MailScanner fix for Exchange TNEF vuln?

Cedric Devillers cde at alunys.com
Wed Feb 11 10:48:53 GMT 2009


Hi,

Don't forget that replacing or rejecting TNEF will make the "meeting
requests" mails from our beloved outlook users unusable.

So be carefull if you have those kind of mails going throught your
mailscanners (for me these should only be local mails).

Randal, Phil wrote:
> Oh, and "Deliver Unparsable TNEF = no" would be prudent too.
> 
> Cheers,
> 
> Phil
> 
> --
> Phil Randal | Networks Engineer
> Herefordshire Council | Deputy Chief Executive's Office | I.C.T.
> Services Division
> Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
> Tel: 01432 260160
> email: prandal at herefordshire.gov.uk
> 
> Any opinion expressed in this e-mail or any attached files are those of
> the individual and not necessarily those of Herefordshire Council.
> 
> This e-mail and any attached files are confidential and intended solely
> for the use of the addressee. This communication may contain material
> protected by law from being passed on. If you are not the intended
> recipient and have received this e-mail in error, you are advised that
> any use, dissemination, forwarding, printing or copying of this e-mail
> is strictly prohibited. If you have received this e-mail in error please
> contact the sender immediately and destroy all copies of it.
> 
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Randal,
> Phil
> Sent: 11 February 2009 10:02
> To: MailScanner discussion
> Subject: RE: MailScanner fix for Exchange TNEF vuln?
> 
> Setting "Use TNEF Contents = replace" in MailScanner.conf should do it.
> 
> I've never tried it.  Anybody found any issues doing so?
> 
> Cheers,
> 
> Phil
> 
> --
> Phil Randal | Networks Engineer
> Herefordshire Council | Deputy Chief Executive's Office | I.C.T.
> Services Division
> Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
> Tel: 01432 260160
> email: prandal at herefordshire.gov.uk
> 
> Any opinion expressed in this e-mail or any attached files are those of
> the individual and not necessarily those of Herefordshire Council.
> 
> This e-mail and any attached files are confidential and intended solely
> for the use of the addressee. This communication may contain material
> protected by law from being passed on. If you are not the intended
> recipient and have received this e-mail in error, you are advised that
> any use, dissemination, forwarding, printing or copying of this e-mail
> is strictly prohibited. If you have received this e-mail in error please
> contact the sender immediately and destroy all copies of it.
> 
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Paul
> Hutchings
> Sent: 11 February 2009 08:01
> To: MailScanner discussion
> Subject: MailScanner fix for Exchange TNEF vuln?
> 
> This is new today for those using MailScanner in front of Exchange.
> 
> http://www.microsoft.com/technet/security/bulletin/MS09-003.mspx
> 
> Of course not all of us can patch all our Exchange servers within ten
> minutes of the bulletin - is there any way to mitigate against the
> external threat using MailScanner?
> 
> Cheers,
> Paul
> 
> --
> MIRA Ltd
> 
> Watling Street, Nuneaton, Warwickshire, CV10 0TU, England.
> 
> Registered in England and Wales No. 402570 VAT Registration  GB 114 5409
> 96
> 
> The contents of this e-mail are confidential and are solely for the use
> of the intended recipient.
> If you receive this e-mail in error, please delete it and notify us
> either by e-mail, telephone or fax.
> You should not copy, forward or otherwise disclose the content of the
> e-mail as this is prohibited.
> 
> 
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 


--
Visitez notre nouveau site web: www.amstergroup.com



More information about the MailScanner mailing list