PDF-Corruption
Alex Neuman
alex at vidadigital.com.pa
Mon Apr 6 16:55:19 UTC 2015
I believe he mentioned the PDF's are being corrupted, not stopped.
*Alex Neuman van der Hans*
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/
Mobile: +507 6781-9505
Work: +507 832-6725 <http://+5078326725/>
Work (USA): +1 (440) 253-9789
Skype: AlexNeuman
Don't miss Vida Digital on LiveStream
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=d0bd9672-4c8e-4fdc-d8b7-d16ad2ae3c23>
!
Saturdays 8am-10am on Máxima 91.7FM Panama
Follow *@AlexNeuman
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=d0bd9672-4c8e-4fdc-d8b7-d16ad2ae3c23>*
on
Twitter
Like Vida Digital
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=d0bd9672-4c8e-4fdc-d8b7-d16ad2ae3c23>
on
Facebook
Follow VidaDigital
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=d0bd9672-4c8e-4fdc-d8b7-d16ad2ae3c23>
on
Instagram
Subscribe to Vida Digital
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=d0bd9672-4c8e-4fdc-d8b7-d16ad2ae3c23>
on
Youtube
On Mon, Apr 6, 2015 at 11:29 AM, Jerry Benton <jerry.benton at mailborder.com>
wrote:
> The PDF probably has a disallowed MIME type in the document. Edit your
> MIME types config file in /etc/MailScanner and allow all MIME types. Resend
> the email and see if it gets through. If it does, enable each MIME type
> until you figure out which one is stopping or corrupting the PDF. Note that
> there is a problem with the current Linux “file” command that has been
> causing problems with a lot of applications.
>
> This may or may not be your problem, but of the customers I have dealt
> with at Mailborder complaining of this issue, this is often the problem.
>
> -
> Jerry Benton
> www.mailborder.com
>
>
>
> On Apr 6, 2015, at 12:04 PM, Mohammed Ejaz <mejaz at cyberia.net.sa> wrote:
>
> Thanks a lot sorry to disturb you, I called during your meeting. As I was
> unaware about it.
>
>
> *This is what all I have for Tnef settings in my mailscanner. *Does
> Any modification required ??? Please advice.
>
> Again thank you for your time.
>
>
>
> Expand TNEF attachments using an external program (or a Perl module)?
> # within the TNEF attachment will not be checked against the filename
> rules.
> Expand TNEF = no
> # When the TNEF (winmail.dat) attachments are expanded, should the
> # in "Outlook Rich Text Format" (TNEF) will be able to read the attachments
> # no => Leave winmail.dat TNEF attachments alone.
> # TNEF messages being doubled in size.
> # replace => Replace the winmail.dat TNEF attachment with the files it
> Use TNEF Contents = replace
> # We are working on a replacement for the TNEF decoder.
> Deliver Unparsable TNEF = yes
> # Where the MS-TNEF expander is installed.
> # the external TNEF expander binary,
> # may be. It helps protect against Denial Of Service attacks in TNEF files.
> #TNEF Expander = internal
> TNEF Expander = /usr/bin/tnef --maxsize=100000000
> # The maximum length of time the TNEF Expander is allowed to run for 1
> message.
> TNEF Timeout = 120
> # maybe TNEF files to not be archives as they are really just another way
> # tnef -- "winmail.dat" files created by Microsoft Exchange or
> Outlook
>
>
>
> I believe Mailborder and FSL systems provide official support.
> Do you have any contacts email/phone numbers
>
> Ejaz
>
>
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces at lists.mailscanner.info
> <mailscanner-bounces at lists.mailscanner.info>] *On Behalf Of *Alex Neuman
> *Sent:* Monday, April 06, 2015 6:43 PM
> *To:* MailScanner discussion
> *Subject:* RE: PDF-Corruption
>
>
> I believe Mailborder and FSL systems provide official support.
>
> Try modifying your TNEF decoder settings in MailScanner.conf.
> On Apr 6, 2015 9:36 AM, "Mohammed Ejaz" <mejaz at cyberia.net.sa> wrote:
> Thanks,
>
> I cannot ask the customer as so many of them are complaining for the
> same, I can make any exception from my side from the MailScanner
> configuration.
