Problem messages

Thu Apr 16 21:03:05 UTC 2015

I keep getting these emails from MailScanner

Archive:

Number of messages: 1
Tries Message Last Tried
===== ======= ==========
6 DBCA82040EB.A9AA7 Thu Apr 16 09:45:57 2015

I have followed instructions on how to remove these but they keep occurring
every time we receive an email addressed to a non existent user.

Log entries
Apr 16 09:24:19 retail MailScanner[17702]: Making attempt 2 at processing
message DBCA82040EB.A9AA7
Apr 16 09:24:23 retail MailScanner[17702]: SpamAssassin cache hit for
message DBCA82040EB.A9AA7
Apr 16 09:28:10 retail MailScanner[18268]: Making attempt 3 at processing
message DBCA82040EB.A9AA7
Apr 16 09:28:14 retail MailScanner[18268]: SpamAssassin cache hit for
message DBCA82040EB.A9AA7
Apr 16 09:32:25 retail MailScanner[18318]: Making attempt 4 at processing
message DBCA82040EB.A9AA7
Apr 16 09:32:29 retail MailScanner[18318]: SpamAssassin cache hit for
message DBCA82040EB.A9AA7
Apr 16 09:37:12 retail MailScanner[17699]: Making attempt 5 at processing
message DBCA82040EB.A9AA7
Apr 16 09:37:16 retail MailScanner[17699]: SpamAssassin cache hit for
message DBCA82040EB.A9AA7
Apr 16 09:40:33 retail MailScanner[18427]: Making attempt 6 at processing
message DBCA82040EB.A9AA7
Apr 16 09:40:36 retail MailScanner[18427]: SpamAssassin cache hit for
message DBCA82040EB.A9AA7
Apr 16 09:40:36 retail MailScanner[18217]: Warning: skipping message
DBCA82040EB.A9AA7 as it has been attempted too many times
Apr 16 09:40:36 retail MailScanner[18217]: Quarantined message
DBCA82040EB.A9AA7 as it caused MailScanner to crash several times
Apr 16 09:40:36 retail MailScanner[18217]: Saved entire message to
/var/spool/MailScanner/quarantine/20150416/DBCA82040EB.A9AA7

Running on
Linux retail.ptera.net 2.6.33.6-147.fc13.x86_64 #1 SMP Tue Jul 6 22:32:17
UTC 2010 x86_64 x86_64 x86_64 GNU/Linux
This is Fedora release 13 (Goddard)
This is Perl version 5.010001 (5.10.1)

This is MailScanner version 4.84.6

Any fix?

Response from Forum...

Make sure you have tnef installed. Then check your tnef settings. Also make
sure your directory permissions and the user to run as are set correctly.
If you need more help, please use the mailing list.

OK Thanks

Expand TNEF = yes
Use TNEF Contents = replace
Deliver Unparsable TNEF = no
#TNEF Expander  = internal
TNEF Expander = /usr/bin/tnef --maxsize=100000000
TNEF Timeout = 120

perl-Convert-TNEF 0.17-11.fc13
tnef 1.4.5-1

And I get this emal sent to me:

The original message was received at Thu, 16 Apr 2015 12:48:49 -0700
from postfix at localhost
with id t3GJmn2a020753

   ----- The following addresses had permanent fatal errors -----
160-92248047-23-f.trowridge=guitarfranks.com at mail.mybusinesshomes.com
    (reason: 554 5.7.1 <160-92248047-23-f.trowridge=
guitarfranks.com at mail.mybusinesshomes.com>: Relay access denied)
    (expanded from: 160-92248047-23-f.trowridge=
guitarfranks.com at mail.mybusinesshomes.com)

   ----- Transcript of session follows -----
... while talking to [127.0.0.1]:
>>> DATA
<<< 554 5.7.1 <160-92248047-23-f.trowridge=
guitarfranks.com at mail.mybusinesshomes.com>: Relay access denied
554 5.0.0 Service unavailable
<<< 554 5.5.1 Error: no valid recipients

Final-Recipient: RFC822; 160-92248047-23-f.trowridge=
guitarfranks.com at mail.mybusinesshomes.com
Action: failed
Status: 5.7.1
Remote-MTA: DNS; [127.0.0.1]
Diagnostic-Code: SMTP; 554 5.7.1 <160-92248047-23-f.trowridge=
guitarfranks.com at mail.mybusinesshomes.com>: Relay access denied
Last-Attempt-Date: Thu, 16 Apr 2015 12:48:49 -0700

---------- Forwarded message ----------
From: MailScanner <postmaster>
To: 160-92248047-23-f.trowridge=guitarfranks.com at mail.mybusinesshomes.com
Cc:
Date: Thu, 16 Apr 2015 12:48:49 -0700
Subject: Warning: E-mail error detected
Our virus detector failed to completely analyse a message you sent:-
  To: f.trowridge at guitarfranks.com
  Subject: New Mortgage Lows
  Date: Thu Apr 16 12:48:49 2015
Any parts of the message that could not be analysed will not have been
delivered.

If you are using Microsoft Outlook, we strongly recommend you change your
outgoing message format from "Rich Text" to "HTML" or "Plain Text".

1) Click on the "Tools" menu and choose "Options..."
2) Go to the "Mail Format" tab
3) For message format, select "HTML" or "Plain text"
4) Click OK

The virus detector said this about the message:
Report: Report: MailScanner: Message attempted to kill MailScanner

--
MailScanner
Email Virus Scanner
Ptera Wireless Internet Inc.
www.ptera.net

For all your IT requirements visit: http://www.transtec.co.uk

Totally stumped on how to proceed to fix this....

-- 
Arthur Stephens
Senior Networking Technician
Ptera Inc.
PO Box 135
24001 E Mission Suite 50
Liberty Lake, WA 99019
509-927-7837
ptera.com
facebook.com/PteraInc | twitter.com/Ptera
 -----------------------------------------------------------------------------
"This message may contain confidential and/or propriety information, and is
intended for the person/entity to whom it was originally addressed.
Any use by others is strictly prohibited. Please note that any views or
opinions presented in this email are solely those of the author and are not
intended to represent those of the company."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150416/e783609f/attachment.html>