PDF-Corruption
Mohammed Ejaz
mejaz at cyberia.net.sa
Mon Apr 6 13:31:02 UTC 2015
Hello.
One of my user keep complaining that he is unable to receive the PDF
attachment properly, they are getting corrupted. But when I check my logs it
doesn't show any problem. Now my concern is how to justify the customer the
problem is from his side or from my MailScanner. Please advice. Thanks for
your usual co-operation.
Below are the logs for the corrupted attachement/message
Apr 6 15:27:08 nmersal MailScanner[23116]: Message C98395DF459.A2E18 from
150.70.237.8 (eyad.nashed at natcom.com.sa) to unitedgroup.com.sa is too big
for spam checks (497744 > 150000 bytes)
Apr 6 15:27:08 nmersal MailScanner[23116]: Requeue: C98395DF459.A2E18 to
555C55DF544
Apr 6 15:27:08 nmersal MailScanner[23116]: Logging message
C98395DF459.A2E18 to SQL
Apr 6 15:27:08 nmersal MailScanner[24178]: C98395DF459.A2E18: Logged to
MailWatch SQL
Mail watch screen shot for the same message.
Received on:
06/04/15 15:27:08
Received by:
nmersal.cyberia.net.sa
Received from:
150.70.237.8
[
<http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=
eyad.nashed at natcom.com.sa&to=makhan at unitedgroup.com.sa,cabinader at unitedgroup
.com.sa&type=h&list=w> Add to Whitelist |
<http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=
eyad.nashed at natcom.com.sa&to=makhan at unitedgroup.com.sa,cabinader at unitedgroup
.com.sa&type=h&list=b> Add to Blacklist]
Received Via:
IP Address
Hostname
Country
RBL
Spam
Virus
All
150.70.237.8
rout01.hes.trendmicro.eu
(GeoIP Lookup Failed)
[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:150.70.237.8>
]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150
.70.237.8&isspam=1> ]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150
.70.237.8&isvirus=1> ]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150
.70.237.8> ]
10.36.162.83
(Reverse Lookup Failed)
(GeoIP Lookup Failed)
[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:10.36.162.83>
]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.
36.162.83&isspam=1> ]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.
36.162.83&isvirus=1> ]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.
36.162.83> ]
89.237.187.138
SJV-EXHC1.natcom.com.sa
(GeoIP Lookup Failed)
[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:89.237.187.138>
]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.
237.187.138&isspam=1> ]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.
237.187.138&isvirus=1> ]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.
237.187.138> ]
172.16.200.106
(Reverse Lookup Failed)
(GeoIP Lookup Failed)
[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:172.16.200.106>
]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172
.16.200.106&isspam=1> ]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172
.16.200.106&isvirus=1> ]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172
.16.200.106> ]
172.16.200.105
(Reverse Lookup Failed)
(GeoIP Lookup Failed)
[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:172.16.200.105>
]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172
.16.200.105&isspam=1> ]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172
.16.200.105&isvirus=1> ]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172
.16.200.105> ]
94.96.34.151
(Reverse Lookup Failed)
(GeoIP Lookup Failed)
[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:94.96.34.151>
]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.
96.34.151&isspam=1> ]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.
96.34.151&isvirus=1> ]
[
<http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.
96.34.151> ]
ID:
C98395DF459.A2E18
Message Headers:
Received: from rout01.hes.trendmicro.eu (rout01.hes.trendmicro.eu
[150.70.237.8])
by nmersal.cyberia.net.sa (Postfix) with ESMTP id C98395DF459;
Mon, 6 Apr 2015 15:27:04 +0300 (AST)
Received: from outmta.starcloud.com (unknown [10.36.162.83])
by rout01.hes.trendmicro.eu (Postfix) with SMTP id A01EA740040;
Mon, 6 Apr 2015 12:24:17 +0000 (UTC)
Received: from SJV-EXHC1.natcom.com.sa (unknown [89.237.187.138])
by relay03.hes.trendmicro.eu (Postfix) with ESMTPS id 0CADD108003B;
Mon, 6 Apr 2015 12:24:13 +0000 (UTC)
Received: from SJV-EXMB1.natcom.com.sa ([172.16.200.106]) by
SJV-EXHC1.natcom.com.sa ([172.16.200.105]) with mapi id 14.03.0174.001; Mon,
6 Apr 2015 15:24:12 +0300
From: Eyad Nashed <eyad.nashed at natcom.com.sa>
To: Charbel Abi Nader <cabinader at unitedgroup.com.sa>
CC: Mustafa Khan <makhan at unitedgroup.com.sa>, Hekmat Qassem
<hekmatq at natcom.com.sa>
Subject: RE: Cisco Access Point Quotation
Thread-Topic: Cisco Access Point Quotation
Thread-Index: AdAuOXu58spz1ZodRhu5UQn57fO5pwE1hzOAAun77JAMaolAgAAAsNaw
Date: Mon, 6 Apr 2015 12:24:11 +0000
Message-ID:
<FBD94B164BE21A4393DB52F7CD6C8DFD16D46764 at SJV-EXMB1.natcom.com.sa>
References:
<5D03A0A65DC66246BD036492B3B4155D0125B0EFA0C0 at SRV-EXCHANGE.unitedgroup.com.s
a>
In-Reply-To:
<5D03A0A65DC66246BD036492B3B4155D0125B0EFA0C0 at SRV-EXCHANGE.unitedgroup.com.s
a>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [94.96.34.151]
Content-Type: multipart/mixed;
boundary="_009_FBD94B164BE21A4393DB52F7CD6C8DFD16D46764SJVEXMB1natcomc_"
MIME-Version: 1.0
X-TMASE-Version: StarCloud-1.3-7.6.1031-21452.007
X-TMASE-Result: 10--28.541000-7.000000
X-TMASE-MatchedRID: OoEa6u7Uk5/uYusHgJkgyp4oketYmk9n6twe66otJ9OPIHWegpZ5EAhQ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From:
eyad.nashed at natcom.com.sa
[
<http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=
eyad.nashed at natcom.com.sa&to=makhan at unitedgroup.com.sa,cabinader at unitedgroup
.com.sa&type=f&list=w> Add to Whitelist |
<http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=
eyad.nashed at natcom.com.sa&to=makhan at unitedgroup.com.sa,cabinader at unitedgroup
.com.sa&type=f&list=b> Add to Blacklist]
To:
makhan at unitedgroup.com.sa
cabinader at unitedgroup.com.sa
Subject:
RE: Cisco Access Point Quotation
Size:
486.1Kb
Anti-Virus/Dangerous Content Protection
Virus:
N
Blocked File:
N
Other Infection:
N
SpamAssassin
Spam:
N Action(s): deliver, header, "X-Spam-Status:, No"
High Scoring Spam:
N
SpamAssassin Spam:
N
Listed in RBL:
N
Spam Whitelisted:
N
Spam Blacklisted:
N
SpamAssassin Autolearn:
N
SpamAssassin Score:
0.00
Spam Report:
Score
Matching Rule
Description
large
too
Message Content Protection (MCP)
MCP:
N
High Scoring MCP:
N
SpamAssassin MCP:
N
MCP Whitelisted:
N
MCP Blacklisted:
N
Regards
Ejaz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150406/90754c05/attachment.html>
More information about the MailScanner
mailing list