped users in reducing the harm by the latest strands of viruses these days.

We'll try to have that fixed soon.

Roberto F.
LogSat Software

Follow-up on the attachment filtering feature. I just tried turning off the keyword quarantine and if you don't quarantine keywords then the attachments emails are not quarantined also.

g

The problem with the attachment filter quarantining what it is set to not quarantine looks like it is because when an attachment is found it is counted as a keyword found. Since I am still building the corpus file I am still quarantining keywords so I cannot try to see if the attachments are dropped when keywords are not quarantined. I'll try later today and see if that fixes the problem.

g

I'll second George's "Great Job Logsat" comment... your response on issues like this is tremendous!  This will allow us to stop these messages at the front-end gateway, which is a real benefit.

One minor issue... when I first enabled the attachment filter on a test server, I checked the "do not quarantine messages" checkbox.  Messages with prohibited attachments were still being added to the quarantine.  I tried the setting both checked and unchecked, and messages were being added to the quarantine either way.

Since we DO want to quarantine these messages on our "real" email, it will work fine for us; it was just something I noticed in test and figured you would want to know.

So far so good. The new attachment filter is catching 90% of the Mydoom infected files. I did notice that using the attachment filter will not catch some attachment that seem to be embedded in the email. So for added measure I have also included the known file names in the keyword filter and have had pretty good luck on chatching about 80% of the remaining Mydoom files.

Still waiting for the Corpus db to build up.

So far this build looks good.

Great work Logsat on getting the attachment filter up so soon.

We have released to the public the beta for the new version of SpamFilter ISP v2.0.0.282. This release features statistical DNA fingerprinting of emails, which should allow greater accuracy in fighting SPAM.

The beta can be obtained from SpamFilter's download page at http://www.logsat.com/sfi-download.asp.

This version fixes pending crashes and introduces new attachment filtering. Emails can now be rejected based on filenames in the attachments.

Roberto F.
LogSat Software