From jerry.benton at mailborder.com  Sun Nov  2 07:12:07 2014
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Sun, 2 Nov 2014 02:12:07 -0500
Subject: MailScanner won't run ...
In-Reply-To: <B3A7ED1F-7A4D-4ADD-9BEF-D7511336DA73@odo.in-berlin.de>
References: <BBDF22AB-675F-4794-B60A-E1C91B304328@odo.in-berlin.de>
	<B3A7ED1F-7A4D-4ADD-9BEF-D7511336DA73@odo.in-berlin.de>
Message-ID: <A0C1C4D8-DBBF-454C-8444-232EE4F2478E@mailborder.com>

I know it has been forever, but I updated this in the source. I have tested this in the lab and MailScanner will work with enable_long_queue_ids with this fix. Thanks, Michael.

https://github.com/MailScanner/v4/blob/master/mailscanner/bin/MailScanner/Postfix.pm


Jules recently sent me his entire development environment. I will try to get it on a dedicated server and put out a package this month with a new version. 

-
Jerry Benton
www.mailborder.com



> On Mar 10, 2013, at 12:24 PM, Michael Grimm <trashcan at odo.in-berlin.de> wrote:
> 
> Hi --
> 
> On 09.03.2013, at 21:31, Michael Grimm <trashcan at odo.in-berlin.de> wrote:
> 
>> Thus: Anybody here that could teach me what to test next?
> 
> First of all I'd like to thank all of you (this list's and private mails) for reassuring that my configuration and directory protections weren't wrong.
> 
> Thus, I used the old but tedious technique of inserting debugging messages into the code until I finally found the cause for my MailScanner's refusal of service:
> 
> A sample excerpt of my postfix' hold queue looks as follows:
> 
> | test> la /var/spool/postfix/hold/
> | -rwx------  1 postfix  postfix  - 547 Mar 10 16:37 3ZP6596tR1zKR1
> | -rwx------  1 postfix  postfix  - 547 Mar 10 16:37 3ZP6596xlmzKR2
> | -rwx------  1 postfix  postfix  - 547 Mar 10 16:37 3ZP659714vzKR3
> | -rwx------  1 postfix  postfix  - 547 Mar 10 16:37 3ZP65974zXzKR4
> 
> MailScanner simply fails to recognize those filenames because every test on queue directory an filenames uses the following regex ...
> 
> | '^([\\dA-F]+)$'
> 
> ... which is plain wrong (IMHO). Thus I modified that regex to ...
> 
> | '^([\\w]+)$'
> 
> ... and MailScanner is recognizing the correct HashDirDepth and every queued file, and now it does what it is supposed to do: scanning mails ;-)
> 
> That regex might well be optimized, I'm not that much an expert. And, I don't have any clue if my patch is going to break other parts (haven't done extensive testing up to now!).
> 
> Here's my udiff:
> --- Postfix.pm.old	2013-03-10 16:33:29.917729549 +0100
> +++ Postfix.pm	2013-03-10 16:36:23.032728554 +0100
> @@ -85,7 +85,9 @@
> 
>   # These need to be improved
>   # No change for V4
> -  $this->{HDFileRegexp} = '^([\\dA-F]+)$';
> +# GRIMM (modified regex to recognize filenames in /var/spool/postfix/hold)
> +# $this->{HDFileRegexp} = '^([\\dA-F]+)$';
> +  $this->{HDFileRegexp} = '^([\\w]+)$';
>   $this->{TFileRegexp} = '^tf-' . $$ . '-([\\dA-F]+)$';
>   # JKF Must fix this once I know what it's for.
>   $this->{QueueFileRegexp} = '^([\\d]+-[\\d]+)$';
> 
> To those which are running postfix as well: which versions do you run and how do your filenames look like? (I am running postfix 2.9.5) Not sure if I happened to alter some postfix option that might have impact to those filenames, though.
> 
> Thanks to all and with kind regards,
> Michael
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 


From viorelrobu at yahoo.com  Mon Nov  3 09:21:35 2014
From: viorelrobu at yahoo.com (Viorel Robu)
Date: Mon, 3 Nov 2014 09:21:35 +0000 (UTC)
Subject: MailScanner 4.84.6-1 + postfix 2.6.6-6 on CentOS 6.6 not
	=?utf-8?b?Y2hlY2tpbmcJZmlsZW5hbWUvZmlsZXR5cGU=?= rules
References: <1414760425.33322.YahooMailNeo@web161605.mail.bf1.yahoo.com>
	<A77074A3-08BB-410A-8F7B-0E3C9BCF1441@mailborder.com>
Message-ID: <loom.20141103T101618-774@post.gmane.org>

Hi,

unfortunately this is not my case.
The settings in master.cf for pickup and qmgr already are "fifo".
Any other thoughts? 

Viorel


From viorelrobu at yahoo.com  Tue Nov  4 08:29:54 2014
From: viorelrobu at yahoo.com (Viorel Robu)
Date: Tue, 4 Nov 2014 08:29:54 +0000 (UTC)
Subject: MailScanner 4.84.6-1 + postfix 2.6.6-6 on CentOS 6.6 not
	=?utf-8?b?Y2hlY2tpbmcJZmlsZW5hbWUvZmlsZXR5cGU=?= rules
References: <1414760425.33322.YahooMailNeo@web161605.mail.bf1.yahoo.com>
Message-ID: <loom.20141104T084603-765@post.gmane.org>

I'm pretty sure that this is a perl issue and is related to 
/usr/share/perl5/MIME/Parser.pm module.
I made a little debug (actually trace) and find that this code in 
/usr/lib/MailScanner/MailScanner/Message.pm:

 ## Do the actual parsing
    my $maxparts = MailScanner::Config::Value('maxparts', $this) || 200;
    MIME::Entity::ResetMailScannerCounter($maxparts);

    # Inform MIME::Parser about our maximum
    $parser->max_parts($maxparts * 3);
    $entity = eval { $parser->parse($handle) };

    # close and delete tmpfile
    close($handle);

does not extract any files.


Viorel


From Glenn.Steen at ap1.se  Thu Nov  6 11:25:02 2014
From: Glenn.Steen at ap1.se (Steen, Glenn)
Date: Thu, 6 Nov 2014 11:25:02 +0000
Subject: Has anyone tried MailScanner on CentOS 7?
In-Reply-To: <11D8E491D9562549A61FD3186F36342001D57040A7@exchange.techeez.com>
References: <832jqvvnt16k7244iu8t3hu3.1414689741290@email.android.com>
	<11D8E491D9562549A61FD3186F36342001D57040A7@exchange.techeez.com>
Message-ID: <8B8B3A70936BED4EB197DF1C1454E779DCBA0251@apex05.ap1.se>

Same here, thanks to some very helpful tips from Phil Randall... The issues I did have were more to do with differences between CentOS itself from earlier versions (very familiar) to 7 (well, not unfamiliar any more:-). Works like a charm!

Cheers
--
-- Glenn

tor 2014-10-30 klockan 18:24 +0000 skrev Philip Parsons:
I have a fully working MailScanner on Centos.  MailScanner and Spamassassion 3.4 install was straight forward with no issues.



From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mark Meelhuysen
Sent: October-30-14 10:24 AM
To: MailScanner discussion
Subject: Re: Has anyone tried MailScanner on CentOS 7?




I started with centos 7. But as a beginner using a tutorial i ran into problems with  php-mime items. I than reversed to centos 6.5.








Verzonden vanaf Samsung Mobile.




-------- Oorspronkelijk bericht --------


Van: Mogens Melander


Datum:30-10-2014 18:19 (GMT+01:00)


Aan: mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>


Onderwerp: Re: Has anyone tried MailScanner on CentOS 7?





Doesn't anybody use Slackware based distributions anymore?

I start feeling like a dinosaur.

On Wed, October 29, 2014 10:53, Vincent Verhagen wrote:
> Now, that sounds good :-)
> Thanks in advance!
>
> On 19-9-2014 0:28, Jerry Benton wrote:
>> There will be RPM, DEB, and source tarballs available once I iron out
>> the packaging. FSL is donating their MailScanner Gold and they have
>> done a lot of the legwork. Once I get a chance to review what they
>> have I will make it available.
>>



--
Mogens Melander
+66 8701 33224


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.




-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141106/a97f045b/attachment.html 

From christian at tssb.com.my  Mon Nov 10 05:03:08 2014
From: christian at tssb.com.my (TSSB Sdn Bhd)
Date: Mon, 10 Nov 2014 13:03:08 +0800
Subject: SYSERR(root): rewrite: excessive recursion (max 50), ruleset canonify
Message-ID: <CAALAUo1Rj=CJ50tPJBPSYJJBp5rQUNW2Wo-84J+Q2cYR3xzguw@mail.gmail.com>

Hi,

I am having a problem with my sendmail right now. I'm using CentOS5 running
on BlueQuartz 5100R Series

I am not able to send to my domain and keep receiving the error

Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the server for
the recipient domain domain.name.com from domain.name.com [IP address]

The error that the other server returned was:
554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify


Thanks & Regards,

TSSB Sdn Bhd
35-1, Jalan Tanjung SD 13/2,
Bandar Sri Damansara,
52200 Kuala Lumpur.

MAIN LINE: 603 6276 7910
FAX: 603 6276 0912
EMAIL: hdesk at tssb.com.my
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141110/696d0e81/attachment.html 

From simvirus at gmail.com  Mon Nov 10 10:38:48 2014
From: simvirus at gmail.com (Sim)
Date: Mon, 10 Nov 2014 11:38:48 +0100
Subject: REJECT (not bounce) spam with HI score?
Message-ID: <CAD=Xf-VDV-nViHQiW600kdCiKNH3Y89UY_6xa0u95n8p=ZeJFg@mail.gmail.com>

Hello!

Is it possible to "drop SMTP connection with a reject code", and not close
with "250 Ok...", if the score is Hi or with virus?

In this case the message is "bounced" directly from the mail server of the
sender, and not generated a new message/bounce from destionation
(MailScanner) server.

Thanks for your support

---
Sim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141110/187b2e31/attachment.html 

From Antony.Stone at mailscanner.open.source.it  Mon Nov 10 11:20:17 2014
From: Antony.Stone at mailscanner.open.source.it (Antony Stone)
Date: Mon, 10 Nov 2014 12:20:17 +0100
Subject: REJECT (not bounce) spam with HI score?
In-Reply-To: <CAD=Xf-VDV-nViHQiW600kdCiKNH3Y89UY_6xa0u95n8p=ZeJFg@mail.gmail.com>
References: <CAD=Xf-VDV-nViHQiW600kdCiKNH3Y89UY_6xa0u95n8p=ZeJFg@mail.gmail.com>
Message-ID: <201411101220.18191.Antony.Stone@mailscanner.open.source.it>

On Monday 10 November 2014 at 11:38:48 (EU time), Sim wrote:

> Hello!
> 
> Is it possible to "drop SMTP connection with a reject code", and not close
> with "250 Ok...", if the score is Hi or with virus?

No, because MailScanner itself does not manage SMTP - it is not an MTA.

You would need to implement this function in your receiving MTA.

MailScanner only sees the mail after it has been fully received and queued by 
the receiving MTA.


Antony.

-- 
This email was created using 100% recycled electrons.

                                                   Please reply to the list;
                                                         please *don't* CC me.

From simvirus at gmail.com  Mon Nov 10 11:44:25 2014
From: simvirus at gmail.com (Sim)
Date: Mon, 10 Nov 2014 12:44:25 +0100
Subject: Bounce from "destination server" as SPAM - header/received too short!
Message-ID: <CAD=Xf-UhHa8gLfsDPcJ9wTY-03UaoXjJ=etv9YNiNc6p37ORJQ@mail.gmail.com>

Hello to all!

I've a little issue...

SENDER (from test at extenal.com  to  nomail at mydomain) ------> *MailScanner *
-----> Mailbox Server (@mydomain)

At this time my internal "Mailbox Server" generate a bounce for not exiting
"nomail" account.
This bounce is detected as SPAM from MailScanner.

Note:
- The IP of Mailbox Server is in "Whitelist"
- The LAN (/24) of Mailbox Server is in "Trusted Network"
- The LAN (/24) of Mailbox Server is in "Outbound mail relay"
- All other email sent from "Mailbox Server" are detected as "white list"


Checking the log of postfix i've found this:

postfix/cleanup[20872]: C1C2960069: hold: header Received: from
srv.mydomain.local (unknown [192.168.0.10])??(using TLSv1 with cipher
AES128-SHA (128/128 bits))??(No client certificate requested)??by
mail.mydomain.com (Postfix) w from unknown[192.168.0.10]; from=<> to=<
test at external.com> proto=ESMTP helo=<srv.mydomain.local>
[..]
MailScanner[19852]: Spam Checks: Starting
MailScanner[19852]: Message C1C2960069.AEB15 from 192.168.0.10 has no (or
invalid) watermark or sender address, marked as high-scoring spam
MailScanner[19852]: Spam Checks: Found 1 spam messages


The header of postifx/cleanup is incomplete!!!!

Looking for full header i've seen:  "(Postfix) with ESMTPS id C1C2960069?"
   and not only    "(Postfix) w"


How to increase this "check of the header limit" in postfix, cleanup or
MailScanner ?

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141110/6039f8b7/attachment.html 

From mailscanner at joolee.nl  Mon Nov 10 12:40:45 2014
From: mailscanner at joolee.nl (Joolee)
Date: Mon, 10 Nov 2014 13:40:45 +0100
Subject: Bounce from "destination server" as SPAM - header/received too
	short!
In-Reply-To: <CAD=Xf-UhHa8gLfsDPcJ9wTY-03UaoXjJ=etv9YNiNc6p37ORJQ@mail.gmail.com>
References: <CAD=Xf-UhHa8gLfsDPcJ9wTY-03UaoXjJ=etv9YNiNc6p37ORJQ@mail.gmail.com>
Message-ID: <CA+Q-w8V6MYer-RQDJhiYsczU+cdRi8aBDzG+sDdHntE3SbVDSA@mail.gmail.com>

Quite an easy solution is to simply don't bounce. E-mail to non-existing
users is probably (uncought) spam and they rarely come from legit e-mail
addresses. You are spamming the actual owners of the e-mail addresses being
abused by sending backscatter to them. It might even get you listed on a
backscatter dnsbl.

If you want to provide legit mail senders with a "this user doesn't exist"
message, configure all legit users on your edge server so mail to
non-existing users is being blocked on smtp level. (This will also reject
~90% of spam) The sending party can than implement any backscatter/messages
they want with this information, it's not your problem.


On 10 November 2014 12:44, Sim <simvirus at gmail.com> wrote:

> Hello to all!
>
> I've a little issue...
>
> SENDER (from test at extenal.com  to  nomail at mydomain) ------> *MailScanner *
> -----> Mailbox Server (@mydomain)
>
> At this time my internal "Mailbox Server" generate a bounce for not
> exiting "nomail" account.
> This bounce is detected as SPAM from MailScanner.
>
> Note:
> - The IP of Mailbox Server is in "Whitelist"
> - The LAN (/24) of Mailbox Server is in "Trusted Network"
> - The LAN (/24) of Mailbox Server is in "Outbound mail relay"
> - All other email sent from "Mailbox Server" are detected as "white list"
>
>
> Checking the log of postfix i've found this:
>
> postfix/cleanup[20872]: C1C2960069: hold: header Received: from
> srv.mydomain.local (unknown [192.168.0.10])??(using TLSv1 with cipher
> AES128-SHA (128/128 bits))??(No client certificate requested)??by
> mail.mydomain.com (Postfix) w from unknown[192.168.0.10]; from=<> to=<
> test at external.com> proto=ESMTP helo=<srv.mydomain.local>
> [..]
> MailScanner[19852]: Spam Checks: Starting
> MailScanner[19852]: Message C1C2960069.AEB15 from 192.168.0.10 has no (or
> invalid) watermark or sender address, marked as high-scoring spam
> MailScanner[19852]: Spam Checks: Found 1 spam messages
>
>
> The header of postifx/cleanup is incomplete!!!!
>
> Looking for full header i've seen:  "(Postfix) with ESMTPS id C1C2960069?"
>    and not only    "(Postfix) w"
>
>
> How to increase this "check of the header limit" in postfix, cleanup or
> MailScanner ?
>
> Thanks
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141110/bf957c85/attachment.html 

From alex at vidadigital.com.pa  Mon Nov 10 13:34:55 2014
From: alex at vidadigital.com.pa (Alex Neuman)
Date: Mon, 10 Nov 2014 08:34:55 -0500
Subject: SYSERR(root): rewrite: excessive recursion (max 50),
	ruleset canonify
In-Reply-To: <CAALAUo1Rj=CJ50tPJBPSYJJBp5rQUNW2Wo-84J+Q2cYR3xzguw@mail.gmail.com>
References: <CAALAUo1Rj=CJ50tPJBPSYJJBp5rQUNW2Wo-84J+Q2cYR3xzguw@mail.gmail.com>
Message-ID: <CANyE0PqLv7pFBu91R+_nNNxbcmN+P4HoMDzZv4VZoeikGPPc4Q@mail.gmail.com>

Sounds like a DNS problem.
On Nov 10, 2014 2:20 AM, "TSSB Sdn Bhd" <christian at tssb.com.my> wrote:

> Hi,
>
> I am having a problem with my sendmail right now. I'm using CentOS5
> running on BlueQuartz 5100R Series
>
> I am not able to send to my domain and keep receiving the error
>
> Technical details of permanent failure:
> Google tried to deliver your message, but it was rejected by the server
> for the recipient domain domain.name.com from domain.name.com [IP address]
>
> The error that the other server returned was:
> 554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify
>
>
> Thanks & Regards,
>
> TSSB Sdn Bhd
> 35-1, Jalan Tanjung SD 13/2,
> Bandar Sri Damansara,
> 52200 Kuala Lumpur.
>
> MAIN LINE: 603 6276 7910
> FAX: 603 6276 0912
> EMAIL: hdesk at tssb.com.my
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141110/65a3648d/attachment.html 

From alex at vidadigital.com.pa  Mon Nov 10 13:35:13 2014
From: alex at vidadigital.com.pa (Alex Neuman)
Date: Mon, 10 Nov 2014 08:35:13 -0500
Subject: REJECT (not bounce) spam with HI score?
In-Reply-To: <CAD=Xf-VDV-nViHQiW600kdCiKNH3Y89UY_6xa0u95n8p=ZeJFg@mail.gmail.com>
References: <CAD=Xf-VDV-nViHQiW600kdCiKNH3Y89UY_6xa0u95n8p=ZeJFg@mail.gmail.com>
Message-ID: <CANyE0Pqg8nXnEC97=+u9BUwL4cLEzf5vHLkE8WJKaUkMEXFBow@mail.gmail.com>

No.
On Nov 10, 2014 7:38 AM, "Sim" <simvirus at gmail.com> wrote:

> Hello!
>
> Is it possible to "drop SMTP connection with a reject code", and not close
> with "250 Ok...", if the score is Hi or with virus?
>
> In this case the message is "bounced" directly from the mail server of the
> sender, and not generated a new message/bounce from destionation
> (MailScanner) server.
>
> Thanks for your support
>
> ---
> Sim
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141110/21819f33/attachment.html 

From simvirus at gmail.com  Mon Nov 10 14:05:34 2014
From: simvirus at gmail.com (Sim)
Date: Mon, 10 Nov 2014 15:05:34 +0100
Subject: REJECT (not bounce) spam with HI score?
In-Reply-To: <CANyE0Pqg8nXnEC97=+u9BUwL4cLEzf5vHLkE8WJKaUkMEXFBow@mail.gmail.com>
References: <CAD=Xf-VDV-nViHQiW600kdCiKNH3Y89UY_6xa0u95n8p=ZeJFg@mail.gmail.com>
	<CANyE0Pqg8nXnEC97=+u9BUwL4cLEzf5vHLkE8WJKaUkMEXFBow@mail.gmail.com>
Message-ID: <CAD=Xf-X4h+em4NvsyYYiG7ef+ripmLnsDiot72+n4FExzuo1oQ@mail.gmail.com>

Thanks Antony and Alex for the support.
I'm not expert with postix because I'm using qmail from more than 10years.
I was used to use this possibility, controlling the transit of the email in
all parts :-)

Thanks again

Sim

2014-11-10 14:35 GMT+01:00 Alex Neuman <alex at vidadigital.com.pa>:

> No.
> On Nov 10, 2014 7:38 AM, "Sim" <simvirus at gmail.com> wrote:
>
>> Hello!
>>
>> Is it possible to "drop SMTP connection with a reject code", and not
>> close with "250 Ok...", if the score is Hi or with virus?
>>
>> In this case the message is "bounced" directly from the mail server of
>> the sender, and not generated a new message/bounce from destionation
>> (MailScanner) server.
>>
>> Thanks for your support
>>
>> ---
>> Sim
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141110/f03100db/attachment.html 

From pas at unh.edu  Mon Nov 10 14:11:09 2014
From: pas at unh.edu (Paul A Sand)
Date: Mon, 10 Nov 2014 09:11:09 -0500
Subject: REJECT (not bounce) spam with HI score?
In-Reply-To: <CANyE0Pqg8nXnEC97=+u9BUwL4cLEzf5vHLkE8WJKaUkMEXFBow@mail.gmail.com>
References: <CAD=Xf-VDV-nViHQiW600kdCiKNH3Y89UY_6xa0u95n8p=ZeJFg@mail.gmail.com>
	<CANyE0Pqg8nXnEC97=+u9BUwL4cLEzf5vHLkE8WJKaUkMEXFBow@mail.gmail.com>
Message-ID: <20141110141109.GA11249@cisunix.unh.edu>

> >
> > Is it possible to "drop SMTP connection with a reject code", and not close
> > with "250 Ok...", if the score is Hi or with virus?
> >

As others have pointed out: not with MailScanner. But here's
a page that describes integrating SpamAssassin into your MTA:

    http://wiki.apache.org/spamassassin/IntegratedInMta

The ClamAV package also includes a milter.

