TNEF playing up again

[Julian Field]

At 06:11 15/04/2004, you wrote:
>So you could use a ruleset to apply this line to external mail and let
>internal mail use winmail.dat, right?

Correct. Use 2 different filename.rules.conf files and use a ruleset to
pick which file to use.


>-----Original Message-----
>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
>Of Leonard Hermens
>Sent: Wednesday, April 14, 2004 9:59 PM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: TNEF playing up again
>
>
>Hi,
>
>Perhaps I am misunderstanding what you want, but I have a the following in
>/etc/MailScanner/filename.rules.conf
>
>deny    \winmail.dat$   Unwanted TNEF
>                          WINMAIL.DAT files are not accepted at our company.
>Please see Microsoft support bulletin 241538 for how to configure your email
>client or server to send properly formatted email to the Internet. (Turn off
>TNEF) Here is how Outlook users can turn off TNEF: 1) On the Tools menu,
>click Options, and then click the Mail Format tab.  2) In the Send in this
>message format list, select Plain Text or HTML, and then click OK.
>
>This is on our border scanner, so we only trap outsiders sending into us.
>However, the application of a rule should handle the internal case, I
>suspect.
>
>-- Leonard
>
>At 05:57 PM 4/14/2004, Pete wrote:
> >Mate when you figure it out i want to know too. Its a great idea - i
> >want to bounce all these to offending winmail.dat senders.
> >
> >I am still trying to figure out how to silently drop the attachments
> >without warnjing my own users - can i do a combination of this and
> >notify the senders with a custom tnef related message?
> >
> >
> >William Burns wrote:
> >
> >>Pete:
> >>
> >>That's a good link...
> >>How do I get MailScanner to send links like that to offending TNEF
> >>users?
> >>
> >>If there were a separate TNEF message, I could just modify it. But...
> >>All I notice is messages that look like this:
> >>
> >>>The following e-mail messages were found to have viruses in them:
> >>>
> >>>    Sender: XXXXXXX
> >>>IP Address: 193.108.72.32
> >>>Recipient: XXXXXXX
> >>>   Subject: Memo:  Re:
> >>>MessageID: i3EDUL0V022528
> >>>    Report: Could not parse Outlook Rich Text attachment
> >>The fact that a generic virus report is being used makes me think that
> >>I have no control over the rest of the content of this message. (when
> >>a TNEF isn't parsed)
> >>Also: am I scaring TNEF users into thinking that they've got viruses?
> >>
> >>I could go to the reports/en/languages.conf file and change the
> >>BadTNEF line... Is that the right way to go, or will MailScanner have
> >>trouble w/ me cramming an extended explanation, and multiple HTTP
> >>links in there?
> >>
> >>Here are other links I like to send:
> >>Configuring Mail Clients to Send Plain ASCII Text
> >>http://expita.com/nomime.html http://www.employees.org/~lwood/outlook/
> >>http://www.kellogg.northwestern.edu/kis/docs/howto/software/email/outlook/
>HTMLconfig.htm
> >>
> >>http://support.microsoft.com/default.aspx?scid=kb;en-us;278061
> >>
> >>-Bill
> >>
> >>Pete wrote:
> >>
> >>>I researched this for our parent company who were also being
> >>>massively inconsiderate, sending the whole world winmail.dat all the
> >>>time.
> >>>
> >>>Turn it off for all mail that is addressed outside your network, this
> >>>is a global change - isnt this a fair compromise, use it all they
> >>>like internally and not at all externally.
> >>>
> >>>http://support.microsoft.com/default.aspx?scid=http://support.microso
> >>>ft.com:80/support/kb/articles/Q241/5/38.ASP&NoWebContent=1&NoWebConte
> >>>nt=1
> >>
> >>
> >>
> >>
> >>
> >>
>
>--
>Leonard Hermens
>Manager, Information Systems Security
>Potlatch Corporation
>805 Mill Road, Lewiston, ID 83501
>Voice:  208.799.2031
>Leonard.Hermens at potlatchcorp.com
>http://www.potlatchcorp.com/

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654