From AbsonChihota at verpakt.com  Tue Apr  3 15:25:06 2018
From: AbsonChihota at verpakt.com (Abson Chihota)
Date: Tue, 3 Apr 2018 15:25:06 +0000
Subject: Centos 7 : Mailscanner 5.0.x & MailWatch 1.2.7 NOT LOGGING
Message-ID: <6AA287967247E54AB8F1693939F6E34101FB4B6581@srvmail2>

We are having a problem with logging mails to Mailwatch database. Mailscanner --lint diagnostics show no error message and in the logs I have :-
Apr 3 17:15:30 spamgw MailScanner[3866]: New Batch: Scanning 1 messages, 3042 bytes
Apr 3 17:15:31 spamgw MailScanner[3866]: Virus and Content Scanning: Starting
Apr 3 17:15:52 spamgw MailScanner[3866]: Requeue: 3C3EE36DAF5.AC16D to 54F7436DAF6
Apr 3 17:15:52 spamgw MailScanner[3866]: Uninfected: Delivered 1 messages
Apr 3 17:15:52 spamgw MailScanner[3866]: Deleted 1 messages from processing-database
Apr 3 17:15:52 spamgw MailScanner[4000]: MailScanner Email Processor version 5.0.7 starting...

The Requeued 3C3EE36DAF5.AC16D is not being logged.

Any assistance.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180403/220d5fc7/attachment.html>

From jim at shout.net  Tue Apr  3 16:14:51 2018
From: jim at shout.net (Jim Creason)
Date: Tue, 3 Apr 2018 11:14:51 -0500
Subject: Centos 7 : Mailscanner 5.0.x & MailWatch 1.2.7 NOT LOGGING
In-Reply-To: <6AA287967247E54AB8F1693939F6E34101FB4B6581@srvmail2>
References: <6AA287967247E54AB8F1693939F6E34101FB4B6581@srvmail2>
Message-ID: <F3D02E61-0DB3-4137-B4A3-F2510B02A542@shout.net>


This sounds like a MailWatch issue, not MailScanner, you should be able to get help on that list. 

> On Apr 3, 2018, at 10:25 AM, Abson Chihota <AbsonChihota at verpakt.com> wrote:
> 
> We are having a problem with logging mails to Mailwatch database. Mailscanner --lint diagnostics show no error message and in the logs I have :-
> Apr 3 17:15:30 spamgw MailScanner[3866]: New Batch: Scanning 1 messages, 3042 bytes
> Apr 3 17:15:31 spamgw MailScanner[3866]: Virus and Content Scanning: Starting
> Apr 3 17:15:52 spamgw MailScanner[3866]: Requeue: 3C3EE36DAF5.AC16D to 54F7436DAF6
> Apr 3 17:15:52 spamgw MailScanner[3866]: Uninfected: Delivered 1 messages
> Apr 3 17:15:52 spamgw MailScanner[3866]: Deleted 1 messages from processing-database
> Apr 3 17:15:52 spamgw MailScanner[4000]: MailScanner Email Processor version 5.0.7 starting...
> 
> The Requeued 3C3EE36DAF5.AC16D is not being logged.
> 
> Any assistance.
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180403/6ccbb7df/attachment.html>

From richard at fastnet.co.uk  Tue Apr  3 17:40:40 2018
From: richard at fastnet.co.uk (Richard Mealing)
Date: Tue, 3 Apr 2018 17:40:40 +0000
Subject: Centos 7 : Mailscanner 5.0.x & MailWatch 1.2.7 NOT LOGGING
In-Reply-To: <F3D02E61-0DB3-4137-B4A3-F2510B02A542@shout.net>
References: <6AA287967247E54AB8F1693939F6E34101FB4B6581@srvmail2>
 <F3D02E61-0DB3-4137-B4A3-F2510B02A542@shout.net>
Message-ID: <6EE47AF64C339A4F8F7F50507241B37975E80B40@BTN-EXCHANGE-V1.fastnet.local>

Post mailscanner ?lint please.

My bet is it?s not reading the mailwatch conf files, so it doesn?t know what to do.

Thanks,
Rich

From: MailScanner <mailscanner-bounces+richard=fastnet.co.uk at lists.mailscanner.info> On Behalf Of Jim Creason
Sent: Tuesday, April 3, 2018 17:15
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Centos 7 : Mailscanner 5.0.x & MailWatch 1.2.7 NOT LOGGING


This sounds like a MailWatch issue, not MailScanner, you should be able to get help on that list.

On Apr 3, 2018, at 10:25 AM, Abson Chihota <AbsonChihota at verpakt.com<mailto:AbsonChihota at verpakt.com>> wrote:
We are having a problem with logging mails to Mailwatch database. Mailscanner --lint diagnostics show no error message and in the logs I have :-
Apr 3 17:15:30 spamgw MailScanner[3866]: New Batch: Scanning 1 messages, 3042 bytes
Apr 3 17:15:31 spamgw MailScanner[3866]: Virus and Content Scanning: Starting
Apr 3 17:15:52 spamgw MailScanner[3866]: Requeue: 3C3EE36DAF5.AC16D to 54F7436DAF6
Apr 3 17:15:52 spamgw MailScanner[3866]: Uninfected: Delivered 1 messages
Apr 3 17:15:52 spamgw MailScanner[3866]: Deleted 1 messages from processing-database
Apr 3 17:15:52 spamgw MailScanner[4000]: MailScanner Email Processor version 5.0.7 starting...

The Requeued 3C3EE36DAF5.AC16D is not being logged.

Any assistance.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180403/22e1d179/attachment.html>

From AbsonChihota at verpakt.com  Fri Apr  6 15:20:20 2018
From: AbsonChihota at verpakt.com (Abson Chihota)
Date: Fri, 6 Apr 2018 15:20:20 +0000
Subject: Empty Boxes
Message-ID: <6AA287967247E54AB8F1693939F6E34101FB4B7487@srvmail2>

Hi all;

Adrian wants all pc, monitors and  4 ups container empty boxes by his desk for the coming two weeks.

If we unpack any of the items we give him the empty boxes.