Disclaimer: I haven't tried either of these things myself.


-- 
-- Paul A Sand <pas at unh.edu>
-- Information Technology / University of New Hampshire
-- http://pubpages.unh.edu/~pas
-- Viewer discretion is advised.

From glenn.steen at gmail.com  Mon Nov 10 17:16:30 2014
From: glenn.steen at gmail.com (Glenn Steen)
Date: Mon, 10 Nov 2014 18:16:30 +0100
Subject: Bounce from "destination server" as SPAM - header/received too
	short!
In-Reply-To: <CA+Q-w8V6MYer-RQDJhiYsczU+cdRi8aBDzG+sDdHntE3SbVDSA@mail.gmail.com>
References: <CAD=Xf-UhHa8gLfsDPcJ9wTY-03UaoXjJ=etv9YNiNc6p37ORJQ@mail.gmail.com>
	<CA+Q-w8V6MYer-RQDJhiYsczU+cdRi8aBDzG+sDdHntE3SbVDSA@mail.gmail.com>
Message-ID: <CAAug_B8Gvkwr016CP048XvbgozG0E9GMUZt7UR69AWwnWKoVNA@mail.gmail.com>

Actually... All you need do is configure recipient verification in postfix
(this is in-built and documented well several places, like the postfix doc
site or the MailScanner wiki). Alternatively maintain a relay recipient map
or an access map (both are fairly trivial to set up).
Doing any of these will reject instead of bounce, for unknown recipients.
Flip side of the coin is that you may expose your recipient "universe", for
easy mapping (regardless if you have disabled vrfy), but... That's just how
it is:-)

Cheers
-- 
-- Glenn
Den 10 nov 2014 14:03 skrev "Joolee" <mailscanner at joolee.nl>:

> Quite an easy solution is to simply don't bounce. E-mail to non-existing
> users is probably (uncought) spam and they rarely come from legit e-mail
> addresses. You are spamming the actual owners of the e-mail addresses being
> abused by sending backscatter to them. It might even get you listed on a
> backscatter dnsbl.
>
> If you want to provide legit mail senders with a "this user doesn't exist"
> message, configure all legit users on your edge server so mail to
> non-existing users is being blocked on smtp level. (This will also reject
> ~90% of spam) The sending party can than implement any backscatter/messages
> they want with this information, it's not your problem.
>
>
> On 10 November 2014 12:44, Sim <simvirus at gmail.com> wrote:
>
>> Hello to all!
>>
>> I've a little issue...
>>
>> SENDER (from test at extenal.com  to  nomail at mydomain) ------> *MailScanner
>> *-----> Mailbox Server (@mydomain)
>>
>> At this time my internal "Mailbox Server" generate a bounce for not
>> exiting "nomail" account.
>> This bounce is detected as SPAM from MailScanner.
>>
>> Note:
>> - The IP of Mailbox Server is in "Whitelist"
>> - The LAN (/24) of Mailbox Server is in "Trusted Network"
>> - The LAN (/24) of Mailbox Server is in "Outbound mail relay"
>> - All other email sent from "Mailbox Server" are detected as "white list"
>>
>>
>> Checking the log of postfix i've found this:
>>
>> postfix/cleanup[20872]: C1C2960069: hold: header Received: from
>> srv.mydomain.local (unknown [192.168.0.10])??(using TLSv1 with cipher
>> AES128-SHA (128/128 bits))??(No client certificate requested)??by
>> mail.mydomain.com (Postfix) w from unknown[192.168.0.10]; from=<> to=<
>> test at external.com> proto=ESMTP helo=<srv.mydomain.local>
>> [..]
>> MailScanner[19852]: Spam Checks: Starting
>> MailScanner[19852]: Message C1C2960069.AEB15 from 192.168.0.10 has no (or
>> invalid) watermark or sender address, marked as high-scoring spam
>> MailScanner[19852]: Spam Checks: Found 1 spam messages
>>
>>
>> The header of postifx/cleanup is incomplete!!!!
>>
>> Looking for full header i've seen:  "(Postfix) with ESMTPS id
>> C1C2960069?"    and not only    "(Postfix) w"
>>
>>
>> How to increase this "check of the header limit" in postfix, cleanup or
>> MailScanner ?
>>
>> Thanks
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141110/891d489c/attachment.html 

From glenn.steen at gmail.com  Mon Nov 10 17:19:18 2014
From: glenn.steen at gmail.com (Glenn Steen)
Date: Mon, 10 Nov 2014 18:19:18 +0100
Subject: SYSERR(root): rewrite: excessive recursion (max 50),
	ruleset canonify
In-Reply-To: <CANyE0PqLv7pFBu91R+_nNNxbcmN+P4HoMDzZv4VZoeikGPPc4Q@mail.gmail.com>
References: <CAALAUo1Rj=CJ50tPJBPSYJJBp5rQUNW2Wo-84J+Q2cYR3xzguw@mail.gmail.com>
	<CANyE0PqLv7pFBu91R+_nNNxbcmN+P4HoMDzZv4VZoeikGPPc4Q@mail.gmail.com>
Message-ID: <CAAug_B9BQzk-rpJrxbMWW+95aFwwH5OCw1jjqVsZQ4xKqAXe_Q@mail.gmail.com>

... Dns issue or bad transport config?!

Cheers
-- 
-- Glenn
Den 10 nov 2014 14:57 skrev "Alex Neuman" <alex at vidadigital.com.pa>:

> Sounds like a DNS problem.
> On Nov 10, 2014 2:20 AM, "TSSB Sdn Bhd" <christian at tssb.com.my> wrote:
>
>> Hi,
>>
>> I am having a problem with my sendmail right now. I'm using CentOS5
>> running on BlueQuartz 5100R Series
>>
>> I am not able to send to my domain and keep receiving the error
>>
>> Technical details of permanent failure:
>> Google tried to deliver your message, but it was rejected by the server
>> for the recipient domain domain.name.com from domain.name.com [IP
>> address]
>>
>> The error that the other server returned was:
>> 554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify
>>
>>
>> Thanks & Regards,
>>
>> TSSB Sdn Bhd
>> 35-1, Jalan Tanjung SD 13/2,
>> Bandar Sri Damansara,
>> 52200 Kuala Lumpur.
>>
>> MAIN LINE: 603 6276 7910
>> FAX: 603 6276 0912
>> EMAIL: hdesk at tssb.com.my
>>
>>
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141110/a5658995/attachment.html 

From christian at tssb.com.my  Tue Nov 11 04:19:56 2014
From: christian at tssb.com.my (TSSB Sdn Bhd)
Date: Tue, 11 Nov 2014 12:19:56 +0800
Subject: SYSERR(root): rewrite: excessive recursion (max 50),
	ruleset canonify
In-Reply-To: <CAAug_B9BQzk-rpJrxbMWW+95aFwwH5OCw1jjqVsZQ4xKqAXe_Q@mail.gmail.com>
References: <CAALAUo1Rj=CJ50tPJBPSYJJBp5rQUNW2Wo-84J+Q2cYR3xzguw@mail.gmail.com>
	<CANyE0PqLv7pFBu91R+_nNNxbcmN+P4HoMDzZv4VZoeikGPPc4Q@mail.gmail.com>
	<CAAug_B9BQzk-rpJrxbMWW+95aFwwH5OCw1jjqVsZQ4xKqAXe_Q@mail.gmail.com>
Message-ID: <CAALAUo0iv54gM3c2op7V55hqQoWoE0ffK_y5Hay6NrZ=NT6vuA@mail.gmail.com>

Hi,

I solved the problem by removing the *mail *on myname@*mail*.
mycompanyname.com so it become myname at mycompanyname.com at /etc/mail/
*virtusertable*

Wondering what causes it to show the error below and return an error
message to sender as for my other server using the same thing and has the *mail
*still able to receive email. Why would this one I need to remove the *mail*

The error return with:-
*554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify*

Just for precaution, I want to know does removing mail from the *virtusertable
*on each user might lead to another problem? So far at the moment no
complaint but just in case it could lead to another problem*. *Other than
removing the *mail *how else can I solve this problem




Thanks & Regards,

TSSB Sdn Bhd
35-1, Jalan Tanjung SD 13/2,
Bandar Sri Damansara,
52200 Kuala Lumpur.

MAIN LINE: 603 6276 7910
FAX: 603 6276 0912
EMAIL: hdesk at tssb.com.my





On Tue, Nov 11, 2014 at 1:19 AM, Glenn Steen <glenn.steen at gmail.com> wrote:

> ... Dns issue or bad transport config?!
>
> Cheers
> --
> -- Glenn
> Den 10 nov 2014 14:57 skrev "Alex Neuman" <alex at vidadigital.com.pa>:
>
> Sounds like a DNS problem.
>> On Nov 10, 2014 2:20 AM, "TSSB Sdn Bhd" <christian at tssb.com.my> wrote:
>>
>>> Hi,
>>>
>>> I am having a problem with my sendmail right now. I'm using CentOS5
>>> running on BlueQuartz 5100R Series
>>>
>>> I am not able to send to my domain and keep receiving the error
>>>
>>> Technical details of permanent failure:
>>> Google tried to deliver your message, but it was rejected by the server
>>> for the recipient domain domain.name.com from domain.name.com [IP
>>> address]
>>>
>>> The error that the other server returned was:
>>> 554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify
>>>
>>>
>>> Thanks & Regards,
>>>
>>> TSSB Sdn Bhd
>>> 35-1, Jalan Tanjung SD 13/2,
>>> Bandar Sri Damansara,
>>> 52200 Kuala Lumpur.
>>>
>>> MAIN LINE: 603 6276 7910
>>> FAX: 603 6276 0912
>>> EMAIL: hdesk at tssb.com.my
>>>
>>>
>>>
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141111/47260ccb/attachment.html 

From mogens at fumlersoft.dk  Tue Nov 11 04:59:56 2014
From: mogens at fumlersoft.dk (Mogens Melander)
Date: Tue, 11 Nov 2014 05:59:56 +0100 (CET)
Subject: =?utf-8?Q?Re:_SYSERR=28root=29:_rewrite:_excessive_recursion_=28max_50=29?=
	=?utf-8?Q?=2C_ruleset_canonify?=
In-Reply-To: <CAALAUo0iv54gM3c2op7V55hqQoWoE0ffK_y5Hay6NrZ=NT6vuA@mail.gmail.com>
References: <CAALAUo1Rj=CJ50tPJBPSYJJBp5rQUNW2Wo-84J+Q2cYR3xzguw@mail.gmail.com>
	<CANyE0PqLv7pFBu91R+_nNNxbcmN+P4HoMDzZv4VZoeikGPPc4Q@mail.gmail.com>
	<CAAug_B9BQzk-rpJrxbMWW+95aFwwH5OCw1jjqVsZQ4xKqAXe_Q@mail.gmail.com>
	<CAALAUo0iv54gM3c2op7V55hqQoWoE0ffK_y5Hay6NrZ=NT6vuA@mail.gmail.com>
Message-ID: <4102.b4b700bf.1415681996.nsm@mail.fumlersoft.dk>

Hi,

Just wondering.

Why would you have a hostname in an email address, unless
you have myname at host1.example.com and myname at host2.example.com ?

On Tue, November 11, 2014 05:19, TSSB Sdn Bhd wrote:
> Hi,
>
> I solved the problem by removing the *mail *on myname@*mail*.
> mycompanyname.com so it become myname at mycompanyname.com at /etc/mail/
> *virtusertable*
>
> Wondering what causes it to show the error below and return an error
> message to sender as for my other server using the same thing and has the
> *mail
> *still able to receive email. Why would this one I need to remove the
> *mail*
>
> The error return with:-
> *554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify*
>
> Just for precaution, I want to know does removing mail from the
> *virtusertable
> *on each user might lead to another problem? So far at the moment no
> complaint but just in case it could lead to another problem*. *Other than
> removing the *mail *how else can I solve this problem
>
>
>
>
> Thanks & Regards,
>
> TSSB Sdn Bhd
> 35-1, Jalan Tanjung SD 13/2,
> Bandar Sri Damansara,
> 52200 Kuala Lumpur.
>
> MAIN LINE: 603 6276 7910
> FAX: 603 6276 0912
> EMAIL: hdesk at tssb.com.my
>
>
>
>
>
> On Tue, Nov 11, 2014 at 1:19 AM, Glenn Steen <glenn.steen at gmail.com>
> wrote:
>
>> ... Dns issue or bad transport config?!
>>
>> Cheers
>> --
>> -- Glenn
>> Den 10 nov 2014 14:57 skrev "Alex Neuman" <alex at vidadigital.com.pa>:
>>
>> Sounds like a DNS problem.
>>> On Nov 10, 2014 2:20 AM, "TSSB Sdn Bhd" <christian at tssb.com.my> wrote:
>>>
>>>> Hi,
>>>>
>>>> I am having a problem with my sendmail right now. I'm using CentOS5
>>>> running on BlueQuartz 5100R Series
>>>>
>>>> I am not able to send to my domain and keep receiving the error
>>>>
>>>> Technical details of permanent failure:
>>>> Google tried to deliver your message, but it was rejected by the
>>>> server
>>>> for the recipient domain domain.name.com from domain.name.com [IP
>>>> address]
>>>>
>>>> The error that the other server returned was:
>>>> 554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify
>>>>
>>>>
>>>> Thanks & Regards,
>>>>
>>>> TSSB Sdn Bhd
>>>> 35-1, Jalan Tanjung SD 13/2,
>>>> Bandar Sri Damansara,
>>>> 52200 Kuala Lumpur.
>>>>
>>>> MAIN LINE: 603 6276 7910
>>>> FAX: 603 6276 0912
>>>> EMAIL: hdesk at tssb.com.my
>>>>


-- 
Mogens Melander
+66 8701 33224


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


From christian at tssb.com.my  Tue Nov 11 09:47:32 2014
From: christian at tssb.com.my (TSSB Sdn Bhd)
Date: Tue, 11 Nov 2014 17:47:32 +0800
Subject: SYSERR(root): rewrite: excessive recursion (max 50),
	ruleset canonify
In-Reply-To: <4102.b4b700bf.1415681996.nsm@mail.fumlersoft.dk>
References: <CAALAUo1Rj=CJ50tPJBPSYJJBp5rQUNW2Wo-84J+Q2cYR3xzguw@mail.gmail.com>
	<CANyE0PqLv7pFBu91R+_nNNxbcmN+P4HoMDzZv4VZoeikGPPc4Q@mail.gmail.com>
	<CAAug_B9BQzk-rpJrxbMWW+95aFwwH5OCw1jjqVsZQ4xKqAXe_Q@mail.gmail.com>
	<CAALAUo0iv54gM3c2op7V55hqQoWoE0ffK_y5Hay6NrZ=NT6vuA@mail.gmail.com>
	<4102.b4b700bf.1415681996.nsm@mail.fumlersoft.dk>
Message-ID: <CAALAUo0cHKciSfJisG9-xc6+vb43cAxhaUg5CVKTWHgXXZB88g@mail.gmail.com>

Hi,

Because that is my company MX record mail.mycompany.com

Example: mail.mycompany.com and my other company mail.myothercompany.com

Let me show you the original copy of the virtusertable that has the problem
before I removed the hostname mail

admin at localhost.localdomain     admin
root-admin at localhost.localdomain        admin
apache at mail.mycompany.com    apache
sys at mail.mycompany.com       sys
MAILER-DAEMON at mail.mycompany.com     MAILER-DAEMON
root at mail.mycompany.com      root
nobody at mail.mycompany.com    nobody
majordomo at mail.mycompany.com site2-majordomo
majordomo-owner at mail.mycompany.com   site2-majordomo-owner
owner-majordomo at mail.mycompany.com   site2-owner-majordomo
@mycompany.com       %1 at mail.mycompany.com
@mail.mycompany.com  error:nouser No such user here
user at mail.mycompany.com user
user at mail.mycompany.com     user
user at mail.mycompany.com user
user at mail.mycompany.com      user
user at mail.mycompany.com     user
user at mail.mycompany.com user
user at mail.mycompany.com     user
61-depthead-list at mail.mycompany.com  61-depthead-list
depthead-approval at mail.mycompany.com 61-depthead-approval
depthead-request at mail.mycompany.com  61-depthead-request
owner-depthead at mail.mycompany.com    owner-61-depthead
depthead-owner at mail.mycompany.com    61-depthead-owner
depthead at mail.mycompany.com  61-depthead
user at mail.mycompany.com       user
user at mail.mycompany.com        user
user at mail.mycompany.com      user
apache at www.mycompany.com     apache
sys at www.mycompany.com        sys
MAILER-DAEMON at www.mycompany.com      MAILER-DAEMON
root at www.mycompany.com       root
nobody at www.mycompany.com     nobody
majordomo at www.mycompany.com  site1-majordomo
majordomo-owner at www.mycompany.com    site1-majordomo-owner
owner-majordomo at www.mycompany.com    site1-owner-majordomo
@www.mycompany.com   error:nouser No such user here
user at www.mycompany.com     user
apache at ftp.mycompany.com     apache
MAILER-DAEMON at ftp.mycompany.com      MAILER-DAEMON
root at ftp.mycompany.com       root
nobody at ftp.mycompany.com     nobody
majordomo at ftp.mycompany.com  site3-majordomo
majordomo-owner at ftp.mycompany.com    site3-majordomo-owner
owner-majordomo at ftp.mycompany.com    site3-owner-majordomo
@ftp.mycompany.com   error:nouser No such user here
userftp at ftp.mycompany.com     userftp
user at ftp.mycompany.com        user
user at ftp.mycompany.com  user
user at ftp.mycompany.com   user
user at mail.mycompany.com   user
user at mail.mycompany.com      user
user at mail.mycompany.com        user
user at mail.mycompany.com    user
user at mail.mycompany.com        user
user at mail.mycompany.com    user
user at mail.mycompany.com    user
user at ftp.mycompany.com       user
user at mail.mycompany.com     user
user at mail.mycompany.com    user
user at mail.mycompany.com    user
user at mail.mycompany.com      user
user at mail.mycompany.com    user
ladya at mail.mycompany.com    user
user at mail.mycompany.com    user
user at mail.mycompany.com user
softwareupdate at ftp.mycompany.com     softwareupdate
software.update at ftp.mycompany.com    softwareupdate
user at ftp.mycompany.com     user
user at ftp.mycompany.com     user
user at mail.mycompany.com user
user at mail.mycompany.com     user
user at mail.mycompany.com     user
user at mail.mycompany.com    user
user at mail.mycompany.com  user
user at mail.mycompany.com user
user at mail.mycompany.com      user
user at mail.mycompany.com     user



Thanks & Regards,

TSSB Sdn Bhd
35-1, Jalan Tanjung SD 13/2,
Bandar Sri Damansara,
52200 Kuala Lumpur.

