Print Page | Close Window

New Beta version 2.0.0.282 is available - with attachment filtering

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=2762
Printed Date: 01 July 2025 at 11:44pm


Topic: New Beta version 2.0.0.282 is available - with attachment filtering
Posted By: LogSat
Subject: New Beta version 2.0.0.282 is available - with attachment filtering
Date Posted: 27 January 2004 at 10:43pm

We have released to the public the beta for the new version of SpamFilter ISP v2.0.0.282. This release features statistical DNA fingerprinting of emails, which should allow greater accuracy in fighting SPAM.

The beta can be obtained from SpamFilter's download page at http://www.logsat.com/sfi-download.asp" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://www.logsat.com/sfi-download.asp" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://www.logsat.com/sfi-download.asp" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://www.logsat.com/sfi-download.asp" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://www.logsat.com/sfi-download.asp .

This version fixes pending crashes and introduces new attachment filtering. Emails can now be rejected based on filenames in the attachments.

Roberto F.
LogSat Software


Replies:
Posted By: Guests
Date Posted: 28 January 2004 at 2:30am

So far so good. The new attachment filter is catching 90% of the Mydoom infected files. I did notice that using the attachment filter will not catch some attachment that seem to be embedded in the email. So for added measure I have also included the known file names in the keyword filter and have had pretty good luck on chatching about 80% of the remaining Mydoom files.

Still waiting for the Corpus db to build up.

So far this build looks good.

 

Great work Logsat on getting the attachment filter up so soon.

Posted By: Guests
Date Posted: 28 January 2004 at 1:55pm

I'll second George's "Great Job Logsat" comment... your response on issues like this is tremendous!  This will allow us to stop these messages at the front-end gateway, which is a real benefit.

One minor issue... when I first enabled the attachment filter on a test server, I checked the "do not quarantine messages" checkbox.  Messages with prohibited attachments were still being added to the quarantine.  I tried the setting both checked and unchecked, and messages were being added to the quarantine either way.

Since we DO want to quarantine these messages on our "real" email, it will work fine for us; it was just something I noticed in test and figured you would want to know.

Posted By: Guests
Date Posted: 28 January 2004 at 5:38pm

The problem with the attachment filter quarantining what it is set to not quarantine looks like it is because when an attachment is found it is counted as a keyword found. Since I am still building the corpus file I am still quarantining keywords so I cannot try to see if the attachments are dropped when keywords are not quarantined. I'll try later today and see if that fixes the problem.

 

g

Posted By: Guests
Date Posted: 28 January 2004 at 5:48pm

Follow-up on the attachment filtering feature. I just tried turning off the keyword quarantine and if you don't quarantine keywords then the attachments emails are not quarantined also.

 

g

Posted By: LogSat
Date Posted: 28 January 2004 at 10:51pm

Thanks for the report Jim. We were actually already aware of the problem before releasing the beta, but choose to make the beta public anyways since this could have helped users in reducing the harm by the latest strands of viruses these days.

We'll try to have that fixed soon.

Roberto F.
LogSat Software

Posted By: LogSat
Date Posted: 28 January 2004 at 10:53pm

George,

First of all thanks for the report! As I just replied to Jim on this same thread, we were actually already aware of the problem before releasing the beta, but choose to make the beta public anyways since this could have helped users in reducing the harm by the latest strands of viruses these days.

We'll try to have that fixed soon. Right now as you noticed the keywords' quarantine box is the one (erraneously) controlling the attachment rule..

Roberto F.
LogSat Software

Posted By: kspare
Date Posted: 29 January 2004 at 9:03am

Hi Roberto, I have a bug to report.

When I click to not quaruntine keywords and file attachments. Nothing gets put in. I have watched spamfilter catch emails that meet other filters IE. Email TO and Email From black list, spamfilter says it will quaruntine the message, but it never makes it.

I am running on windows 2000 server, using sql 2000 on a seperate server and running the latest beta.

Kevin

Posted By: Guests
Date Posted: 01 February 2004 at 2:05am
How about a new bounce message for attachments?

Posted By: LogSat
Date Posted: 01 February 2004 at 10:22am

Thanks for the report Kevin. We were actually already aware of the problem before releasing the beta, but choose to make the beta public anyways since this could have helped users in reducing the harm by the latest strands of viruses these days.

We'll try to have that fixed soon.

Roberto F.
LogSat Software


Print Page | Close Window