Regards;

Abson
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180406/94f9d3e8/attachment.html>

From iversons at rushville.k12.in.us  Fri Apr  6 15:21:30 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Fri, 6 Apr 2018 11:21:30 -0400
Subject: Empty Boxes
In-Reply-To: <6AA287967247E54AB8F1693939F6E34101FB4B7487@srvmail2>
References: <6AA287967247E54AB8F1693939F6E34101FB4B7487@srvmail2>
Message-ID: <CABu_8zK8nL=w=Hkcujj6tObJgwUsT2Xu53YyOPPw=OyXMvUdbQ@mail.gmail.com>

Okay, where do I ship them?

On Fri, Apr 6, 2018 at 11:20 AM, Abson Chihota <AbsonChihota at verpakt.com>
wrote:

> Hi all;
>
>
>
> Adrian wants all pc, monitors and  4 ups container empty boxes by his desk
> for the coming two weeks.
>
>
>
> If we unpack any of the items we give him the empty boxes.
>
>
>
> Regards;
>
>
>
> Abson
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180406/59db106a/attachment.html>

From jeremy at fluxlabs.net  Fri Apr  6 15:22:18 2018
From: jeremy at fluxlabs.net (Jeremy McSpadden)
Date: Fri, 6 Apr 2018 15:22:18 +0000
Subject: Empty Boxes
In-Reply-To: <CABu_8zK8nL=w=Hkcujj6tObJgwUsT2Xu53YyOPPw=OyXMvUdbQ@mail.gmail.com>
References: <6AA287967247E54AB8F1693939F6E34101FB4B7487@srvmail2>,
 <CABu_8zK8nL=w=Hkcujj6tObJgwUsT2Xu53YyOPPw=OyXMvUdbQ@mail.gmail.com>
Message-ID: <CY1PR0601MB17231D61BFA9C9812C59B231BCBA0@CY1PR0601MB1723.namprd06.prod.outlook.com>

I?ve got the PCs packaged and ready.

________________________________
From: MailScanner <mailscanner-bounces+jeremy=fluxlabs.net at lists.mailscanner.info> on behalf of Shawn Iverson <iversons at rushville.k12.in.us>
Sent: Friday, April 6, 2018 10:21:30 AM
To: MailScanner Discussion
Subject: Re: Empty Boxes

Okay, where do I ship them?

On Fri, Apr 6, 2018 at 11:20 AM, Abson Chihota <AbsonChihota at verpakt.com<mailto:AbsonChihota at verpakt.com>> wrote:
Hi all;

Adrian wants all pc, monitors and  4 ups container empty boxes by his desk for the coming two weeks.

If we unpack any of the items we give him the empty boxes.

Regards;

Abson



--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner





--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
[https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180406/1a44113b/attachment.html>

From jerry.benton at mailborder.com  Fri Apr  6 15:24:45 2018
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Fri, 6 Apr 2018 15:24:45 +0000
Subject: Empty Boxes
In-Reply-To: <CY1PR0601MB17231D61BFA9C9812C59B231BCBA0@CY1PR0601MB1723.namprd06.prod.outlook.com>
References: <6AA287967247E54AB8F1693939F6E34101FB4B7487@srvmail2>,
 <CABu_8zK8nL=w=Hkcujj6tObJgwUsT2Xu53YyOPPw=OyXMvUdbQ@mail.gmail.com>,
 <CY1PR0601MB17231D61BFA9C9812C59B231BCBA0@CY1PR0601MB1723.namprd06.prod.outlook.com>
Message-ID: <DM5PR22MB07611B3BC07819102C528D85F9BA0@DM5PR22MB0761.namprd22.prod.outlook.com>

I have some old crap in the closet I will send out including a lava lamp and palm pilot.

--
Jerry Benton
www.mailborder.com
- via mobile
________________________________
From: MailScanner <mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info> on behalf of Jeremy McSpadden <jeremy at fluxlabs.net>
Sent: Friday, April 6, 2018 11:22:18 AM
To: MailScanner Discussion
Subject: Re: Empty Boxes

I?ve got the PCs packaged and ready.

________________________________
From: MailScanner <mailscanner-bounces+jeremy=fluxlabs.net at lists.mailscanner.info> on behalf of Shawn Iverson <iversons at rushville.k12.in.us>
Sent: Friday, April 6, 2018 10:21:30 AM
To: MailScanner Discussion
Subject: Re: Empty Boxes

Okay, where do I ship them?

On Fri, Apr 6, 2018 at 11:20 AM, Abson Chihota <AbsonChihota at verpakt.com<mailto:AbsonChihota at verpakt.com>> wrote:
Hi all;

Adrian wants all pc, monitors and  4 ups container empty boxes by his desk for the coming two weeks.

If we unpack any of the items we give him the empty boxes.

Regards;

Abson



--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner





--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
[https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180406/6fe602c5/attachment.html>

From iam at st-andrews.ac.uk  Fri Apr  6 15:25:35 2018
From: iam at st-andrews.ac.uk (Ian McDonald)
Date: Fri, 6 Apr 2018 15:25:35 +0000
Subject: Empty Boxes
In-Reply-To: <DM5PR22MB07611B3BC07819102C528D85F9BA0@DM5PR22MB0761.namprd22.prod.outlook.com>
References: <6AA287967247E54AB8F1693939F6E34101FB4B7487@srvmail2>,
 <CABu_8zK8nL=w=Hkcujj6tObJgwUsT2Xu53YyOPPw=OyXMvUdbQ@mail.gmail.com>,
 <CY1PR0601MB17231D61BFA9C9812C59B231BCBA0@CY1PR0601MB1723.namprd06.prod.outlook.com>
 <DM5PR22MB07611B3BC07819102C528D85F9BA0@DM5PR22MB0761.namprd22.prod.outlook.com>
Message-ID: <DB6PR0602MB2774D6154454FAA0D5E20C15D1BA0@DB6PR0602MB2774.eurprd06.prod.outlook.com>

Lava Lamp!

--
ian

From: MailScanner [mailto:mailscanner-bounces+iam=st-andrews.ac.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 06 April 2018 16:25
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Empty Boxes

I have some old crap in the closet I will send out including a lava lamp and palm pilot.

