PDF-Corruption
Mohammed Ejaz
mejaz at cyberia.net.sa
Mon Apr 6 16:04:44 UTC 2015
Thanks a lot sorry to disturb you, I called during your meeting. As I was unaware about it.
This is what all I have for Tnef settings in my mailscanner. Does Any modification required ??? Please advice.
Again thank you for your time.
Expand TNEF attachments using an external program (or a Perl module)?
# within the TNEF attachment will not be checked against the filename rules.
Expand TNEF = no
# When the TNEF (winmail.dat) attachments are expanded, should the
# in "Outlook Rich Text Format" (TNEF) will be able to read the attachments
# no => Leave winmail.dat TNEF attachments alone.
# TNEF messages being doubled in size.
# replace => Replace the winmail.dat TNEF attachment with the files it
Use TNEF Contents = replace
# We are working on a replacement for the TNEF decoder.
Deliver Unparsable TNEF = yes
# Where the MS-TNEF expander is installed.
# the external TNEF expander binary,
# may be. It helps protect against Denial Of Service attacks in TNEF files.
#TNEF Expander = internal
TNEF Expander = /usr/bin/tnef --maxsize=100000000
# The maximum length of time the TNEF Expander is allowed to run for 1 message.
TNEF Timeout = 120
# maybe TNEF files to not be archives as they are really just another way
# tnef -- "winmail.dat" files created by Microsoft Exchange or Outlook
I believe Mailborder and FSL systems provide official support.
Do you have any contacts email/phone numbers
Ejaz
From: MailScanner [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman
Sent: Monday, April 06, 2015 6:43 PM
To: MailScanner discussion
Subject: RE: PDF-Corruption
I believe Mailborder and FSL systems provide official support.
Try modifying your TNEF decoder settings in MailScanner.conf.
On Apr 6, 2015 9:36 AM, "Mohammed Ejaz" <mejaz at cyberia.net.sa> wrote:
Thanks,
I cannot ask the customer as so many of them are complaining for the same, I can make any exception from my side from the MailScanner configuration.
Is there any officially support for mailscanner?? As I wanted to subscribe it.
Ejaz
From: MailScanner [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman
Sent: Monday, April 06, 2015 5:25 PM
To: MailScanner Discussion
Subject: Re: PDF-Corruption
Do an MD5SUM of the PDF file before and after processing.
Also, ask the originator NOT to use TNEF encoding (Rich Text Format).
Web Bug from http://t.signaleuna.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dcLCW8qSMPl2zhrHPN4WJlXjQFLCHVLXL-m1k1H6H0?si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000 <http://www.mailscanner.tv/1x1spacer.gif>
Alex Neuman van der Hans
Reliant Technologies / Vida Digital
<http://vidadigital.com.pa/> http://vidadigital.com.pa/
<http://vidadigital.com.pa/wp-content/uploads/2014/01/vdtransparent.png>
Mobile: +507 6781-9505 <tel:%2B507%206781-9505>
Work: <http://+5078326725/> +507 832-6725
Work (USA): +1 (440) 253-9789 <tel:%2B1%20%28440%29%20253-9789>
Skype: AlexNeuman
Don't miss <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> Vida Digital on LiveStream!
Saturdays 8am-10am on Máxima 91.7FM Panama
Follow <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> @AlexNeuman on Twitter
Like <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> Vida Digital on Facebook
Follow <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> VidaDigital on Instagram
Subscribe to <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> Vida Digital on Youtube
On Mon, Apr 6, 2015 at 8:31 AM, Mohammed Ejaz <mejaz at cyberia.net.sa> wrote:
Hello.
One of my user keep complaining that he is unable to receive the PDF attachment properly, they are getting corrupted. But when I check my logs it doesn’t show any problem. Now my concern is how to justify the customer the problem is from his side or from my MailScanner. Please advice. Thanks for your usual co-operation.
Below are the logs for the corrupted attachement/message
Apr 6 15:27:08 nmersal MailScanner[23116]: Message C98395DF459.A2E18 from 150.70.237.8 (eyad.nashed at natcom.com.sa) to unitedgroup.com.sa is too big for spam checks (497744 > 150000 bytes)
Apr 6 15:27:08 nmersal MailScanner[23116]: Requeue: C98395DF459.A2E18 to 555C55DF544
Apr 6 15:27:08 nmersal MailScanner[23116]: Logging message C98395DF459.A2E18 to SQL
Apr 6 15:27:08 nmersal MailScanner[24178]: C98395DF459.A2E18: Logged to MailWatch SQL
Mail watch screen shot for the same message.
