attachments embedded in mail

Jon L. Miller jlmiller at mmtnetworks.com.au
Thu May 8 12:22:19 IST 2008


For some reason whenever an email is marked as SPAM it's attachment is
embedded in the mail.  When we discover a false postive and go to release
it through MailWatch the enduser has an unreadable email.  Is there a
setting that can keep the attachments as they were originally?  I store
the SPAM for up to 14 days before I delete them.

example:

mail:/var/spool/MailScanner/quarantine/20080507/spam# cat
66E29150006.782A7 | more
C?        5488117             670               2              
0T1210140966 418440Acreate_time=1210140966Arew
rite_context=remoteSrancore at iinet.net.auA!log_client_address=203.153.242.20A*log_message_origin=unknown[203.15
3.242.20]A$log_helo_name=pmx.mmtnetworks.com.auAlog_protocol_name=ESMTPAclient_name=unknownA-reverse_client_na
me=242.20-dslgw.amnet.net.auAclient_address=203.153.242.20A
helo_name=pmx.mmtnetworks.com.auAclient_address_ty
pe=2A0dsn_orig_rcpt=rfc822;soniaf at sothertons-wa.com.auOoniaf@sothertons-wa.com.auRoniaf at sothertons-wa.com.au
A0dsn_orig_rcpt=rfc822;Stacey at sothertons-wa.com.auOtacey@sothertons-wa.com.auRtacey at sothertons-wa.com.auMN@R
eceived: from pmx.mmtnetworks.com.au (unknown [203.153.242.20])N@       by
mail.mmtnetworks.com.au (Postfix) w
ith ESMTP id 66E29150006;N&     Wed,  7 May 2008 14:16:06 +0800
(WST)NqReceived: from outbound.icp-qv1-irony-o
ut1.iinet.net.au (outbound.icp-qv1-irony-out1.iinet.net.au
[203.59.1.108])NH    by pmx.mmtnetworks.com.au (8.1
3.8/8.13.8) with ESMTP id m475nHpZ031839;N      Wed, 7 May 2008 13:49:18
+0800N%        (envelope-from rancore
@iinet.net.au)N1X-IronPort-AV: E=Sophos;i="4.27,446,1204470000"; N&  
d="qbb'?scan'208,217";a="325419110"N<Rec
eived: from unknown (HELO Workstation1) ([203.59.195.56])NS  by
outbound.icp-qv1-irony-out1.iinet.net.au with
SMTP; 07 May 2008 13:39:48 +0800N9Message-ID:
<003501c8b004$c1b93f80$0200a8c0 at Workstation1>N*Reply-To: "Rancor
e" <rancore at iinet.net.au>N&From: "Rancore" <rancore at iinet.net.au>N2To:
"Stacey Dymock" <Stacey at sothertons-wa.c
om.au>,N-        "Sonia" <soniaf at sothertons-wa.com.au>NSubject: TUSCOM
GROUPN$Date: Wed, 7 May 2008 13:31:19 +
0800NOrganization: Rancore Pty LtdNMIME-Version: 1.0NContent-Type:
multipart/mixed;N5   boundary="----=_NextPa
X-Priority: 3NX-MSMail-Priority: NormalN2X-Mailer: Microsoft Outlook
Express 6.00.2900.3138N8X-MimeOLE: Produc
ed By Microsoft MimeOLE V6.00.2900.3198NZX-PMX-Version: 5.4.2.338381,
Antispam-Engine: 2.6.0.325393, Antispam-
Data: 2008.5.6.113753NX-PMX-Spam: Gauge=IIIIIIII, Probability=8%,
Report='HTML_90_100 0.1, HTML_NO_HTTP 0.1, B
ODY_SIZE_10000_PLUS 0, USER_AGENT_OE 0, __CT 0, __CTYPE_HAS_BOUNDARY 0,
