Sophos issues

Julian Field mailscanner at ecs.soton.ac.uk
Wed Jan 29 16:24:59 GMT 2003


At 16:04 29/01/2003, you wrote:
>Le mer 29/01/2003 à 10:34, Didier Belhomme a écrit :
>>
>>At 10:14 29/01/2003 -0500, you wrote:
>> >No.  The sender's PC.
>> >
>> > > > X-MSMail-Priority: Normal
>> > > > X-Mailer: Microsoft Outlook, Build 10.0.4024
>> > >
>> > > They're certainly using Outlook!
>> >
>> >I agree but this shouldn't be held against him.
>>
>>The problem is perhaps that Outlook create a winmail.dat attachment which
>>is rejected by MS. If it's the case, do you found something in the logs ? I
>>suspect the winmail.dat to be rejected by MS because of wrong return code
>>of the Sophos sweep.
>
>Could Outlook be sending the message twice?  Once in plain text for me and 
>a second one for the sender in a winmail.dat?

 From what you have posted below, it certainly looks as if it is doing 
exactly that.
"Curiouser and curiouser" cried Alice!
(If that makes no sense, read Alice In Wonderland :-)


>It looks like it in my maillog:
>Jan 28 15:59:59 smtp2 sendmail[10556]: h0SKxwK10556: 
>from=<andre.fredette at USherbrooke.ca>, size=1096963, class=0, nrcpts=1, 
>msgid=<000c01c2c710$36dc8120$12b4d28
>4 at STI106>, proto=ESMTP, daemon=MTA, relay=[132.210.180.18]
>Jan 28 15:59:59 smtp2 sendmail[10556]: h0SKxwK10556: 
>to=<Denis.Beauchemin at USherbrooke.ca>, delay=00:00:01, mailer=relay, 
>pri=1126963, stat=queued
>Jan 28 16:00:00 smtp2 sendmail[10558]: h0SKxxK10558: 
>from=<andre.fredette at USherbrooke.ca>, size=1112905, class=0, nrcpts=1, 
>msgid=<001201c2c710$37727f90$12b4d28
>4 at STI106>, proto=ESMTP, daemon=MTA, relay=[132.210.180.18]
>Jan 28 16:00:00 smtp2 sendmail[10558]: h0SKxxK10558: 
>to=<Andre.Fredette at USherbrooke.ca>, delay=00:00:01, mailer=relay, 
>pri=1142905, stat=queued
>This is confirmed by the 2 emails that don't have the same ID:
>Received: from STI106 ([132.210.180.18]) by smtp2.usherbrooke.ca
>         (8.11.6/8.11.6) with ESMTP id h0SKxwK10556 for
>         <Denis.Beauchemin at USherbrooke.ca>; Tue, 28 Jan 2003 15:59:58 -0500
>
>Received: from STI106 ([132.210.180.18])
>         by smtp2.usherbrooke.ca (8.11.6/8.11.6) with ESMTP id h0SKxxK10558
>         for <Andre.Fredette at USherbrooke.ca>; Tue, 28 Jan 2003 15:59:59 -0500
>
>What a stupid program!
>
>Denis
>
>
>
>
>--
>Denis Beauchemin, analyste
>Université de Sherbrooke, S.T.I.
>T: 819.821.8000x2252 F: 819.821.8045

-- 
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20030129/007204a1/attachment.html


More information about the MailScanner mailing list