PDF-Corruption
Alex Neuman
alex at vidadigital.com.pa
Mon Apr 6 14:24:39 UTC 2015
Do an MD5SUM of the PDF file before and after processing.
Also, ask the originator NOT to use TNEF encoding (Rich Text Format).
*Alex Neuman van der Hans*
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/
Mobile: +507 6781-9505
Work: +507 832-6725 <http://+5078326725/>
Work (USA): +1 (440) 253-9789
Skype: AlexNeuman
Don't miss Vida Digital on LiveStream
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000>
!
Saturdays 8am-10am on Máxima 91.7FM Panama
Follow *@AlexNeuman
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000>*
on
Twitter
Like Vida Digital
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000>
on
Facebook
Follow VidaDigital
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000>
on
Instagram
Subscribe to Vida Digital
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000>
on
Youtube
On Mon, Apr 6, 2015 at 8:31 AM, Mohammed Ejaz <mejaz at cyberia.net.sa> wrote:
> Hello.
>
>
>
> One of my user keep complaining that he is unable to receive the PDF
> attachment properly, they are getting corrupted. But when I check my logs
> it doesn’t show any problem. Now my concern is how to justify the customer
> the problem is from his side or from my MailScanner. Please advice. Thanks
> for your usual co-operation.
>
>
>
>
>
> *Below are the logs for the corrupted attachement/message *
>
>
>
>
>
> Apr 6 15:27:08 nmersal MailScanner[23116]: Message C98395DF459.A2E18 from
> 150.70.237.8 (eyad.nashed at natcom.com.sa) to unitedgroup.com.sa is too big
> for spam checks (497744 > 150000 bytes)
>
> Apr 6 15:27:08 nmersal MailScanner[23116]: Requeue: C98395DF459.A2E18 to
> 555C55DF544
>
> Apr 6 15:27:08 nmersal MailScanner[23116]: Logging message
> C98395DF459.A2E18 to SQL
>
> Apr 6 15:27:08 nmersal MailScanner[24178]: C98395DF459.A2E18: Logged to
> MailWatch SQL
>
>
>
>
>
> *Mail watch screen shot for the same message. *
>
>
>
>
>
>
>
> *Received on:*
>
> 06/04/15 15:27:08
>
> *Received by:*
>
> nmersal.cyberia.net.sa
>
> *Received from:*
>
> 150.70.237.8
>
> [Add to Whitelist
> <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=h&list=w>
> | Add to Blacklist
> <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=h&list=b>
> ]
>
> *Received Via:*
>
> *IP Address*
>
> *Hostname*
>
> *Country*
>
> *RBL*
>
> *Spam*
>
> *Virus*
>
> *All*
>
> 150.70.237.8
>
> rout01.hes.trendmicro.eu
>
> (GeoIP Lookup Failed)
>
> [
> <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:150.70.237.8>]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150.70.237.8&isspam=1>
> ]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150.70.237.8&isvirus=1>
> ]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150.70.237.8>
> ]
>
> 10.36.162.83
>
> (Reverse Lookup Failed)
>
> (GeoIP Lookup Failed)
>
> [
> <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:10.36.162.83>]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.36.162.83&isspam=1>
> ]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.36.162.83&isvirus=1>
> ]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.36.162.83>
> ]
>
> 89.237.187.138
>
> SJV-EXHC1.natcom.com.sa
>
> (GeoIP Lookup Failed)
>
> [
> <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:89.237.187.138>]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.237.187.138&isspam=1>
> ]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.237.187.138&isvirus=1>
> ]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.237.187.138>
> ]
>
> 172.16.200.106
>
> (Reverse Lookup Failed)
>
> (GeoIP Lookup Failed)
>
> [
> <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:172.16.200.106>]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.106&isspam=1>
> ]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.106&isvirus=1>
> ]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.106>
> ]
>
> 172.16.200.105
>
> (Reverse Lookup Failed)
>
> (GeoIP Lookup Failed)
>
> [
> <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:172.16.200.105>]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.105&isspam=1>
> ]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.105&isvirus=1>
> ]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.105>
> ]
>
> 94.96.34.151
>
> (Reverse Lookup Failed)
>
> (GeoIP Lookup Failed)
>
> [
> <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:94.96.34.151>]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.96.34.151&isspam=1>