MAIN LINE: 603 6276 7910
FAX: 603 6276 0912
EMAIL: hdesk at tssb.com.my





On Tue, Nov 11, 2014 at 12:59 PM, Mogens Melander <mogens at fumlersoft.dk>
wrote:

> Hi,
>
> Just wondering.
>
> Why would you have a hostname in an email address, unless
> you have myname at host1.example.com and myname at host2.example.com ?
>
> On Tue, November 11, 2014 05:19, TSSB Sdn Bhd wrote:
> > Hi,
> >
> > I solved the problem by removing the *mail *on myname@*mail*.
> > mycompanyname.com so it become myname at mycompanyname.com at /etc/mail/
> > *virtusertable*
> >
> > Wondering what causes it to show the error below and return an error
> > message to sender as for my other server using the same thing and has the
> > *mail
> > *still able to receive email. Why would this one I need to remove the
> > *mail*
> >
> > The error return with:-
> > *554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify*
> >
> > Just for precaution, I want to know does removing mail from the
> > *virtusertable
> > *on each user might lead to another problem? So far at the moment no
> > complaint but just in case it could lead to another problem*. *Other than
> > removing the *mail *how else can I solve this problem
> >
> >
> >
> >
> > Thanks & Regards,
> >
> > TSSB Sdn Bhd
> > 35-1, Jalan Tanjung SD 13/2,
> > Bandar Sri Damansara,
> > 52200 Kuala Lumpur.
> >
> > MAIN LINE: 603 6276 7910
> > FAX: 603 6276 0912
> > EMAIL: hdesk at tssb.com.my
> >
> >
> >
> >
> >
> > On Tue, Nov 11, 2014 at 1:19 AM, Glenn Steen <glenn.steen at gmail.com>
> > wrote:
> >
> >> ... Dns issue or bad transport config?!
> >>
> >> Cheers
> >> --
> >> -- Glenn
> >> Den 10 nov 2014 14:57 skrev "Alex Neuman" <alex at vidadigital.com.pa>:
> >>
> >> Sounds like a DNS problem.
> >>> On Nov 10, 2014 2:20 AM, "TSSB Sdn Bhd" <christian at tssb.com.my> wrote:
> >>>
> >>>> Hi,
> >>>>
> >>>> I am having a problem with my sendmail right now. I'm using CentOS5
> >>>> running on BlueQuartz 5100R Series
> >>>>
> >>>> I am not able to send to my domain and keep receiving the error
> >>>>
> >>>> Technical details of permanent failure:
> >>>> Google tried to deliver your message, but it was rejected by the
> >>>> server
> >>>> for the recipient domain domain.name.com from domain.name.com [IP
> >>>> address]
> >>>>
> >>>> The error that the other server returned was:
> >>>> 554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify
> >>>>
> >>>>
> >>>> Thanks & Regards,
> >>>>
> >>>> TSSB Sdn Bhd
> >>>> 35-1, Jalan Tanjung SD 13/2,
> >>>> Bandar Sri Damansara,
> >>>> 52200 Kuala Lumpur.
> >>>>
> >>>> MAIN LINE: 603 6276 7910
> >>>> FAX: 603 6276 0912
> >>>> EMAIL: hdesk at tssb.com.my
> >>>>
>
>
> --
> Mogens Melander
> +66 8701 33224
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141111/fa4ff51a/attachment.html 

From alex at vidadigital.com.pa  Tue Nov 11 12:56:03 2014
From: alex at vidadigital.com.pa (Alex Neuman)
Date: Tue, 11 Nov 2014 07:56:03 -0500
Subject: SYSERR(root): rewrite: excessive recursion (max 50),
	ruleset canonify
In-Reply-To: <CAALAUo0cHKciSfJisG9-xc6+vb43cAxhaUg5CVKTWHgXXZB88g@mail.gmail.com>
References: <CAALAUo1Rj=CJ50tPJBPSYJJBp5rQUNW2Wo-84J+Q2cYR3xzguw@mail.gmail.com>
	<CANyE0PqLv7pFBu91R+_nNNxbcmN+P4HoMDzZv4VZoeikGPPc4Q@mail.gmail.com>
	<CAAug_B9BQzk-rpJrxbMWW+95aFwwH5OCw1jjqVsZQ4xKqAXe_Q@mail.gmail.com>
	<CAALAUo0iv54gM3c2op7V55hqQoWoE0ffK_y5Hay6NrZ=NT6vuA@mail.gmail.com>
	<4102.b4b700bf.1415681996.nsm@mail.fumlersoft.dk>
	<CAALAUo0cHKciSfJisG9-xc6+vb43cAxhaUg5CVKTWHgXXZB88g@mail.gmail.com>
Message-ID: <CANyE0Pr_8kQQe_yqFASbraE2NzWhXFRx-2-GZbtbC7MeC8L_vA@mail.gmail.com>

You should read up on how mail works, what virtusertable is, and so on.
That setup looks like something inherited from at least 20 years ago, when
people understood MX records, DNS and SMTP a little less but were forced to
put systems in place without proper training.




*Alex Neuman van der Hans*
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fvidadigital.com.pa%2F&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>

Mobile: +507 6781-9505
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>
Work: +507 832-6725
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2F%2B5078326725%2F&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>
Work (USA): +1 (440) 253-9789
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>
Skype: AlexNeuman
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>

Don't miss Vida Digital on LiveStream
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>
!
Saturdays 8am-10am on M?xima 91.7FM Panama

Follow *@AlexNeuman
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>*
on
Twitter
Like Vida Digital
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>
on
Facebook
Follow VidaDigital
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>
on
Instagram
Subscribe to Vida Digital
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>
on
Youtube

On Tue, Nov 11, 2014 at 4:47 AM, TSSB Sdn Bhd <christian at tssb.com.my> wrote:

> Hi,
>
> Because that is my company MX record mail.mycompany.com
>
> Example: mail.mycompany.com and my other company mail.myothercompany.com
>
> Let me show you the original copy of the virtusertable that has the
> problem before I removed the hostname mail
>
> admin at localhost.localdomain     admin
> root-admin at localhost.localdomain        admin
> apache at mail.mycompany.com    apache
> sys at mail.mycompany.com       sys
> MAILER-DAEMON at mail.mycompany.com     MAILER-DAEMON
> root at mail.mycompany.com      root
> nobody at mail.mycompany.com    nobody
> majordomo at mail.mycompany.com site2-majordomo
> majordomo-owner at mail.mycompany.com   site2-majordomo-owner
> owner-majordomo at mail.mycompany.com   site2-owner-majordomo
> @mycompany.com       %1 at mail.mycompany.com
> @mail.mycompany.com  error:nouser No such user here
> user at mail.mycompany.com user
> user at mail.mycompany.com     user
> user at mail.mycompany.com user
> user at mail.mycompany.com      user
> user at mail.mycompany.com     user
> user at mail.mycompany.com user
> user at mail.mycompany.com     user
> 61-depthead-list at mail.mycompany.com  61-depthead-list
> depthead-approval at mail.mycompany.com 61-depthead-approval
> depthead-request at mail.mycompany.com  61-depthead-request
> owner-depthead at mail.mycompany.com    owner-61-depthead
> depthead-owner at mail.mycompany.com    61-depthead-owner
> depthead at mail.mycompany.com  61-depthead
> user at mail.mycompany.com       user
> user at mail.mycompany.com        user
> user at mail.mycompany.com      user
> apache at www.mycompany.com     apache
> sys at www.mycompany.com        sys
> MAILER-DAEMON at www.mycompany.com      MAILER-DAEMON
> root at www.mycompany.com       root
> nobody at www.mycompany.com     nobody
> majordomo at www.mycompany.com  site1-majordomo
> majordomo-owner at www.mycompany.com    site1-majordomo-owner
> owner-majordomo at www.mycompany.com    site1-owner-majordomo
> @www.mycompany.com   error:nouser No such user here
> user at www.mycompany.com     user
> apache at ftp.mycompany.com     apache
> MAILER-DAEMON at ftp.mycompany.com      MAILER-DAEMON
> root at ftp.mycompany.com       root
> nobody at ftp.mycompany.com     nobody
> majordomo at ftp.mycompany.com  site3-majordomo
> majordomo-owner at ftp.mycompany.com    site3-majordomo-owner
> owner-majordomo at ftp.mycompany.com    site3-owner-majordomo
> @ftp.mycompany.com   error:nouser No such user here
> userftp at ftp.mycompany.com     userftp
> user at ftp.mycompany.com        user
> user at ftp.mycompany.com  user
> user at ftp.mycompany.com   user
> user at mail.mycompany.com   user
> user at mail.mycompany.com      user
> user at mail.mycompany.com        user
> user at mail.mycompany.com    user
> user at mail.mycompany.com        user
> user at mail.mycompany.com    user
> user at mail.mycompany.com    user
> user at ftp.mycompany.com       user
> user at mail.mycompany.com     user
> user at mail.mycompany.com    user
> user at mail.mycompany.com    user
> user at mail.mycompany.com      user
> user at mail.mycompany.com    user
> ladya at mail.mycompany.com    user
> user at mail.mycompany.com    user
> user at mail.mycompany.com user
> softwareupdate at ftp.mycompany.com     softwareupdate
> software.update at ftp.mycompany.com    softwareupdate
> user at ftp.mycompany.com     user
> user at ftp.mycompany.com     user
> user at mail.mycompany.com user
> user at mail.mycompany.com     user
> user at mail.mycompany.com     user
> user at mail.mycompany.com    user
> user at mail.mycompany.com  user
> user at mail.mycompany.com user
> user at mail.mycompany.com      user
> user at mail.mycompany.com     user
>
>
>
> Thanks & Regards,
>
> TSSB Sdn Bhd
> 35-1, Jalan Tanjung SD 13/2,
> Bandar Sri Damansara,
> 52200 Kuala Lumpur.
>
> MAIN LINE: 603 6276 7910
> FAX: 603 6276 0912
> EMAIL: hdesk at tssb.com.my
>
>
>
>
>
> On Tue, Nov 11, 2014 at 12:59 PM, Mogens Melander <mogens at fumlersoft.dk>
> wrote:
>
>> Hi,
>>
>> Just wondering.
>>
>> Why would you have a hostname in an email address, unless
>> you have myname at host1.example.com and myname at host2.example.com ?
>>
>> On Tue, November 11, 2014 05:19, TSSB Sdn Bhd wrote:
>> > Hi,
>> >
>> > I solved the problem by removing the *mail *on myname@*mail*.
>> > mycompanyname.com
>> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fmycompanyname.com%2F&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>
>> so it become myname at mycompanyname.com at /etc/mail/
>> > *virtusertable*
>> >
>> > Wondering what causes it to show the error below and return an error
>> > message to sender as for my other server using the same thing and has
>> the
>> > *mail
>> > *still able to receive email. Why would this one I need to remove the
>> > *mail*
>> >
>> > The error return with:-
>> > *554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify*
>> >
>> > Just for precaution, I want to know does removing mail from the
>> > *virtusertable
>> > *on each user might lead to another problem? So far at the moment no
>> > complaint but just in case it could lead to another problem*. *Other
>> than
>> > removing the *mail *how else can I solve this problem
>> >
>> >
>> >
>> >
>> > Thanks & Regards,
>> >
>> > TSSB Sdn Bhd
>> > 35-1, Jalan Tanjung SD 13/2,
>> > Bandar Sri Damansara,
>> > 52200 Kuala Lumpur.
>> >
>> > MAIN LINE: 603 6276 7910
>> > FAX: 603 6276 0912
>> > EMAIL: hdesk at tssb.com.my
>> >
>> >
>> >
>> >
>> >
>> > On Tue, Nov 11, 2014 at 1:19 AM, Glenn Steen <glenn.steen at gmail.com>
>> > wrote:
>> >
>> >> ... Dns issue or bad transport config?!
>> >>
>> >> Cheers
>> >> --
>> >> -- Glenn
>> >> Den 10 nov 2014 14:57 skrev "Alex Neuman" <alex at vidadigital.com.pa>:
>> >>
>> >> Sounds like a DNS problem.
>> >>> On Nov 10, 2014 2:20 AM, "TSSB Sdn Bhd" <christian at tssb.com.my>
>> wrote:
>> >>>
>> >>>> Hi,
>> >>>>
>> >>>> I am having a problem with my sendmail right now. I'm using CentOS5
>> >>>> running on BlueQuartz 5100R Series
>> >>>>
>> >>>> I am not able to send to my domain and keep receiving the error
>> >>>>
>> >>>> Technical details of permanent failure:
>> >>>> Google tried to deliver your message, but it was rejected by the
>> >>>> server
>> >>>> for the recipient domain domain.name.com
>> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fdomain.name.com%2F&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>
>> from domain.name.com
>> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fdomain.name.com%2F&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>
>> [IP
>> >>>> address]
>> >>>>
>> >>>> The error that the other server returned was:
>> >>>> 554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify
>> >>>>
>> >>>>
>> >>>> Thanks & Regards,
>> >>>>
>> >>>> TSSB Sdn Bhd
>> >>>> 35-1, Jalan Tanjung SD 13/2,
>> >>>> Bandar Sri Damansara,
>> >>>> 52200 Kuala Lumpur.
>> >>>>
>> >>>> MAIN LINE: 603 6276 7910
>> >>>> FAX: 603 6276 0912
>> >>>> EMAIL: hdesk at tssb.com.my
>> >>>>
>>
>>
>> --
>> Mogens Melander
>> +66 8701 33224
>>
>>
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Flists.mailscanner.info%2Fmailman%2Flistinfo%2Fmailscanner&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fwiki.mailscanner.info%2Fposting&si=5887134288314368&pi=dad628b9-14c3-45a4-beea-479361c5e71e>
>>
>> Support MailScanner development - buy the book off the website!
>>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141111/c1ee4c4b/attachment.html 

From rcooper at dwford.com  Tue Nov 11 20:32:25 2014
From: rcooper at dwford.com (Rick Cooper)
Date: Tue, 11 Nov 2014 15:32:25 -0500
Subject: SYSERR(root): rewrite: excessive recursion (max 50),
	ruleset canonify
In-Reply-To: <CAALAUo0cHKciSfJisG9-xc6+vb43cAxhaUg5CVKTWHgXXZB88g@mail.gmail.com>
References: <CAALAUo1Rj=CJ50tPJBPSYJJBp5rQUNW2Wo-84J+Q2cYR3xzguw@mail.gmail.com><CANyE0PqLv7pFBu91R+_nNNxbcmN+P4HoMDzZv4VZoeikGPPc4Q@mail.gmail.com><CAAug_B9BQzk-rpJrxbMWW+95aFwwH5OCw1jjqVsZQ4xKqAXe_Q@mail.gmail.com><CAALAUo0iv54gM3c2op7V55hqQoWoE0ffK_y5Hay6NrZ=NT6vuA@mail.gmail.com><4102.b4b700bf.1415681996.nsm@mail.fumlersoft.dk>
	<CAALAUo0cHKciSfJisG9-xc6+vb43cAxhaUg5CVKTWHgXXZB88g@mail.gmail.com>
Message-ID: <71B285CF3D57466EAE66ECA3E05811BA@SAHOMELT>

I have mx records for all of my domains (of which there is many) and would
never set an email address to the mx record. Generally you set the email to
the domain or sub domain (I bet you don't have a record for
www.mail.domain.com) and then set the mx record to the mx host name (which
doesn't have to have anything to do with domain.com)
 
So let's look at domain.com
    domain.com a record = 10.10.10.1
    domain.com mx pref 5 = mail1.domain.com
        mail1.domain.com a record = 10.10.10.2
    domain.com mx pref 10 = mail2.domain.com
        mail2.domain.com a record = 10.10.1.1
Could be perfectly valid even if the actual outbound were 10.10.10.1 or
10.1.10.10
so long as mail delivered to one of the two inbound mail servers is fed into
the server that stores the mail for retrieval. 
Look at this
https://groups.google.com/forum/#!msg/comp.mail.sendmail/GKJFZe7Eqqs/eoUqo80
2VbIJ
I quickly perused it and perhaps the $ answer would resolve your issue as
well.
 
Rick Cooper


  _____  

From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of TSSB Sdn
Bhd
Sent: Tuesday, November 11, 2014 4:48 AM
To: MailScanner discussion
Subject: Re: SYSERR(root): rewrite: excessive recursion (max 50),ruleset
canonify


Hi,


Because that is my company MX record mail.mycompany.com


Example: mail.mycompany.com and my other company mail.myothercompany.com


Let me show you the original copy of the virtusertable that has the problem
before I removed the hostname mail


admin at localhost.localdomain     admin
root-admin at localhost.localdomain        admin
apache at mail.mycompany.com    apache
sys at mail.mycompany.com       sys
MAILER-DAEMON at mail.mycompany.com     MAILER-DAEMON
root at mail.mycompany.com      root
nobody at mail.mycompany.com    nobody
majordomo at mail.mycompany.com site2-majordomo
majordomo-owner at mail.mycompany.com   site2-majordomo-owner
owner-majordomo at mail.mycompany.com   site2-owner-majordomo
@mycompany.com       %1 at mail.mycompany.com
@mail.mycompany.com  error:nouser No such user here
user at mail.mycompany.com user
user at mail.mycompany.com     user
user at mail.mycompany.com user
user at mail.mycompany.com      user
user at mail.mycompany.com     user
user at mail.mycompany.com user
user at mail.mycompany.com     user
61-depthead-list at mail.mycompany.com  61-depthead-list
depthead-approval at mail.mycompany.com 61-depthead-approval
depthead-request at mail.mycompany.com  61-depthead-request
owner-depthead at mail.mycompany.com    owner-61-depthead
depthead-owner at mail.mycompany.com    61-depthead-owner
depthead at mail.mycompany.com  61-depthead
user at mail.mycompany.com       user
user at mail.mycompany.com        user
user at mail.mycompany.com      user
apache at www.mycompany.com     apache
sys at www.mycompany.com        sys
MAILER-DAEMON at www.mycompany.com      MAILER-DAEMON
root at www.mycompany.com       root
nobody at www.mycompany.com     nobody
majordomo at www.mycompany.com  site1-majordomo
majordomo-owner at www.mycompany.com    site1-majordomo-owner
owner-majordomo at www.mycompany.com    site1-owner-majordomo
@www.mycompany.com   error:nouser No such user here
user at www.mycompany.com     user
apache at ftp.mycompany.com     apache
MAILER-DAEMON at ftp.mycompany.com      MAILER-DAEMON
root at ftp.mycompany.com       root
nobody at ftp.mycompany.com     nobody
majordomo at ftp.mycompany.com  site3-majordomo
majordomo-owner at ftp.mycompany.com    site3-majordomo-owner
owner-majordomo at ftp.mycompany.com    site3-owner-majordomo
@ftp.mycompany.com   error:nouser No such user here
userftp at ftp.mycompany.com     userftp
user at ftp.mycompany.com        user
user at ftp.mycompany.com  user
user at ftp.mycompany.com   user
user at mail.mycompany.com   user
user at mail.mycompany.com      user
user at mail.mycompany.com        user
user at mail.mycompany.com    user
user at mail.mycompany.com        user
user at mail.mycompany.com    user
user at mail.mycompany.com    user
user at ftp.mycompany.com       user
user at mail.mycompany.com     user
user at mail.mycompany.com    user
user at mail.mycompany.com    user
user at mail.mycompany.com      user
user at mail.mycompany.com    user
ladya at mail.mycompany.com    user
user at mail.mycompany.com    user
user at mail.mycompany.com user
softwareupdate at ftp.mycompany.com     softwareupdate
software.update at ftp.mycompany.com    softwareupdate
user at ftp.mycompany.com     user
user at ftp.mycompany.com     user
user at mail.mycompany.com user
user at mail.mycompany.com     user
user at mail.mycompany.com     user
user at mail.mycompany.com    user
user at mail.mycompany.com  user
user at mail.mycompany.com user
user at mail.mycompany.com      user
user at mail.mycompany.com     user




Thanks & Regards,

TSSB Sdn Bhd
35-1, Jalan Tanjung SD 13/2, 
Bandar Sri Damansara, 
52200 Kuala Lumpur. 

MAIN LINE: 603 6276 7910 

FAX: 603 6276 0912
EMAIL: hdesk at tssb.com.my

  <http://i41.tinypic.com/15coj0i.png> 

  <http://bit.ly/TsuagN> 


On Tue, Nov 11, 2014 at 12:59 PM, Mogens Melander <mogens at fumlersoft.dk>
wrote:


Hi,

Just wondering.

Why would you have a hostname in an email address, unless
you have myname at host1.example.com and myname at host2.example.com ?

