tnef screwed up my queue

[Adri Koppes]

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Julian Field
> Sent: Monday, August 01, 2005 15:36
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: tnef screwed up my queue
> 
> Adri Koppes wrote:
> 
> >>-----Original Message-----
> >>From: MailScanner mailing list
> >>[mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Denis Beauchemin
> >>Sent: Monday, August 01, 2005 15:16
> >>To: MAILSCANNER at JISCMAIL.AC.UK
> >>Subject: Re: tnef screwed up my queue
> >>
> >>Julian Field wrote:
> >>
> >>    
> >>
> >>>Please can you copy a TNEF Postfix message file on a web
> >>>      
> >>>
> >>site and mail
> >>    
> >>
> >>>me a URL?
> >>>I need something to try it with. I suspect I'm just 
> missing a chdir 
> >>>somewhere.
> >>>
> >>>      
> >>>
> >>Julian,
> >>
> >>I also get leftover tnef files in mqueue.in and I am using 
> sendmail on 
> >>RHEL 3/4 with various MS versions (4 different from 4.34 to 4.40).
> >>Fortunately sendmail is not affected my those leftovers.
> >>
> >>Denis
> >>    
> >>
> >
> >Julian,
> >
> >I also get occasional tnef files in my mqueue.in, using 
> sendmail 8.13.1 
> >and MS 4.4x.
> >  
> >
> What filenames are they?
 
Julian,

Here an example of my config, mqueue.in and maillog.

MailScanner.conf contains:

Expand TNEF = yes
Deliver Unparsable TNEF = no
TNEF Expander = internal
TNEF Timeout = 120

/var/spool/mqueue.in contains:

# ls -l /var/spool/mqueue.in
total 84
-rw-r--r--  1 root  daemon   7344 Jun 10 06:35 tnef-7769-1.doc
-rw-r--r--  1 root  daemon  76800 Jun 10 06:35 tnef-7769-2.doc

/var/log/maillog contains:

Jun 10 06:35:44 mail MailScanner[7769]: New Batch: Scanning 1 messages,
116569 bytes Jun 10 06:35:51 mail MailScanner[7769]: Expanding TNEF
archive at
/var/spool/MailScanner/incoming/7769/j5A4ZUTm008140/winmail.dat
Jun 10 06:35:51 mail MailScanner[7769]: Corrupt TNEF winmail.dat that
cannot be analysed in message j5A4ZUTm008140 Jun 10 06:35:51 mail
MailScanner[7769]: Virus and Content Scanning: Starting Jun 10 06:35:51
mail MailScanner[7769]: SophosSAVI::ERROR:: Sweep could not proceed, the
file was corrupted (538):: ./j5A4ZUTm008140/winmail.dat Jun 10 06:35:52
mail MailScanner[7769]: Virus Scanning: SophosSAVI found 1 infections
Jun 10 06:35:52 mail MailScanner[7769]: ClamAVModule::LibClamAV Error:
Error reading TNEF message Jun 10 06:35:52 mail MailScanner[7769]: Virus
Scanning: ClamAV Module found 1 infections Jun 10 06:35:53 mail
MailScanner[7769]: Infected message j5A4ZUTm008140 came from
xxx.xx.xxx.xx

Adri.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!