[8.065][BUG][OPEN] Mail quarantine releases spam

Hi,
Since building the v8b ASG my spam e-mail notification has started working again along with capturing spam, this is good.

This morning I received the daily spam report, also good. Then while reviewing my e-mail, suddenly the actual spam messages appeared in my inbox without me releasing them.

Some messages are from today and others are a couple of days old.

The quarantine report in the ASG still shows the messages as being held.

My PC is a windows 7 64 bit running MS Office 2010.

Ian M

0 Astaro Beta Bot over 14 years ago

Astaro Beta Report
--------------------------------
Version: 8.065
Type: BUG
State: OPEN
Reporter: RFCat_vk+
Contributor: 
MantisID: 
Target version: 
Fixed in version: 
--------------------------------

0 RFCat_vk_01 over 14 years ago in reply to Astaro Beta Bot

Hi,
the quarantined e-mail release happened again today. It happens just after the afternoon quarantine report arrives.

Both times I have been connected through a juniper tunnel to work. Under the previous ASG configuration I could use e-mail through the local connection while connected via a tunnel to work. This current configuration allows me to receive e-mail but not send any.

Ian M
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mle over 14 years ago
Hi Ian,

Can you please look in the "HTTP daemon" log what client IP address triggered the Spam release? If something requested the release of a spam this logfile should contain lines like the following:
2010:11:15-10:49:37 yourasg httpd: 192.168.1.1 - - [15/Nov/2010:10:49:33 +0100] "GET /release.plc?proto=smtp&cluster_id=0&message_id=13He0O-0000af-01&size=24&whitelist=0 HTTP/1.1" 200 388

Regards,
mlenk
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 14 years ago in reply to mle

Hi mlenk,
that file only has entries from when I logged into the webadmin to investigate your request, nothing prior to that.

Ian M
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mle over 14 years ago
Hi Ian,

do you have something like the following in your SMTP proxy log?
for 2010:11:15-12:22:10 yourasg smtpd[6347]: MASTER[6347]: Action: releasing 13jXYe-0005Bf-01 from 'quarantine'

Can you send me the complete logfiles smtp.log and httpd.log from the affected ASG?

Regards,
mlenk
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 14 years ago in reply to mle

Hi mlenk,
sent you a PM.

Regards

Ian M[[[[:)]]]][[[[:)]]]][[[[:)]]]][[[[:)]]]]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mle over 14 years ago

Hi Ian,
I've responded your PM. Now waiting for logfiles.

Regards,
mlenk
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 14 years ago in reply to mle

Hi mlenk,
happened again tonight. All the spam addressed to me was released as I started a secure session with work.

Ian M
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mle over 14 years ago

Hi Ian,

then again: Please send me the smtp.log and the httpd.log of today and yesterday.

What do you use to "start a secured session with work"?

Regards,
mlenk
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 14 years ago in reply to mle

Hi mlenk,
a secure session to work can be started in either IE or FF. It is a juniper based security system.

The files have been sent via e-mail.

Regards

Ian M
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

[8.065][BUG][OPEN] Mail quarantine releases spam

Submitted a Tech Support Case lately from the Support Portal?