Decompression problem

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

Decompression problem

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Web & Mail Security] >> GFI MailSecurity >> Decompression problem

Page: [1]

Message

<< Older Topic Newer Topic >>

Decompression problem - 18.Aug.2009 4:23:29 AM

techguy

Posts: 126
Joined: 7.Mar.2005
Status: offline

windows 2000 SP4 / MS and ME on the same server.

I've been getting this form throughout the day. How can I get rid of it? This email was forwarded to me. The server/ME/MS is at a remote location. So I couldn't delete.

Dear Administrator,

On the 18 August 2009 GFI MailSecurity quarantined the following item.

Item ID: 164
Highest Priority Module: Decompression
Subject: Delivery Status Notification (Failure)
From : <>
To: postmaster@xyz.com

Threats detected

Filename: postmaster+AEA-xyz.com - Character set not allowed (n/a) (n/a) - Delivery Status Notification (Failure).eml (39232B)
Decompression : Maximum level of recursion exceeded.

Please select from the following options: More details Approve Sanitize and Approve Delete Delete and Notify

< Message edited by techguy -- 18.Aug.2009 4:26:25 AM >

Post #: 1

RE: Decompression problem - 21.Aug.2009 2:26:48 AM

dkrueger

Posts: 90
Joined: 8.Jul.2009
Status: offline

techguy,

As it is listed in the notification this email was blocked by the "Decompression / Check for recursive archives" for the attached email (.eml). The filename suggests that the email itself is an NDR and the part "Character set not allowed (n/a) (n/a)" points towards MailEssentials. This tag is added to an email when the header checking module blocks an email due the language of the mail.

I think there are mails looping in your system. NDRs are bouncing back and forth each one adding a new attachment to the original mail. At some point the recursion level which you have configured in MailSecurity under "Decompression / Check for recursive archives" is hit.

Are you using the MailEssentials function to send back NDRs when an email is found to be spam? If so you might want to disable this within MailEssentials.

_____________________________

Dietmar
GFI Software
Blog-Twitter-YouTube-Facebook

(in reply to techguy)

Post #: 2