stripped attachments

[dcurtis at sbschools.net]

I have change the mailscanner conf instead of replace  (use TNEF
Contents = replace) I set it to no and now they are making it every
time? Is there something wrong with the version I have or is clamd
causing this kind of behavior? I am running clam 0.95.2

 

 

From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of
dcurtis at sbschools.net
Sent: Friday, January 29, 2010 3:03 PM
To: mailscanner at lists.mailscanner.info
Subject: RE: stripped attachments

 

I have been doing more digging and have found this info:

 

Jan 29 14:52:44 spamfilter MailScanner[19613]: Expanding TNEF archive at
/dev/shm/19613/EBC4F177500.A6656/winmail.dat 

Jan 29 14:52:44 spamfilter MailScanner[19613]: Message EBC4F177500.A6656
added TNEF contents Statement.RTF 

Jan 29 14:52:44 spamfilter MailScanner[19613]: Message EBC4F177500.A6656
has had TNEF winmail.dat removed 

Jan 29 14:52:44 spamfilter MailScanner[19613]: Requeue:
EBC4F177500.A6656 to CC245177506 

Jan 29 14:52:44 spamfilter MailScanner[19613]: Logging message
EBC4F177500.A6656 to SQL

 

From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of
dcurtis at sbschools.net
Sent: Friday, January 29, 2010 2:56 PM
To: mailscanner at lists.mailscanner.info
Subject: stripped attachments

 

I have an end user that keeps getting his attachements stripped on
outgoing email. I see nothing in the log, he is whitelisted. At first I
thought it might have simply been a pdf issue but I had him try it again
as rtf and it still is getting killed. The attachments show up at the
end users as 0k so there is something killing it but since I have
nothing in the maillog I have no idea as to what might be doing this.

 

Any ideas? Anyone else have anything happen like this?

 

 

Linux sbmail.sbschools.net 2.6.18-128.7.1.el5 #1 SMP Mon Aug 24 08:21:56
EDT 2009 x86_64 x86_64 x86_64 GNU/Linux

This is CentOS release 5.3 (Final)

This is Perl version 5.008008 (5.8.8)

 

This is MailScanner version 4.76.25


______________________________________________________________
______________________________________________________________ 
This email may contain information protected under the Family
Educational Rights and Privacy Act (FERPA) or the Health Insurance
Portability and Accountability Act (HIPAA). If this email contains
confidential and/or privileged health or student information and you are
not entitled to access such information under FERPA or HIPAA, federal
regulations require that you destroy this email without reviewing it and
you may not forward it to anyone. 
-- 
This message has been scanned for viruses and 
dangerous content by MailScanner <http://www.mailscanner.info/>  ,ClamAV
<http://www.clamav.net/>  and Bitdefender <http://www.bitdefender.com/>
, and is 
believed to be clean. 


______________________________________________________________
______________________________________________________________ 
This email may contain information protected under the Family
Educational Rights and Privacy Act (FERPA) or the Health Insurance
Portability and Accountability Act (HIPAA). If this email contains
confidential and/or privileged health or student information and you are
not entitled to access such information under FERPA or HIPAA, federal
regulations require that you destroy this email without reviewing it and
you may not forward it to anyone. 
-- 
This message has been scanned for viruses and 
dangerous content by MailScanner <http://www.mailscanner.info/>  ,ClamAV
<http://www.clamav.net/>  and Bitdefender <http://www.bitdefender.com/>
, and is 
believed to be clean. 


______________________________________________________________
______________________________________________________________
This email may contain information protected under the Family 
Educational Rights and Privacy Act (FERPA) or the Health Insurance 
Portability and Accountability Act (HIPAA).  If this email contains 
confidential and/or privileged health or student information and you 
are not entitled to access such information under FERPA or HIPAA, 
federal regulations require that you destroy this email without 
reviewing it and you may not forward it to anyone.


--
This message has been scanned for viruses and
dangerous content by MailScanner, ClamAV and Bitdefender  and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100129/ae49c25a/attachment.html