On Tue, November 11, 2014 05:19, TSSB Sdn Bhd wrote:
> Hi,
>
> I solved the problem by removing the *mail *on myname@*mail*.
> mycompanyname.com so it become myname at mycompanyname.com at /etc/mail/
> *virtusertable*
>
> Wondering what causes it to show the error below and return an error
> message to sender as for my other server using the same thing and has the
> *mail
> *still able to receive email. Why would this one I need to remove the
> *mail*
>
> The error return with:-
> *554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify*
>
> Just for precaution, I want to know does removing mail from the
> *virtusertable
> *on each user might lead to another problem? So far at the moment no
> complaint but just in case it could lead to another problem*. *Other than
> removing the *mail *how else can I solve this problem
>
>
>
>
> Thanks & Regards,
>
> TSSB Sdn Bhd
> 35-1, Jalan Tanjung SD 13/2,
> Bandar Sri Damansara,
> 52200 Kuala Lumpur.
>
> MAIN LINE: 603 6276 7910 <tel:603%206276%207910> 
> FAX: 603 6276 0912 <tel:603%206276%200912> 
> EMAIL: hdesk at tssb.com.my
>
>
>
>
>

> On Tue, Nov 11, 2014 at 1:19 AM, Glenn Steen <glenn.steen at gmail.com>
> wrote:
>
>> ... Dns issue or bad transport config?!
>>
>> Cheers
>> --
>> -- Glenn
>> Den 10 nov 2014 14:57 skrev "Alex Neuman" <alex at vidadigital.com.pa>:
>>
>> Sounds like a DNS problem.
>>> On Nov 10, 2014 2:20 AM, "TSSB Sdn Bhd" <christian at tssb.com.my> wrote:
>>>
>>>> Hi,
>>>>
>>>> I am having a problem with my sendmail right now. I'm using CentOS5
>>>> running on BlueQuartz 5100R Series
>>>>
>>>> I am not able to send to my domain and keep receiving the error
>>>>
>>>> Technical details of permanent failure:
>>>> Google tried to deliver your message, but it was rejected by the
>>>> server
>>>> for the recipient domain domain.name.com from domain.name.com [IP
>>>> address]
>>>>
>>>> The error that the other server returned was:
>>>> 554 5.0.0 rewrite: excessive recursion (max 50), ruleset canonify
>>>>
>>>>
>>>> Thanks & Regards,
>>>>
>>>> TSSB Sdn Bhd
>>>> 35-1, Jalan Tanjung SD 13/2,
>>>> Bandar Sri Damansara,
>>>> 52200 Kuala Lumpur.
>>>>
>>>> MAIN LINE: 603 6276 7910
>>>> FAX: 603 6276 0912
>>>> EMAIL: hdesk at tssb.com.my
>>>>



--
Mogens Melander
+66 8701  <tel:%2B66%208701%2033224> 33224


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141111/a856cb72/attachment.html 

From simvirus at gmail.com  Wed Nov 12 18:58:36 2014
From: simvirus at gmail.com (Sim)
Date: Wed, 12 Nov 2014 19:58:36 +0100
Subject: Bounce from "destination server" as SPAM - header/received too
	short!
In-Reply-To: <CAAug_B8Gvkwr016CP048XvbgozG0E9GMUZt7UR69AWwnWKoVNA@mail.gmail.com>
References: <CAD=Xf-UhHa8gLfsDPcJ9wTY-03UaoXjJ=etv9YNiNc6p37ORJQ@mail.gmail.com>
	<CA+Q-w8V6MYer-RQDJhiYsczU+cdRi8aBDzG+sDdHntE3SbVDSA@mail.gmail.com>
	<CAAug_B8Gvkwr016CP048XvbgozG0E9GMUZt7UR69AWwnWKoVNA@mail.gmail.com>
Message-ID: <CAD=Xf-XCKZ5Rz+ViuG2N+_bz4d85RZHcW+0d-YKC=Cn94k+RWA@mail.gmail.com>

Thanks for reply...
But in other case the bounce is generated for other reasons
For example if the mailbox for the user is over quota, etc..
In this case the bounce is "dropped".
The question is why this "postfix/cleanup - MailScanner" header is too
short ...and how to extend it :-(

Thanks again

---
Sim

2014-11-10 18:16 GMT+01:00 Glenn Steen <glenn.steen at gmail.com>:

> Actually... All you need do is configure recipient verification in postfix
> (this is in-built and documented well several places, like the postfix doc
> site or the MailScanner wiki). Alternatively maintain a relay recipient map
> or an access map (both are fairly trivial to set up).
> Doing any of these will reject instead of bounce, for unknown recipients.
> Flip side of the coin is that you may expose your recipient "universe", for
> easy mapping (regardless if you have disabled vrfy), but... That's just how
> it is:-)
>
> Cheers
> --
> -- Glenn
> Den 10 nov 2014 14:03 skrev "Joolee" <mailscanner at joolee.nl>:
>
> Quite an easy solution is to simply don't bounce. E-mail to non-existing
>> users is probably (uncought) spam and they rarely come from legit e-mail
>> addresses. You are spamming the actual owners of the e-mail addresses being
>> abused by sending backscatter to them. It might even get you listed on a
>> backscatter dnsbl.
>>
>> If you want to provide legit mail senders with a "this user doesn't
>> exist" message, configure all legit users on your edge server so mail to
>> non-existing users is being blocked on smtp level. (This will also reject
>> ~90% of spam) The sending party can than implement any backscatter/messages
>> they want with this information, it's not your problem.
>>
>>
>> On 10 November 2014 12:44, Sim <simvirus at gmail.com> wrote:
>>
>>> Hello to all!
>>>
>>> I've a little issue...
>>>
>>> SENDER (from test at extenal.com  to  nomail at mydomain) ------> *MailScanner
>>> *-----> Mailbox Server (@mydomain)
>>>
>>> At this time my internal "Mailbox Server" generate a bounce for not
>>> exiting "nomail" account.
>>> This bounce is detected as SPAM from MailScanner.
>>>
>>> Note:
>>> - The IP of Mailbox Server is in "Whitelist"
>>> - The LAN (/24) of Mailbox Server is in "Trusted Network"
>>> - The LAN (/24) of Mailbox Server is in "Outbound mail relay"
>>> - All other email sent from "Mailbox Server" are detected as "white list"
>>>
>>>
>>> Checking the log of postfix i've found this:
>>>
>>> postfix/cleanup[20872]: C1C2960069: hold: header Received: from
>>> srv.mydomain.local (unknown [192.168.0.10])??(using TLSv1 with cipher
>>> AES128-SHA (128/128 bits))??(No client certificate requested)??by
>>> mail.mydomain.com (Postfix) w from unknown[192.168.0.10]; from=<> to=<
>>> test at external.com> proto=ESMTP helo=<srv.mydomain.local>
>>> [..]
>>> MailScanner[19852]: Spam Checks: Starting
>>> MailScanner[19852]: Message C1C2960069.AEB15 from 192.168.0.10 has no
>>> (or invalid) watermark or sender address, marked as high-scoring spam
>>> MailScanner[19852]: Spam Checks: Found 1 spam messages
>>>
>>>
>>> The header of postifx/cleanup is incomplete!!!!
>>>
>>> Looking for full header i've seen:  "(Postfix) with ESMTPS id
>>> C1C2960069?"    and not only    "(Postfix) w"
>>>
>>>
>>> How to increase this "check of the header limit" in postfix, cleanup or
>>> MailScanner ?
>>>
>>> Thanks
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141112/1e55b6c9/attachment.html 

From glenn.steen at gmail.com  Thu Nov 13 09:58:26 2014
From: glenn.steen at gmail.com (Glenn Steen)
Date: Thu, 13 Nov 2014 10:58:26 +0100
Subject: Bounce from "destination server" as SPAM - header/received too
	short!
In-Reply-To: <CAD=Xf-XCKZ5Rz+ViuG2N+_bz4d85RZHcW+0d-YKC=Cn94k+RWA@mail.gmail.com>
References: <CAD=Xf-UhHa8gLfsDPcJ9wTY-03UaoXjJ=etv9YNiNc6p37ORJQ@mail.gmail.com>
	<CA+Q-w8V6MYer-RQDJhiYsczU+cdRi8aBDzG+sDdHntE3SbVDSA@mail.gmail.com>
	<CAAug_B8Gvkwr016CP048XvbgozG0E9GMUZt7UR69AWwnWKoVNA@mail.gmail.com>
	<CAD=Xf-XCKZ5Rz+ViuG2N+_bz4d85RZHcW+0d-YKC=Cn94k+RWA@mail.gmail.com>
Message-ID: <CAAug_B-hHzHhrpJS=8D2obc6aJd_q=HdqjZMik=qa0h0iOUiSA@mail.gmail.com>

I just re-read your initial post and get what's happening:

You have the watermark feature enabled, to handle all those faked
bounces/NDRs/NDNs (in reality, where the envelope sender is <>), but
when your own mailstore (the server/servers protected by your
MX/MailScanner system) generate a bounce these also lack the watermark
(which is just a specific header with a checksum cryptagraphically
protected...) and thus get handled as "bad". Many systems
implementation of OoO will fall into this category as well. Regular
bounces SHOULD NOT lack the watermark, but this is up to the
mailstore, whether the watermark is present in the NDN or not.

First off:
- Don't mark them as "High scoring spam". Just mark as Spam and they
will actually get delivered, thus making your system RFC compliant (or
at least a tad more so:-).

Second thing to explore:
- Try to make your mailstore system(s) generate or preserve a valid
watermark header for bounces etc. This is a lot less trivial than the
first step, and in many cases close to impossible... In many cases,
just implementing the first step above is the only real option... at
least from a time management perspective:-):-).

So... this problem of yours is mostly a problem outside of
mailScanner, but entirely caused be the use of the watermark feature.
i wouldn't recommend turning it off, without first doing a thorough
analysis of the effectiveness of the feature...;)

Cheers!
-- 
-- Glenn

On 12 November 2014 19:58, Sim <simvirus at gmail.com> wrote:
> Thanks for reply...
> But in other case the bounce is generated for other reasons
> For example if the mailbox for the user is over quota, etc..
> In this case the bounce is "dropped".
> The question is why this "postfix/cleanup - MailScanner" header is too short
> ...and how to extend it :-(
>
> Thanks again
>
> ---
> Sim
>
> 2014-11-10 18:16 GMT+01:00 Glenn Steen <glenn.steen at gmail.com>:
>>
>> Actually... All you need do is configure recipient verification in postfix
>> (this is in-built and documented well several places, like the postfix doc
>> site or the MailScanner wiki). Alternatively maintain a relay recipient map
>> or an access map (both are fairly trivial to set up).
>> Doing any of these will reject instead of bounce, for unknown recipients.
>> Flip side of the coin is that you may expose your recipient "universe", for
>> easy mapping (regardless if you have disabled vrfy), but... That's just how
>> it is:-)
>>
>> Cheers
>> --
>> -- Glenn
>>
>> Den 10 nov 2014 14:03 skrev "Joolee" <mailscanner at joolee.nl>:
>>
>>> Quite an easy solution is to simply don't bounce. E-mail to non-existing
>>> users is probably (uncought) spam and they rarely come from legit e-mail
>>> addresses. You are spamming the actual owners of the e-mail addresses being
>>> abused by sending backscatter to them. It might even get you listed on a
>>> backscatter dnsbl.
>>>
>>> If you want to provide legit mail senders with a "this user doesn't
>>> exist" message, configure all legit users on your edge server so mail to
>>> non-existing users is being blocked on smtp level. (This will also reject
>>> ~90% of spam) The sending party can than implement any backscatter/messages
>>> they want with this information, it's not your problem.
>>>
>>>
>>> On 10 November 2014 12:44, Sim <simvirus at gmail.com> wrote:
>>>>
>>>> Hello to all!
>>>>
>>>> I've a little issue...
>>>>
>>>> SENDER (from test at extenal.com  to  nomail at mydomain) ------> MailScanner
>>>> -----> Mailbox Server (@mydomain)
>>>>
>>>> At this time my internal "Mailbox Server" generate a bounce for not
>>>> exiting "nomail" account.
>>>> This bounce is detected as SPAM from MailScanner.
>>>>
>>>> Note:
>>>> - The IP of Mailbox Server is in "Whitelist"
>>>> - The LAN (/24) of Mailbox Server is in "Trusted Network"
>>>> - The LAN (/24) of Mailbox Server is in "Outbound mail relay"
>>>> - All other email sent from "Mailbox Server" are detected as "white
>>>> list"
>>>>
>>>>
>>>> Checking the log of postfix i've found this:
>>>>
>>>> postfix/cleanup[20872]: C1C2960069: hold: header Received: from
>>>> srv.mydomain.local (unknown [192.168.0.10])??(using TLSv1 with cipher
>>>> AES128-SHA (128/128 bits))??(No client certificate requested)??by
>>>> mail.mydomain.com (Postfix) w from unknown[192.168.0.10]; from=<>
>>>> to=<test at external.com> proto=ESMTP helo=<srv.mydomain.local>
>>>> [..]
>>>> MailScanner[19852]: Spam Checks: Starting
>>>> MailScanner[19852]: Message C1C2960069.AEB15 from 192.168.0.10 has no
>>>> (or invalid) watermark or sender address, marked as high-scoring spam
>>>> MailScanner[19852]: Spam Checks: Found 1 spam messages
>>>>
>>>>
>>>> The header of postifx/cleanup is incomplete!!!!
>>>>
>>>> Looking for full header i've seen:  "(Postfix) with ESMTPS id
>>>> C1C2960069?"    and not only    "(Postfix) w"
>>>>
>>>>
>>>> How to increase this "check of the header limit" in postfix, cleanup or
>>>> MailScanner ?
>>>>
>>>> Thanks
>>>>
>>>> --
>>>> MailScanner mailing list
>>>> mailscanner at lists.mailscanner.info
>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>
>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>
>>>> Support MailScanner development - buy the book off the website!
>>>>
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>



-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se

From glenn.steen at gmail.com  Thu Nov 13 10:15:34 2014
From: glenn.steen at gmail.com (Glenn Steen)
Date: Thu, 13 Nov 2014 11:15:34 +0100
Subject: Bounce from "destination server" as SPAM - header/received too
	short!
In-Reply-To: <CAAug_B-hHzHhrpJS=8D2obc6aJd_q=HdqjZMik=qa0h0iOUiSA@mail.gmail.com>
References: <CAD=Xf-UhHa8gLfsDPcJ9wTY-03UaoXjJ=etv9YNiNc6p37ORJQ@mail.gmail.com>
	<CA+Q-w8V6MYer-RQDJhiYsczU+cdRi8aBDzG+sDdHntE3SbVDSA@mail.gmail.com>
	<CAAug_B8Gvkwr016CP048XvbgozG0E9GMUZt7UR69AWwnWKoVNA@mail.gmail.com>
	<CAD=Xf-XCKZ5Rz+ViuG2N+_bz4d85RZHcW+0d-YKC=Cn94k+RWA@mail.gmail.com>
	<CAAug_B-hHzHhrpJS=8D2obc6aJd_q=HdqjZMik=qa0h0iOUiSA@mail.gmail.com>
Message-ID: <CAAug_B_zjv4PwPKC0q1WE+RQDgYHcg32Of18ApOHEfeQswDaMQ@mail.gmail.com>

Actually.... You could play around with a ruleset on this:

# Do you want to check watermarks?
# This can also be the filename of a ruleset.
Check Watermarks With No Sender = yes

... And simply avoid checking the watermark on your mailstore systems
IP address.
Probably the simplest fix of all;-).

Cheers!
-- 
-- Glenn

On 13 November 2014 10:58, Glenn Steen <glenn.steen at gmail.com> wrote:
> I just re-read your initial post and get what's happening:
>
> You have the watermark feature enabled, to handle all those faked
> bounces/NDRs/NDNs (in reality, where the envelope sender is <>), but
> when your own mailstore (the server/servers protected by your
> MX/MailScanner system) generate a bounce these also lack the watermark
> (which is just a specific header with a checksum cryptagraphically
> protected...) and thus get handled as "bad". Many systems
> implementation of OoO will fall into this category as well. Regular
> bounces SHOULD NOT lack the watermark, but this is up to the
> mailstore, whether the watermark is present in the NDN or not.
>
> First off:
> - Don't mark them as "High scoring spam". Just mark as Spam and they
> will actually get delivered, thus making your system RFC compliant (or
> at least a tad more so:-).
>
> Second thing to explore:
> - Try to make your mailstore system(s) generate or preserve a valid
> watermark header for bounces etc. This is a lot less trivial than the
> first step, and in many cases close to impossible... In many cases,
> just implementing the first step above is the only real option... at
> least from a time management perspective:-):-).
>
> So... this problem of yours is mostly a problem outside of
> mailScanner, but entirely caused be the use of the watermark feature.
> i wouldn't recommend turning it off, without first doing a thorough
> analysis of the effectiveness of the feature...;)
>
> Cheers!
> --
> -- Glenn
>
> On 12 November 2014 19:58, Sim <simvirus at gmail.com> wrote:
>> Thanks for reply...
>> But in other case the bounce is generated for other reasons
>> For example if the mailbox for the user is over quota, etc..
>> In this case the bounce is "dropped".
>> The question is why this "postfix/cleanup - MailScanner" header is too short
>> ...and how to extend it :-(
>>
>> Thanks again
>>
>> ---
>> Sim
>>
>> 2014-11-10 18:16 GMT+01:00 Glenn Steen <glenn.steen at gmail.com>:
>>>
>>> Actually... All you need do is configure recipient verification in postfix
>>> (this is in-built and documented well several places, like the postfix doc
>>> site or the MailScanner wiki). Alternatively maintain a relay recipient map
>>> or an access map (both are fairly trivial to set up).
>>> Doing any of these will reject instead of bounce, for unknown recipients.
>>> Flip side of the coin is that you may expose your recipient "universe", for
>>> easy mapping (regardless if you have disabled vrfy), but... That's just how
>>> it is:-)
>>>
>>> Cheers
>>> --
>>> -- Glenn
>>>
>>> Den 10 nov 2014 14:03 skrev "Joolee" <mailscanner at joolee.nl>:
>>>
>>>> Quite an easy solution is to simply don't bounce. E-mail to non-existing
>>>> users is probably (uncought) spam and they rarely come from legit e-mail
>>>> addresses. You are spamming the actual owners of the e-mail addresses being
>>>> abused by sending backscatter to them. It might even get you listed on a
>>>> backscatter dnsbl.
>>>>
>>>> If you want to provide legit mail senders with a "this user doesn't
>>>> exist" message, configure all legit users on your edge server so mail to
>>>> non-existing users is being blocked on smtp level. (This will also reject
>>>> ~90% of spam) The sending party can than implement any backscatter/messages
>>>> they want with this information, it's not your problem.
>>>>
>>>>
>>>> On 10 November 2014 12:44, Sim <simvirus at gmail.com> wrote:
>>>>>
>>>>> Hello to all!
>>>>>
>>>>> I've a little issue...
>>>>>
>>>>> SENDER (from test at extenal.com  to  nomail at mydomain) ------> MailScanner
>>>>> -----> Mailbox Server (@mydomain)
>>>>>
>>>>> At this time my internal "Mailbox Server" generate a bounce for not
>>>>> exiting "nomail" account.
>>>>> This bounce is detected as SPAM from MailScanner.
>>>>>
>>>>> Note:
>>>>> - The IP of Mailbox Server is in "Whitelist"
>>>>> - The LAN (/24) of Mailbox Server is in "Trusted Network"
>>>>> - The LAN (/24) of Mailbox Server is in "Outbound mail relay"
>>>>> - All other email sent from "Mailbox Server" are detected as "white
>>>>> list"
>>>>>
>>>>>
>>>>> Checking the log of postfix i've found this:
>>>>>
>>>>> postfix/cleanup[20872]: C1C2960069: hold: header Received: from
>>>>> srv.mydomain.local (unknown [192.168.0.10])??(using TLSv1 with cipher
>>>>> AES128-SHA (128/128 bits))??(No client certificate requested)??by
>>>>> mail.mydomain.com (Postfix) w from unknown[192.168.0.10]; from=<>
>>>>> to=<test at external.com> proto=ESMTP helo=<srv.mydomain.local>
>>>>> [..]
>>>>> MailScanner[19852]: Spam Checks: Starting
>>>>> MailScanner[19852]: Message C1C2960069.AEB15 from 192.168.0.10 has no
>>>>> (or invalid) watermark or sender address, marked as high-scoring spam
>>>>> MailScanner[19852]: Spam Checks: Found 1 spam messages
>>>>>
>>>>>
>>>>> The header of postifx/cleanup is incomplete!!!!
>>>>>
>>>>> Looking for full header i've seen:  "(Postfix) with ESMTPS id
>>>>> C1C2960069?"    and not only    "(Postfix) w"
>>>>>
>>>>>
>>>>> How to increase this "check of the header limit" in postfix, cleanup or
>>>>> MailScanner ?
>>>>>
>>>>> Thanks
>>>>>
>>>>> --
>>>>> MailScanner mailing list
>>>>> mailscanner at lists.mailscanner.info
>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>>
>>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>>
>>>>> Support MailScanner development - buy the book off the website!
>>>>>
>>>>
>>>>
>>>> --
>>>> MailScanner mailing list
>>>> mailscanner at lists.mailscanner.info
>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>
>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>
>>>> Support MailScanner development - buy the book off the website!
>>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>
>
>
> --
> -- Glenn
> email: glenn < dot > steen < at > gmail < dot > com
> work: glenn < dot > steen < at > ap1 < dot > se



-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se

From glenn.steen at gmail.com  Fri Nov 14 08:56:59 2014
From: glenn.steen at gmail.com (Glenn Steen)
Date: Fri, 14 Nov 2014 09:56:59 +0100
Subject: Bounce from "destination server" as SPAM - header/received too
	short!
In-Reply-To: <CAAug_B_zjv4PwPKC0q1WE+RQDgYHcg32Of18ApOHEfeQswDaMQ@mail.gmail.com>
References: <CAD=Xf-UhHa8gLfsDPcJ9wTY-03UaoXjJ=etv9YNiNc6p37ORJQ@mail.gmail.com>
	<CA+Q-w8V6MYer-RQDJhiYsczU+cdRi8aBDzG+sDdHntE3SbVDSA@mail.gmail.com>
	<CAAug_B8Gvkwr016CP048XvbgozG0E9GMUZt7UR69AWwnWKoVNA@mail.gmail.com>
	<CAD=Xf-XCKZ5Rz+ViuG2N+_bz4d85RZHcW+0d-YKC=Cn94k+RWA@mail.gmail.com>
	<CAAug_B-hHzHhrpJS=8D2obc6aJd_q=HdqjZMik=qa0h0iOUiSA@mail.gmail.com>
	<CAAug_B_zjv4PwPKC0q1WE+RQDgYHcg32Of18ApOHEfeQswDaMQ@mail.gmail.com>
Message-ID: <CAAug_B9CapY7sowps-JcKT3xbWLF7YP8D+1gT4PmKdTQ3cD8gw@mail.gmail.com>

Just to be clear on what you need do Sim, here's a few more precise pointers:

In MailScanner.conf change

Check Watermarks With No Sender = yes

to

Check Watermarks With No Sender = %rules-dir%/check.watermark.rules

and in the ruleset file (in the rules subdirectory of your MailScanner
etc directory (probably /etc/MailScanner/rules/check.watermark.rules)
create tre rules
-------- Start ------
# Our MailStore server(s) IP addresses should have a "no" for this
From:           192.168.3.140    no

# Under no circumstances should this be changed to "no".
FromOrTo:       default                 yes
-------- End ------
Please be sure to separate the colums ("From:" is the first column,
"192.168.3.140" is the second etc) with <TAB> character(s). Reload or
restart mailScanner after this change and you'll not check watermarks
for internally generated non-delivery-notices, out-of-office messages
etc, and hence will not break the RFSs in such a bad way as before.

Also, consider either setting (in MailScanner.conf)
Treat Invalid Watermarks With No Sender as Spam = spam
or
Treat Invalid Watermarks With No Sender as Spam = 7
(or some other low-scoring spam number), since elsewise you run a
definite risk of losing non-delivery-reports genereted on outside
systems that do not preserve the watermark header... Better that they
violate the RFCs than you;-)

And finally, you can easily configure RECIPIENT address verification
in postfix by adding something like
reject_unverified_recipient
to your smtpd_recipient_restrictions in main.cf ... or something
similar (I actually don't use this feature, since I don't trust our
mailstoree to properly reject things, so use a relay_recipient_map
instead... that I generate with LDAP every 15 minutes.. Same effect,
different approach). If you didn't find it anywhere else, your systems
package for Postfix probably installed the readme somewhere like:
/usr/share/doc/postfix-*/README_FILES/ADDRESS_VERIFICATION_README
... See the warnings at the top, and heed the one about SENDER address
verification.

