Menu
▾
▴
Re: [Assp-user] Antwort: Re: Get recipient email address from File Scan Command??
|
From: Nick M. <ni...@my...> - 2013-06-27 15:49:06
|
Thanks Thomas...
Installed ASSP_AFC plugin, enabled it with the action 'Do ClamAV and
FileScan', but where I was previously seeing copies of every email in the
virusscan folder and the external script was being successfully run, there's
no such activity now. The logs say 'calling plugin ASSP_AFC', but no other
mention of the scan.
Am I missing something obvious?
Thanks for your continued help.
Nick
-----Original Message-----
From: Thomas Eckardt [mailto:Tho...@th...]
Sent: 26 June 2013 17:39
To: For Users of ASSP
Subject: [Assp-user] Antwort: Re: Get recipient email address from File Scan
Command??
use the ASSP_AFC Plugin !
Thomas
Von: "Nick Marshall" <ni...@my...>
An: <ass...@li...>,
Datum: 26.06.2013 13:09
Betreff: Re: [Assp-user] Get recipient email address from File Scan
Command??
Hello,
Those updates to the code worked well, thank you.
I've been doing some further testing today with identifying viruses through
the file-system/external-scanner using ASSP2, and from what I can see during
the testing the 'ClamAVBytes' (for filescan) setting is not functioning as I
would expect. No matter what I set this to, the same email files in the
'virusscan' directory are truncated at the same point. I can put in 5000 or
5000000 and still get the same file cut-off point.
Is there another setting I'm missing, or is this perhaps an issue?
Thanks again,
Nick
-----Original Message-----
From: Thomas Eckardt [mailto:Tho...@th...]
Sent: 25 June 2013 05:27
To: For Users of ASSP
Subject: Re: [Assp-user] Get recipient email address from File Scan
Command??
I'm sorry - correct:
to get $this->{rcpt} you'll have to write *rcpt* to get $this->{mailfrom}
(the envelope sender) you'll have to write
*mailfrom*
Thomas
Von: Thomas Eckardt <Tho...@th...>
An: For Users of ASSP <ass...@li...>,
Datum: 25.06.2013 06:24
Betreff: [Assp-user] Antwort: Re: Get recipient email address from
File Scan Command??
>Can I ask, if $this->{rcpt} is the recipient, what's the variable for
>the
envelope sender/s?
$this->{rcpt} is the envelope recipient - as I wrote:
> the literal RCPT will then be replaced by the space separated list of
all
> envelope recipients surrounded by single quotes - like:
>
> 'us...@do... us...@do... us...@do...'
> or simply
> 'us...@do...'
>Is this something that might appear in future revisions of ASSP2?
$cmd =~ s/\*([a-zA-Z0-9\_\-]+)\*/$sep . $this->{$1} .
$sep/oge;
will be used - were $sep is a single quote on nix systems and a double quote
on windows systems the literal will be case sensitive, to get $this->{rcpt}
you'll have to write rcpt to get $this->{mailfrom} (the envelope sender)
you'll have to write mailfrom
I just test the changes for the next release.
Thomas
Von: Nick Marshall <ni...@my...>
An: For Users of ASSP <ass...@li...>,
Datum: 24.06.2013 22:21
Betreff: Re: [Assp-user] Get recipient email address from File Scan
Command??
Thanks Thomas, that's a great solution.
Can I ask, if $this->{rcpt} is the recipient, what's the variable for the
envelope sender/s?
Is this something that might appear in future revisions of ASSP2?
Many thanks
Nick
On 24 Jun 2013, at 18:32, Thomas Eckardt <Tho...@th...>
wrote:
>> Alternatively, is there a way to write the SMTP recipient address to
>> the headers before the file is written to the virusscan directory,
>> and then I can parse through the file and get it this way.
>
>
>> X-Assp-Intended-For: contains the envelope sender if
> AddIntendedForHeader is set.
>
> I don't think that our header is merged at file scan time in V1 nor V2
> -
> so 'X-Assp-Intended-For' is not available.
>
> Only if V2 is using the ASSP_AFC Plugin - all merged X-ASSP- headers
will
> be available - but the Plugin processes the mail MIME-part for
> MIME-part
> and there will be no MIME header available in the temp-scan-files.
>
>
> Nick,
>
> it would be easy to change the code to provide the information you
> requested. But the next user will possibly need some other or more
> information. I'll think about, how we can add an API or something
similar.
>
> For now you can change the code:
>
> look in to the 'sub FileScanOK_Run {' and find the sequence
>
> $cmd = "$FileScanCMD 2>&1";
> $cmd =~ s/FILENAME/$runfile/igo;
> $cmd =~ s/NUMBER/$WorkerNumber/igo;
> $cmd =~ s/FILESCANDIR/$rundir/igo;
> d("filescan: running - $cmd");
>
> change this to :
>
> $cmd = "$FileScanCMD 2>&1";
> $cmd =~ s/FILENAME/$runfile/igo;
> $cmd =~ s/NUMBER/$WorkerNumber/igo;
> $cmd =~ s/FILESCANDIR/$rundir/igo;
> $cmd =~ s/RCPT/"'".$this->{rcpt}."'"/igoe;
> d("filescan: running - $cmd");
>
> the literal RCPT will then be replaced by the space separated list of
all
> envelope recipients surrounded by single quotes - like:
>
> 'us...@do... us...@do... us...@do...'
> or simply
> 'us...@do...'
>
> Changing the code this way, will provide the requested information
> with and without using the ASSP_AFC Plugin.
>
> Thomas
>
>
>
>
>
>
> Von: "Fritz Borgstedt" <fb...@iw...>
> An: "For Users of ASSP" <ass...@li...>,
> Datum: 24.06.2013 18:55
> Betreff: Re: [Assp-user] Get recipient email address from File
Scan
> Command??
>
>
>
> For Users of ASSP <ass...@li...> schreibt:
>> Alternatively, is there a way to write the SMTP recipient address to
>> the headers before the file is written to the virusscan directory,
>> and then I can parse through the file and get it this way.
>
>
>
> X-Assp-Intended-For: contains the envelope sender if
> AddIntendedForHeader is set.
>
>
>
----------------------------------------------------------------------------
--
> This SF.net email is sponsored by Windows:
>
> Build for Windows Store.
>
> http://p.sf.net/sfu/windows-dev2dev
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential,
legally
> privileged and protected in law and are intended solely for the use of
the
>
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no
> known virus in this email!
> *******************************************************
>
>
>
----------------------------------------------------------------------------
--
> This SF.net email is sponsored by Windows:
>
> Build for Windows Store.
>
> http://p.sf.net/sfu/windows-dev2dev
> _______________________________________________
> Assp-user mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-user
______________________________________________
Giacom email security by www.messagestream.com
----------------------------------------------------------------------------
--
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
----------------------------------------------------------------------------
--
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
----------------------------------------------------------------------------
--
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
|