MailScanner: Message attempted to kill MailScanner

[Kevin Miller]

See the following in your MailScanner.conf.  I'd try using a ruleset for that joker - let his mail through but use the default action for any others.

# Some versions of Microsoft Outlook generate unparsable Rich Text
# format attachments. Do we want to deliver these bad attachments anyway?
# Setting this to yes introduces the slight risk of a virus getting through,
# but if you have a lot of troubled Outlook users you might need to do this.
# We are working on a replacement for the TNEF decoder.
# This can also be the filename of a ruleset.
Deliver Unparsable TNEF = no


 ...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: (907) 586-0242, Fax: (907) 586-4500
Registered Linux User No: 307357 
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Gary Faith
Sent: Wednesday, May 15, 2013 12:53 PM
To: mailscanner at lists.mailscanner.info
Subject: MailScanner: Message attempted to kill MailScanner

There seems to be a problem with TNEF for this message and others messages from this senter.  The sender refuses to disable RTF in Outlook and the receiver wants the messages from the sender.  So I am stuck trying to figure out how to fix this problem.  
 
-  MailScanner is running on SLES 10 SP4 64-bit, MailScanner Version Number = 4.84.5
-  Expand TNEF = yes
-  Use TNEF Contents = replace
-  TNEF Expander = internal
-  TNEF Timeout = 120
Any ideas/suggestions?  Change to external TNEF expander?  Increase the TNEF timeout?  
 
May 9 09:57:39 mscan MailScanner[8751]: Expanding TNEF archive at /var/spool/MailScanner/incoming/8751/r49DvZfK008854/winmail.dat
May 9 09:57:39 mscan MailScanner[8751]: Message r49DvZfK008854 added TNEF contents RFI265-PlatformPG4PG5ColConns.doc,Picture(DeviceIndependentBitmap)
May 9 09:57:39 mscan MailScanner[8751]: Message r49DvZfK008854 has had TNEF winmail.dat removed
May 9 10:02:16 mscan MailScanner[19826]: Making attempt 2 at processing message r49DvZfK008854
May 9 10:02:16 mscan MailScanner[19826]: Expanding TNEF archive at /var/spool/MailScanner/incoming/19826/r49DvZfK008854/winmail.dat
May 9 10:02:16 mscan MailScanner[19826]: Message r49DvZfK008854 added TNEF contents RFI265-PlatformPG4PG5ColConns.doc,Picture(DeviceIndependentBitmap)
May 9 10:02:16 mscan MailScanner[19826]: Message r49DvZfK008854 has had TNEF winmail.dat removed
May 9 10:07:02 mscan MailScanner[9910]: Making attempt 3 at processing message r49DvZfK008854
May 9 10:07:02 mscan MailScanner[9910]: Expanding TNEF archive at /var/spool/MailScanner/incoming/9910/r49DvZfK008854/winmail.dat
May 9 10:07:02 mscan MailScanner[9910]: Message r49DvZfK008854 added TNEF contents RFI265-PlatformPG4PG5ColConns.doc,Picture(DeviceIndependentBitmap)
May 9 10:07:02 mscan MailScanner[9910]: Message r49DvZfK008854 has had TNEF winmail.dat removed
May 9 10:11:39 mscan MailScanner[9686]: Making attempt 4 at processing message r49DvZfK008854
May 9 10:11:39 mscan MailScanner[9686]: Expanding TNEF archive at /var/spool/MailScanner/incoming/9686/r49DvZfK008854/winmail.dat
May 9 10:11:39 mscan MailScanner[9686]: Message r49DvZfK008854 added TNEF contents RFI265-PlatformPG4PG5ColConns.doc,Picture(DeviceIndependentBitmap)
May 9 10:11:39 mscan MailScanner[9686]: Message r49DvZfK008854 has had TNEF winmail.dat removed
May 9 10:15:58 mscan MailScanner[10523]: Making attempt 5 at processing message r49DvZfK008854
May 9 10:15:58 mscan MailScanner[10523]: Expanding TNEF archive at /var/spool/MailScanner/incoming/10523/r49DvZfK008854/winmail.dat
May 9 10:15:58 mscan MailScanner[10523]: Message r49DvZfK008854 added TNEF contents RFI265-PlatformPG4PG5ColConns.doc,Picture(DeviceIndependentBitmap)
May 9 10:15:58 mscan MailScanner[10523]: Message r49DvZfK008854 has had TNEF winmail.dat removed
May 9 10:21:47 mscan MailScanner[9923]: Making attempt 6 at processing message r49DvZfK008854
May 9 10:21:48 mscan MailScanner[9923]: Expanding TNEF archive at /var/spool/MailScanner/incoming/9923/r49DvZfK008854/winmail.dat
May 9 10:21:48 mscan MailScanner[9923]: Message r49DvZfK008854 added TNEF contents RFI265-PlatformPG4PG5ColConns.doc,Picture(DeviceIndependentBitmap)
May 9 10:21:48 mscan MailScanner[9923]: Message r49DvZfK008854 has had TNEF winmail.dat removed
May 9 10:21:58 mscan MailScanner[11166]: Warning: skipping message r49DvZfK008854 as it has been attempted too many times
May 9 10:21:58 mscan MailScanner[11166]: Quarantined message r49DvZfK008854 as it caused MailScanner to crash several times
Thanks,

Gary