Cheers
-- 
-- Glenn (who had a few minutes to spend on this:-)

On 13 November 2014 11:15, Glenn Steen <glenn.steen at gmail.com> wrote:
> Actually.... You could play around with a ruleset on this:
>
> # Do you want to check watermarks?
> # This can also be the filename of a ruleset.
> Check Watermarks With No Sender = yes
>
> ... And simply avoid checking the watermark on your mailstore systems
> IP address.
> Probably the simplest fix of all;-).
>
> Cheers!
> --
> -- Glenn
>
> On 13 November 2014 10:58, Glenn Steen <glenn.steen at gmail.com> wrote:
>> I just re-read your initial post and get what's happening:
>>
>> You have the watermark feature enabled, to handle all those faked
>> bounces/NDRs/NDNs (in reality, where the envelope sender is <>), but
>> when your own mailstore (the server/servers protected by your
>> MX/MailScanner system) generate a bounce these also lack the watermark
>> (which is just a specific header with a checksum cryptagraphically
>> protected...) and thus get handled as "bad". Many systems
>> implementation of OoO will fall into this category as well. Regular
>> bounces SHOULD NOT lack the watermark, but this is up to the
>> mailstore, whether the watermark is present in the NDN or not.
>>
>> First off:
>> - Don't mark them as "High scoring spam". Just mark as Spam and they
>> will actually get delivered, thus making your system RFC compliant (or
>> at least a tad more so:-).
>>
>> Second thing to explore:
>> - Try to make your mailstore system(s) generate or preserve a valid
>> watermark header for bounces etc. This is a lot less trivial than the
>> first step, and in many cases close to impossible... In many cases,
>> just implementing the first step above is the only real option... at
>> least from a time management perspective:-):-).
>>
>> So... this problem of yours is mostly a problem outside of
>> mailScanner, but entirely caused be the use of the watermark feature.
>> i wouldn't recommend turning it off, without first doing a thorough
>> analysis of the effectiveness of the feature...;)
>>
>> Cheers!
>> --
>> -- Glenn
>>
>> On 12 November 2014 19:58, Sim <simvirus at gmail.com> wrote:
>>> Thanks for reply...
>>> But in other case the bounce is generated for other reasons
>>> For example if the mailbox for the user is over quota, etc..
>>> In this case the bounce is "dropped".
>>> The question is why this "postfix/cleanup - MailScanner" header is too short
>>> ...and how to extend it :-(
>>>
>>> Thanks again
>>>
>>> ---
>>> Sim
>>>
>>> 2014-11-10 18:16 GMT+01:00 Glenn Steen <glenn.steen at gmail.com>:
>>>>
>>>> Actually... All you need do is configure recipient verification in postfix
>>>> (this is in-built and documented well several places, like the postfix doc
>>>> site or the MailScanner wiki). Alternatively maintain a relay recipient map
>>>> or an access map (both are fairly trivial to set up).
>>>> Doing any of these will reject instead of bounce, for unknown recipients.
>>>> Flip side of the coin is that you may expose your recipient "universe", for
>>>> easy mapping (regardless if you have disabled vrfy), but... That's just how
>>>> it is:-)
>>>>
>>>> Cheers
>>>> --
>>>> -- Glenn
>>>>
>>>> Den 10 nov 2014 14:03 skrev "Joolee" <mailscanner at joolee.nl>:
>>>>
>>>>> Quite an easy solution is to simply don't bounce. E-mail to non-existing
>>>>> users is probably (uncought) spam and they rarely come from legit e-mail
>>>>> addresses. You are spamming the actual owners of the e-mail addresses being
>>>>> abused by sending backscatter to them. It might even get you listed on a
>>>>> backscatter dnsbl.
>>>>>
>>>>> If you want to provide legit mail senders with a "this user doesn't
>>>>> exist" message, configure all legit users on your edge server so mail to
>>>>> non-existing users is being blocked on smtp level. (This will also reject
>>>>> ~90% of spam) The sending party can than implement any backscatter/messages
>>>>> they want with this information, it's not your problem.
>>>>>
>>>>>
>>>>> On 10 November 2014 12:44, Sim <simvirus at gmail.com> wrote:
>>>>>>
>>>>>> Hello to all!
>>>>>>
>>>>>> I've a little issue...
>>>>>>
>>>>>> SENDER (from test at extenal.com  to  nomail at mydomain) ------> MailScanner
>>>>>> -----> Mailbox Server (@mydomain)
>>>>>>
>>>>>> At this time my internal "Mailbox Server" generate a bounce for not
>>>>>> exiting "nomail" account.
>>>>>> This bounce is detected as SPAM from MailScanner.
>>>>>>
>>>>>> Note:
>>>>>> - The IP of Mailbox Server is in "Whitelist"
>>>>>> - The LAN (/24) of Mailbox Server is in "Trusted Network"
>>>>>> - The LAN (/24) of Mailbox Server is in "Outbound mail relay"
>>>>>> - All other email sent from "Mailbox Server" are detected as "white
>>>>>> list"
>>>>>>
>>>>>>
>>>>>> Checking the log of postfix i've found this:
>>>>>>
>>>>>> postfix/cleanup[20872]: C1C2960069: hold: header Received: from
>>>>>> srv.mydomain.local (unknown [192.168.0.10])??(using TLSv1 with cipher
>>>>>> AES128-SHA (128/128 bits))??(No client certificate requested)??by
>>>>>> mail.mydomain.com (Postfix) w from unknown[192.168.0.10]; from=<>
>>>>>> to=<test at external.com> proto=ESMTP helo=<srv.mydomain.local>
>>>>>> [..]
>>>>>> MailScanner[19852]: Spam Checks: Starting
>>>>>> MailScanner[19852]: Message C1C2960069.AEB15 from 192.168.0.10 has no
>>>>>> (or invalid) watermark or sender address, marked as high-scoring spam
>>>>>> MailScanner[19852]: Spam Checks: Found 1 spam messages
>>>>>>
>>>>>>
>>>>>> The header of postifx/cleanup is incomplete!!!!
>>>>>>
>>>>>> Looking for full header i've seen:  "(Postfix) with ESMTPS id
>>>>>> C1C2960069?"    and not only    "(Postfix) w"
>>>>>>
>>>>>>
>>>>>> How to increase this "check of the header limit" in postfix, cleanup or
>>>>>> MailScanner ?
>>>>>>
>>>>>> Thanks
>>>>>>
>>>>>> --
>>>>>> MailScanner mailing list
>>>>>> mailscanner at lists.mailscanner.info
>>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>>>
>>>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>>>
>>>>>> Support MailScanner development - buy the book off the website!
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> MailScanner mailing list
>>>>> mailscanner at lists.mailscanner.info
>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>>
>>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>>
>>>>> Support MailScanner development - buy the book off the website!
>>>>>
>>>>
>>>> --
>>>> MailScanner mailing list
>>>> mailscanner at lists.mailscanner.info
>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>
>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>
>>>> Support MailScanner development - buy the book off the website!
>>>>
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>
>>
>>
>> --
>> -- Glenn
>> email: glenn < dot > steen < at > gmail < dot > com
>> work: glenn < dot > steen < at > ap1 < dot > se
>
>
>
> --
> -- Glenn
> email: glenn < dot > steen < at > gmail < dot > com
> work: glenn < dot > steen < at > ap1 < dot > se



-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se

From simvirus at gmail.com  Fri Nov 14 18:23:44 2014
From: simvirus at gmail.com (Sim)
Date: Fri, 14 Nov 2014 19:23:44 +0100
Subject: Bounce from "destination server" as SPAM - header/received too
	short!
In-Reply-To: <CAAug_B9CapY7sowps-JcKT3xbWLF7YP8D+1gT4PmKdTQ3cD8gw@mail.gmail.com>
References: <CAD=Xf-UhHa8gLfsDPcJ9wTY-03UaoXjJ=etv9YNiNc6p37ORJQ@mail.gmail.com>
	<CA+Q-w8V6MYer-RQDJhiYsczU+cdRi8aBDzG+sDdHntE3SbVDSA@mail.gmail.com>
	<CAAug_B8Gvkwr016CP048XvbgozG0E9GMUZt7UR69AWwnWKoVNA@mail.gmail.com>
	<CAD=Xf-XCKZ5Rz+ViuG2N+_bz4d85RZHcW+0d-YKC=Cn94k+RWA@mail.gmail.com>
	<CAAug_B-hHzHhrpJS=8D2obc6aJd_q=HdqjZMik=qa0h0iOUiSA@mail.gmail.com>
	<CAAug_B_zjv4PwPKC0q1WE+RQDgYHcg32Of18ApOHEfeQswDaMQ@mail.gmail.com>
	<CAAug_B9CapY7sowps-JcKT3xbWLF7YP8D+1gT4PmKdTQ3cD8gw@mail.gmail.com>
Message-ID: <CAD=Xf-X54Corvv-m3_pzGvyQLXgy5bzxrNDi1+=HAnLmCQauLw@mail.gmail.com>

Hello Glenn,

thanks for your relevant and accurate information!
I will try this these settings

Best regards

---
Sim

2014-11-14 9:56 GMT+01:00 Glenn Steen <glenn.steen at gmail.com>:

> Just to be clear on what you need do Sim, here's a few more precise
> pointers:
>
> In MailScanner.conf change
>
> Check Watermarks With No Sender = yes
>
> to
>
> Check Watermarks With No Sender = %rules-dir%/check.watermark.rules
>
> and in the ruleset file (in the rules subdirectory of your MailScanner
> etc directory (probably /etc/MailScanner/rules/check.watermark.rules)
> create tre rules
> -------- Start ------
> # Our MailStore server(s) IP addresses should have a "no" for this
> From:           192.168.3.140    no
>
> # Under no circumstances should this be changed to "no".
> FromOrTo:       default                 yes
> -------- End ------
> Please be sure to separate the colums ("From:" is the first column,
> "192.168.3.140" is the second etc) with <TAB> character(s). Reload or
> restart mailScanner after this change and you'll not check watermarks
> for internally generated non-delivery-notices, out-of-office messages
> etc, and hence will not break the RFSs in such a bad way as before.
>
> Also, consider either setting (in MailScanner.conf)
> Treat Invalid Watermarks With No Sender as Spam = spam
> or
> Treat Invalid Watermarks With No Sender as Spam = 7
> (or some other low-scoring spam number), since elsewise you run a
> definite risk of losing non-delivery-reports genereted on outside
> systems that do not preserve the watermark header... Better that they
> violate the RFCs than you;-)
>
> And finally, you can easily configure RECIPIENT address verification
> in postfix by adding something like
> reject_unverified_recipient
> to your smtpd_recipient_restrictions in main.cf ... or something
> similar (I actually don't use this feature, since I don't trust our
> mailstoree to properly reject things, so use a relay_recipient_map
> instead... that I generate with LDAP every 15 minutes.. Same effect,
> different approach). If you didn't find it anywhere else, your systems
> package for Postfix probably installed the readme somewhere like:
> /usr/share/doc/postfix-*/README_FILES/ADDRESS_VERIFICATION_README
> ... See the warnings at the top, and heed the one about SENDER address
> verification.
>
> Cheers
> --
> -- Glenn (who had a few minutes to spend on this:-)
>
> On 13 November 2014 11:15, Glenn Steen <glenn.steen at gmail.com> wrote:
> > Actually.... You could play around with a ruleset on this:
> >
> > # Do you want to check watermarks?
> > # This can also be the filename of a ruleset.
> > Check Watermarks With No Sender = yes
> >
> > ... And simply avoid checking the watermark on your mailstore systems
> > IP address.
> > Probably the simplest fix of all;-).
> >
> > Cheers!
> > --
> > -- Glenn
> >
> > On 13 November 2014 10:58, Glenn Steen <glenn.steen at gmail.com> wrote:
> >> I just re-read your initial post and get what's happening:
> >>
> >> You have the watermark feature enabled, to handle all those faked
> >> bounces/NDRs/NDNs (in reality, where the envelope sender is <>), but
> >> when your own mailstore (the server/servers protected by your
> >> MX/MailScanner system) generate a bounce these also lack the watermark
> >> (which is just a specific header with a checksum cryptagraphically
> >> protected...) and thus get handled as "bad". Many systems
> >> implementation of OoO will fall into this category as well. Regular
> >> bounces SHOULD NOT lack the watermark, but this is up to the
> >> mailstore, whether the watermark is present in the NDN or not.
> >>
> >> First off:
> >> - Don't mark them as "High scoring spam". Just mark as Spam and they
> >> will actually get delivered, thus making your system RFC compliant (or
> >> at least a tad more so:-).
> >>
> >> Second thing to explore:
> >> - Try to make your mailstore system(s) generate or preserve a valid
> >> watermark header for bounces etc. This is a lot less trivial than the
> >> first step, and in many cases close to impossible... In many cases,
> >> just implementing the first step above is the only real option... at
> >> least from a time management perspective:-):-).
> >>
> >> So... this problem of yours is mostly a problem outside of
> >> mailScanner, but entirely caused be the use of the watermark feature.
> >> i wouldn't recommend turning it off, without first doing a thorough
> >> analysis of the effectiveness of the feature...;)
> >>
> >> Cheers!
> >> --
> >> -- Glenn
> >>
> >> On 12 November 2014 19:58, Sim <simvirus at gmail.com> wrote:
> >>> Thanks for reply...
> >>> But in other case the bounce is generated for other reasons
> >>> For example if the mailbox for the user is over quota, etc..
> >>> In this case the bounce is "dropped".
> >>> The question is why this "postfix/cleanup - MailScanner" header is too
> short
> >>> ...and how to extend it :-(
> >>>
> >>> Thanks again
> >>>
> >>> ---
> >>> Sim
> >>>
> >>> 2014-11-10 18:16 GMT+01:00 Glenn Steen <glenn.steen at gmail.com>:
> >>>>
> >>>> Actually... All you need do is configure recipient verification in
> postfix
> >>>> (this is in-built and documented well several places, like the
> postfix doc
> >>>> site or the MailScanner wiki). Alternatively maintain a relay
> recipient map
> >>>> or an access map (both are fairly trivial to set up).
> >>>> Doing any of these will reject instead of bounce, for unknown
> recipients.
> >>>> Flip side of the coin is that you may expose your recipient
> "universe", for
> >>>> easy mapping (regardless if you have disabled vrfy), but... That's
> just how
> >>>> it is:-)
> >>>>
> >>>> Cheers
> >>>> --
> >>>> -- Glenn
> >>>>
> >>>> Den 10 nov 2014 14:03 skrev "Joolee" <mailscanner at joolee.nl>:
> >>>>
> >>>>> Quite an easy solution is to simply don't bounce. E-mail to
> non-existing
> >>>>> users is probably (uncought) spam and they rarely come from legit
> e-mail
> >>>>> addresses. You are spamming the actual owners of the e-mail
> addresses being
> >>>>> abused by sending backscatter to them. It might even get you listed
> on a
> >>>>> backscatter dnsbl.
> >>>>>
> >>>>> If you want to provide legit mail senders with a "this user doesn't
> >>>>> exist" message, configure all legit users on your edge server so
> mail to
> >>>>> non-existing users is being blocked on smtp level. (This will also
> reject
> >>>>> ~90% of spam) The sending party can than implement any
> backscatter/messages
> >>>>> they want with this information, it's not your problem.
> >>>>>
> >>>>>
> >>>>> On 10 November 2014 12:44, Sim <simvirus at gmail.com> wrote:
> >>>>>>
> >>>>>> Hello to all!
> >>>>>>
> >>>>>> I've a little issue...
> >>>>>>
> >>>>>> SENDER (from test at extenal.com  to  nomail at mydomain) ------>
> MailScanner
> >>>>>> -----> Mailbox Server (@mydomain)
> >>>>>>
> >>>>>> At this time my internal "Mailbox Server" generate a bounce for not
> >>>>>> exiting "nomail" account.
> >>>>>> This bounce is detected as SPAM from MailScanner.
> >>>>>>
> >>>>>> Note:
> >>>>>> - The IP of Mailbox Server is in "Whitelist"
> >>>>>> - The LAN (/24) of Mailbox Server is in "Trusted Network"
> >>>>>> - The LAN (/24) of Mailbox Server is in "Outbound mail relay"
> >>>>>> - All other email sent from "Mailbox Server" are detected as "white
> >>>>>> list"
> >>>>>>
> >>>>>>
> >>>>>> Checking the log of postfix i've found this:
> >>>>>>
> >>>>>> postfix/cleanup[20872]: C1C2960069: hold: header Received: from
> >>>>>> srv.mydomain.local (unknown [192.168.0.10])??(using TLSv1 with
> cipher
> >>>>>> AES128-SHA (128/128 bits))??(No client certificate requested)??by
> >>>>>> mail.mydomain.com (Postfix) w from unknown[192.168.0.10]; from=<>
> >>>>>> to=<test at external.com> proto=ESMTP helo=<srv.mydomain.local>
> >>>>>> [..]
> >>>>>> MailScanner[19852]: Spam Checks: Starting
> >>>>>> MailScanner[19852]: Message C1C2960069.AEB15 from 192.168.0.10 has
> no
> >>>>>> (or invalid) watermark or sender address, marked as high-scoring
> spam
> >>>>>> MailScanner[19852]: Spam Checks: Found 1 spam messages
> >>>>>>
> >>>>>>
> >>>>>> The header of postifx/cleanup is incomplete!!!!
> >>>>>>
> >>>>>> Looking for full header i've seen:  "(Postfix) with ESMTPS id
> >>>>>> C1C2960069?"    and not only    "(Postfix) w"
> >>>>>>
> >>>>>>
> >>>>>> How to increase this "check of the header limit" in postfix,
> cleanup or
> >>>>>> MailScanner ?
> >>>>>>
> >>>>>> Thanks
> >>>>>>
> >>>>>> --
> >>>>>> MailScanner mailing list
> >>>>>> mailscanner at lists.mailscanner.info
> >>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>>>>>
> >>>>>> Before posting, read http://wiki.mailscanner.info/posting
> >>>>>>
> >>>>>> Support MailScanner development - buy the book off the website!
> >>>>>>
> >>>>>
> >>>>>
> >>>>> --
> >>>>> MailScanner mailing list
> >>>>> mailscanner at lists.mailscanner.info
> >>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>>>>
> >>>>> Before posting, read http://wiki.mailscanner.info/posting
> >>>>>
> >>>>> Support MailScanner development - buy the book off the website!
> >>>>>
> >>>>
> >>>> --
> >>>> MailScanner mailing list
> >>>> mailscanner at lists.mailscanner.info
> >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>>>
> >>>> Before posting, read http://wiki.mailscanner.info/posting
> >>>>
> >>>> Support MailScanner development - buy the book off the website!
> >>>>
> >>>
> >>>
> >>> --
> >>> MailScanner mailing list
> >>> mailscanner at lists.mailscanner.info
> >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>>
> >>> Before posting, read http://wiki.mailscanner.info/posting
> >>>
> >>> Support MailScanner development - buy the book off the website!
> >>>
> >>
> >>
> >>
> >> --
> >> -- Glenn
> >> email: glenn < dot > steen < at > gmail < dot > com
> >> work: glenn < dot > steen < at > ap1 < dot > se
> >
> >
> >
> > --
> > -- Glenn
> > email: glenn < dot > steen < at > gmail < dot > com
> > work: glenn < dot > steen < at > ap1 < dot > se
>
>
>
> --
> -- Glenn
> email: glenn < dot > steen < at > gmail < dot > com
> work: glenn < dot > steen < at > ap1 < dot > se
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141114/e88cc1c4/attachment.html 

From viorelrobu at yahoo.com  Sat Nov 15 08:35:43 2014
From: viorelrobu at yahoo.com (Viorel Robu)
Date: Sat, 15 Nov 2014 08:35:43 +0000 (UTC)
Subject: MailScanner 4.84.6-1 + postfix 2.6.6-6 on CentOS 6.6
	=?utf-8?b?bm90CWNoZWNraW5nCWZpbGVuYW1lL2ZpbGV0eXBl?= rules
References: <1414760425.33322.YahooMailNeo@web161605.mail.bf1.yahoo.com>
	<loom.20141104T084603-765@post.gmane.org>
Message-ID: <loom.20141115T093443-73@post.gmane.org>

I found the solution. I updated all perl modules using: span upgrade.


From mejaz at cyberia.net.sa  Sun Nov 16 13:29:33 2014
From: mejaz at cyberia.net.sa (Mohammed Ejaz)
Date: Sun, 16 Nov 2014 16:29:33 +0300
Subject: PDF-gets-corrupted
Message-ID: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>

hello, 

 

We  have some problem  through one of the sender "" whenever he is sending
an email with an attachment of more than 1 MB of PDF, gets corrupted and
recipient cannot open the file, it says problem with file format.  

 

whereas the same sender ending same attachment  to yahoo, Hotmail and gmail
etcc. without any problem. 

 

our setup is 

 

Front End (we use to filter the email)

 

mailscanner,clamav,spamassin with postfix mail servers 

 

BackEnd.

 

Communicate  where the actual mailboxes are existed.

 

when eliminate our front end filters just to test Email (problematic Email
and attachment)  gets through. it clears that problem is Mailscanner
somewhere. but I unable to trace out. 

 

so. please any help would be highly appreciated. 

 

Thanks in advance.