--
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
- via mobile
________________________________
From: MailScanner <mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info<mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info>> on behalf of Jeremy McSpadden <jeremy at fluxlabs.net<mailto:jeremy at fluxlabs.net>>
Sent: Friday, April 6, 2018 11:22:18 AM
To: MailScanner Discussion
Subject: Re: Empty Boxes

I've got the PCs packaged and ready.

________________________________
From: MailScanner <mailscanner-bounces+jeremy=fluxlabs.net at lists.mailscanner.info<mailto:mailscanner-bounces+jeremy=fluxlabs.net at lists.mailscanner.info>> on behalf of Shawn Iverson <iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>>
Sent: Friday, April 6, 2018 10:21:30 AM
To: MailScanner Discussion
Subject: Re: Empty Boxes

Okay, where do I ship them?

On Fri, Apr 6, 2018 at 11:20 AM, Abson Chihota <AbsonChihota at verpakt.com<mailto:AbsonChihota at verpakt.com>> wrote:
Hi all;

Adrian wants all pc, monitors and  4 ups container empty boxes by his desk for the coming two weeks.

If we unpack any of the items we give him the empty boxes.

Regards;

Abson



--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner




--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]
[https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180406/08f63031/attachment.html>

From kens at kensnet.org  Thu Apr 12 09:23:03 2018
From: kens at kensnet.org (Ken Smith)
Date: Thu, 12 Apr 2018 10:23:03 +0100
Subject: OpenDKIM and MailScanner
Message-ID: <5ACF2577.5020203@kensnet.org>


Hullo - I'm new to this list but been a MailScanner user for 10+ years.

I have an installation of M'Scanner 5.0.7 on Centos 6 with Sendmail. I'd 
like to have all e-mail go out with an appended footer that has company 
standard signature / disclaimers etc etc. I'm also using DKIM.

 From what I can see the DKIM signature is generated by the incoming 
sendmail instance that receives the message from the MUA, and the result 
placed in mqueue.in. MailScanner then does its work including modifying 
the message body, because I have "Sign Clean Messages set" and my custom 
footer is in inline.sig.* As far as I can tell, MailScanner then invokes 
sendmail to actually do the sending.

The catch appears to be that the message body has been modified, footer 
added etc,  after the DKIM signature has been calculated and thus the 
DKIM checks fail on delivery. :-(

Would it be possible to arrange for the DKIM signature to be calculated 
by the outgoing sendmail on the completed message? This might involve 
two different .cf files. One without the DKIM milter for the incoming 
Sendmail and one with DKIM settings for the outgoing.

Receipt of e-mail, in this instance, is done by another machine. My 
suggestion may not work well for verifying DKIM validity on receipt as 
the incoming Sendmail instance would be need to be in verify mode for 
that one. I guess two OpenDKIM instances could be run. One in verify and 
one in send mode.

Would this be easier with Postfix & alterMIME rather than Sendmail?

Thoughts on this suggestion or other ideas???

Many thanks

Ken



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


From djones at ena.com  Thu Apr 12 12:07:23 2018
From: djones at ena.com (David Jones)
Date: Thu, 12 Apr 2018 12:07:23 +0000
Subject: OpenDKIM and MailScanner
In-Reply-To: <5ACF2577.5020203@kensnet.org>
References: <5ACF2577.5020203@kensnet.org>
Message-ID: <CY1PR02MB128805A729C53566ABF737F0C6BC0@CY1PR02MB1288.namprd02.prod.outlook.com>

Setup 2 different OpenDKIM instances and run the checking/header adding one on smtpd_milters and the other signing one on non_smtpd_milters.

Dave

________________________________
From: MailScanner <mailscanner-bounces+djones=ena.com at lists.mailscanner.info> on behalf of Ken Smith <kens at kensnet.org>
Sent: Thursday, April 12, 2018 4:23 AM
To: MailScanner Discussion
Subject: OpenDKIM and MailScanner


Hullo - I'm new to this list but been a MailScanner user for 10+ years.

I have an installation of M'Scanner 5.0.7 on Centos 6 with Sendmail. I'd
like to have all e-mail go out with an appended footer that has company
standard signature / disclaimers etc etc. I'm also using DKIM.

 From what I can see the DKIM signature is generated by the incoming
sendmail instance that receives the message from the MUA, and the result
placed in mqueue.in. MailScanner then does its work including modifying
the message body, because I have "Sign Clean Messages set" and my custom
footer is in inline.sig.* As far as I can tell, MailScanner then invokes
sendmail to actually do the sending.

The catch appears to be that the message body has been modified, footer
added etc,  after the DKIM signature has been calculated and thus the
DKIM checks fail on delivery. :-(

Would it be possible to arrange for the DKIM signature to be calculated
by the outgoing sendmail on the completed message? This might involve
two different .cf files. One without the DKIM milter for the incoming
Sendmail and one with DKIM settings for the outgoing.

Receipt of e-mail, in this instance, is done by another machine. My
suggestion may not work well for verifying DKIM validity on receipt as
the incoming Sendmail instance would be need to be in verify mode for
that one. I guess two OpenDKIM instances could be run. One in verify and
one in send mode.

Would this be easier with Postfix & alterMIME rather than Sendmail?

Thoughts on this suggestion or other ideas???

Many thanks

Ken



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180412/e5b30bd5/attachment.html>

From foulplay at foulplay.org  Tue Apr 17 16:21:07 2018
From: foulplay at foulplay.org (foulplay at foulplay.org)
Date: Tue, 17 Apr 2018 12:21:07 -0400
Subject: Gmail truncating attachments from MailScanner
Message-ID: <7CF3F926-9721-4C2C-8017-2F8639881584@foulplay.org>

Folks,

Attachments sent to a gmail address are ending up truncated. Yet, the same email to a non-gmail address shows up good. The ?corruption? at gmail occurs when the email is sent in text format. HTML format works okay. So all my tests are focused on sending emails in text formats.

We are running Exim 4.90.1, MailScanner 5.0.7, ClamAV 0.99.4 and SpamAssassin 3.4.0. 

If we stop MailScanner and configure exim to deliver the mail directly, the attachment is viewable within gmail. 

