TNEF playing up again

[Alex Neuman]

Didn't read this before I posted. I'll be copying and pasting immediately!

Thanks...

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Leonard Hermens
Sent: Wednesday, April 14, 2004 9:59 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: TNEF playing up again


Hi,

Perhaps I am misunderstanding what you want, but I have a the following in
/etc/MailScanner/filename.rules.conf

deny    \winmail.dat$   Unwanted TNEF
                         WINMAIL.DAT files are not accepted at our company.
Please see Microsoft support bulletin 241538 for how to configure your email
client or server to send properly formatted email to the Internet. (Turn off
TNEF) Here is how Outlook users can turn off TNEF: 1) On the Tools menu,
click Options, and then click the Mail Format tab.  2) In the Send in this
message format list, select Plain Text or HTML, and then click OK.

This is on our border scanner, so we only trap outsiders sending into us.
However, the application of a rule should handle the internal case, I
suspect.

-- Leonard

At 05:57 PM 4/14/2004, Pete wrote:
>Mate when you figure it out i want to know too. Its a great idea - i 
>want to bounce all these to offending winmail.dat senders.
>
>I am still trying to figure out how to silently drop the attachments 
>without warnjing my own users - can i do a combination of this and 
>notify the senders with a custom tnef related message?
>
>
>William Burns wrote:
>
>>Pete:
>>
>>That's a good link...
>>How do I get MailScanner to send links like that to offending TNEF 
>>users?
>>
>>If there were a separate TNEF message, I could just modify it. But... 
>>All I notice is messages that look like this:
>>
>>>The following e-mail messages were found to have viruses in them:
>>>
>>>    Sender: XXXXXXX
>>>IP Address: 193.108.72.32
>>>Recipient: XXXXXXX
>>>   Subject: Memo:  Re:
>>>MessageID: i3EDUL0V022528
>>>    Report: Could not parse Outlook Rich Text attachment
>>The fact that a generic virus report is being used makes me think that 
>>I have no control over the rest of the content of this message. (when 
>>a TNEF isn't parsed)
>>Also: am I scaring TNEF users into thinking that they've got viruses?
>>
>>I could go to the reports/en/languages.conf file and change the 
>>BadTNEF line... Is that the right way to go, or will MailScanner have 
>>trouble w/ me cramming an extended explanation, and multiple HTTP 
>>links in there?
>>
>>Here are other links I like to send:
>>Configuring Mail Clients to Send Plain ASCII Text 
>>http://expita.com/nomime.html http://www.employees.org/~lwood/outlook/
>>http://www.kellogg.northwestern.edu/kis/docs/howto/software/email/outlook/
HTMLconfig.htm
>>
>>http://support.microsoft.com/default.aspx?scid=kb;en-us;278061
>>
>>-Bill
>>
>>Pete wrote:
>>
>>>I researched this for our parent company who were also being 
>>>massively inconsiderate, sending the whole world winmail.dat all the 
>>>time.
>>>
>>>Turn it off for all mail that is addressed outside your network, this 
>>>is a global change - isnt this a fair compromise, use it all they 
>>>like internally and not at all externally.
>>>
>>>http://support.microsoft.com/default.aspx?scid=http://support.microso
>>>ft.com:80/support/kb/articles/Q241/5/38.ASP&NoWebContent=1&NoWebConte
>>>nt=1
>>
>>
>>
>>
>>
>>

--
Leonard Hermens
Manager, Information Systems Security
Potlatch Corporation
805 Mill Road, Lewiston, ID 83501
Voice:  208.799.2031
Leonard.Hermens at potlatchcorp.com
http://www.potlatchcorp.com/