Received on:
06/04/15 15:27:08
Received by:
nmersal.cyberia.net.sa
Received from:
150.70.237.8
[ <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=h&list=w> Add to Whitelist | <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=h&list=b> Add to Blacklist]
Received Via:
IP Address
Hostname
Country
RBL
Spam
Virus
All
150.70.237.8
rout01.hes.trendmicro.eu
(GeoIP Lookup Failed)
[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:150.70.237.8> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150.70.237.8&isspam=1> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150.70.237.8&isvirus=1> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150.70.237.8> ]
10.36.162.83
(Reverse Lookup Failed)
(GeoIP Lookup Failed)
[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:10.36.162.83> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.36.162.83&isspam=1> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.36.162.83&isvirus=1> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.36.162.83> ]
89.237.187.138
SJV-EXHC1.natcom.com.sa
(GeoIP Lookup Failed)
[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:89.237.187.138> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.237.187.138&isspam=1> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.237.187.138&isvirus=1> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.237.187.138> ]
172.16.200.106
(Reverse Lookup Failed)
(GeoIP Lookup Failed)
[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:172.16.200.106> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.106&isspam=1> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.106&isvirus=1> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.106> ]
172.16.200.105
(Reverse Lookup Failed)
(GeoIP Lookup Failed)
[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:172.16.200.105> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.105&isspam=1> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.105&isvirus=1> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.105> ]
94.96.34.151
(Reverse Lookup Failed)
(GeoIP Lookup Failed)
[ <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:94.96.34.151> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.96.34.151&isspam=1> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.96.34.151&isvirus=1> ]
[ <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.96.34.151> ]
ID:
C98395DF459.A2E18
Message Headers:
Received: from rout01.hes.trendmicro.eu (rout01.hes.trendmicro.eu [150.70.237.8])
by nmersal.cyberia.net.sa (Postfix) with ESMTP id C98395DF459;
Mon, 6 Apr 2015 15:27:04 +0300 (AST)
Received: from outmta.starcloud.com (unknown [10.36.162.83])
by rout01.hes.trendmicro.eu (Postfix) with SMTP id A01EA740040;
Mon, 6 Apr 2015 12:24:17 +0000 (UTC)
Received: from SJV-EXHC1.natcom.com.sa (unknown [89.237.187.138])
by relay03.hes.trendmicro.eu (Postfix) with ESMTPS id 0CADD108003B;
Mon, 6 Apr 2015 12:24:13 +0000 (UTC)
Received: from SJV-EXMB1.natcom.com.sa ([172.16.200.106]) by
SJV-EXHC1.natcom.com.sa ([172.16.200.105]) with mapi id 14.03.0174.001; Mon,
6 Apr 2015 15:24:12 +0300
From: Eyad Nashed <eyad.nashed at natcom.com.sa>
To: Charbel Abi Nader <cabinader at unitedgroup.com.sa>
CC: Mustafa Khan <makhan at unitedgroup.com.sa>, Hekmat Qassem
<hekmatq at natcom.com.sa>
Subject: RE: Cisco Access Point Quotation
Thread-Topic: Cisco Access Point Quotation
Thread-Index: AdAuOXu58spz1ZodRhu5UQn57fO5pwE1hzOAAun77JAMaolAgAAAsNaw
Date: Mon, 6 Apr 2015 12:24:11 +0000
Message-ID: <FBD94B164BE21A4393DB52F7CD6C8DFD16D46764 at SJV-EXMB1.natcom.com.sa>
References: <5D03A0A65DC66246BD036492B3B4155D0125B0EFA0C0 at SRV-EXCHANGE.unitedgroup.com.sa>
In-Reply-To: <5D03A0A65DC66246BD036492B3B4155D0125B0EFA0C0 at SRV-EXCHANGE.unitedgroup.com.sa>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [94.96.34.151]
Content-Type: multipart/mixed;
boundary="_009_FBD94B164BE21A4393DB52F7CD6C8DFD16D46764SJVEXMB1natcomc_"
MIME-Version: 1.0
X-TMASE-Version: StarCloud-1.3-7.6.1031-21452.007
X-TMASE-Result: 10--28.541000-7.000000
X-TMASE-MatchedRID: OoEa6u7Uk5/uYusHgJkgyp4oketYmk9n6twe66otJ9OPIHWegpZ5EAhQ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From:
eyad.nashed at natcom.com.sa
[ <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=f&list=w> Add to Whitelist | <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=f&list=b> Add to Blacklist]
To:
makhan at unitedgroup.com.sa
cabinader at unitedgroup.com.sa
Subject:
RE: Cisco Access Point Quotation
Size:
486.1Kb
Anti-Virus/Dangerous Content Protection
Virus:
N
Blocked File:
N
Other Infection:
N
SpamAssassin
Spam:
N Action(s): deliver, header, "X-Spam-Status:, No"
High Scoring Spam:
N
SpamAssassin Spam:
N
Listed in RBL:
N
Spam Whitelisted:
N
Spam Blacklisted:
N
SpamAssassin Autolearn:
N
SpamAssassin Score:
0.00
Spam Report:
Score
Matching Rule
Description
large
too
Message Content Protection (MCP)
MCP:
N
High Scoring MCP:
N
SpamAssassin MCP:
N
MCP Whitelisted:
N
MCP Blacklisted:
N
Regards
Ejaz
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150406/d797505e/attachment.html>
More information about the MailScanner
mailing list