Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 24 replies
  • Subscribers 0 subscribers
  • Views 13528 views
  • Users 0 members are here
Options
Suggested

[7.950][BUG][OPEN] Email blocked-pop3 proxy

wingman
Hi All

I have whitelisted a specific address (pic attached,however,email are still caught as spam  and I have to release them every time?(pic and log attached) 

2010:06:19-10:05:21 *** pop3proxy[8894]: id="1101" severity="info" sys="SecureMail" sub="pop3" name="email quarantined" from="amazon-offers@amazon.co.uk" to="****@****.gr" subject="Amazon.co.uk recommends %22Strategy and Human Resource Management (Management, Work and Organisations)%22 and more" size="89099" srcip="87.238.85.54" dstip="95.154.193.105" uid="UID6990-1247993708" ident="0/8894-1-1276938320" reason="exp" extra="save.*(%25|percent)"


I thought the whitelist access takes priority against expressions 

Thanks
Parents
  • 0
    SAME ISSUE

    2010:06:23-11:07:59 ***pop3proxy[17733]: id="1101" severity="info" sys="SecureMail" sub="pop3" name="email quarantined" from="store-news@amazon.com" to="***@****.gr" subject="Amazon.com: Free Shipping & Free Returns on The Most Flattering Jeans" size="54622" srcip="207.171.174.143" dstip="******" uid="UID7018-1247993708" ident="0/17733-78-1277287678" reason="exp" extra="save.*(%25|percent)"
    2010:06:23-11:08:32 **** pop3proxy[17733]: id="1101" severity="info" sys="SecureMail" sub="pop3" name="email quarantined" from="***@****.gr" to="***@***.gr" subject="Fwd: Leaving Drinks" size="9790" srcip="0.0.0.0" dstip="******" uid="UID7094-1247993708" ident="0/17733-154-1277287712" reason="as" extra="confirmed"



    The second line of log is when i sent an email to myself


    on the case below I've got two email from the same sender sent to the same account. One of the is blocked and the other it's not

    2010:06:23-11:37:02 ****  pop3proxy[20188]: id="1101" severity="info" sys="SecureMail" sub="pop3" name="email quarantined" from="info@windowsnetworking.com" to="****@****.us" subject="WindowsNetworking.com - Deploying Windows 7 - Part 26: Managing Drivers â€“ By Make and Model" size="29377" srcip="64.38.52.82" dstip="212.227.17.187" uid="96870ed76911614c9152ab6bbfdc7450" ident="0/20188-10-1277289421" reason="as"
    2010:06:23-11:37:00 ****  pop3proxy[20188]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="info@windowsnetworking.com" to="****@****.us" subject="WindowsNetworking.com - â€œUnder the Hood” of Group Policy" size="29179" srcip="64.38.52.82" dstip="212.227.17.187" uid="a53b04bffb57567f550e6cf3c2721b4a" ident="0/20188-7-1277289419"
Reply
  • 0
    SAME ISSUE

    2010:06:23-11:07:59 ***pop3proxy[17733]: id="1101" severity="info" sys="SecureMail" sub="pop3" name="email quarantined" from="store-news@amazon.com" to="***@****.gr" subject="Amazon.com: Free Shipping & Free Returns on The Most Flattering Jeans" size="54622" srcip="207.171.174.143" dstip="******" uid="UID7018-1247993708" ident="0/17733-78-1277287678" reason="exp" extra="save.*(%25|percent)"
    2010:06:23-11:08:32 **** pop3proxy[17733]: id="1101" severity="info" sys="SecureMail" sub="pop3" name="email quarantined" from="***@****.gr" to="***@***.gr" subject="Fwd: Leaving Drinks" size="9790" srcip="0.0.0.0" dstip="******" uid="UID7094-1247993708" ident="0/17733-154-1277287712" reason="as" extra="confirmed"



    The second line of log is when i sent an email to myself


    on the case below I've got two email from the same sender sent to the same account. One of the is blocked and the other it's not

    2010:06:23-11:37:02 ****  pop3proxy[20188]: id="1101" severity="info" sys="SecureMail" sub="pop3" name="email quarantined" from="info@windowsnetworking.com" to="****@****.us" subject="WindowsNetworking.com - Deploying Windows 7 - Part 26: Managing Drivers â€“ By Make and Model" size="29377" srcip="64.38.52.82" dstip="212.227.17.187" uid="96870ed76911614c9152ab6bbfdc7450" ident="0/20188-10-1277289421" reason="as"
    2010:06:23-11:37:00 ****  pop3proxy[20188]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="info@windowsnetworking.com" to="****@****.us" subject="WindowsNetworking.com - â€œUnder the Hood” of Group Policy" size="29179" srcip="64.38.52.82" dstip="212.227.17.187" uid="a53b04bffb57567f550e6cf3c2721b4a" ident="0/20188-7-1277289419"
Children
No Data
Unfiltered HTML