> ]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.96.34.151&isvirus=1>
> ]
>
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.96.34.151>
> ]
>
> *ID:*
>
> C98395DF459.A2E18
>
> *Message Headers:*
>
> Received: from rout01.hes.trendmicro.eu (rout01.hes.trendmicro.eu
> [150.70.237.8])
> by nmersal.cyberia.net.sa (Postfix) with ESMTP id C98395DF459;
> Mon, 6 Apr 2015 15:27:04 +0300 (AST)
> Received: from outmta.starcloud.com (unknown [10.36.162.83])
> by rout01.hes.trendmicro.eu (Postfix) with SMTP id A01EA740040;
> Mon, 6 Apr 2015 12:24:17 +0000 (UTC)
> Received: from SJV-EXHC1.natcom.com.sa (unknown [89.237.187.138])
> by relay03.hes.trendmicro.eu (Postfix) with ESMTPS id 0CADD108003B;
> Mon, 6 Apr 2015 12:24:13 +0000 (UTC)
> Received: from SJV-EXMB1.natcom.com.sa ([172.16.200.106]) by
> SJV-EXHC1.natcom.com.sa ([172.16.200.105]) with mapi id 14.03.0174.001;
> Mon,
> 6 Apr 2015 15:24:12 +0300
> From: Eyad Nashed <eyad.nashed at natcom.com.sa>
> To: Charbel Abi Nader <cabinader at unitedgroup.com.sa>
> CC: Mustafa Khan <makhan at unitedgroup.com.sa>, Hekmat Qassem
> <hekmatq at natcom.com.sa>
> Subject: RE: Cisco Access Point Quotation
> Thread-Topic: Cisco Access Point Quotation
> Thread-Index: AdAuOXu58spz1ZodRhu5UQn57fO5pwE1hzOAAun77JAMaolAgAAAsNaw
> Date: Mon, 6 Apr 2015 12:24:11 +0000
> Message-ID: <
> FBD94B164BE21A4393DB52F7CD6C8DFD16D46764 at SJV-EXMB1.natcom.com.sa>
> References: <
> 5D03A0A65DC66246BD036492B3B4155D0125B0EFA0C0 at SRV-EXCHANGE.unitedgroup.com.sa
> >
> In-Reply-To: <
> 5D03A0A65DC66246BD036492B3B4155D0125B0EFA0C0 at SRV-EXCHANGE.unitedgroup.com.sa
> >
> Accept-Language: en-US
> Content-Language: en-US
> X-MS-Has-Attach: yes
> X-MS-TNEF-Correlator:
> x-originating-ip: [94.96.34.151]
> Content-Type: multipart/mixed;
>
> boundary="_009_FBD94B164BE21A4393DB52F7CD6C8DFD16D46764SJVEXMB1natcomc_"
> MIME-Version: 1.0
> X-TMASE-Version: StarCloud-1.3-7.6.1031-21452.007
> X-TMASE-Result: 10--28.541000-7.000000
> X-TMASE-MatchedRID:
> OoEa6u7Uk5/uYusHgJkgyp4oketYmk9n6twe66otJ9OPIHWegpZ5EAhQ
>
> G0AY/U6PNaks11cFGww8fzOIin7ZEjahjZPEodkXlNc2tyboPcIUFDkgqWz8Dv/rGk9ZgEve5PR
>
> Aib0WZrLaY2ziQGT+Uik9yXybJEtFlVHM/F6YkvRTQ6yD6LF7xfFJXtgF4GFLArfwhXClRwk/W3
>
> 2/OuaH/Sukbkm96eJb0cTnofRVtgp2XqsJnwiP2SF2LrPGWWbWC28gYpoLqXT/93Vx7XRxYRCMk
>
> pFgMaSq8bSjbtGbq7iL8o3USqxxWjSwZ6aRtol7LWxNF43hsRRI7YhsiSUzzE2zDRfhGX9jTVgr
>
> vxTVwyJwqdB+bLvyLQ/thUNmOVzLzzuzg6dga4JMkOX0UoduuVvo8FSqar5SA4eV6z+cHCe0E4q
>
> Q/W7LyPumyOC/eNMcAvP4B9GVGgcXGp2ggKr4hkdSfJOV3AHEH1bhq4z+yfQ6qdxtMsrhePwhb7
>
> LgNO0TcBMoZsDvj0dGdzDPcLC41P0peXGEEBlv6r3HCixfuKcc4ri4RJV/1ec4Knh54LbxFLzYP
>
> EEL4mjDpxqo7r+PMiApVk/D2Quxsyw+ZJnFumTvCHzUQQGBcv5Ya9RJuA7S28vyRIpB9YRHfthv
>
> /CmUfxQjizXtCXfTWYqLLUX2mAtB6yOrxc8xu3cF/0kiqyh4xtv4pHoS4V1QU3rTZ0JuCxGdJ4e
>
> SxuIY9yaXhPhnUZ2CIg7tJ//usYvptQwz5tsim/y00tE9StbJC/aADPDwzUBTQ8e8uxTNDUDi9i
>
> 0VZ/saFVw7sdMuf1sfC3MwiLDSgX5C7r6SH87G0EHapv1eJ+Ojezwlfd8ercmmD7/hK1/gT2zXY
>
> a9/nevhSSrPew45P9xmfnR7MeqDN3DiEIyq8qXPrX/pP+hVVyeIFeyseOJMLfvt9m2c3oFdCEso
> 7pnCj3Td6w7ozQLgmIj9pQ1oyg==
>
> *From:*
>
> eyad.nashed at natcom.com.sa
>
> [Add to Whitelist
> <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=f&list=w>
> | Add to Blacklist
> <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=f&list=b>
> ]
>
> *To:*
>
> makhan at unitedgroup.com.sa
> cabinader at unitedgroup.com.sa
>
> *Subject:*
>
> RE: Cisco Access Point Quotation
>
> *Size:*
>
> 486.1Kb
>
> *Anti-Virus/Dangerous Content Protection*
>
> *Virus:*
>
> * N *
>
> *Blocked File:*
>
> * N *
>
> *Other Infection:*
>
> * N *
>
> *SpamAssassin*
>
> *Spam:*
>
> * N * Action(s): deliver, header, "X-Spam-Status:, No"
>
> *High Scoring Spam:*
>
> * N *
>
> *SpamAssassin Spam:*
>
> * N *
>
> *Listed in RBL:*
>
> * N *
>
> *Spam Whitelisted:*
>
> * N *
>
> *Spam Blacklisted:*
>
> * N *
>
> *SpamAssassin Autolearn:*
>
> * N *
>
> *SpamAssassin Score:*
>
> 0.00
>
> *Spam Report:*
>
> *Score*
>
> *Matching Rule*
>
> *Description*
>
> large
>
> too
>
>
>
> *Message Content Protection (MCP)*
>
> *MCP:*
>
> * N *
>
> *High Scoring MCP:*
>
> * N *
>
> *SpamAssassin MCP:*
>
> * N *
>
> *MCP Whitelisted:*
>
> * N *
>
> *MCP Blacklisted:*
>
> * N *
>
>
>
>
>
> Regards
>
> Ejaz
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150406/67a0b524/attachment-0001.html>
More information about the MailScanner
mailing list