>
> Is there any officially support for mailscanner?? As I wanted to subscribe
> it.
>
>
> Ejaz
>
> *From:* MailScanner [mailto:mailscanner-bounces at lists.mailscanner.info] *On
> Behalf Of *Alex Neuman
> *Sent:* Monday, April 06, 2015 5:25 PM
> *To:* MailScanner Discussion
> *Subject:* Re: PDF-Corruption
>
> Do an MD5SUM of the PDF file before and after processing.
>
> Also, ask the originator NOT to use TNEF encoding (Rich Text Format).
> [image: Web Bug from
> http://t.signaleuna.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dcLCW8qSMPl2zhrHPN4WJlXjQFLCHVLXL-m1k1H6H0?si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000]
>
>
>
>
> *Alex Neuman van der Hans*
> Reliant Technologies / Vida Digital
> http://vidadigital.com.pa/
> Mobile: +507 6781-9505
> Work: +507 832-6725 <http://+5078326725/>
> Work (USA): +1 (440) 253-9789
> Skype: AlexNeuman
>
> Don't miss Vida Digital on LiveStream
> <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000>
> !
> Saturdays 8am-10am on Máxima 91.7FM Panama
>
> Follow *@AlexNeuman
> <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000>* on
> Twitter
> Like Vida Digital
> <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> on
> Facebook
> Follow VidaDigital
> <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> on
> Instagram
> Subscribe to Vida Digital
> <http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=8f41d298-9289-4b2f-8696-168d37d56000> on
> Youtube
>
> On Mon, Apr 6, 2015 at 8:31 AM, Mohammed Ejaz <mejaz at cyberia.net.sa>
> wrote:
> Hello.
>
> One of my user keep complaining that he is unable to receive the PDF
> attachment properly, they are getting corrupted. But when I check my logs
> it doesn’t show any problem. Now my concern is how to justify the customer
> the problem is from his side or from my MailScanner. Please advice. Thanks
> for your usual co-operation.
>
>
> *Below are the logs for the corrupted attachement/message *
>
>
> Apr 6 15:27:08 nmersal MailScanner[23116]: Message C98395DF459.A2E18 from
> 150.70.237.8 (eyad.nashed at natcom.com.sa) to unitedgroup.com.sa is too big
> for spam checks (497744 > 150000 bytes)
> Apr 6 15:27:08 nmersal MailScanner[23116]: Requeue: C98395DF459.A2E18 to
> 555C55DF544
> Apr 6 15:27:08 nmersal MailScanner[23116]: Logging message
> C98395DF459.A2E18 to SQL
> Apr 6 15:27:08 nmersal MailScanner[24178]: C98395DF459.A2E18: Logged to
> MailWatch SQL
>
>
> *Mail watch screen shot for the same message. *
>
>
>
> *Received on:*
> 06/04/15 15:27:08
> *Received by:*
> nmersal.cyberia.net.sa
> *Received from:*
> 150.70.237.8
> [Add to Whitelist
> <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=h&list=w>
> | Add to Blacklist
> <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=h&list=b>
> ]
> *Received Via:*
> *IP Address*
> *Hostname*
> *Country*
> *RBL*
> *Spam*
> *Virus*
> *All*
> 150.70.237.8
> rout01.hes.trendmicro.eu
> (GeoIP Lookup Failed)
> [
> <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:150.70.237.8>]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150.70.237.8&isspam=1>
> ]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150.70.237.8&isvirus=1>
