Clarification regarding "Content Modify Subject"

[Egil Fujikawa Nes - Webdeal AS]

Hi

I can’t see any reason to turn this off. For our customers it is
important to know if we have been removing attachments etc. that you
easily can see from the subject. This Outlook 2003 meeting request is a
problem with Mailscanner. It simply can’t scan trough the .msg file that
is attached. What I had to do to let this messages pass was to change
the “Deliver Unparsable TNEF” parameter in MailScanner.conf from no to
yes.

# Some versions of Microsoft Outlook generate unparsable Rich Text
# format attachments. Do we want to deliver these bad attachments
anyway?
# Setting this to yes introduces the slight risk of a virus getting
through,
# but if you have a lot of troubled Outlook users you might need to do
this.
# We are working on a replacement for the TNEF decoder.
# This can also be the filename of a ruleset.

As long as I can see, this is the only way to solve this problem with
Outlook 2003 meeting requests.

Best regards
Egil Fujikawa Nes

WebDeal AS - Teknologiveien 22 - 2815 Gjøvik - NORWAY

Phone: +47 61 13 16 50 - Fax: +47 61 13 16 51
E-mail: post at webdeal.no - URL: www.webdeal.no


-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
Behalf Of Mark Steudel
Sent: 1. april 2004 05:18
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Clarification regarding "Content Modify Subject"

I was wondering if someone could clarify for me the purpose for tagging
the
subject line for "Content Modify Subject". My first idea is that this
helps
keep up with new malicious code that has been updated to get around
virus
filtering.

--- config in question ----
# If an attachment triggered a content check, but there was nothing
# else wrong with the message, do you want to modify the subject line?
# This makes filtering in Outlook very easy.
# This can also be the filename of a ruleset.
Content Modify Subject = yes

# This is the text to add to the start of the subject if the
# "Content Modify Subject" option is set.
# You might want to change this so your users can see at a glance
# whether it just was just the content that MailScanner rejected.
# This can also be the filename of a ruleset.
Content Subject Text = {Blocked Content}

I see this randomly and I'm not sure what is triggering it. Recently I
got a
Outlook 2003 meeting request with a word document attached that
triggered
it.

What could potentially happen if I turned this off?
What are the benefits to having this on?


Thanks, Mark