Now the same setup/config files, except for older versions of all products (Exim 4.77, MailScanner 4.84.3, ClamAV 0.99.2 and SpamAssassin 3.3.1), gmail displays the attachment correctly. 

On one hand, the attachment is viewable when the same email is delivered to an address using Postfix and not within Gmail.
With MailScanner out of the equation, Gmail works.
Older versions of the setup works.
This is occurring across Thunderbird, Outlook and Apple Mail.

Although my troubleshooting has been limited on Hotmail, there too the attachments are showing corrupted.

I seem to be going around in circles between MailScanner and Gmail. Would appreciate any insight that might help me in troubleshooting this further.

Thanks
Avi


From mark at msapiro.net  Tue Apr 17 17:58:39 2018
From: mark at msapiro.net (Mark Sapiro)
Date: Tue, 17 Apr 2018 10:58:39 -0700
Subject: Gmail truncating attachments from MailScanner
In-Reply-To: <7CF3F926-9721-4C2C-8017-2F8639881584@foulplay.org>
References: <7CF3F926-9721-4C2C-8017-2F8639881584@foulplay.org>
Message-ID: <0328A394-41DF-47BD-BFBE-D71F03456B24@msapiro.net>

On April 17, 2018 9:21:07 AM PDT, foulplay at foulplay.org wrote:
>
>I seem to be going around in circles between MailScanner and Gmail.
>Would appreciate any insight that might help me in troubleshooting this
>further.


Please create a test email and send it through the problem MailScanner and post the raw message as received. You could look at the message both in Gmail (view original ) and that for a non-truncated message and see if there's any difference, but post that raw message and maybe we can see something.




-- 
Mark Sapiro <mark at msapiro.net>
Sent from my Not_an_iThing with standards compliant, open source software.

From foulplay at foulplay.org  Tue Apr 17 19:08:09 2018
From: foulplay at foulplay.org (foulplay at foulplay.org)
Date: Tue, 17 Apr 2018 15:08:09 -0400
Subject: Gmail truncating attachments from MailScanner
In-Reply-To: <0328A394-41DF-47BD-BFBE-D71F03456B24@msapiro.net>
References: <7CF3F926-9721-4C2C-8017-2F8639881584@foulplay.org>
 <0328A394-41DF-47BD-BFBE-D71F03456B24@msapiro.net>
Message-ID: <C30B8352-BA56-45FC-9E16-401F8C3E7BE3@foulplay.org>



> On Apr 17, 2018, at 1:58 PM, Mark Sapiro <mark at msapiro.net> wrote:
> 
> On April 17, 2018 9:21:07 AM PDT, foulplay at foulplay.org wrote:
>> 
>> I seem to be going around in circles between MailScanner and Gmail.
>> Would appreciate any insight that might help me in troubleshooting this
>> further.
> 
> 
> Please create a test email and send it through the problem MailScanner and post the raw message as received. You could look at the message both in Gmail (view original ) and that for a non-truncated message and see if there's any difference, but post that raw message and maybe we can see something.
> 
> 


This is from Gmail.

Delivered-To: XXXXX at gmail.com
Received: by 2002:a9d:550c:0:0:0:0:0 with SMTP id l12-v6csp1875991oth;
        Tue, 17 Apr 2018 06:41:42 -0700 (PDT)
X-Google-Smtp-Source: AIpwx4+j3zFCvmaZ2PFx98CgodB/xg2LSSREMdxLV2NDiVXMUGTfbWjqJF2U8HN6fKgATr1Fs+0d
X-Received: by 10.237.39.101 with SMTP id n92mr2523600qtd.215.1523972501998;
        Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1523972501; cv=none;
        d=google.com; s=arc-20160816;
        b=RT/BsmBl9DlyW45oUpg1knmQUqXPShd9/jo026IloQhRKyqzFgzTkxutyLmCg3Pbya
         mVIh2691rjmlJP1PR+RXk+0Y6jxWrTKFNtPpp3oBlrn0HfAYKrkZ2vSa/vZg+BsFTXYt
         fPGIktK+kVBfnb+UUazLWPjCugnsvAwrnCCN1AjX96KJlrOkrfNhESHRAF1RcgARhDRn
         m5tZcN/Ver7GrFXi/rvcW2zTZjYR48jViF6bLwTmEgUfhNVmq22jeVPmdf00NYLntOq4
         HkRT0gkviip9rqT3pUFvyUxixTUgl2wap+fq9XmcMHGME/lUKzO9ffICZa7Nw8311sCH
         g8Iw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:cc:date:message-id:subject:mime-version:from
         :arc-authentication-results;
        bh=WZ4q8c6jXzVf2rNCF7iO8zr7YrSC0Jg9gbP30U9RwFE=;
        b=iw0NiFc+6ljVZscRcDzj8ErPM2B8FBpv8lpMHnST8jbFaP9po9VGtcicbBKLZc2c3Z
         cP/h+N/IED8dFbLm0OFhCNROtcJdSHSEI/uJlQeY7Td/4e6atOed4S+PkvX0Dx13xPDN
         MzArO37z9Pi7Pypce1Ou5LN6UU4vGUC3BZpN+5wZkacM0fiYZyWPfJp/vb8a+pCN9i0B
         3MusAkDMxMYw88MZBZXOoZG1wskHVjTmpTcQwHR1hkPN784Hizb51+qjJWPl8BsVXa98
         hbRRDp7cB4Jpz28uDDPQXZMG0XoPKXWoknSul/WrB4oSrJcYc7CiYTLbO2rOyvS5i/Pd
         MEsQ==
ARC-Authentication-Results: i=1; mx.google.com;
       spf=pass (google.com: domain of xxxx at xxxxxx.xxx designates 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx
Return-Path: <xxxx at xxxxxx.xxx>
Received: from postman2.xxxxxx.xxx [1.2.3.4]
        by mx.google.com with ESMTPS id l8si1486350qtb.265.2018.04.17.06.41.39
        for <XXXXX at gmail.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
Received-SPF: pass (google.com: domain of xxxx at xxxxxx.xxx designates 1.2.3.4 as permitted sender) client-ip=1.2.3.4;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of xxxx at xxxxxx.xxx designates 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx
X-Spam-Status: No
X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
X-Postman2-MailScanner-From: xxxx at xxxxxx.xxx
X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
	SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
	ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
X-Postman2-MailScanner: Found to be clean
X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for more information
Received: from bentley.xxxxxx.xxx ([172.16.0.254] helo=macbook-pro-2.xxxxxx.xxx)
	by postman2.xxxxxxx.xxx with esmtpa (Exim 4.90_1)
	(envelope-from <xxxx at xxxxxx.xxx>)
	id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
From: <xxxx at xxxxxx.xxx>
Content-Type: multipart/mixed;
	boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
Subject: Test 39
Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>
Date: Tue, 17 Apr 2018 09:40:31 -0400
Cc: <ABC at non-gmail.com>
To: <XXXX at gmail.com>
X-Mailer: Apple Mail (2.3445.5.20)


--Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable


--
39 line long disclaimer removed for brevity.


--Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
Content-Disposition: attachment;
	filename="PS Agreement-LLC.docx"
Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document;
	x-unix-mode=0644;
	name="PS Agreement-LLC.docx"
Content-Transfer-Encoding: base64

UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
*
*
*
Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA


****************
Below is what is received on non-gmail system that was CC?ed.

Return-Path: <xxxx at xxxxxx.xxx>
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on rx8.non-gmail.org
X-Spam-Level: 
X-Spam-ASN:  
X-Spam-Status: No, score=-0.4 required=1.5 tests=BAYES_00,KAM_INSURE1
	shortcircuit=no autolearn=no autolearn_force=no version=3.4.1
X-Original-To: ABC at non-gmail.org
Delivered-To: ABC at non-gmail.org
Received: from localhost (localhost.localdomain [127.0.0.1])
	by mailhost.non-gmail.org (Postfix) with ESMTP id D5AD84399C
	for <ABC at non-gmail.org>; Tue, 17 Apr 2018 09:42:05 -0400 (EDT)
Received: from mailhost.non-gmail.org ([127.0.0.1])
	by localhost (rx8.non-gmail.org [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id ZxjGE_cKxEMf for <ABC at non-gmail.org>;
	Tue, 17 Apr 2018 09:42:04 -0400 (EDT)
Received: from postman2.xxxxxx.xxx [1.2.3.4]
	by mailhost.non-gmail.org (Postfix) with ESMTP id 7E63F61E13
	for <ABC at non-gmail.org>; Tue, 17 Apr 2018 09:41:28 -0400 (EDT)
DKIM-Filter: OpenDKIM Filter v2.11.0 mailhost.non-gmail.org 7E63F61E13
X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
X-Postman2-MailScanner-From: xxxx at xxxxx.xxx
X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
	SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
	ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
X-Postman2-MailScanner: Found to be clean
X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for more information
Received: from bentley.xxxxxx.xxx ([172.16.0.254] helo=macbook-pro-2.xxxxx.xxx)
	by postman2.xxxxx.xxx with esmtpa (Exim 4.90_1)
	(envelope-from <xxxx at xxxxx.xxx>)
	id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
From: <xxxxx at xxxxx.xxx>
Content-Type: multipart/mixed;
	boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
Subject: Test 39
Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>
Date: Tue, 17 Apr 2018 09:40:31 -0400
Cc: <ABC at non-gmail.org>
To: <xxxxx at gmail.com>
X-Mailer: Apple Mail (2.3445.5.20)
X-Virus-Scanned: clamav-milter 0.99.4 at mailhost.non-gmail.org
X-Virus-Status: Clean


--Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable


--
39 line long disclaimer removed from here as well

--Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
Content-Disposition: attachment;
	filename="PS Agreement-LLC.docx"
Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document;
	x-unix-mode=0644;
	name="PS Agreement-LLC.docx"
Content-Transfer-Encoding: base64

UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
*
*
*
Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
AQAAAA==

--Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B



*****************
Besides the trail end of the two emails being different, I for one have being going blind trying to spot the difference.

Hope this helps.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180417/76ab819e/attachment.html>

From iversons at rushville.k12.in.us  Tue Apr 17 19:28:47 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Tue, 17 Apr 2018 15:28:47 -0400
Subject: Gmail truncating attachments from MailScanner
In-Reply-To: <C30B8352-BA56-45FC-9E16-401F8C3E7BE3@foulplay.org>
References: <7CF3F926-9721-4C2C-8017-2F8639881584@foulplay.org>
 <0328A394-41DF-47BD-BFBE-D71F03456B24@msapiro.net>
 <C30B8352-BA56-45FC-9E16-401F8C3E7BE3@foulplay.org>
Message-ID: <CABu_8zKixFBPEEdh1n2d1OQH17jvMcMQjGn-tYZLwhpbQLRBMQ@mail.gmail.com>

It is indeed truncated, this is missing on the Mailscanner/Gmail one in the
Base64 encoding:

AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
AQAAAA==


On Tue, Apr 17, 2018 at 3:08 PM, <foulplay at foulplay.org> wrote:

>
>
> On Apr 17, 2018, at 1:58 PM, Mark Sapiro <mark at msapiro.net> wrote:
>
> On April 17, 2018 9:21:07 AM PDT, foulplay at foulplay.org wrote:
>
>
> I seem to be going around in circles between MailScanner and Gmail.
> Would appreciate any insight that might help me in troubleshooting this
> further.
>
>
>
> Please create a test email and send it through the problem MailScanner and
> post the raw message as received. You could look at the message both in
> Gmail (view original ) and that for a non-truncated message and see if
> there's any difference, but post that raw message and maybe we can see
> something.
>
>
>
> This is from Gmail.
>
> Delivered-To: XXXXX at gmail.com
> Received: by 2002:a9d:550c:0:0:0:0:0 with SMTP id l12-v6csp1875991oth;
>         Tue, 17 Apr 2018 06:41:42 -0700 (PDT)
> X-Google-Smtp-Source: AIpwx4+j3zFCvmaZ2PFx98CgodB/
> xg2LSSREMdxLV2NDiVXMUGTfbWjqJF2U8HN6fKgATr1Fs+0d
> X-Received: by 10.237.39.101 with SMTP id n92mr2523600qtd.215.
> 1523972501998;
>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
> ARC-Seal: i=1; a=rsa-sha256; t=1523972501; cv=none;
>         d=google.com; s=arc-20160816;
>         b=RT/BsmBl9DlyW45oUpg1knmQUqXPShd9/jo026IloQhRKyqzFgzTkxutyLmCg3P
> bya
>          mVIh2691rjmlJP1PR+RXk+0Y6jxWrTKFNtPpp3oBlrn0HfAYKrkZ
> 2vSa/vZg+BsFTXYt
>          fPGIktK+kVBfnb+UUazLWPjCugnsvAwrnCCN1AjX96KJl
> rOkrfNhESHRAF1RcgARhDRn
>          m5tZcN/Ver7GrFXi/rvcW2zTZjYR48jViF6bLwTmEgUfhNV
> mq22jeVPmdf00NYLntOq4
>          HkRT0gkviip9rqT3pUFvyUxixTUgl2wap+fq9XmcMHGME/
> lUKzO9ffICZa7Nw8311sCH
>          g8Iw==
> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;
> s=arc-20160816;
>         h=to:cc:date:message-id:subject:mime-version:from
>          :arc-authentication-results;
>         bh=WZ4q8c6jXzVf2rNCF7iO8zr7YrSC0Jg9gbP30U9RwFE=;
>         b=iw0NiFc+6ljVZscRcDzj8ErPM2B8FBpv8lpMHn
> ST8jbFaP9po9VGtcicbBKLZc2c3Z
>          cP/h+N/IED8dFbLm0OFhCNROtcJdSHSEI/uJlQeY7Td/4e6atOed4S+
> PkvX0Dx13xPDN
>          MzArO37z9Pi7Pypce1Ou5LN6UU4vGUC3BZpN+5wZkacM0fiYZyWPfJp/
> vb8a+pCN9i0B
>          3MusAkDMxMYw88MZBZXOoZG1wskHVjTmpTcQwHR1hkPN784Hizb51+
> qjJWPl8BsVXa98
>          hbRRDp7cB4Jpz28uDDPQXZMG0XoPKXWoknSul/
> WrB4oSrJcYc7CiYTLbO2rOyvS5i/Pd
>          MEsQ==
> ARC-Authentication-Results: i=1; mx.google.com;
>        spf=pass (google.com: domain of xxxx at xxxxxx.xxx designates 1.2.3.4
> as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx
> Return-Path: <xxxx at xxxxxx.xxx>
> Received: from postman2.xxxxxx.xxx [1.2.3.4]
>         by mx.google.com with ESMTPS id l8si1486350qtb.265.2018.04.17.
> 06.41.39
>         for <XXXXX at gmail.com>
>         (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
> Received-SPF: pass (google.com: domain of xxxx at xxxxxx.xxx designates
> 1.2.3.4 as permitted sender) client-ip=1.2.3.4;
> Authentication-Results: mx.google.com;
>        spf=pass (google.com: domain of xxxx at xxxxxx.xxx designates 1.2.3.4
> as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx
> X-Spam-Status: No
> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
> X-Postman2-MailScanner-From: xxxx at xxxxxx.xxx
> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
> SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
> ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
> X-Postman2-MailScanner: Found to be clean
> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for
> more information
> Received: from bentley.xxxxxx.xxx ([172.16.0.254]
> helo=macbook-pro-2.xxxxxx.xxx)
> by postman2.xxxxxxx.xxx with esmtpa (Exim 4.90_1)
> (envelope-from <xxxx at xxxxxx.xxx>)
> id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
> From: <xxxx at xxxxxx.xxx>
> Content-Type: multipart/mixed;
> boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
> Subject: Test 39
> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>
> Date: Tue, 17 Apr 2018 09:40:31 -0400
> Cc: <ABC at non-gmail.com>
> To: <XXXX at gmail.com>
> X-Mailer: Apple Mail (2.3445.5.20)
>
>
> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
> Content-Type: text/plain; charset="us-ascii"
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
>
>
> --
> 39 line long disclaimer removed for brevity.
>
>
> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
> Content-Disposition: attachment;
> filename="PS Agreement-LLC.docx"
> Content-Type: application/vnd.openxmlformats-officedocument.
> wordprocessingml.document;
> x-unix-mode=0644;
> name="PS Agreement-LLC.docx"
> Content-Transfer-Encoding: base64
>
> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> *
> *
> *
> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
>
>
> ****************
> Below is what is received on non-gmail system that was CC?ed.
>
> Return-Path: <xxxx at xxxxxx.xxx>
> X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
> rx8.non-gmail.org
> X-Spam-Level:
> X-Spam-ASN:
> X-Spam-Status: No, score=-0.4 required=1.5 tests=BAYES_00,KAM_INSURE1
> shortcircuit=no autolearn=no autolearn_force=no version=3.4.1
> X-Original-To: ABC at non-gmail.org
> Delivered-To: ABC at non-gmail.org
> Received: from localhost (localhost.localdomain [127.0.0.1])
> by mailhost.non-gmail.org (Postfix) with ESMTP id D5AD84399C
> for <ABC at non-gmail.org>; Tue, 17 Apr 2018 09:42:05 -0400 (EDT)
> Received: from mailhost.non-gmail.org ([127.0.0.1])
> by localhost (rx8.non-gmail.org [127.0.0.1]) (amavisd-new, port 10024)
> with ESMTP id ZxjGE_cKxEMf for <ABC at non-gmail.org>;
> Tue, 17 Apr 2018 09:42:04 -0400 (EDT)
> Received: from postman2.xxxxxx.xxx [1.2.3.4]
> by mailhost.non-gmail.org (Postfix) with ESMTP id 7E63F61E13
> for <ABC at non-gmail.org>; Tue, 17 Apr 2018 09:41:28 -0400 (EDT)
> DKIM-Filter: OpenDKIM Filter v2.11.0 mailhost.non-gmail.org 7E63F61E13
> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
> X-Postman2-MailScanner-From: xxxx at xxxxx.xxx
> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
> SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
> ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
> X-Postman2-MailScanner: Found to be clean
> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for
> more information
> Received: from bentley.xxxxxx.xxx ([172.16.0.254]
> helo=macbook-pro-2.xxxxx.xxx)
> by postman2.xxxxx.xxx with esmtpa (Exim 4.90_1)
> (envelope-from <xxxx at xxxxx.xxx>)
> id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
> From: <xxxxx at xxxxx.xxx>
> Content-Type: multipart/mixed;
> boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
> Subject: Test 39
> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>
> Date: Tue, 17 Apr 2018 09:40:31 -0400
> Cc: <ABC at non-gmail.org>
> To: <xxxxx at gmail.com>
> X-Mailer: Apple Mail (2.3445.5.20)
> X-Virus-Scanned: clamav-milter 0.99.4 at mailhost.non-gmail.org
> X-Virus-Status: Clean
>
>
> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
> Content-Type: text/plain; charset="us-ascii"
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
>
>
> --
> 39 line long disclaimer removed from here as well
>
> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
> Content-Disposition: attachment;
> filename="PS Agreement-LLC.docx"
> Content-Type: application/vnd.openxmlformats-officedocument.
> wordprocessingml.document;
> x-unix-mode=0644;
> name="PS Agreement-LLC.docx"
> Content-Transfer-Encoding: base64
>
> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> *
> *
> *
> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
> AQAAAA==
>
> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
>
>
>
> *****************
> Besides the trail end of the two emails being different, I for one have
> being going blind trying to spot the difference.
>
> Hope this helps.
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180417/6250e877/attachment.html>

