PDF-Corruption

Mon Apr 6 14:37:35 UTC 2015

Thanks, 

I cannot ask the customer as so many of them are complaining for the same,  I can make any exception from my side from  the MailScanner configuration. 

Is there any officially support for mailscanner?? As I wanted to subscribe it. 

Ejaz 

From: MailScanner [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman
Sent: Monday, April 06, 2015 5:25 PM
To: MailScanner Discussion
Subject: Re: PDF-Corruption

Do an MD5SUM of the PDF file before and after processing.

Also, ask the originator NOT to use TNEF encoding (Rich Text Format).

 Web Bug from http://t.signaleuna.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dcLCW8qSMPl2zhrHPN4WJlXjQFLCHVLXL-m1k1H6H0?si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000 <http://www.mailscanner.tv/1x1spacer.gif> 

Alex Neuman van der Hans
Reliant Technologies / Vida Digital
 <http://vidadigital.com.pa/> http://vidadigital.com.pa/

  <http://vidadigital.com.pa/wp-content/uploads/2014/01/vdtransparent.png> 

Mobile: +507 6781-9505
Work:  <http://+5078326725/> +507 832-6725
Work (USA): +1 (440) 253-9789

Skype: AlexNeuman

Don't miss  <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> Vida Digital on LiveStream!

Saturdays 8am-10am on Máxima 91.7FM Panama

Follow  <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> @AlexNeuman on Twitter
Like  <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> Vida Digital on Facebook

Follow  <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> VidaDigital on Instagram

Subscribe to  <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> Vida Digital on Youtube

On Mon, Apr 6, 2015 at 8:31 AM, Mohammed Ejaz <mejaz at cyberia.net.sa> wrote:

Hello.

One of my user keep complaining that  he is unable to receive the PDF attachment properly, they are getting corrupted. But when I check my logs it doesn’t show any problem. Now my concern is how to justify the customer the problem is from his side or from my MailScanner.  Please advice. Thanks for your usual co-operation.

Below are the logs for the corrupted attachement/message 

Apr  6 15:27:08 nmersal MailScanner[23116]: Message C98395DF459.A2E18 from 150.70.237.8 (eyad.nashed at natcom.com.sa) to unitedgroup.com.sa is too big for spam checks (497744 > 150000 bytes)

Apr  6 15:27:08 nmersal MailScanner[23116]: Requeue: C98395DF459.A2E18 to 555C55DF544

Apr  6 15:27:08 nmersal MailScanner[23116]: Logging message C98395DF459.A2E18 to SQL

Apr  6 15:27:08 nmersal MailScanner[24178]: C98395DF459.A2E18: Logged to MailWatch SQL

Mail watch screen shot for the same message. 

Received on:

06/04/15 15:27:08

Received by:

nmersal.cyberia.net.sa

Received from:

150.70.237.8

[ <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=h&list=w> Add to Whitelist |  <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=h&list=b> Add to Blacklist]

Received Via:

IP Address

Hostname

Country

RBL

Spam

Virus

All

150.70.237.8

rout01.hes.trendmicro.eu

(GeoIP Lookup Failed)

[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:150.70.237.8>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150.70.237.8&isspam=1>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150.70.237.8&isvirus=1>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150.70.237.8>   ]

10.36.162.83

(Reverse Lookup Failed)

(GeoIP Lookup Failed)

[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:10.36.162.83>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.36.162.83&isspam=1>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.36.162.83&isvirus=1>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.36.162.83>   ]

89.237.187.138

SJV-EXHC1.natcom.com.sa

(GeoIP Lookup Failed)

[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:89.237.187.138>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.237.187.138&isspam=1>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.237.187.138&isvirus=1>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.237.187.138>   ]

172.16.200.106

(Reverse Lookup Failed)

(GeoIP Lookup Failed)

[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:172.16.200.106>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.106&isspam=1>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.106&isvirus=1>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.106>   ]

172.16.200.105

(Reverse Lookup Failed)

(GeoIP Lookup Failed)

[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:172.16.200.105>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.105&isspam=1>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.105&isvirus=1>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.105>   ]

94.96.34.151

(Reverse Lookup Failed)

(GeoIP Lookup Failed)

[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:94.96.34.151>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.96.34.151&isspam=1>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.96.34.151&isvirus=1>   ]

[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.96.34.151>   ]

ID:

C98395DF459.A2E18

Message Headers:

Received: from rout01.hes.trendmicro.eu (rout01.hes.trendmicro.eu [150.70.237.8])
     by nmersal.cyberia.net.sa (Postfix) with ESMTP id C98395DF459;
     Mon, 6 Apr 2015 15:27:04 +0300 (AST)
Received: from outmta.starcloud.com (unknown [10.36.162.83])
     by rout01.hes.trendmicro.eu (Postfix) with SMTP id A01EA740040;
     Mon, 6 Apr 2015 12:24:17 +0000 (UTC)
Received: from SJV-EXHC1.natcom.com.sa (unknown [89.237.187.138])
     by relay03.hes.trendmicro.eu (Postfix) with ESMTPS id 0CADD108003B;
     Mon, 6 Apr 2015 12:24:13 +0000 (UTC)
Received: from SJV-EXMB1.natcom.com.sa ([172.16.200.106]) by
SJV-EXHC1.natcom.com.sa ([172.16.200.105]) with mapi id 14.03.0174.001; Mon,
6 Apr 2015 15:24:12 +0300
From: Eyad Nashed <eyad.nashed at natcom.com.sa>
To: Charbel Abi Nader <cabinader at unitedgroup.com.sa>
CC: Mustafa Khan <makhan at unitedgroup.com.sa>, Hekmat Qassem
     <hekmatq at natcom.com.sa>
Subject: RE: Cisco Access Point Quotation
Thread-Topic: Cisco Access Point Quotation
Thread-Index: AdAuOXu58spz1ZodRhu5UQn57fO5pwE1hzOAAun77JAMaolAgAAAsNaw
Date: Mon, 6 Apr 2015 12:24:11 +0000
Message-ID: <FBD94B164BE21A4393DB52F7CD6C8DFD16D46764 at SJV-EXMB1.natcom.com.sa>
References: <5D03A0A65DC66246BD036492B3B4155D0125B0EFA0C0 at SRV-EXCHANGE.unitedgroup.com.sa>
In-Reply-To: <5D03A0A65DC66246BD036492B3B4155D0125B0EFA0C0 at SRV-EXCHANGE.unitedgroup.com.sa>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [94.96.34.151]
Content-Type: multipart/mixed;
     boundary="_009_FBD94B164BE21A4393DB52F7CD6C8DFD16D46764SJVEXMB1natcomc_"
MIME-Version: 1.0
X-TMASE-Version: StarCloud-1.3-7.6.1031-21452.007
X-TMASE-Result: 10--28.541000-7.000000
X-TMASE-MatchedRID: OoEa6u7Uk5/uYusHgJkgyp4oketYmk9n6twe66otJ9OPIHWegpZ5EAhQ
     G0AY/U6PNaks11cFGww8fzOIin7ZEjahjZPEodkXlNc2tyboPcIUFDkgqWz8Dv/rGk9ZgEve5PR
     Aib0WZrLaY2ziQGT+Uik9yXybJEtFlVHM/F6YkvRTQ6yD6LF7xfFJXtgF4GFLArfwhXClRwk/W3
     2/OuaH/Sukbkm96eJb0cTnofRVtgp2XqsJnwiP2SF2LrPGWWbWC28gYpoLqXT/93Vx7XRxYRCMk
     pFgMaSq8bSjbtGbq7iL8o3USqxxWjSwZ6aRtol7LWxNF43hsRRI7YhsiSUzzE2zDRfhGX9jTVgr
     vxTVwyJwqdB+bLvyLQ/thUNmOVzLzzuzg6dga4JMkOX0UoduuVvo8FSqar5SA4eV6z+cHCe0E4q
     Q/W7LyPumyOC/eNMcAvP4B9GVGgcXGp2ggKr4hkdSfJOV3AHEH1bhq4z+yfQ6qdxtMsrhePwhb7
     LgNO0TcBMoZsDvj0dGdzDPcLC41P0peXGEEBlv6r3HCixfuKcc4ri4RJV/1ec4Knh54LbxFLzYP
     EEL4mjDpxqo7r+PMiApVk/D2Quxsyw+ZJnFumTvCHzUQQGBcv5Ya9RJuA7S28vyRIpB9YRHfthv
     /CmUfxQjizXtCXfTWYqLLUX2mAtB6yOrxc8xu3cF/0kiqyh4xtv4pHoS4V1QU3rTZ0JuCxGdJ4e
     SxuIY9yaXhPhnUZ2CIg7tJ//usYvptQwz5tsim/y00tE9StbJC/aADPDwzUBTQ8e8uxTNDUDi9i
     0VZ/saFVw7sdMuf1sfC3MwiLDSgX5C7r6SH87G0EHapv1eJ+Ojezwlfd8ercmmD7/hK1/gT2zXY
     a9/nevhSSrPew45P9xmfnR7MeqDN3DiEIyq8qXPrX/pP+hVVyeIFeyseOJMLfvt9m2c3oFdCEso
     7pnCj3Td6w7ozQLgmIj9pQ1oyg==

From:

eyad.nashed at natcom.com.sa

[ <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=f&list=w> Add to Whitelist |  <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=f&list=b> Add to Blacklist]

To:

makhan at unitedgroup.com.sa
cabinader at unitedgroup.com.sa

Subject:

RE: Cisco Access Point Quotation

Size:

486.1Kb

Anti-Virus/Dangerous Content Protection

Virus:

 N 

Blocked File:

 N 

Other Infection:

 N 

SpamAssassin

Spam:

 N   Action(s): deliver, header, "X-Spam-Status:, No"

High Scoring Spam:

 N 

SpamAssassin Spam:

 N 

Listed in RBL:

 N 

Spam Whitelisted:

 N 

Spam Blacklisted:

 N 

SpamAssassin Autolearn:

 N 

SpamAssassin Score:

0.00

Spam Report:

Score

Matching Rule

Description

large

too

Message Content Protection (MCP)

MCP:

 N 

High Scoring MCP:

 N 

SpamAssassin MCP:

 N 

MCP Whitelisted:

 N 

MCP Blacklisted:

 N 

Regards

Ejaz 

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150406/2875853e/attachment.html>