Why does it NOT filter out *.eml? |
Post Reply 
|
| Author | |
Stupid 
Guest Group 
|
 Post Options
 Thanks(0)
 Quote Reply
 Topic: Why does it NOT filter out *.eml?Posted: 07 February 2005 at 11:07am |
|
I setup all the attachment filters. *.eml is in there too, but a user just received an email with *.eml attachment within which there are a few other files. Why does the Spamfilter not filter our *.eml? It does its work on all other file types. |
|
 |
|
|
LogSat
Admin Group 
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 07 February 2005 at 5:30pm |
|
SpamFilter will only stop attachments in the body of the email. If an
email has an attached message which in turn has another attachments,
the second level attachment will not be detected. Could you either post
or email us the full headers of the email that was allowed thru, along
with a copy of SpamFilter's logfile for that day (or better, just the
relevant section at arounf the time this happened) so we can try to
find out what happened?
|
|
|
|
|
chinabee
Groupie 
Joined: 07 February 2005 Status: Offline Points: 50 |
Post Options
Thanks(0)
Quote Reply
Posted: 08 February 2005 at 9:57am |
|
Header: Microsoft Mail Internet Headers Version 2.0 --0-415394763-1107873811=:4989 --0-248409919-1107873811=:4989 --0-248409919-1107873811=:4989
Received: from [66.32.48.192] by web12108.mail.earthlink.com via HTTP; Mon, 13 Dec 2004 09:06:34 PST MIME-Version: 1.0 --0-985010455-1102957593=:62891 --0-985010455-1102957593=:62891
--0-415394763-1107873811=:4989-- Logfile 02/08/05 09:43:40:057 -- (2268) Connection from: 68.142.200.103 - Originating country : United States
|
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 08 February 2005 at 11:55pm |
|
From you headers we did not see any *.eml attachments. Usually attachments are in the form:
------=_NextPart_000_001A_01C31BA7.813E2D90 Content-Type: application/pdf; name="print job.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="print job.pdf" Can you check the rest of the email's source to see if you spot the eml file name somewhere else? Please note that again SpamFilter will not recurse thru the messages if the "outer" message has other messages attached to it. |
|
|
|
|
chinabee
Groupie
Joined: 07 February 2005 Status: Offline Points: 50 |
Post Options
Thanks(0)
Quote Reply
Posted: 09 February 2005 at 10:00am |
|
I know that, but those eml attachments do appear as attachments in Outlook. I am actually using the Spamfilter as a antivirus tool. I have it drop every type of attachment that can possibly carry virus. In this case, the eml attachment was not seen by the SpamFilter. As you said, it does not appear as an attachment. This is not really a big problem for me as I have antivirus for gateway sitting behind the Spamfilter to scan inside every email. It just supprised me that it did not do what i think it should do. |
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 09 February 2005 at 1:47pm |
|
If you can zip us the original email (full source and headers) at support@logsat.com we can try to see if we spot a problem.
|
|
|
|
|
chinabee
Groupie
Joined: 07 February 2005 Status: Offline Points: 50 |
Post Options
Thanks(0)
Quote Reply
Posted: 11 February 2005 at 11:03am |
|
You can do that yourself. Just go to Yahoo Mail and forward any email to another email address. I actually pasted everything from that email here. |
|
|
|
|
Desperado
Senior Member 
Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
Post Options
Thanks(0)
Quote Reply
Posted: 11 February 2005 at 11:58am |
|
This is interesting because I had to REMOVE *.eml from my blocked attachment list because it WAS blocking a lot of forwards from services like hotmail. Dan S. |
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 11 February 2005 at 4:17pm |
|
As I mentioned before, please look at the source carefully. There is
*no* email attachment with the extension .eml in the email from yahoo
if sent as you described. The attachment is simply an inline MIME
content, of type "message/rfc822".
If you receive such a message with Outlook Express, it is *Outlook* that converts the MIME attachment into an eml attachment so Outlook itself can read it. If youhad tried using Microsoft Outlook (not Outlook Express) you would have seen that the attachment is not at an eml, but somehting else. Other email clients will massage inline messages in different ways. |
|
|
|
Topic Options|
Post Reply
|
|
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.152 seconds.