> ]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=150.70.237.8>
> ]
> 10.36.162.83
> (Reverse Lookup Failed)
> (GeoIP Lookup Failed)
> [
> <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:10.36.162.83>]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.36.162.83&isspam=1>
> ]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.36.162.83&isvirus=1>
> ]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=10.36.162.83>
> ]
> 89.237.187.138
> SJV-EXHC1.natcom.com.sa <http://sjv-exhc1.natcom.com.sa/>
> (GeoIP Lookup Failed)
> [
> <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:89.237.187.138>]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.237.187.138&isspam=1>
> ]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.237.187.138&isvirus=1>
> ]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=89.237.187.138>
> ]
> 172.16.200.106
> (Reverse Lookup Failed)
> (GeoIP Lookup Failed)
> [
> <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:172.16.200.106>]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.106&isspam=1>
> ]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.106&isvirus=1>
> ]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.106>
> ]
> 172.16.200.105
> (Reverse Lookup Failed)
> (GeoIP Lookup Failed)
> [
> <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:172.16.200.105>]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.105&isspam=1>
> ]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.105&isvirus=1>
> ]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=172.16.200.105>
> ]
> 94.96.34.151
> (Reverse Lookup Failed)
> (GeoIP Lookup Failed)
> [
> <http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist:94.96.34.151>]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.96.34.151&isspam=1>
> ]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.96.34.151&isvirus=1>
> ]
> [
> <http://nmersal.cyberia.net.sa/mailscanner/rep_message_listing.php?relay=94.96.34.151>
> ]
> *ID:*
> C98395DF459.A2E18
> *Message Headers:*
> Received: from rout01.hes.trendmicro.eu (rout01.hes.trendmicro.eu
> [150.70.237.8])
> by nmersal.cyberia.net.sa (Postfix) with ESMTP id C98395DF459;
> Mon, 6 Apr 2015 15:27:04 +0300 (AST)
> Received: from outmta.starcloud.com (unknown [10.36.162.83])
> by rout01.hes.trendmicro.eu (Postfix) with SMTP id A01EA740040;
> Mon, 6 Apr 2015 12:24:17 +0000 (UTC)
> Received: from SJV-EXHC1.natcom.com.sa <http://sjv-exhc1.natcom.com.sa/> (unknown
> [89.237.187.138])
> by relay03.hes.trendmicro.eu (Postfix) with ESMTPS id 0CADD108003B;
> Mon, 6 Apr 2015 12:24:13 +0000 (UTC)
> Received: from SJV-EXMB1.natcom.com.sa <http://sjv-exmb1.natcom.com.sa/> ([172.16.200.106])
> by
> SJV-EXHC1.natcom.com.sa <http://sjv-exhc1.natcom.com.sa/> ([172.16.200.105])
> with mapi id 14.03.0174.001; Mon,
> 6 Apr 2015 15:24:12 +0300
> From: Eyad Nashed <eyad.nashed at natcom.com.sa>
> To: Charbel Abi Nader <cabinader at unitedgroup.com.sa>
> CC: Mustafa Khan <makhan at unitedgroup.com.sa>, Hekmat Qassem
> <hekmatq at natcom.com.sa>
> Subject: RE: Cisco Access Point Quotation
> Thread-Topic: Cisco Access Point Quotation
