Spam Filter ISP Forums : Why does it NOT filter out *.eml? https://www.logsat.com/spamfilter/forums/ Sun, 07 Jun 2026 18:54:54 +0000 Fri, 11 Feb 2005 16:17:58 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=5048 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[Why does it NOT filter out *.eml? : As I mentioned before, please...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5186&title=why-does-it-not-filter-out-eml#5186 Author: LogSat
Subject: 5048
Posted: 11 February 2005 at 4:17pm

As I mentioned before, please look at the source carefully. There is*no* email attachment with the extension .eml in the email from yahooif sent as you described. The attachment is simply an inline MIMEcontent, of type "message/rfc822".

If you receive such a message with Outlook Express, it is *Outlook*that converts the MIME attachment into an eml attachment so Outlookitself can read it. If youhad tried using Microsoft Outlook (notOutlook Express) you would have seen that the attachment is not at aneml, but somehting else. Other email clients will massage inlinemessages in different ways.
]]> Fri, 11 Feb 2005 16:17:58 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5186&title=why-does-it-not-filter-out-eml#5186 <![CDATA[Why does it NOT filter out *.eml? : This is interesting because I...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5184&title=why-does-it-not-filter-out-eml#5184 Author: Desperado
Subject: 5048
Posted: 11 February 2005 at 11:58am

This is interesting because I had to REMOVE *.eml from my blocked attachment list because it WAS blocking a lot of forwards from services like hotmail.

Dan S.

]]> Fri, 11 Feb 2005 11:58:54 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5184&title=why-does-it-not-filter-out-eml#5184 <![CDATA[Why does it NOT filter out *.eml? : You can do that yourself. Just...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5183&title=why-does-it-not-filter-out-eml#5183 Author: chinabee
Subject: 5048
Posted: 11 February 2005 at 11:03am

You can do that yourself. Just go to Yahoo Mail and forward any email to another email address.

I actually pasted everything from that email here.

]]> Fri, 11 Feb 2005 11:03:44 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5183&title=why-does-it-not-filter-out-eml#5183 <![CDATA[Why does it NOT filter out *.eml? : If you can zip us the original...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5174&title=why-does-it-not-filter-out-eml#5174 Author: LogSat
Subject: 5048
Posted: 09 February 2005 at 1:47pm

If you can zip us the original email (full source and headers) at support@logsat.com we can try to see if we spot a problem.]]> Wed, 09 Feb 2005 13:47:42 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5174&title=why-does-it-not-filter-out-eml#5174 <![CDATA[Why does it NOT filter out *.eml? : I know that, but those eml attachments...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5172&title=why-does-it-not-filter-out-eml#5172 Author: chinabee
Subject: 5048
Posted: 09 February 2005 at 10:00am

I know that, but those eml attachments do appear as attachments in Outlook.

I am actually using the Spamfilter as a antivirus tool. I have it drop every type of attachment that can possibly carry virus. In this case, the eml attachment was not seen by the SpamFilter. As you said, it does not appear as an attachment.

This is not really a big problem for me as I have antivirus for gateway sitting behind the Spamfilter to scan inside every email. It just supprised me that it did not do what i think it should do.

]]> Wed, 09 Feb 2005 10:00:22 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5172&title=why-does-it-not-filter-out-eml#5172 <![CDATA[Why does it NOT filter out *.eml? : From you headers we did not see...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5171&title=why-does-it-not-filter-out-eml#5171 Author: LogSat
Subject: 5048
Posted: 08 February 2005 at 11:55pm

From you headers we did not see any *.eml attachments. Usually attachments are in the form:

------=_NextPart_000_001A_01C31BA7.813E2D90
Content-Type: application/pdf;
    name="print job.pdf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
    filename="print job.pdf"


Can you check the rest of the email's source to see if you spot the emlfile name somewhere else? Please note that again SpamFilter will notrecurse thru the messages if the "outer" message has other messagesattached to it.
]]> Tue, 08 Feb 2005 23:55:33 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5171&title=why-does-it-not-filter-out-eml#5171 <![CDATA[Why does it NOT filter out *.eml? : Header: Microsoft Mail Internet...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5167&title=why-does-it-not-filter-out-eml#5167 Author: chinabee
Subject: 5048
Posted: 08 February 2005 at 9:57am

Header:

Microsoft Mail Internet Headers Version 2.0
Received: from smtp.mycompany.com ([172.11.13.84]) by houston1.mycompany.com with Microsoft SMTPSVC(5.0.2195.6713);
  Tue, 8 Feb 2005 08:43:42 -0600
Received: from brantford01.mycompany.com ([172.11.1.80])
 by smtp.mycompany.com (SAVSMTP 3.0.0.44) with SMTP id M2005020808434118662
 for <don@mycompany.com>; Tue, 08 Feb 2005 08:43:41 -0600
Received: (from webmail [172.11.1.200])
 by brantford01.mycompany.com (SMSSMTP 4.0.0.59) with SMTP id M2005020809370413191
 for <don@mycompany.com>; Tue, 08 Feb 2005 09:37:04 -0500
Received: from 68.142.200.103 by  (LogSat Software SMTP Server) Tue, 8 Feb 2005 09:43:41 -0500
Received: (qmail 5074 invoked by uid 60001); 8 Feb 2005 14:43:31 -0000
Comment: DomainKeys? See http://antispam.earthlink.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=earthlink.com;
  b=xouZf+ta1XiQJwy9DYgH5lcP6SUSJd+pI2ZgYGFVdnUCMQyba/jTXhKHKR k2x0x6hrwtNVHCg2ifpunXwZYYwYC20Z9DC9vPDlFaHZu7omoumYiNcaQMXR nz6WePBNvlV2hGLCf/09GMbLGDVuPDZKMzM4E+9nePw3EKlaQun5k=  ;
Message-ID: <20050208144331.5072.qmail@web30310.mail.mud.earthlink.com>
Received: from [13.119.22.244] by web30310.mail.mud.earthlink.com via HTTP; Tue, 08 Feb 2005 06:43:31 PST
Date: Tue, 8 Feb 2005 06:43:31 -0800 (PST)
From: Chinabee <chinabee@earthlink.com>
Reply-To: chinabee@earthlink.com
Subject: test attached email
To: don@mycompany.com
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-415394763-1107873811=:4989"
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <chinabee@earthlink.com>
Return-Path: chinabee@earthlink.com
X-OriginalArrivalTime: 08 Feb 2005 14:43:42.0250 (UTC) FILETIME=[958E48A0:01C50DEC]

--0-415394763-1107873811=:4989
Content-Type: multipart/alternative; boundary="0-248409919-1107873811=:4989"

--0-248409919-1107873811=:4989
Content-Type: text/plain; charset=us-ascii

--0-248409919-1107873811=:4989
Content-Type: text/html; charset=us-ascii


--0-248409919-1107873811=:4989--
--0-415394763-1107873811=:4989
Content-Type: message/rfc822

Received: from [66.32.48.192] by web12108.mail.earthlink.com via HTTP; Mon, 13 Dec 2004 09:06:34 PST
Date: Mon, 13 Dec 2004 09:06:33 -0800 (PST)
From: Chinabee <chinabee@earthlink.com>
Reply-To: chinabee@earthlink.com
Subject: Legality of Self-defense at Home
To: prashantmalik@dogmail.com, suhrid@earthlink.com,

MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-985010455-1102957593=:62891"
Content-Length: 792

--0-985010455-1102957593=:62891
Content-Type: text/plain; charset=us-ascii

--0-985010455-1102957593=:62891
Content-Type: text/html; charset=us-ascii


--0-985010455-1102957593=:62891--

--0-415394763-1107873811=:4989--
------------------------------------------------------------ -----

Logfile

02/08/05 09:43:40:057 -- (2268) Connection from: 68.142.200.103  -  Originating country : United States
02/08/05 09:43:40:369 -- (2268) Resolving 68.142.200.103 - web30310.mail.mud.earthlink.com
02/08/05 09:43:40:541 -- (2268) Mail from: chinabee@earthlink.com
02/08/05 09:43:40:963 -- (2268) - MAPS search done...
02/08/05 09:43:40:963 -- (2268) RCPT TO: don@mycompany.com accepted
02/08/05 09:43:41:197 -- (2268) EMail from chinabee@earthlink.com to don@mycompany.com passes Bayesian filter - 0% spam  (16ms)
02/08/05 09:43:41:213 -- (2268) EMail from chinabee@earthlink.com to don@mycompany.com was queued. Size: 2 KB, 2048 bytes
02/08/05 09:43:41:213 -- (2208) Sending email from chinabee@earthlink.com to don@mycompany.com
02/08/05 09:43:41:260 -- (1456) Time to add Msg to Bayes corpus:0
02/08/05 09:43:41:322 -- (2268) Disconnect
02/08/05 09:43:41:572 -- (2208) EMail from chinabee@earthlink.com to don@mycompany.com  was forwarded to 172.11.1.80:25

 

]]> Tue, 08 Feb 2005 09:57:59 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5167&title=why-does-it-not-filter-out-eml#5167 <![CDATA[Why does it NOT filter out *.eml? : SpamFilter will only stop attachments...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5158&title=why-does-it-not-filter-out-eml#5158 Author: LogSat
Subject: 5048
Posted: 07 February 2005 at 5:30pm

SpamFilter will only stop attachments in the body of the email. If anemail has an attached message which in turn has another attachments,the second level attachment will not be detected. Could you either postor email us the full headers of the email that was allowed thru, alongwith a copy of SpamFilter's logfile for that day (or better, just therelevant section at arounf the time this happened) so we can try tofind out what happened?]]> Mon, 07 Feb 2005 17:30:38 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5158&title=why-does-it-not-filter-out-eml#5158 <![CDATA[Why does it NOT filter out *.eml? : I setup all the attachment filters....]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5150&title=why-does-it-not-filter-out-eml#5150 Author: Guests
Subject: 5048
Posted: 07 February 2005 at 11:07am

I setup all the attachment filters. *.eml is in there too, but a user just received an email with *.eml attachment within which there are a few other files.

Why does the Spamfilter not filter our *.eml? It does its work on all other file types.

]]> Mon, 07 Feb 2005 11:07:37 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5048&PID=5150&title=why-does-it-not-filter-out-eml#5150