 

Best Regards

Ejaz

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141116/67101c88/attachment.html 

From alex at vidadigital.com.pa  Sun Nov 16 16:56:15 2014
From: alex at vidadigital.com.pa (Alex Neuman)
Date: Sun, 16 Nov 2014 11:56:15 -0500
Subject: PDF-gets-corrupted
In-Reply-To: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>
Message-ID: <CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>

Can you do a comparison on the files that go to one server and the other?
What differences do they have?



*Alex Neuman van der Hans*
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

Mobile: +507 6781-9505
Work: +507 832-6725 <http://+5078326725/>
Work (USA): +1 (440) 253-9789
Skype: AlexNeuman

Don't miss Vida Digital on LiveStream
<http://new.livestream.com/accounts/5061819>!
Saturdays 8am-10am on M?xima 91.7FM Panama

Follow *@AlexNeuman <https://twitter.com/alexneuman>* on Twitter
Like Vida Digital <https://facebook.com/vidadigital/> on Facebook
Follow VidaDigital <http://instagram.com/vidadigital> on Instagram
Subscribe to Vida Digital <https://youtube.com/reliantpty> on Youtube

On Sun, Nov 16, 2014 at 8:29 AM, Mohammed Ejaz <mejaz at cyberia.net.sa> wrote:

> hello,
>
>
>
> We  have some problem  through one of the sender "" whenever he is sending
> an email with an attachment of more than 1 MB of PDF, gets corrupted and
> recipient cannot open the file, it says problem with file format.
>
>
>
> whereas the same sender ending same attachment  to yahoo, Hotmail and
> gmail etcc. without any problem.
>
>
>
> *our setup is *
>
>
>
> Front End (we use to filter the email)
>
>
>
> mailscanner,clamav,spamassin with postfix mail servers
>
>
>
> BackEnd.
>
>
>
> Communicate  where the actual mailboxes are existed.
>
>
>
> when eliminate our front end filters just to test Email (problematic Email
> and attachment)  gets through. it clears that problem is Mailscanner
> somewhere. but I unable to trace out.
>
>
>
> so. please any help would be highly appreciated.
>
>
>
> Thanks in advance.
>
>
>
> Best Regards
>
> Ejaz
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141116/815018a0/attachment.html 

From mejaz at cyberia.net.sa  Mon Nov 17 07:33:03 2014
From: mejaz at cyberia.net.sa (Mohammed Ejaz)
Date: Mon, 17 Nov 2014 10:33:03 +0300
Subject: PDF-gets-corrupted
In-Reply-To: <CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>
	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>
Message-ID: <094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>

Thanks you so much for your reply,

 

There is no different in the file, the same file I can sent and open it when I eliminate my mail scanner server.

 

one more thing, is there any way I can get official support of mail scanner. we are ready to pay.

 

Ejaz

 

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman
Sent: Sunday, November 16, 2014 7:56 PM
To: MailScanner discussion
Subject: Re: PDF-gets-corrupted

 

Can you do a comparison on the files that go to one server and the other? What differences do they have?




 


Alex Neuman van der Hans
Reliant Technologies / Vida Digital
 <http://vidadigital.com.pa/> http://vidadigital.com.pa/

  <http://vidadigital.com.pa/wp-content/uploads/2014/01/vdtransparent.png> 

Mobile: +507 6781-9505
Work:  <http://+5078326725/> +507 832-6725
Work (USA): +1 (440) 253-9789

Skype: AlexNeuman


Don't miss  <http://new.livestream.com/accounts/5061819> Vida Digital on LiveStream!

Saturdays 8am-10am on M?xima 91.7FM Panama


Follow  <https://twitter.com/alexneuman> @AlexNeuman on Twitter
Like  <https://facebook.com/vidadigital/> Vida Digital on Facebook

Follow  <http://instagram.com/vidadigital> VidaDigital on Instagram

Subscribe to  <https://youtube.com/reliantpty> Vida Digital on Youtube

 

On Sun, Nov 16, 2014 at 8:29 AM, Mohammed Ejaz <mejaz at cyberia.net.sa <mailto:mejaz at cyberia.net.sa> > wrote:

hello, 

 

We  have some problem  through one of the sender "" whenever he is sending an email with an attachment of more than 1 MB of PDF, gets corrupted and recipient cannot open the file, it says problem with file format.  

 

whereas the same sender ending same attachment  to yahoo, Hotmail and gmail etcc. without any problem. 

 

our setup is 

 

Front End (we use to filter the email)

 

mailscanner,clamav,spamassin with postfix mail servers 

 

BackEnd.

 

Communicate  where the actual mailboxes are existed.

 

when eliminate our front end filters just to test Email (problematic Email and attachment)  gets through. it clears that problem is Mailscanner somewhere. but I unable to trace out. 

 

so. please any help would be highly appreciated. 

 

Thanks in advance.

 

Best Regards

Ejaz


--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141117/2466daf5/attachment.html 

From alex at vidadigital.com.pa  Mon Nov 17 11:50:22 2014
From: alex at vidadigital.com.pa (Alex Neuman)
Date: Mon, 17 Nov 2014 06:50:22 -0500
Subject: PDF-gets-corrupted
In-Reply-To: <094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>
	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>
	<094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>
Message-ID: <CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>

If the file is identical then what is the problem?



*Alex Neuman van der Hans*
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fvidadigital.com.pa%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>

Mobile: +507 6781-9505
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
Work: +507 832-6725
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2F%2B5078326725%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
Work (USA): +1 (440) 253-9789
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
Skype: AlexNeuman
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>

Don't miss Vida Digital on LiveStream
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
!
Saturdays 8am-10am on M?xima 91.7FM Panama

Follow *@AlexNeuman
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>*
on
Twitter
Like Vida Digital
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
on
Facebook
Follow VidaDigital
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
on
Instagram
Subscribe to Vida Digital
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
on
Youtube

On Mon, Nov 17, 2014 at 2:33 AM, Mohammed Ejaz <mejaz at cyberia.net.sa> wrote:

> Thanks you so much for your reply,
>
>
>
> There is no different in the file, the same file I can sent and open it
> when I eliminate my mail scanner server.
>
>
>
> one more thing, is there any way I can get official support of mail
> scanner. we are ready to pay.
>
>
>
> Ejaz
>
>
>
> *From:* mailscanner-bounces at lists.mailscanner.info [mailto:
> mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Alex Neuman
> *Sent:* Sunday, November 16, 2014 7:56 PM
> *To:* MailScanner discussion
> *Subject:* Re: PDF-gets-corrupted
>
>
>
> Can you do a comparison on the files that go to one server and the other?
> What differences do they have?
>
>
>
>
>
> *Alex Neuman van der Hans*
> Reliant Technologies / Vida Digital
> http://vidadigital.com.pa/
>
> Mobile: +507 6781-9505
> Work: +507 832-6725 <http://+5078326725/>
> Work (USA): +1 (440) 253-9789
>
> Skype: AlexNeuman
>
>
> Don't miss Vida Digital on LiveStream
> <http://new.livestream.com/accounts/5061819>!
>
> Saturdays 8am-10am on M?xima 91.7FM Panama
>
>
> Follow *@AlexNeuman <https://twitter.com/alexneuman>* on Twitter
> Like Vida Digital <https://facebook.com/vidadigital/> on Facebook
>
> Follow VidaDigital <http://instagram.com/vidadigital> on Instagram
>
> Subscribe to Vida Digital <https://youtube.com/reliantpty> on Youtube
>
>
>
> On Sun, Nov 16, 2014 at 8:29 AM, Mohammed Ejaz <mejaz at cyberia.net.sa>
> wrote:
>
> hello,
>
>
>
> We  have some problem  through one of the sender "" whenever he is sending
> an email with an attachment of more than 1 MB of PDF, gets corrupted and
> recipient cannot open the file, it says problem with file format.
>
>
>
> whereas the same sender ending same attachment  to yahoo, Hotmail and
> gmail etcc. without any problem.
>
>
>
> *our setup is *
>
>
>
> Front End (we use to filter the email)
>
>
>
> mailscanner,clamav,spamassin with postfix mail servers
>
>
>
> BackEnd.
>
>
>
> Communicate  where the actual mailboxes are existed.
>
>
>
> when eliminate our front end filters just to test Email (problematic Email
> and attachment)  gets through. it clears that problem is Mailscanner
> somewhere. but I unable to trace out.
>
>
>
> so. please any help would be highly appreciated.
>
>
>
> Thanks in advance.
>
>
>
> Best Regards
>
> Ejaz
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141117/ea6d3760/attachment.html 

From mejaz at cyberia.net.sa  Mon Nov 17 14:07:56 2014
From: mejaz at cyberia.net.sa (Mohammed Ejaz)
Date: Mon, 17 Nov 2014 17:07:56 +0300
Subject: PDF-gets-corrupted
In-Reply-To: <CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>	<094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>
	<CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>
Message-ID: <040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>

When this email filter through mail scanner  it didn't go through.  if eliminate mail scanner then email go through. 

 

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman
Sent: Monday, November 17, 2014 2:50 PM
To: MailScanner discussion
Subject: Re: PDF-gets-corrupted

 

If the file is identical then what is the problem?   <http://t.signauxdeux.com/e1t/o/5/f18dQhb0S1Ll8dDMPbW2n0x6l2B9gXrW7sKj5C56dQtgf3ZlND602?si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> 




 


Alex Neuman van der Hans
Reliant Technologies / Vida Digital
 <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fvidadigital.com.pa%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> http://vidadigital.com.pa/

  <http://vidadigital.com.pa/wp-content/uploads/2014/01/vdtransparent.png> 

Mobile:  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> +507 6781-9505
Work:  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2F%2B5078326725%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> +507 832-6725
Work (USA):  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> +1 (440) 253-9789

Skype:  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> AlexNeuman


Don't miss  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> Vida Digital on LiveStream!

Saturdays 8am-10am on M?xima 91.7FM Panama


Follow  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> @AlexNeuman on Twitter
Like  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> Vida Digital on Facebook

Follow  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> VidaDigital on Instagram

Subscribe to  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> Vida Digital on Youtube

 

On Mon, Nov 17, 2014 at 2:33 AM, Mohammed Ejaz <mejaz at cyberia.net.sa <mailto:mejaz at cyberia.net.sa> > wrote:

Thanks you so much for your reply,

 

There is no different in the file, the same file I can sent and open it when I eliminate my mail scanner server.

 

one more thing, is there any way I can get official support of mail scanner. we are ready to pay.

 

Ejaz

 

From: mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-bounces at lists.mailscanner.info>  [mailto:mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-bounces at lists.mailscanner.info> ] On Behalf Of Alex Neuman
Sent: Sunday, November 16, 2014 7:56 PM
To: MailScanner discussion
Subject: Re: PDF-gets-corrupted

 

Can you do a comparison on the files that go to one server and the other? What differences do they have?




 


Alex Neuman van der Hans
Reliant Technologies / Vida Digital
 <http://vidadigital.com.pa/> http://vidadigital.com.pa/

  <http://vidadigital.com.pa/wp-content/uploads/2014/01/vdtransparent.png> 

Mobile: +507 6781-9505 <tel:%2B507%206781-9505> 
Work:  <http://+5078326725/> +507 832-6725
Work (USA): +1 (440) 253-9789 <tel:%2B1%20%28440%29%20253-9789> 

Skype: AlexNeuman


Don't miss  <http://new.livestream.com/accounts/5061819> Vida Digital on LiveStream!

Saturdays 8am-10am on M?xima 91.7FM Panama


Follow  <https://twitter.com/alexneuman> @AlexNeuman on Twitter
Like  <https://facebook.com/vidadigital/> Vida Digital on Facebook

Follow  <http://instagram.com/vidadigital> VidaDigital on Instagram

Subscribe to  <https://youtube.com/reliantpty> Vida Digital on Youtube

 

On Sun, Nov 16, 2014 at 8:29 AM, Mohammed Ejaz <mejaz at cyberia.net.sa <mailto:mejaz at cyberia.net.sa> > wrote:

hello, 

 

We  have some problem  through one of the sender "" whenever he is sending an email with an attachment of more than 1 MB of PDF, gets corrupted and recipient cannot open the file, it says problem with file format.  

 

whereas the same sender ending same attachment  to yahoo, Hotmail and gmail etcc. without any problem. 

 

our setup is 

 

Front End (we use to filter the email)

 

mailscanner,clamav,spamassin with postfix mail servers 

 

BackEnd.

 

Communicate  where the actual mailboxes are existed.

 

when eliminate our front end filters just to test Email (problematic Email and attachment)  gets through. it clears that problem is Mailscanner somewhere. but I unable to trace out. 

 

so. please any help would be highly appreciated. 

 

Thanks in advance.

 

Best Regards

Ejaz


--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

 


--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141117/b7759e83/attachment.html 

From jerry.benton at mailborder.com  Mon Nov 17 14:43:00 2014
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Mon, 17 Nov 2014 09:43:00 -0500
Subject: PDF-gets-corrupted
In-Reply-To: <040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>
	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>
	<094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>
	<CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>
	<040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>
Message-ID: <6736395D-4B59-4156-94C1-81084A5A0357@mailborder.com>

Run 

file --mime-type filename

on the PDF on the mailscanner server and check the return value. Even if that does not work, change your MIME types to allow all types and test again. (executables, avi, mpeg, etc.) After the email goes through (I know it will), start turning off the undesirable MIME types until you find the culprit. Also check your file names in /etc/mailscanner to make sure you are allowing .pdf

Historically this is the problem. 


-
Jerry Benton
www.mailborder.com



> On Nov 17, 2014, at 9:07 AM, Mohammed Ejaz <mejaz at cyberia.net.sa> wrote:
> 
> When this email filter through mail scanner  it didn't go through.  if eliminate mail scanner then email go through. 
>  
> From: mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-bounces at lists.mailscanner.info> [mailto:mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-bounces at lists.mailscanner.info>] On Behalf Of Alex Neuman
> Sent: Monday, November 17, 2014 2:50 PM
> To: MailScanner discussion
> Subject: Re: PDF-gets-corrupted
>  
> If the file is identical then what is the problem? 
> 
>  
> 
> Alex Neuman van der Hans
> Reliant Technologies / Vida Digital
> http://vidadigital.com.pa/ <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fvidadigital.com.pa%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
> 
> Mobile: +507 6781-9505 <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
> Work: +507 832-6725 <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2F%2B5078326725%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
> Work (USA): +1 (440) 253-9789 <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
> Skype: AlexNeuman <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
> 
> Don't miss Vida Digital on LiveStream <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>!
> Saturdays 8am-10am on M?xima 91.7FM Panama
> 
> Follow @AlexNeuman <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> on Twitter
> Like Vida Digital <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> on Facebook
> Follow VidaDigital <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> on Instagram
> Subscribe to Vida Digital <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> on Youtube
>  
> On Mon, Nov 17, 2014 at 2:33 AM, Mohammed Ejaz <mejaz at cyberia.net.sa <mailto:mejaz at cyberia.net.sa>> wrote:
>> Thanks you so much for your reply,
>>  
>> There is no different in the file, the same file I can sent and open it when I eliminate my mail scanner server.
>>  
>> one more thing, is there any way I can get official support of mail scanner. we are ready to pay.
>>  
>> Ejaz
>>  
>> From: mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-bounces at lists.mailscanner.info> [mailto:mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-bounces at lists.mailscanner.info>] On Behalf Of Alex Neuman
>> Sent: Sunday, November 16, 2014 7:56 PM
>> To: MailScanner discussion
>> Subject: Re: PDF-gets-corrupted
>>  
>> Can you do a comparison on the files that go to one server and the other? What differences do they have?
>> 
>>  
>> 
>> Alex Neuman van der Hans
>> Reliant Technologies / Vida Digital
>> http://vidadigital.com.pa/ <http://vidadigital.com.pa/>
>> 
>> Mobile: +507 6781-9505 <tel:%2B507%206781-9505>
>> Work: +507 832-6725 <http://+5078326725/>
>> Work (USA): +1 (440) 253-9789 <tel:%2B1%20%28440%29%20253-9789>
>> Skype: AlexNeuman
>> 
>> Don't miss Vida Digital on LiveStream <http://new.livestream.com/accounts/5061819>!
>> Saturdays 8am-10am on M?xima 91.7FM Panama
>> 
>> Follow @AlexNeuman <https://twitter.com/alexneuman> on Twitter
>> Like Vida Digital <https://facebook.com/vidadigital/> on Facebook
>> Follow VidaDigital <http://instagram.com/vidadigital> on Instagram
>> Subscribe to Vida Digital <https://youtube.com/reliantpty> on Youtube
>>  
>> On Sun, Nov 16, 2014 at 8:29 AM, Mohammed Ejaz <mejaz at cyberia.net.sa <mailto:mejaz at cyberia.net.sa>> wrote:
>>> hello, 
>>>  
>>> We  have some problem  through one of the sender "" whenever he is sending an email with an attachment of more than 1 MB of PDF, gets corrupted and recipient cannot open the file, it says problem with file format.  
>>>  
>>> whereas the same sender ending same attachment  to yahoo, Hotmail and gmail etcc. without any problem. 
>>>  
>>> our setup is 
>>>  
>>> Front End (we use to filter the email)
>>>  
>>> mailscanner,clamav,spamassin with postfix mail servers 
>>>  
>>> BackEnd.
>>>  
>>> Communicate  where the actual mailboxes are existed.
>>>  
>>> when eliminate our front end filters just to test Email (problematic Email and attachment)  gets through. it clears that problem is Mailscanner somewhere. but I unable to trace out. 
>>>  
>>> so. please any help would be highly appreciated. 
>>>  
>>> Thanks in advance.
>>>  
>>> Best Regards
>>> Ejaz
>>> 
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>>> 
>>> Before posting, read http://wiki.mailscanner.info/posting <http://wiki.mailscanner.info/posting>
>>> 
>>> Support MailScanner development - buy the book off the website!
>>> 
>> 
>>  
>> 
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>> 
>> Before posting, read http://wiki.mailscanner.info/posting <http://wiki.mailscanner.info/posting>
>> 
>> Support MailScanner development - buy the book off the website!
>> 
> 
>  
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
> 
> Before posting, read http://wiki.mailscanner.info/posting <http://wiki.mailscanner.info/posting>
> 
> Support MailScanner development - buy the book off the website! 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141117/e4f9e2a3/attachment.html 

From alex at vidadigital.com.pa  Mon Nov 17 15:12:39 2014
From: alex at vidadigital.com.pa (Alex Neuman)
Date: Mon, 17 Nov 2014 10:12:39 -0500
Subject: PDF-gets-corrupted
In-Reply-To: <040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>
	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>
	<094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>
	<CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>
	<040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>
Message-ID: <CANyE0Pp3CXzdCuZwV42ZMYawKoyX2N5NuHX4dkSq6i9SUUXuSg@mail.gmail.com>

If the email doesn't go through, what do the logs say?