> Thread-Index: AdAuOXu58spz1ZodRhu5UQn57fO5pwE1hzOAAun77JAMaolAgAAAsNaw
> Date: Mon, 6 Apr 2015 12:24:11 +0000
> Message-ID: <
> FBD94B164BE21A4393DB52F7CD6C8DFD16D46764 at SJV-EXMB1.natcom.com.sa>
> References: <
> 5D03A0A65DC66246BD036492B3B4155D0125B0EFA0C0 at SRV-EXCHANGE.unitedgroup.com.sa
> >
> In-Reply-To: <
> 5D03A0A65DC66246BD036492B3B4155D0125B0EFA0C0 at SRV-EXCHANGE.unitedgroup.com.sa
> >
> Accept-Language: en-US
> Content-Language: en-US
> X-MS-Has-Attach: yes
> X-MS-TNEF-Correlator:
> x-originating-ip: [94.96.34.151]
> Content-Type: multipart/mixed;
>
> boundary="_009_FBD94B164BE21A4393DB52F7CD6C8DFD16D46764SJVEXMB1natcomc_"
> MIME-Version: 1.0
> X-TMASE-Version: StarCloud-1.3-7.6.1031-21452.007
> X-TMASE-Result: 10--28.541000-7.000000
> X-TMASE-MatchedRID:
> OoEa6u7Uk5/uYusHgJkgyp4oketYmk9n6twe66otJ9OPIHWegpZ5EAhQ
>
> G0AY/U6PNaks11cFGww8fzOIin7ZEjahjZPEodkXlNc2tyboPcIUFDkgqWz8Dv/rGk9ZgEve5PR
>
> Aib0WZrLaY2ziQGT+Uik9yXybJEtFlVHM/F6YkvRTQ6yD6LF7xfFJXtgF4GFLArfwhXClRwk/W3
>
> 2/OuaH/Sukbkm96eJb0cTnofRVtgp2XqsJnwiP2SF2LrPGWWbWC28gYpoLqXT/93Vx7XRxYRCMk
>
> pFgMaSq8bSjbtGbq7iL8o3USqxxWjSwZ6aRtol7LWxNF43hsRRI7YhsiSUzzE2zDRfhGX9jTVgr
>
> vxTVwyJwqdB+bLvyLQ/thUNmOVzLzzuzg6dga4JMkOX0UoduuVvo8FSqar5SA4eV6z+cHCe0E4q
>
> Q/W7LyPumyOC/eNMcAvP4B9GVGgcXGp2ggKr4hkdSfJOV3AHEH1bhq4z+yfQ6qdxtMsrhePwhb7
>
> LgNO0TcBMoZsDvj0dGdzDPcLC41P0peXGEEBlv6r3HCixfuKcc4ri4RJV/1ec4Knh54LbxFLzYP
>
> EEL4mjDpxqo7r+PMiApVk/D2Quxsyw+ZJnFumTvCHzUQQGBcv5Ya9RJuA7S28vyRIpB9YRHfthv
>
> /CmUfxQjizXtCXfTWYqLLUX2mAtB6yOrxc8xu3cF/0kiqyh4xtv4pHoS4V1QU3rTZ0JuCxGdJ4e
>
> SxuIY9yaXhPhnUZ2CIg7tJ//usYvptQwz5tsim/y00tE9StbJC/aADPDwzUBTQ8e8uxTNDUDi9i
>
> 0VZ/saFVw7sdMuf1sfC3MwiLDSgX5C7r6SH87G0EHapv1eJ+Ojezwlfd8ercmmD7/hK1/gT2zXY
>
> a9/nevhSSrPew45P9xmfnR7MeqDN3DiEIyq8qXPrX/pP+hVVyeIFeyseOJMLfvt9m2c3oFdCEso
> 7pnCj3Td6w7ozQLgmIj9pQ1oyg==
> *From:*
> eyad.nashed at natcom.com.sa
> [Add to Whitelist
> <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=f&list=w>
> | Add to Blacklist
> <http://nmersal.cyberia.net.sa/mailscanner/lists.php?host=150.70.237.8&from=eyad.nashed@natcom.com.sa&to=makhan@unitedgroup.com.sa,cabinader@unitedgroup.com.sa&type=f&list=b>
> ]
> *To:*
> makhan at unitedgroup.com.sa
> cabinader at unitedgroup.com.sa
> *Subject:*
> RE: Cisco Access Point Quotation
> *Size:*
> 486.1Kb
> *Anti-Virus/Dangerous Content Protection*
> *Virus:*
> * N *
> *Blocked File:*
> * N *
> *Other Infection:*
> * N *
> *SpamAssassin*
> *Spam:*
> * N * Action(s): deliver, header, "X-Spam-Status:, No"
> *High Scoring Spam:*
> * N *
> *SpamAssassin Spam:*
> * N *
> *Listed in RBL:*
> * N *
> *Spam Whitelisted:*
> * N *
> *Spam Blacklisted:*
> * N *
> *SpamAssassin Autolearn:*
> * N *
> *SpamAssassin Score:*
> 0.00
> *Spam Report:*
> *Score*
> *Matching Rule*
> *Description*
> large
> too
>
> *Message Content Protection (MCP)*
> *MCP:*
> * N *
> *High Scoring MCP:*
> * N *
> *SpamAssassin MCP:*
> * N *
> *MCP Whitelisted:*
> * N *
> *MCP Blacklisted:*
> * N *
>
>
> Regards
> Ejaz
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150406/305ab00b/attachment-0001.html>
More information about the MailScanner
mailing list