__CTYPE_MULTIPART 0, __FRAUD_419_SUBJ_
ALLCAPS 0, __HAS_MSGID 0, __HAS_MSMAIL_PRI 0, __HAS_X_MAILER 0,
__HAS_X_PRIORITY 0, __LINES_OF_YELLING 0, __MI
ME_HTML 0, __MIME_VERSION 0, __SANE_MSGID 0, __TAG_EXISTS_HTML 0,
__USER_AGENT_MS_GENERIC 0'NN,This is a multi
-part message in MIME
format.NN+------=_NextPart_000_002B_01C8B046.A21A6FE0N$Content-Type:
multipart/alternati
ve;N5  
boundary="----=_NextPart_001_002C_01C8B046.A21A6FE0"NNN+------=_NextPart_001_002C_01C8B046.A21A6FE0NCo
ntent-Type: text/plain;N       
charset="iso-8859-1"N+Content-Transfer-Encoding: quoted-printableNNREGARDS
 KA
MALN+------=_NextPart_001_002C_01C8B046.A21A6FE0NContent-Type: text/html;N
     charset="iso-8859-1"N+Content-
Transfer-Encoding: quoted-printableNN><!DOCTYPE HTML PUBLIC "-//W3C//DTD
HTML 4.0 Transitional//EN">N^L<HTML><
HEAD>N7<META http-equiv=3DContent-Type content=3D"text/html;
=Ncharset=3Diso-8859-1">N:<META content=3D"MSHTML
 6.00.6000.16640" name=3DGENERATOR>N<STYLE></STYLE>N</HEAD>N<BODY
bgColor=3D#ffffff>N0<DIV><FONT face=3DArial
size=3D2>REGARDS&nbsp; =N
KAMAL</FONT></DIV></BODY></HTML>NN-------=_NextPart_001_002C_01C8B046.A21A6FE0--NN+-
-----=_NextPart_000_002B_01C8B046.A21A6FE0N'Content-Type:
application/octet-stream;N-   name="Tuscom Subdivisi
on Consultants PL.QBB"N!Content-Transfer-Encoding: base64N
Content-Disposition: attachment;N1   filename="Tusc
om Subdivision Consultants
PL.QBB"NNLRYYAAAYAAgABAKxqpzhFhgEACgABAAcAAQABAAC4lABFhgUAAQABAABFhgIATwACAAAAALiUA
DIpNLPQAAAORrpzjka6c4OQBHOlxRdWlja0Jvb2tzXDIwMDVcVHVzY29tIFN1YmRpdmlzaW9uIENvbnN1NLbHRhbnRzIFBMLlFCVwBFhgQABAA
BADMEBAAABCZRAADAaheAgD8uPgn6h+mPpD8G/iD6o0BJ7ePtNLZx/VPy3/xfzz738PQ+l7siiHGQQIAGgSpEqShxIfWrSaUD4oQIAAQQEFBQr
2t9li29khbA2gexQANLmK7YDAT6EkDAAAIFDBxAkABg4aNgQQMHDyBEkDBxyzCoYOEChgwaW9nAESXoWi00BAgIMCAAgQABNLc2yxavXcVGSXt
bDYR7p8AWBjsO9bx761/97+OHiv539vBSB8sQMYqb4B0PCHw5+RA8QfoS8k8e9uNLAhDmYl/Fv2cD8BUAjD8y/tzZxfCHCYMgI3o9hplzBKUQA
VmHq7C0OvZRmbEdgnU1QIYFQAENAhAANL6Pe/p5mAbwFS4spFNFYAFKxO5bMQiM9iJT4LJdX13H7CrRMGFyWUgl9GXKT5K+LEEXNHx5UybMa8N
LaVNmyhg5Zcq4AVAWMEvQAMxDt4r9A/jBjgIAHABsCShguUuAAAIFDBRAgOQPHjx/3ozJA4fPDCB0NL3Ny48oeP3KZ44AACzBUoUK4cWRIECZE
FeJhYefDnChWtTbGxAkcKHTt49PDhAciRIpKGFDACawq+NLOAqY6Krib42rVmMCCiBGj8sOGzh16vCQgidPEiFHRpwocUbKli5YlAAh8iQIhDJ
TllQJ8gWLlQx1NLumih2gWki5ApRIoYOYIkgZJ68pA8cABlHqthEFZAoYLFVKma5W8gPgwkShg4cOBEChQJDygUsHABNLQwYNWziMAqUhDBgRg
bTVEpPFhQoV1KalVb0ITC40ZNRAcQNHggULsLCx82KKHz9/4tgRI4dPzt3kNL5s+cIlJEhCBx4oKHZilUoGAxDZoKGIQO7aAh4Wbt1dCxgAcMH
w+AOBGSpQmlIFaQTBmiaYkWJ7iWNLgEuzhMq3L/vIENGyhUu3MKA+fVVtOiQYNGrYOJAgQZE9acacCXMnBhQ5eGpMMdMGjhsxHDx4MJetNLhAh
lzUCYCOcuhAoBLFq4GAEjgAwfNArYwIFjxAx1O1j4KJEEUhEqRGR1sTcnihI5UPjVLYSiSJm2NLRlUqsqp/jc+mWCkIGzBu7tD5Y0dPGBtR+vB