*Alex Neuman van der Hans*
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fvidadigital.com.pa%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>

Mobile: +507 6781-9505
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
Work: +507 832-6725
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2F%2B5078326725%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
Work (USA): +1 (440) 253-9789
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
Skype: AlexNeuman
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>

Don't miss Vida Digital on LiveStream
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
!
Saturdays 8am-10am on M?xima 91.7FM Panama

Follow *@AlexNeuman
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>*
on
Twitter
Like Vida Digital
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
on
Facebook
Follow VidaDigital
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
on
Instagram
Subscribe to Vida Digital
<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
on
Youtube

On Mon, Nov 17, 2014 at 9:07 AM, Mohammed Ejaz <mejaz at cyberia.net.sa> wrote:

> When this email filter through mail scanner  it didn't go through.  if
> eliminate mail scanner then email go through.
>
>
>
> *From:* mailscanner-bounces at lists.mailscanner.info [mailto:
> mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Alex Neuman
> *Sent:* Monday, November 17, 2014 2:50 PM
> *To:* MailScanner discussion
> *Subject:* Re: PDF-gets-corrupted
>
>
>
> If the file is identical then what is the problem?
>
>
>
>
>
> *Alex Neuman van der Hans*
> Reliant Technologies / Vida Digital
> http://vidadigital.com.pa/
> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fvidadigital.com.pa%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
>
> Mobile: +507 6781-9505
> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
> Work: +507 832-6725
> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2F%2B5078326725%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
> Work (USA): +1 (440) 253-9789
> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
>
> Skype: AlexNeuman
> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
>
>
> Don't miss Vida Digital on LiveStream
> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
> !
>
> Saturdays 8am-10am on M?xima 91.7FM Panama
>
>
> Follow *@AlexNeuman
> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>* on
> Twitter
> Like Vida Digital
> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> on
> Facebook
>
> Follow VidaDigital
> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> on
> Instagram
>
> Subscribe to Vida Digital
> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> on
> Youtube
>
>
>
> On Mon, Nov 17, 2014 at 2:33 AM, Mohammed Ejaz <mejaz at cyberia.net.sa>
> wrote:
>
> Thanks you so much for your reply,
>
>
>
> There is no different in the file, the same file I can sent and open it
> when I eliminate my mail scanner server.
>
>
>
> one more thing, is there any way I can get official support of mail
> scanner. we are ready to pay.
>
>
>
> Ejaz
>
>
>
> *From:* mailscanner-bounces at lists.mailscanner.info [mailto:
> mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Alex Neuman
> *Sent:* Sunday, November 16, 2014 7:56 PM
> *To:* MailScanner discussion
> *Subject:* Re: PDF-gets-corrupted
>
>
>
> Can you do a comparison on the files that go to one server and the other?
> What differences do they have?
>
>
>
>
>
> *Alex Neuman van der Hans*
> Reliant Technologies / Vida Digital
> http://vidadigital.com.pa/
>
> Mobile: +507 6781-9505
> Work: +507 832-6725 <http://+5078326725/>
> Work (USA): +1 (440) 253-9789
>
> Skype: AlexNeuman
>
>
> Don't miss Vida Digital on LiveStream
> <http://new.livestream.com/accounts/5061819>!
>
> Saturdays 8am-10am on M?xima 91.7FM Panama
>
>
> Follow *@AlexNeuman <https://twitter.com/alexneuman>* on Twitter
> Like Vida Digital <https://facebook.com/vidadigital/> on Facebook
>
> Follow VidaDigital <http://instagram.com/vidadigital> on Instagram
>
> Subscribe to Vida Digital <https://youtube.com/reliantpty> on Youtube
>
>
>
> On Sun, Nov 16, 2014 at 8:29 AM, Mohammed Ejaz <mejaz at cyberia.net.sa>
> wrote:
>
> hello,
>
>
>
> We  have some problem  through one of the sender "" whenever he is sending
> an email with an attachment of more than 1 MB of PDF, gets corrupted and
> recipient cannot open the file, it says problem with file format.
>
>
>
> whereas the same sender ending same attachment  to yahoo, Hotmail and
> gmail etcc. without any problem.
>
>
>
> *our setup is *
>
>
>
> Front End (we use to filter the email)
>
>
>
> mailscanner,clamav,spamassin with postfix mail servers
>
>
>
> BackEnd.
>
>
>
> Communicate  where the actual mailboxes are existed.
>
>
>
> when eliminate our front end filters just to test Email (problematic Email
> and attachment)  gets through. it clears that problem is Mailscanner
> somewhere. but I unable to trace out.
>
>
>
> so. please any help would be highly appreciated.
>
>
>
> Thanks in advance.
>
>
>
> Best Regards
>
> Ejaz
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141117/916ba09e/attachment-0001.html 

From Denis.Beauchemin at usherbrooke.ca  Mon Nov 17 15:20:08 2014
From: Denis.Beauchemin at usherbrooke.ca (Denis Beauchemin)
Date: Mon, 17 Nov 2014 15:20:08 +0000
Subject: PDF-gets-corrupted
In-Reply-To: <6736395D-4B59-4156-94C1-81084A5A0357@mailborder.com>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>
	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>
	<094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>
	<CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>
	<040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>
	<6736395D-4B59-4156-94C1-81084A5A0357@mailborder.com>
Message-ID: <E4CD9F6A1A6FF745BCABA56BBD1008D5ECE7BD03@XMBX03.sti.usherbrooke.ca>

Wasn?t there a problem with TNEF encoding of PDF files a while ago? I don?t know if this may apply here.

Denis

De : mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] De la part de Jerry Benton
Envoy? : 17 novembre 2014 09:51
? : MailScanner discussion
Objet : Re: PDF-gets-corrupted

Run

file --mime-type filename

on the PDF on the mailscanner server and check the return value. Even if that does not work, change your MIME types to allow all types and test again. (executables, avi, mpeg, etc.) After the email goes through (I know it will), start turning off the undesirable MIME types until you find the culprit. Also check your file names in /etc/mailscanner to make sure you are allowing .pdf

Historically this is the problem.


-
Jerry Benton
www.mailborder.com<http://www.mailborder.com>



On Nov 17, 2014, at 9:07 AM, Mohammed Ejaz <mejaz at cyberia.net.sa<mailto:mejaz at cyberia.net.sa>> wrote:

When this email filter through mail scanner  it didn't go through.  if eliminate mail scanner then email go through.

From: mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman
Sent: Monday, November 17, 2014 2:50 PM
To: MailScanner discussion
Subject: Re: PDF-gets-corrupted

If the file is identical then what is the problem?



Alex Neuman van der Hans
Reliant Technologies / Vida Digital
Le Service des Technologies de l'Information de l'UdeS veut vous mettre en garde contre "t.signauxdeux.com" qui semble ?tre une tentative de fraude envers http://vidadigital.com.pa/<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fvidadigital.com.pa%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
[Image supprim?e par l'exp?diteur.]
Mobile: +507 6781-9505<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
Work: +507 832-6725<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2F%2B5078326725%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
Work (USA): +1 (440) 253-9789<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>
Skype: AlexNeuman<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>

Don't miss Vida Digital on LiveStream<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d>!
Saturdays 8am-10am on M?xima 91.7FM Panama

Follow @AlexNeuman<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> on Twitter
Like Vida Digital<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> on Facebook
Follow VidaDigital<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> on Instagram
Subscribe to Vida Digital<http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> on Youtube

On Mon, Nov 17, 2014 at 2:33 AM, Mohammed Ejaz <mejaz at cyberia.net.sa<mailto:mejaz at cyberia.net.sa>> wrote:
Thanks you so much for your reply,

There is no different in the file, the same file I can sent and open it when I eliminate my mail scanner server.

one more thing, is there any way I can get official support of mail scanner. we are ready to pay.

Ejaz

From: mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info> [mailto:mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info>] On Behalf Of Alex Neuman
Sent: Sunday, November 16, 2014 7:56 PM
To: MailScanner discussion
Subject: Re: PDF-gets-corrupted

Can you do a comparison on the files that go to one server and the other? What differences do they have?



Alex Neuman van der Hans
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/
[Image supprim?e par l'exp?diteur.]
Mobile: +507 6781-9505<tel:%2B507%206781-9505>
Work: Le Service des Technologies de l'Information de l'UdeS veut vous mettre en garde contre "+5078326725" qui semble ?tre une tentative de fraude envers +507 832-6725<http://+5078326725/>
Work (USA): +1 (440) 253-9789<tel:%2B1%20%28440%29%20253-9789>
Skype: AlexNeuman

Don't miss Vida Digital on LiveStream<http://new.livestream.com/accounts/5061819>!
Saturdays 8am-10am on M?xima 91.7FM Panama

Follow @AlexNeuman<https://twitter.com/alexneuman> on Twitter
Like Vida Digital<https://facebook.com/vidadigital/> on Facebook
Follow VidaDigital<http://instagram.com/vidadigital> on Instagram
Subscribe to Vida Digital<https://youtube.com/reliantpty> on Youtube

On Sun, Nov 16, 2014 at 8:29 AM, Mohammed Ejaz <mejaz at cyberia.net.sa<mailto:mejaz at cyberia.net.sa>> wrote:
hello,

We  have some problem  through one of the sender "" whenever he is sending an email with an attachment of more than 1 MB of PDF, gets corrupted and recipient cannot open the file, it says problem with file format.

whereas the same sender ending same attachment  to yahoo, Hotmail and gmail etcc. without any problem.

our setup is

Front End (we use to filter the email)

mailscanner,clamav,spamassin with postfix mail servers

BackEnd.

Communicate  where the actual mailboxes are existed.

when eliminate our front end filters just to test Email (problematic Email and attachment)  gets through. it clears that problem is Mailscanner somewhere. but I unable to trace out.

so. please any help would be highly appreciated.

Thanks in advance.

Best Regards
Ejaz

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141117/5b791357/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ~WRD000.jpg
Type: image/jpeg
Size: 823 bytes
Desc: ~WRD000.jpg
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141117/5b791357/attachment.jpg 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 332 bytes
Desc: image001.jpg
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141117/5b791357/attachment-0001.jpg 

From mejaz at cyberia.net.sa  Tue Nov 18 09:07:48 2014
From: mejaz at cyberia.net.sa (Mohammed Ejaz)
Date: Tue, 18 Nov 2014 12:07:48 +0300
Subject: PDF-gets-corrupted
In-Reply-To: <CANyE0Pp3CXzdCuZwV42ZMYawKoyX2N5NuHX4dkSq6i9SUUXuSg@mail.gmail.com>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>	<094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>	<CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>	<040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>
	<CANyE0Pp3CXzdCuZwV42ZMYawKoyX2N5NuHX4dkSq6i9SUUXuSg@mail.gmail.com>
Message-ID: <091e01d0030f$21e4f430$65aedc90$@cyberia.net.sa>

 

Thanks for all the suggestion just to more understanding. 

 

let me tell you we have problem  only if the sender is  @jandbindustrial.com, rest from other we are receiving email and pdf attachment as usual without any problem. 

 

 

 

 

 

 

 

 

here are the logs. FYI. nothing shows. seems it delivered sucesfully

 

 

Nov 16 16:13:38 mailgate5 postfix/cleanup[1928]: 67612A30BE7: hold: header Received: from jbisvr7.jbi.local (unknown [64.207.65.117])??by mailgate5.cyberia.net.sa (Postfix) with ESMTP id 67612A30BE7??for <ejaztest at smi.com.sa>; Sun, 16 Nov 2014 16:13:36 +0300 (AST) from unknown[64.207.65.117]; from=<AKhaja at jandbindustrial.com> to=<ejaztest at smi.com.sa> proto=ESMTP helo=<jbisvr7.jbi.local>

Nov 16 16:16:01 mailgate5 postfix/smtp[2681]: 1901EA30BD5: to=<ejaztest at smi.com.sa>, relay=fmbx02.cyberia.net.sa[212.119.64.171]:25, delay=145, delays=143/0/0/1.6, dsn=2.0.0, status=sent (250 9321789 message accepted for delivery)

Nov 16 16:54:49 mailgate5 postfix/cleanup[6118]: C752DA30BF2: hold: header Received: from jbisvr7.jbi.local (unknown [64.207.65.117])??by mailgate5.cyberia.net.sa (Postfix) with ESMTP id C752DA30BF2;??Sun, 16 Nov 2014 16:54:48 +0300 (AST) from unknown[64.207.65.117]; from=<AKhaja at jandbindustrial.com> to=<ejaztest at smi.com.sa> proto=ESMTP helo=<jbisvr7.jbi.local>

Nov 16 16:57:57 mailgate5 postfix/smtp[8665]: 3A04FA30BD7: to=<ejaztest at smi.com.sa>, relay=fmbx02.cyberia.net.sa[212.119.64.171]:25, delay=189, delays=188/0/0/1.5, dsn=2.0.0, status=sent (250 9323323 message accepted for delivery)

Nov 17 08:47:31 mailgate5 postfix/cleanup[7483]: 261EDA30C34: hold: header Received: from jbisvr7.jbi.local (unknown [64.207.65.117])??by mailgate5.cyberia.net.sa (Postfix) with ESMTP id 261EDA30C34;??Mon, 17 Nov 2014 08:47:29 +0300 (AST) from unknown[64.207.65.117]; from=<AKhaja at jandbindustrial.com> to=<ejaztest at smi.com.sa> proto=ESMTP helo=<jbisvr7.jbi.local>

Nov 17 08:48:53 mailgate5 postfix/smtp[7904]: 2BC98A30C37: to=<ejaztest at smi.com.sa>, relay=fmbx02.cyberia.net.sa[212.119.64.171]:25, delay=83, delays=82/0/0/1.2, dsn=2.0.0, status=sent (250 9340409 message accepted for delivery)

[root at mailgate5 ~]# grep -i 2BC98A30C37  /var/log/maillog

Nov 17 08:48:51 mailgate5 MailScanner[3587]: Requeue: 261EDA30C34.A85F2 to 2BC98A30C37

Nov 17 08:48:51 mailgate5 postfix/qmgr[24067]: 2BC98A30C37: from=<akhaja at jandbindustrial.com>, size=6003417, nrcpt=3 (queue active)

Nov 17 08:48:53 mailgate5 postfix/smtp[7904]: 2BC98A30C37: to=<akheel at smi.com.sa>, relay=fmbx02.cyberia.net.sa[212.119.64.171]:25, delay=83, delays=82/0/0/1.2, dsn=2.0.0, status=sent (250 9340409 message accepted for delivery)

Nov 17 08:48:53 mailgate5 postfix/smtp[7904]: 2BC98A30C37: to=<cksoma at smi.com.sa>, relay=fmbx02.cyberia.net.sa[212.119.64.171]:25, delay=83, delays=82/0/0/1.2, dsn=2.0.0, status=sent (250 9340409 message accepted for delivery)

Nov 17 08:48:53 mailgate5 postfix/smtp[7904]: 2BC98A30C37: to=<ejaztest at smi.com.sa>, relay=fmbx02.cyberia.net.sa[212.119.64.171]:25, delay=83, delays=82/0/0/1.2, dsn=2.0.0, status=sent (250 9340409 message accepted for delivery)

Nov 17 08:48:53 mailgate5 postfix/qmgr[24067]: 2BC98A30C37: removed

 

Ejaz

 

 

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman
Sent: Monday, November 17, 2014 6:13 PM
To: MailScanner discussion
Subject: Re: PDF-gets-corrupted

 

If the email doesn't go through, what do the logs say?




 


Alex Neuman van der Hans
Reliant Technologies / Vida Digital
 <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fvidadigital.com.pa%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> http://vidadigital.com.pa/

  <http://vidadigital.com.pa/wp-content/uploads/2014/01/vdtransparent.png> 

Mobile:  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> +507 6781-9505
Work:  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2F%2B5078326725%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> +507 832-6725
Work (USA):  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> +1 (440) 253-9789

Skype:  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> AlexNeuman


Don't miss  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> Vida Digital on LiveStream!

Saturdays 8am-10am on M?xima 91.7FM Panama


Follow  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> @AlexNeuman on Twitter
Like  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> Vida Digital on Facebook

Follow  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> VidaDigital on Instagram

Subscribe to  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> Vida Digital on Youtube

 

On Mon, Nov 17, 2014 at 9:07 AM, Mohammed Ejaz <mejaz at cyberia.net.sa <mailto:mejaz at cyberia.net.sa> > wrote:

When this email filter through mail scanner  it didn't go through.  if eliminate mail scanner then email go through. 

 

From: mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-bounces at lists.mailscanner.info>  [mailto:mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-bounces at lists.mailscanner.info> ] On Behalf Of Alex Neuman
Sent: Monday, November 17, 2014 2:50 PM
To: MailScanner discussion
Subject: Re: PDF-gets-corrupted

 

If the file is identical then what is the problem?   <http://t.signauxdeux.com/e1t/o/5/f18dQhb0S1Ll8dDMPbW2n0x6l2B9gXrW7sKj5C56dQtgf3ZlND602?si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> 




 


Alex Neuman van der Hans
Reliant Technologies / Vida Digital
 <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fvidadigital.com.pa%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> http://vidadigital.com.pa/

  <http://vidadigital.com.pa/wp-content/uploads/2014/01/vdtransparent.png> 

Mobile:  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> +507 6781-9505
Work:  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2F%2B5078326725%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> +507 832-6725
Work (USA):  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> +1 (440) 253-9789

Skype:  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> AlexNeuman


Don't miss  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> Vida Digital on LiveStream!

Saturdays 8am-10am on M?xima 91.7FM Panama


Follow  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> @AlexNeuman on Twitter
Like  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> Vida Digital on Facebook

Follow  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> VidaDigital on Instagram

Subscribe to  <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=ce8e6284-ce87-48a5-ddbe-8c4b73baba8d> Vida Digital on Youtube

 

On Mon, Nov 17, 2014 at 2:33 AM, Mohammed Ejaz <mejaz at cyberia.net.sa <mailto:mejaz at cyberia.net.sa> > wrote:

Thanks you so much for your reply,

 

There is no different in the file, the same file I can sent and open it when I eliminate my mail scanner server.

 

one more thing, is there any way I can get official support of mail scanner. we are ready to pay.

 

Ejaz

 

From: mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-bounces at lists.mailscanner.info>  [mailto:mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-bounces at lists.mailscanner.info> ] On Behalf Of Alex Neuman
Sent: Sunday, November 16, 2014 7:56 PM
To: MailScanner discussion
Subject: Re: PDF-gets-corrupted

 

Can you do a comparison on the files that go to one server and the other? What differences do they have?




 


Alex Neuman van der Hans
Reliant Technologies / Vida Digital
 <http://vidadigital.com.pa/> http://vidadigital.com.pa/

  <http://vidadigital.com.pa/wp-content/uploads/2014/01/vdtransparent.png> 

Mobile: +507 6781-9505 <tel:%2B507%206781-9505> 
Work:  <http://+5078326725/> +507 832-6725
Work (USA): +1 (440) 253-9789 <tel:%2B1%20%28440%29%20253-9789> 

Skype: AlexNeuman


Don't miss  <http://new.livestream.com/accounts/5061819> Vida Digital on LiveStream!

Saturdays 8am-10am on M?xima 91.7FM Panama


Follow  <https://twitter.com/alexneuman> @AlexNeuman on Twitter
Like  <https://facebook.com/vidadigital/> Vida Digital on Facebook

Follow  <http://instagram.com/vidadigital> VidaDigital on Instagram

Subscribe to  <https://youtube.com/reliantpty> Vida Digital on Youtube

 

On Sun, Nov 16, 2014 at 8:29 AM, Mohammed Ejaz <mejaz at cyberia.net.sa <mailto:mejaz at cyberia.net.sa> > wrote:

hello, 

 

We  have some problem  through one of the sender "" whenever he is sending an email with an attachment of more than 1 MB of PDF, gets corrupted and recipient cannot open the file, it says problem with file format.  

 

whereas the same sender ending same attachment  to yahoo, Hotmail and gmail etcc. without any problem. 

 

our setup is 

 

Front End (we use to filter the email)

 

mailscanner,clamav,spamassin with postfix mail servers 

 

BackEnd.

 

Communicate  where the actual mailboxes are existed.

 

when eliminate our front end filters just to test Email (problematic Email and attachment)  gets through. it clears that problem is Mailscanner somewhere. but I unable to trace out. 

 

so. please any help would be highly appreciated. 

 

Thanks in advance.

 

Best Regards

Ejaz


--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

 


--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

 


--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141118/d85e6ec0/attachment-0001.html 

From ian at 34sp.com  Tue Nov 18 09:59:57 2014
From: ian at 34sp.com (Ian Knight)
Date: Tue, 18 Nov 2014 09:59:57 +0000
Subject: PDF-gets-corrupted
In-Reply-To: <091e01d0030f$21e4f430$65aedc90$@cyberia.net.sa>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>	<094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>	<CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>	<040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>	<CANyE0Pp3CXzdCuZwV42ZMYawKoyX2N5NuHX4dkSq6i9SUUXuSg@mail.gmail.com>
	<091e01d0030f$21e4f430$65aedc90$@cyberia.net.sa>
Message-ID: <546B189D.7040804@34sp.com>

Can you get the sender to try a different mail client, i would lean 
towards TNEF causing the issue if they are sending via outlook or such, 
so a quick test would be to get them to try a different mail client. or 
make sure they switch to html/plain emails



From alex at vidadigital.com.pa  Tue Nov 18 12:03:49 2014
From: alex at vidadigital.com.pa (Alex Neuman)
Date: Tue, 18 Nov 2014 07:03:49 -0500
Subject: PDF-gets-corrupted
In-Reply-To: <091e01d0030f$21e4f430$65aedc90$@cyberia.net.sa>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>
	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>
	<094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>
	<CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>
	<040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>
	<CANyE0Pp3CXzdCuZwV42ZMYawKoyX2N5NuHX4dkSq6i9SUUXuSg@mail.gmail.com>
	<091e01d0030f$21e4f430$65aedc90$@cyberia.net.sa>
Message-ID: <CANyE0Po48RBstU2=gZStomXAzvC_AVrm4kD=giH3rUKycOpZYQ@mail.gmail.com>

On Tue, Nov 18, 2014 at 4:07 AM, Mohammed Ejaz <mejaz at cyberia.net.sa> wrote:

> let me tell you we have problem  only if the sender is  @
> jandbindustrial.com, rest from other we are receiving email and pdf
> attachment as usual without any problem.
>
>
Help me understand.

First I understood that you said that "if the PDF file goes through without
MailScanner, it's ok. If it goes through MailScanner, it's corrupted".
I asked if you could compare the files to see how they were different.
Then I understood from you that "the files are the same". Two files that
are "the same" should be opened by the same program with the same results.

Can you please compare both files, with and without MailScanner? I'm
guessing that jandbindustrial.com is using Exchange, mangling the e-mail in
TNEF format, and you're having issues with TNEF.

By compare I mean a real comparison, not "it won't open". File date, time,
using the 'file' utility to check what the file is, md5sum and a visual
inspection of the contents of the file.




*Alex Neuman van der Hans*
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

Mobile: +507 6781-9505
Work: +507 832-6725 <http://+5078326725/>
Work (USA): +1 (440) 253-9789
Skype: AlexNeuman

Don't miss Vida Digital on LiveStream
<http://new.livestream.com/accounts/5061819>!
Saturdays 8am-10am on M?xima 91.7FM Panama

Follow *@AlexNeuman <https://twitter.com/alexneuman>* on Twitter
Like Vida Digital <https://facebook.com/vidadigital/> on Facebook
Follow VidaDigital <http://instagram.com/vidadigital> on Instagram
Subscribe to Vida Digital <https://youtube.com/reliantpty> on Youtube
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141118/df7d3344/attachment.html 

From alex at vidadigital.com.pa  Tue Nov 18 12:04:31 2014
From: alex at vidadigital.com.pa (Alex Neuman)
Date: Tue, 18 Nov 2014 07:04:31 -0500
Subject: PDF-gets-corrupted
In-Reply-To: <546B189D.7040804@34sp.com>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>
	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>
	<094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>
	<CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>
	<040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>
	<CANyE0Pp3CXzdCuZwV42ZMYawKoyX2N5NuHX4dkSq6i9SUUXuSg@mail.gmail.com>
	<091e01d0030f$21e4f430$65aedc90$@cyberia.net.sa>
	<546B189D.7040804@34sp.com>
Message-ID: <CANyE0Poo09tJUc-jAi5hDQus8BbdVa4WTRt=KSMHPXpCHfCaeA@mail.gmail.com>

True - but remember some braindead M-Sexchange admins will forcibly turn
RTF/TNEF on at the server level. Seen it happen.



