AW: winmail.dat problem in version 4.84.5

Berndt, Achim aberndt at studio-hamburg.de
Wed Feb 6 07:29:41 GMT 2013


Hi Alex,

thanks for your answer.
Splitting of the mails is not the problem, because there are the same failures with single-recipient mails also.
MailScanner can't create a sub-directory sometimes, but I don't know why?!
Feb  4 16:12:15 mxi2 MailScanner[26300]: Trying to unpack nwinmail.dat in message r14FCB3H032743, could not create subdirectory r14FCB3H032743//tnefgKmhWJ, failed to unpack TNEF message
Is the option "not to scan winmail.dat files" really an option?

Regards
Achim

Von: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] Im Auftrag von Alex Neuman
Gesendet: Dienstag, 5. Februar 2013 20:50
An: MailScanner discussion
Betreff: Re: winmail.dat problem in version 4.84.5

Splitting mail is something you have to *do things* for it to happen. If you undo the changes you made to split the e-mails (how to do this depends on which MTA you're using, I'm assuming sendmail from the logs), you should be able to avoid the problem.

Do you know why splitting e-mails to multiple recipients was needed in the first place? Did whoever installed this prior to you taking over document it? The procedure is detailed here:

http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:sendmail:how_to:split_mails_per_recipient

You can also try changing which method you use to process winmail.dat files, or not to process them at all. The risk is minimal. Check your mailscanner.conf settings, there is more information in the comments.
On Tue, Feb 5, 2013 at 12:13 PM, Berndt, Achim <aberndt at studio-hamburg.de<mailto:aberndt at studio-hamburg.de>> wrote:
Hello,

we made last week an update of our mail-gateways. We have now the OS-Version openSUSE12.2 and the
MailScanner-Version 4.84.5 (from 4.81.4). Unfortunately there is now a problem with scanning of winmail.dat
attachments?! If there is a mail with 2 recipients and a winmail.dat attachment, MailScanner split the mail
and try to scan it two times. The first scan is successfull, but the second one not?! Do you have an explanation
for the problem?

Mail-Log:
Feb  4 16:12:14 mxi2 sendmail-in[32743]: r14FCB3G032743: from=<alex at bdo.de<mailto:alex at bdo.de>>, size=274800, class=0, nrcpts=1, msgid=<86D1E45AA30DB1478EB30D571D10BC7AAFA19310EE at HH0EX001.bdocorp.de<mailto:86D1E45AA30DB1478EB30D571D10BC7AAFA19310EE at HH0EX001.bdocorp.de>>, proto=ESMTP, daemon=MTA, relay=mx01.bdo.de<http://mx01.bdo.de> [194.76.208.111<tel:%5B194.76.208.111>]
Feb  4 16:12:14 mxi2 sendmail-in[32743]: r14FCB3G032743: to=<peter at studio-hamburg.de<mailto:peter at studio-hamburg.de>>, delay=00:00:01, mailer=esmtp, pri=304800, stat=queued
Feb  4 16:12:14 mxi2 MailScanner[26355]: New Batch: Scanning 1 messages, 275339 bytes
Feb  4 16:12:14 mxi2 MailScanner[26355]: Virus and Content Scanning: Starting
Feb  4 16:12:14 mxi2 MailScanner[26355]: Message r14FCB3G032743 from 194.76.208.111 (alex at bdo.de<mailto:alex at bdo.de>) to studio-hamburg.de<http://studio-hamburg.de> is too big for spam checks (275339 > 200000 bytes)
Feb  4 16:12:14 mxi2 MailScanner[26355]: Uninfected: Delivered 1 messages
Feb  4 16:12:14 mxi2 MailScanner[26355]: Deleted 1 messages from processing-database
Feb  4 16:12:14 mxi2 sendmail-in[32743]: r14FCB3H032743: from=<alex at bdo.de<mailto:alex at bdo.de>>, size=282469, class=0, nrcpts=1, msgid=<86D1E45AA30DB1478EB30D571D10BC7AAFA19310EE at HH0EX001.bdocorp.de<mailto:86D1E45AA30DB1478EB30D571D10BC7AAFA19310EE at HH0EX001.bdocorp.de>>, proto=ESMTP, daemon=MTA, relay=mx01.bdo.de<http://mx01.bdo.de> [194.76.208.111<tel:%5B194.76.208.111>]
Feb  4 16:12:14 mxi2 sendmail-in[32743]: r14FCB3H032743: to=<waller at studio-hamburg.de<mailto:waller at studio-hamburg.de>>, delay=00:00:00, mailer=esmtp, pri=312469, stat=queued
Feb  4 16:12:15 mxi2 MailScanner[26300]: New Batch: Scanning 1 messages, 283011 bytes
Feb  4 16:12:15 mxi2 MailScanner[26300]: Expanding TNEF archive at /var/spool/MailScanner/incoming/26300/r14FCB3H032743/winmail.dat
Feb  4 16:12:15 mxi2 MailScanner[26300]: Trying to unpack nwinmail.dat in message r14FCB3H032743, could not create subdirectory r14FCB3H032743//tnefgKmhWJ, failed to unpack TNEF message
Feb  4 16:12:15 mxi2 MailScanner[26300]: Corrupt TNEF winmail.dat that cannot be analysed in message r14FCB3H032743
Feb  4 16:12:15 mxi2 MailScanner[26300]: Virus and Content Scanning: Starting
Feb  4 16:12:15 mxi2 MailScanner[26300]: Message r14FCB3H032743 from 194.76.208.111 (alex at bdo.de<mailto:alex at bdo.de>) to studio-hamburg.de<http://studio-hamburg.de> is too big for spam checks (283011 > 200000 bytes)
Feb  4 16:12:15 mxi2 MailScanner[26300]: Cleaned: Delivered 1 cleaned messages

Regards
Achim


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!



--

--

Alex Neuman van der Hans
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

+507-6781-9505
+507-832-6725
+1-440-253-9789 (USA)

Follow @AlexNeuman on Twitter
http://facebook.com/vidadigital


-- So-called "legal disclaimers" are not legally binding, so don't bother. A cute graphic saying "save the planet, don't print this" can potentially create more CO2, not less, so don't bother either.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130206/e08925ff/attachment.html 


More information about the MailScanner mailing list