Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - New Beta version 2.0.0.282 is available - with attachment filtering
  FAQ FAQ  Forum Search   Register Register  Login Login

New Beta version 2.0.0.282 is available - with attachment filtering

 Post Reply Post Reply
Author
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4105
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Topic: New Beta version 2.0.0.282 is available - with attachment filtering
    Posted: 27 January 2004 at 10:43pm

We have released to the public the beta for the new version of SpamFilter ISP v2.0.0.282. This release features statistical DNA fingerprinting of emails, which should allow greater accuracy in fighting SPAM.

The beta can be obtained from SpamFilter's download page at http://www.logsat.com/sfi-download.asp.

This version fixes pending crashes and introduces new attachment filtering. Emails can now be rejected based on filenames in the attachments.

Roberto F.
LogSat Software

Back to Top
George View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote George Quote  Post ReplyReply Direct Link To This Post Posted: 28 January 2004 at 2:30am

So far so good. The new attachment filter is catching 90% of the Mydoom infected files. I did notice that using the attachment filter will not catch some attachment that seem to be embedded in the email. So for added measure I have also included the known file names in the keyword filter and have had pretty good luck on chatching about 80% of the remaining Mydoom files.

Still waiting for the Corpus db to build up.

So far this build looks good.

 

Great work Logsat on getting the attachment filter up so soon.

Back to Top
JimMeredith View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote JimMeredith Quote  Post ReplyReply Direct Link To This Post Posted: 28 January 2004 at 1:55pm

I'll second George's "Great Job Logsat" comment... your response on issues like this is tremendous!  This will allow us to stop these messages at the front-end gateway, which is a real benefit.

One minor issue... when I first enabled the attachment filter on a test server, I checked the "do not quarantine messages" checkbox.  Messages with prohibited attachments were still being added to the quarantine.  I tried the setting both checked and unchecked, and messages were being added to the quarantine either way.

Since we DO want to quarantine these messages on our "real" email, it will work fine for us; it was just something I noticed in test and figured you would want to know.

Back to Top
George View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote George Quote  Post ReplyReply Direct Link To This Post Posted: 28 January 2004 at 5:38pm

The problem with the attachment filter quarantining what it is set to not quarantine looks like it is because when an attachment is found it is counted as a keyword found. Since I am still building the corpus file I am still quarantining keywords so I cannot try to see if the attachments are dropped when keywords are not quarantined. I'll try later today and see if that fixes the problem.

 

g

Back to Top
George View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote George Quote  Post ReplyReply Direct Link To This Post Posted: 28 January 2004 at 5:48pm

Follow-up on the attachment filtering feature. I just tried turning off the keyword quarantine and if you don't quarantine keywords then the attachments emails are not quarantined also.

 

g

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4105
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 28 January 2004 at 10:51pm

Thanks for the report Jim. We were actually already aware of the problem before releasing the beta, but choose to make the beta public anyways since this could have helped users in reducing the harm by the latest strands of viruses these days.

We'll try to have that fixed soon.

Roberto F.
LogSat Software

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4105
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 28 January 2004 at 10:53pm

George,

First of all thanks for the report! As I just replied to Jim on this same thread, we were actually already aware of the problem before releasing the beta, but choose to make the beta public anyways since this could have helped users in reducing the harm by the latest strands of viruses these days.

We'll try to have that fixed soon. Right now as you noticed the keywords' quarantine box is the one (erraneously) controlling the attachment rule..

Roberto F.
LogSat Software

Back to Top
kspare View Drop Down
Senior Member
Senior Member


Joined: 26 January 2005
Location: Canada
Status: Offline
Points: 334
Post Options Post Options   Thanks (0) Thanks(0)   Quote kspare Quote  Post ReplyReply Direct Link To This Post Posted: 29 January 2004 at 9:03am

Hi Roberto, I have a bug to report.

When I click to not quaruntine keywords and file attachments. Nothing gets put in. I have watched spamfilter catch emails that meet other filters IE. Email TO and Email From black list, spamfilter says it will quaruntine the message, but it never makes it.

I am running on windows 2000 server, using sql 2000 on a seperate server and running the latest beta.

Kevin

Back to Top
ASB View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote ASB Quote  Post ReplyReply Direct Link To This Post Posted: 01 February 2004 at 2:05am
How about a new bounce message for attachments?
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4105
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 01 February 2004 at 10:22am

Thanks for the report Kevin. We were actually already aware of the problem before releasing the beta, but choose to make the beta public anyways since this could have helped users in reducing the harm by the latest strands of viruses these days.

We'll try to have that fixed soon.

Roberto F.
LogSat Software

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.070 seconds.