*Alex Neuman van der Hans*
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

Mobile: +507 6781-9505
Work: +507 832-6725 <http://+5078326725/>
Work (USA): +1 (440) 253-9789
Skype: AlexNeuman

Don't miss Vida Digital on LiveStream
<http://new.livestream.com/accounts/5061819>!
Saturdays 8am-10am on M?xima 91.7FM Panama

Follow *@AlexNeuman <https://twitter.com/alexneuman>* on Twitter
Like Vida Digital <https://facebook.com/vidadigital/> on Facebook
Follow VidaDigital <http://instagram.com/vidadigital> on Instagram
Subscribe to Vida Digital <https://youtube.com/reliantpty> on Youtube

On Tue, Nov 18, 2014 at 4:59 AM, Ian Knight <ian at 34sp.com> wrote:

> Can you get the sender to try a different mail client, i would lean
> towards TNEF causing the issue if they are sending via outlook or such,
> so a quick test would be to get them to try a different mail client. or
> make sure they switch to html/plain emails
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141118/2889b9fa/attachment.html 

From mejaz at cyberia.net.sa  Thu Nov 20 06:53:16 2014
From: mejaz at cyberia.net.sa (Mohammed Ejaz)
Date: Thu, 20 Nov 2014 09:53:16 +0300
Subject: PDF-gets-corrupted
In-Reply-To: <CANyE0Poo09tJUc-jAi5hDQus8BbdVa4WTRt=KSMHPXpCHfCaeA@mail.gmail.com>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>	<094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>	<CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>	<040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>	<CANyE0Pp3CXzdCuZwV42ZMYawKoyX2N5NuHX4dkSq6i9SUUXuSg@mail.gmail.com>	<091e01d0030f$21e4f430$65aedc90$@cyberia.net.sa>	<546B189D.7040804@34sp.com>
	<CANyE0Poo09tJUc-jAi5hDQus8BbdVa4WTRt=KSMHPXpCHfCaeA@mail.gmail.com>
Message-ID: <00fb01d0048e$abe43030$03ac9090$@cyberia.net.sa>

hello. 

 

 

from/source  mail server , from where we unable to receive the attachment, received but I can't open it  

 

https://mail.jandbindustrial.com/owa

username = jbi\akheel

password = smitest1

 

Recipient/To Email address.

 

http://mail.smi.com.sa 

Username = ejaztest at smi.com.sa <mailto:ejaztest at smi.com.sa> 

Password = 123

 

logs of my mailscanner

 

Nov 20 08:37:50 mailgate5 MailScanner[18607]: Message B83D6A30E9B.A8363 from 64.207.65.117 (akhaja at jandbindustrial.com) is whitelisted

Nov 20 08:37:50 mailgate5 postfix/qmgr[8938]: D314EA30EAC: from=<akhaja at jandbindustrial.com>, size=832788, nrcpt=1 (queue active)

Nov 20 09:02:08 mailgate5 postfix/cleanup[24264]: 908EAA30ED0: hold: header Received: from jbisvr7.jbi.local (unknown [64.207.65.117])??by mailgate5.cyberia.net.sa (Postfix) with ESMTP id 908EAA30ED0??for <ejaztest at smi.com.sa>; Thu, 20 Nov 2014 09:02:07 +0300 (AST) from unknown[64.207.65.117]; from=<AKhaja at jandbindustrial.com> to=<ejaztest at smi.com.sa> proto=ESMTP helo=<jbisvr7.jbi.local>

Nov 20 09:02:20 mailgate5 MailScanner[24135]: Message 908EAA30ED0.A58AE from 64.207.65.117 (akhaja at jandbindustrial.com) is whitelisted

Nov 20 09:02:32 mailgate5 postfix/qmgr[24108]: 14CF9A30EB8: from=<akhaja at jandbindustrial.com>, size=832804, nrcpt=1 (queue active)

 

 

 

I have modified few option in mailscanner.config file .  apart from it I  whitelisted this domain.

 

Deliver Unparsable TNEF = yes, by default it was set to no, I set it "yes"

TNEF Expander = /usr/bin/tnef --maxsize=1000000000 (increased the size bit)

# The maximum length of time the TNEF Expander is allowed to run for 1 message.

# (in seconds)

TNEF Timeout = 240 ( it was set to 120 now I make it 240)

 

 

Any help  on the above would be greatly appreciated.

 

ejaz 

 

 

 

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman
Sent: Tuesday, November 18, 2014 3:05 PM
To: MailScanner discussion
Subject: Re: PDF-gets-corrupted

 

True - but remember some braindead M-Sexchange admins will forcibly turn RTF/TNEF on at the server level. Seen it happen.




 


Alex Neuman van der Hans
Reliant Technologies / Vida Digital
 <http://vidadigital.com.pa/> http://vidadigital.com.pa/

  <http://vidadigital.com.pa/wp-content/uploads/2014/01/vdtransparent.png> 

Mobile: +507 6781-9505
Work:  <http://+5078326725/> +507 832-6725
Work (USA): +1 (440) 253-9789

Skype: AlexNeuman


Don't miss  <http://new.livestream.com/accounts/5061819> Vida Digital on LiveStream!

Saturdays 8am-10am on M?xima 91.7FM Panama


Follow  <https://twitter.com/alexneuman> @AlexNeuman on Twitter
Like  <https://facebook.com/vidadigital/> Vida Digital on Facebook

Follow  <http://instagram.com/vidadigital> VidaDigital on Instagram

Subscribe to  <https://youtube.com/reliantpty> Vida Digital on Youtube

 

On Tue, Nov 18, 2014 at 4:59 AM, Ian Knight <ian at 34sp.com <mailto:ian at 34sp.com> > wrote:

Can you get the sender to try a different mail client, i would lean
towards TNEF causing the issue if they are sending via outlook or such,
so a quick test would be to get them to try a different mail client. or
make sure they switch to html/plain emails



--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141120/698b8734/attachment.html 

From mejaz at cyberia.net.sa  Thu Nov 20 08:22:41 2014
From: mejaz at cyberia.net.sa (Mohammed Ejaz)
Date: Thu, 20 Nov 2014 11:22:41 +0300
Subject: PDF-gets-corrupted
In-Reply-To: <00fb01d0048e$abe43030$03ac9090$@cyberia.net.sa>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>	<094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>	<CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>	<040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>	<CANyE0Pp3CXzdCuZwV42ZMYawKoyX2N5NuHX4dkSq6i9SUUXuSg@mail.gmail.com>	<091e01d0030f$21e4f430$65aedc90$@cyberia.net.sa>	<546B189D.7040804@34sp.com>	<CANyE0Poo09tJUc-jAi5hDQus8BbdVa4WTRt=KSMHPXpCHfCaeA@mail.gmail.com>
	<00fb01d0048e$abe43030$03ac9090$@cyberia.net.sa>
Message-ID: <01c401d0049b$29af9840$7d0ec8c0$@cyberia.net.sa>

hello all.

 

 

Please suggest, Does this helps? if asked the Exchange admin of jandbindustrial.com to do the below 

 

 

Set-RemoteDomain ?TNEFEnabled $false ?identity ?RemoteDomainName?

 

That?s all. RTF e-mails should be converted to text format before it sends to the application server. No more winmail.dat attachments.

 

Ejaz 

 

 

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mohammed Ejaz
Sent: Thursday, November 20, 2014 9:53 AM
To: 'MailScanner discussion'
Subject: RE: PDF-gets-corrupted

 

hello. 

 

 

from/source  mail server , from where we unable to receive the attachment, received but I can't open it  

 

https://mail.jandbindustrial.com/owa

username = jbi\akheel

password = smitest1

 

Recipient/To Email address.

 

http://mail.smi.com.sa 

Username = ejaztest at smi.com.sa <mailto:ejaztest at smi.com.sa> 

Password = 123

 

logs of my mailscanner

 

Nov 20 08:37:50 mailgate5 MailScanner[18607]: Message B83D6A30E9B.A8363 from 64.207.65.117 (akhaja at jandbindustrial.com <mailto:akhaja at jandbindustrial.com> ) is whitelisted

Nov 20 08:37:50 mailgate5 postfix/qmgr[8938]: D314EA30EAC: from=<akhaja at jandbindustrial.com <mailto:akhaja at jandbindustrial.com> >, size=832788, nrcpt=1 (queue active)

Nov 20 09:02:08 mailgate5 postfix/cleanup[24264]: 908EAA30ED0: hold: header Received: from jbisvr7.jbi.local (unknown [64.207.65.117])??by mailgate5.cyberia.net.sa (Postfix) with ESMTP id 908EAA30ED0??for <ejaztest at smi.com.sa <mailto:ejaztest at smi.com.sa> >; Thu, 20 Nov 2014 09:02:07 +0300 (AST) from unknown[64.207.65.117]; from=<AKhaja at jandbindustrial.com <mailto:AKhaja at jandbindustrial.com> > to=<ejaztest at smi.com.sa <mailto:ejaztest at smi.com.sa> > proto=ESMTP helo=<jbisvr7.jbi.local>

Nov 20 09:02:20 mailgate5 MailScanner[24135]: Message 908EAA30ED0.A58AE from 64.207.65.117 (akhaja at jandbindustrial.com <mailto:akhaja at jandbindustrial.com> ) is whitelisted

Nov 20 09:02:32 mailgate5 postfix/qmgr[24108]: 14CF9A30EB8: from=<akhaja at jandbindustrial.com <mailto:akhaja at jandbindustrial.com> >, size=832804, nrcpt=1 (queue active)

 

 

 

I have modified few option in mailscanner.config file .  apart from it I  whitelisted this domain.

 

Deliver Unparsable TNEF = yes, by default it was set to no, I set it "yes"

TNEF Expander = /usr/bin/tnef --maxsize=1000000000 (increased the size bit)

# The maximum length of time the TNEF Expander is allowed to run for 1 message.

# (in seconds)

TNEF Timeout = 240 ( it was set to 120 now I make it 240)

 

 

Any help  on the above would be greatly appreciated.

 

ejaz 

 

 

 

From: mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-bounces at lists.mailscanner.info>  [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman
Sent: Tuesday, November 18, 2014 3:05 PM
To: MailScanner discussion
Subject: Re: PDF-gets-corrupted

 

True - but remember some braindead M-Sexchange admins will forcibly turn RTF/TNEF on at the server level. Seen it happen.




 


Alex Neuman van der Hans
Reliant Technologies / Vida Digital
 <http://vidadigital.com.pa/> http://vidadigital.com.pa/

  <http://vidadigital.com.pa/wp-content/uploads/2014/01/vdtransparent.png> 

Mobile: +507 6781-9505
Work:  <http://+5078326725/> +507 832-6725
Work (USA): +1 (440) 253-9789

Skype: AlexNeuman


Don't miss  <http://new.livestream.com/accounts/5061819> Vida Digital on LiveStream!

Saturdays 8am-10am on M?xima 91.7FM Panama


Follow  <https://twitter.com/alexneuman> @AlexNeuman on Twitter
Like  <https://facebook.com/vidadigital/> Vida Digital on Facebook

Follow  <http://instagram.com/vidadigital> VidaDigital on Instagram

Subscribe to  <https://youtube.com/reliantpty> Vida Digital on Youtube

 

On Tue, Nov 18, 2014 at 4:59 AM, Ian Knight <ian at 34sp.com <mailto:ian at 34sp.com> > wrote:

Can you get the sender to try a different mail client, i would lean
towards TNEF causing the issue if they are sending via outlook or such,
so a quick test would be to get them to try a different mail client. or
make sure they switch to html/plain emails



--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141120/79cfb289/attachment.html 

From mejaz at cyberia.net.sa  Mon Nov 24 10:27:00 2014
From: mejaz at cyberia.net.sa (Mohammed Ejaz)
Date: Mon, 24 Nov 2014 13:27:00 +0300
Subject: PDF-gets-corrupted
In-Reply-To: <01c401d0049b$29af9840$7d0ec8c0$@cyberia.net.sa>
References: <058d01d001a1$5e736e50$1b5a4af0$@cyberia.net.sa>	<CANyE0PqB4_XkAHhLx5ZpS=iF+4nWd1Mby++O3U181w9F2SMe4g@mail.gmail.com>	<094b01d00238$bb8a1fc0$329e5f40$@cyberia.net.sa>	<CANyE0PoPrO+jf-j+dxgA-=jN-Cgik0gaP-pjKuRKWRLrDKmpmg@mail.gmail.com>	<040c01d0026f$e58b4740$b0a1d5c0$@cyberia.net.sa>	<CANyE0Pp3CXzdCuZwV42ZMYawKoyX2N5NuHX4dkSq6i9SUUXuSg@mail.gmail.com>	<091e01d0030f$21e4f430$65aedc90$@cyberia.net.sa>	<546B189D.7040804@34sp.com>	<CANyE0Poo09tJUc-jAi5hDQus8BbdVa4WTRt=KSMHPXpCHfCaeA@mail.gmail.com>	<00fb01d0048e$abe43030$03ac9090$@cyberia.net.sa>
	<01c401d0049b$29af9840$7d0ec8c0$@cyberia.net.sa>
Message-ID: <09ba01d007d1$311f5280$935df780$@cyberia.net.sa>

 

 

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mohammed Ejaz
Sent: Thursday, November 20, 2014 11:23 AM
To: 'MailScanner discussion'
Subject: RE: PDF-gets-corrupted

 

hello all.

 

 

Please suggest, Does this helps? if asked the Exchange admin of jandbindustrial.com to do the below 

 

 

Set-RemoteDomain ?TNEFEnabled $false ?identity ?RemoteDomainName?

 

That?s all. RTF e-mails should be converted to text format before it sends to the application server. No more winmail.dat attachments.

 

Ejaz 

 

 

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mohammed Ejaz
Sent: Thursday, November 20, 2014 9:53 AM
To: 'MailScanner discussion'
Subject: RE: PDF-gets-corrupted

 

hello. 

 

 

from/source  mail server , from where we unable to receive the attachment, received but I can't open it  

 

https://mail.jandbindustrial.com/owa

username = jbi\akheel

password = smitest1

 

Recipient/To Email address.

 

http://mail.smi.com.sa 

Username = ejaztest at smi.com.sa <mailto:ejaztest at smi.com.sa> 

Password = 123

 

logs of my mailscanner

 

Nov 20 08:37:50 mailgate5 MailScanner[18607]: Message B83D6A30E9B.A8363 from 64.207.65.117 (akhaja at jandbindustrial.com <mailto:akhaja at jandbindustrial.com> ) is whitelisted

Nov 20 08:37:50 mailgate5 postfix/qmgr[8938]: D314EA30EAC: from=<akhaja at jandbindustrial.com <mailto:akhaja at jandbindustrial.com> >, size=832788, nrcpt=1 (queue active)

Nov 20 09:02:08 mailgate5 postfix/cleanup[24264]: 908EAA30ED0: hold: header Received: from jbisvr7.jbi.local (unknown [64.207.65.117])??by mailgate5.cyberia.net.sa (Postfix) with ESMTP id 908EAA30ED0??for <ejaztest at smi.com.sa <mailto:ejaztest at smi.com.sa> >; Thu, 20 Nov 2014 09:02:07 +0300 (AST) from unknown[64.207.65.117]; from=<AKhaja at jandbindustrial.com <mailto:AKhaja at jandbindustrial.com> > to=<ejaztest at smi.com.sa <mailto:ejaztest at smi.com.sa> > proto=ESMTP helo=<jbisvr7.jbi.local>

Nov 20 09:02:20 mailgate5 MailScanner[24135]: Message 908EAA30ED0.A58AE from 64.207.65.117 (akhaja at jandbindustrial.com <mailto:akhaja at jandbindustrial.com> ) is whitelisted

Nov 20 09:02:32 mailgate5 postfix/qmgr[24108]: 14CF9A30EB8: from=<akhaja at jandbindustrial.com <mailto:akhaja at jandbindustrial.com> >, size=832804, nrcpt=1 (queue active)

 

 

 

I have modified few option in mailscanner.config file .  apart from it I  whitelisted this domain.

 

Deliver Unparsable TNEF = yes, by default it was set to no, I set it "yes"

TNEF Expander = /usr/bin/tnef --maxsize=1000000000 (increased the size bit)

# The maximum length of time the TNEF Expander is allowed to run for 1 message.

# (in seconds)

TNEF Timeout = 240 ( it was set to 120 now I make it 240)

 

 

Any help  on the above would be greatly appreciated.

 

ejaz 

 

 

 

From: mailscanner-bounces at lists.mailscanner.info <mailto:mailscanner-bounces at lists.mailscanner.info>  [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman
Sent: Tuesday, November 18, 2014 3:05 PM
To: MailScanner discussion
Subject: Re: PDF-gets-corrupted

 

True - but remember some braindead M-Sexchange admins will forcibly turn RTF/TNEF on at the server level. Seen it happen.




 


Alex Neuman van der Hans
Reliant Technologies / Vida Digital
 <http://vidadigital.com.pa/> http://vidadigital.com.pa/



Mobile: +507 6781-9505
Work:  <http://+5078326725/> +507 832-6725
Work (USA): +1 (440) 253-9789

Skype: AlexNeuman


Don't miss  <http://new.livestream.com/accounts/5061819> Vida Digital on LiveStream!

Saturdays 8am-10am on M?xima 91.7FM Panama


Follow  <https://twitter.com/alexneuman> @AlexNeuman on Twitter
Like  <https://facebook.com/vidadigital/> Vida Digital on Facebook

Follow  <http://instagram.com/vidadigital> VidaDigital on Instagram

Subscribe to  <https://youtube.com/reliantpty> Vida Digital on Youtube

 

On Tue, Nov 18, 2014 at 4:59 AM, Ian Knight <ian at 34sp.com <mailto:ian at 34sp.com> > wrote:

Can you get the sender to try a different mail client, i would lean
towards TNEF causing the issue if they are sending via outlook or such,
so a quick test would be to get them to try a different mail client. or
make sure they switch to html/plain emails



--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141124/0a4a6f21/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 823 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141124/0a4a6f21/attachment.jpe 

From mrm at medicine.wisc.edu  Tue Nov 25 21:14:19 2014
From: mrm at medicine.wisc.edu (Michael Masse)
Date: Tue, 25 Nov 2014 15:14:19 -0600
Subject: moving DNSBL to MTA
Message-ID: <54749CCB0200003E005DF8FE@gwmail2.medicine.wisc.edu>

I currently have both sendmail and MailScanner set up to use the Spamhaus and BRBL blocklists.   I am trying to get away from MailScanner doing DNSBL lookups to get better performance.    The problem I'm having is that sendmail seems to skip quite a few incoming emails for some reason.   It does catch a lot so I'm fairly certain it's configured in sendmail properly.    I'm noticing that a lot of email gets past the MTA DNSBL stage and then gets caught at the MailScanner stage.   Has anyone ever seen this?  What could cause it?   They are both pointed to the exact same blocklists.   I've triple checked that.   I can't get rid of it within MailScanner till I know why the MTA seems to be skipping some emails.
 
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20141125/1b73da18/attachment.html 

From glenn.steen at gmail.com  Wed Nov 26 14:26:59 2014
From: glenn.steen at gmail.com (Glenn Steen)
Date: Wed, 26 Nov 2014 15:26:59 +0100
Subject: moving DNSBL to MTA
In-Reply-To: <54749CCB0200003E005DF8FE@gwmail2.medicine.wisc.edu>
References: <54749CCB0200003E005DF8FE@gwmail2.medicine.wisc.edu>
Message-ID: <CAAug_B9XhWg8p2zz1aw2BpJypC3DP72sTfO_jAyNGF2qXB8ZfA@mail.gmail.com>

This all sounds more like a BL/Sendmail question... the only
inefficiency concerning mailScanner and DNSBLs is that the lookups
(with more than one BL defined) is serial, while most MTAs tend to do
these things in parallell.
I suppose you already employ a caching nameserver (local to your
MailScanner host(s))? Failing to have that could put a bit of pressure
on your link and/or your upstream DNS servers... All depending on
actual mail volume, of course.

It's not completely impossible that at the time Sendmail queries the
DNSBL, the BL simply does not contain the affected IP, but when the
message eventually is processed by MailScanner ... it does.
Do you have any hard numbers on the frequency of the "error"? What
volumes are we talking about?

Cheers
-- 
-- Glenn

On 25 November 2014 at 22:14, Michael Masse <mrm at medicine.wisc.edu> wrote:
> I currently have both sendmail and MailScanner set up to use the Spamhaus
> and BRBL blocklists.   I am trying to get away from MailScanner doing DNSBL
> lookups to get better performance.    The problem I'm having is that
> sendmail seems to skip quite a few incoming emails for some reason.   It
> does catch a lot so I'm fairly certain it's configured in sendmail properly.
> I'm noticing that a lot of email gets past the MTA DNSBL stage and then gets
> caught at the MailScanner stage.   Has anyone ever seen this?  What could
> cause it?   They are both pointed to the exact same blocklists.   I've
> triple checked that.   I can't get rid of it within MailScanner till I know
> why the MTA seems to be skipping some emails.
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>



-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se