Js8FDBw89qG1SunCYOMeysFmXsoK9wxHDx8xS9uNGNLjhw2djDoMeMHnCBNhjB5QglIliRCgnhSkuUJOgTw3DCp4s6BPjKlSMktDwQ5EB0wemo
gQMS8CQMjNLRpQ9ZviUubElzhw/a3pciWOFSJQrSYAgmbIlBYqVhYMjaTJixJhRjZqMG/34/dhBqZKNH0SCCBnSNLpMiRI0SS6Flazvw8+RLlS
xVDUo5cqfIFEZclXewgQMNFz5hsHlCFuGRpbdkqSMjnZtnKuS+KjOmjNLRwwcPnDi6LiiBUkOK3L04C1kQIQQcYFloUYCRQp1L8uWO5UlS94Om
oV+8YKhQwePmHMDEyFziCgxNLMqXJpiZamGRZ0ukKESlaqAix0gtbLDNDuAh6ccGLp05sy51BGlYNmWy6Pnxg+KEzo8+eOnjq8NFBNLR06PPnO
CIHkywmS5OwFKh4oVL5cGjRgy5sWoYeMezKXBo8eNH0GCOBlCp8iSI3iStpHECCckQaJcNLwVoIBbki5EMnM0S6EMlwiksnTmDLwUEOvIZuamB
P2PQ5AyOKjCh19vS5kcdG3nDAhw14QM4BgAKxNLSAEuXIoW3r4XBgJm5Khh4MaNHCBktNPx4ocWJJOITCniZ0s+OVKW0Inyj06TKFKmUFOTCjV
8AA7ANLyp8DuP/tMABgLEALAYAi7i0THAxEO3DQ/WDU7YNIqxPn9L0aRK4m1lZNF4woYQjk6kEsEwIOatzNNLkPgFYUA5Lm7te7WBXA2m+6YLQ
JRqALl6ojBB8OpcsYcGSKx9Fsr9agW5unqJ4hcMIMO3WC9R1GoGNLubp6OV0g0rgA0rilelYmCsLlpYSElxJydfXSTXQv3dRqCrkaWPe5iealh
NL3ag9TzSB7SWIyg4n3NLkkLpe7WGXF29BBfdS3BhJElA6cH1VD+A+x90+BeAxQBAIGeAkl0eEkQ7gHDaEsgMRXEIzXSq34uFNLRCkGEKUYQC5
2oaCLfWDoYgAKwhUTRpTi8MTUCKEWGyA9xQYhhCsmxyjF4YmJV0I1AEEXy80gtzZANLEnCSFvvCUIsZdLEmDOEqpkcippgaiXAV+yvFEroYI4f
UgGRxagBSEF0sg0IXW/EQluKA/QOCgP0DNLuP/tPAAAL0AIAoAiDkw0dnEwEO3AwfvBqEtQfd5XgEhUEANAoFTA+EMgV7xgKgg4mDSbqaiFcKi
vNL7ysMJCrAfM2IFlDeVzioFQheISB1Gg2QfL5CQaJiQqHoPhjrRaC+r2CQqJhQtQJEpykVFmqFgrCENLkpComFBukqHc1AoKiQpgX90kQ5UKD
7WCQQ1FgkKVeir6fYWGRMWEApcMBa5WcEhUqNmWlLJEqH5fNLYaJWWAiLtSISFRMKgIJEqPoGqB8OeOwfwP1vJwGACAJoFADUSaeCKoToGTY+F
XPk75l8pplQ/cAuNLgEUCDyWTz1Kcv2eSGs6QUktx/p6JbZrJzw++AgRECTkV08Q2kWl2CeEJOb31zN8zOUgzjTmuCdiNNLD7lhB1maRCYI4Qy
ZO/P3TBjSTFh+eCVgMkpIDMVVDIlMKsIZUkU58xfAv0U5uLHYP4D73w4BAAIANL6DMAYKA0inMCAERGYRA7KvLZ2xBrB5U6c8a8aQNiSh0xZNL
YSTMnzRs3IIb2zanDhk4YN3TmgIDyNLgimsqcmoAeJKGjZsq27M2iqgI6dMGbowVAoih4ycN3MruvaCgCygAqquQNiIUWMmcMoIClE6FlACNLm
VGB6GMBNRAI1hUkGAECInUNwM4xL/dAOL0C+HULfB8SWewfwP1vpwEAHACGIAAUUBoBCiRIEKFCNLhgwhEpOozK1HjshM+pMKEqVLkYx84qSJH
CdGnjqBCiUqFilXrey8+qVqE6t2rlzByidrFq0aiZAcNLSVptBIk0AqOkEZmmoZmmwUvVKlStXOWCFUjWPFq0bP3DlUvXjkFCgp4SQiIlwCgpQ
aYpWUZJCTBCNLSgyJlA6jpDSZpiQZJaXBCClBJFIyjJKSZ5qSY5SUDiOkRJFIqTBKSplpSophVQ5GIiXC8KRkGCUlNLwQgpdSRSWgxPSoFRUjK
MkFJIIiXFKClhpin1RkmJMEJKJYmUEsOTUm6UlBLjUh7VUhIpIUZJqTBNNLqTaJap8RUI0lkcZjlDQI0zRkw8opMImUHKOkFJim5Bq+lKEJ4A2
wc8zL3UCIpgzgzxugehQA9z8vNLdwMB/AAeYH5IELB/APe/nQUAkAWI0QAQBIEtqeziYCDawazEAGwDRl2uFtEXjD+1ywCA5xCRyDGrNLg3dHy
AGirzTHqyYHAQdrNetabUcidaPmgABAQOnqHAYSOWYF8ydCjj0BpatzKKg5EDyHghIGRXwONLGEA2Urs6B4NEDgYlTIQcIIAAKF2dw0Eih4Pif
--More--

--------------------------------
Jon L. Miller, MCNE CNS CCNA
MMT Networks Pty Ltd
East Perth, WA 6004
WA, Australia
+61 89227 0892
-------------------------------------------------



More information about the MailScanner mailing list