From iversons at rushville.k12.in.us  Tue Apr 17 19:34:09 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Tue, 17 Apr 2018 15:34:09 -0400
Subject: Gmail truncating attachments from MailScanner
In-Reply-To: <CABu_8zKixFBPEEdh1n2d1OQH17jvMcMQjGn-tYZLwhpbQLRBMQ@mail.gmail.com>
References: <7CF3F926-9721-4C2C-8017-2F8639881584@foulplay.org>
 <0328A394-41DF-47BD-BFBE-D71F03456B24@msapiro.net>
 <C30B8352-BA56-45FC-9E16-401F8C3E7BE3@foulplay.org>
 <CABu_8zKixFBPEEdh1n2d1OQH17jvMcMQjGn-tYZLwhpbQLRBMQ@mail.gmail.com>
Message-ID: <CABu_8zL=HQEvOUG4Ypazr1-Qm2Ned8_UZn3x3ER8zh648HFB2Q@mail.gmail.com>

Can you try setting the following in MailScanner.conf?

Maximum Archive Depth = 0

Then restart MailScanner and send the message through.  Does it still get
truncated?


On Tue, Apr 17, 2018 at 3:28 PM, Shawn Iverson <iversons at rushville.k12.in.us
> wrote:

> It is indeed truncated, this is missing on the Mailscanner/Gmail one in
> the Base64 encoding:
>
> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
> AQAAAA==
>
>
> On Tue, Apr 17, 2018 at 3:08 PM, <foulplay at foulplay.org> wrote:
>
>>
>>
>> On Apr 17, 2018, at 1:58 PM, Mark Sapiro <mark at msapiro.net> wrote:
>>
>> On April 17, 2018 9:21:07 AM PDT, foulplay at foulplay.org wrote:
>>
>>
>> I seem to be going around in circles between MailScanner and Gmail.
>> Would appreciate any insight that might help me in troubleshooting this
>> further.
>>
>>
>>
>> Please create a test email and send it through the problem MailScanner
>> and post the raw message as received. You could look at the message both in
>> Gmail (view original ) and that for a non-truncated message and see if
>> there's any difference, but post that raw message and maybe we can see
>> something.
>>
>>
>>
>> This is from Gmail.
>>
>> Delivered-To: XXXXX at gmail.com
>> Received: by 2002:a9d:550c:0:0:0:0:0 with SMTP id l12-v6csp1875991oth;
>>         Tue, 17 Apr 2018 06:41:42 -0700 (PDT)
>> X-Google-Smtp-Source: AIpwx4+j3zFCvmaZ2PFx98CgodB/xg
>> 2LSSREMdxLV2NDiVXMUGTfbWjqJF2U8HN6fKgATr1Fs+0d
>> X-Received: by 10.237.39.101 with SMTP id n92mr2523600qtd.215.1523972501
>> 998;
>>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
>> ARC-Seal: i=1; a=rsa-sha256; t=1523972501; cv=none;
>>         d=google.com; s=arc-20160816;
>>         b=RT/BsmBl9DlyW45oUpg1knmQUqXPShd9/jo026IloQhRKyqzFgzTkxutyL
>> mCg3Pbya
>>          mVIh2691rjmlJP1PR+RXk+0Y6jxWrTKFNtPpp3oBlrn0HfAYKrkZ2vSa/
>> vZg+BsFTXYt
>>          fPGIktK+kVBfnb+UUazLWPjCugnsvAwrnCCN1AjX96KJlrOkrfNhESHRAF1
>> RcgARhDRn
>>          m5tZcN/Ver7GrFXi/rvcW2zTZjYR48jViF6bLwTmEgUfhNVmq22jeVPmdf0
>> 0NYLntOq4
>>          HkRT0gkviip9rqT3pUFvyUxixTUgl2wap+fq9XmcMHGME/lUKzO9ffICZa7
>> Nw8311sCH
>>          g8Iw==
>> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;
>> s=arc-20160816;
>>         h=to:cc:date:message-id:subject:mime-version:from
>>          :arc-authentication-results;
>>         bh=WZ4q8c6jXzVf2rNCF7iO8zr7YrSC0Jg9gbP30U9RwFE=;
>>         b=iw0NiFc+6ljVZscRcDzj8ErPM2B8FBpv8lpMHnST8jbFaP9po9VGtcicbB
>> KLZc2c3Z
>>          cP/h+N/IED8dFbLm0OFhCNROtcJdSHSEI/uJlQeY7Td/4e6atOed4S+PkvX
>> 0Dx13xPDN
>>          MzArO37z9Pi7Pypce1Ou5LN6UU4vGUC3BZpN+5wZkacM0fiYZyWPfJp/vb8
>> a+pCN9i0B
>>          3MusAkDMxMYw88MZBZXOoZG1wskHVjTmpTcQwHR1hkPN784Hizb51+qjJWP
>> l8BsVXa98
>>          hbRRDp7cB4Jpz28uDDPQXZMG0XoPKXWoknSul/WrB4oSrJcYc7CiYTLbO2r
>> OyvS5i/Pd
>>          MEsQ==
>> ARC-Authentication-Results: i=1; mx.google.com;
>>        spf=pass (google.com: domain of xxxx at xxxxxx.xxx designates
>> 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx
>> Return-Path: <xxxx at xxxxxx.xxx>
>> Received: from postman2.xxxxxx.xxx [1.2.3.4]
>>         by mx.google.com with ESMTPS id l8si1486350qtb.265.2018.04.17.
>> 06.41.39
>>         for <XXXXX at gmail.com>
>>         (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
>>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
>> Received-SPF: pass (google.com: domain of xxxx at xxxxxx.xxx designates
>> 1.2.3.4 as permitted sender) client-ip=1.2.3.4;
>> Authentication-Results: mx.google.com;
>>        spf=pass (google.com: domain of xxxx at xxxxxx.xxx designates
>> 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx
>> X-Spam-Status: No
>> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
>> X-Postman2-MailScanner-From: xxxx at xxxxxx.xxx
>> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
>> SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
>> ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
>> X-Postman2-MailScanner: Found to be clean
>> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
>> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for
>> more information
>> Received: from bentley.xxxxxx.xxx ([172.16.0.254]
>> helo=macbook-pro-2.xxxxxx.xxx)
>> by postman2.xxxxxxx.xxx with esmtpa (Exim 4.90_1)
>> (envelope-from <xxxx at xxxxxx.xxx>)
>> id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
>> From: <xxxx at xxxxxx.xxx>
>> Content-Type: multipart/mixed;
>> boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
>> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
>> Subject: Test 39
>> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>
>> Date: Tue, 17 Apr 2018 09:40:31 -0400
>> Cc: <ABC at non-gmail.com>
>> To: <XXXX at gmail.com>
>> X-Mailer: Apple Mail (2.3445.5.20)
>>
>>
>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>> Content-Type: text/plain; charset="us-ascii"
>> Content-Disposition: inline
>> Content-Transfer-Encoding: quoted-printable
>>
>>
>> --
>> 39 line long disclaimer removed for brevity.
>>
>>
>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>> Content-Disposition: attachment;
>> filename="PS Agreement-LLC.docx"
>> Content-Type: application/vnd.openxmlformats
>> -officedocument.wordprocessingml.document;
>> x-unix-mode=0644;
>> name="PS Agreement-LLC.docx"
>> Content-Transfer-Encoding: base64
>>
>> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
>> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> *
>> *
>> *
>> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
>> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
>> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
>> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
>> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
>>
>>
>> ****************
>> Below is what is received on non-gmail system that was CC?ed.
>>
>> Return-Path: <xxxx at xxxxxx.xxx>
>> X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
>> rx8.non-gmail.org
>> X-Spam-Level:
>> X-Spam-ASN:
>> X-Spam-Status: No, score=-0.4 required=1.5 tests=BAYES_00,KAM_INSURE1
>> shortcircuit=no autolearn=no autolearn_force=no version=3.4.1
>> X-Original-To: ABC at non-gmail.org
>> Delivered-To: ABC at non-gmail.org
>> Received: from localhost (localhost.localdomain [127.0.0.1])
>> by mailhost.non-gmail.org (Postfix) with ESMTP id D5AD84399C
>> for <ABC at non-gmail.org>; Tue, 17 Apr 2018 09:42:05 -0400 (EDT)
>> Received: from mailhost.non-gmail.org ([127.0.0.1])
>> by localhost (rx8.non-gmail.org [127.0.0.1]) (amavisd-new, port 10024)
>> with ESMTP id ZxjGE_cKxEMf for <ABC at non-gmail.org>;
>> Tue, 17 Apr 2018 09:42:04 -0400 (EDT)
>> Received: from postman2.xxxxxx.xxx [1.2.3.4]
>> by mailhost.non-gmail.org (Postfix) with ESMTP id 7E63F61E13
>> for <ABC at non-gmail.org>; Tue, 17 Apr 2018 09:41:28 -0400 (EDT)
>> DKIM-Filter: OpenDKIM Filter v2.11.0 mailhost.non-gmail.org 7E63F61E13
>> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
>> X-Postman2-MailScanner-From: xxxx at xxxxx.xxx
>> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
>> SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
>> ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
>> X-Postman2-MailScanner: Found to be clean
>> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
>> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for
>> more information
>> Received: from bentley.xxxxxx.xxx ([172.16.0.254]
>> helo=macbook-pro-2.xxxxx.xxx)
>> by postman2.xxxxx.xxx with esmtpa (Exim 4.90_1)
>> (envelope-from <xxxx at xxxxx.xxx>)
>> id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
>> From: <xxxxx at xxxxx.xxx>
>> Content-Type: multipart/mixed;
>> boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
>> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
>> Subject: Test 39
>> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>
>> Date: Tue, 17 Apr 2018 09:40:31 -0400
>> Cc: <ABC at non-gmail.org>
>> To: <xxxxx at gmail.com>
>> X-Mailer: Apple Mail (2.3445.5.20)
>> X-Virus-Scanned: clamav-milter 0.99.4 at mailhost.non-gmail.org
>> X-Virus-Status: Clean
>>
>>
>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>> Content-Type: text/plain; charset="us-ascii"
>> Content-Disposition: inline
>> Content-Transfer-Encoding: quoted-printable
>>
>>
>> --
>> 39 line long disclaimer removed from here as well
>>
>> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
>> Content-Disposition: attachment;
>> filename="PS Agreement-LLC.docx"
>> Content-Type: application/vnd.openxmlformats
>> -officedocument.wordprocessingml.document;
>> x-unix-mode=0644;
>> name="PS Agreement-LLC.docx"
>> Content-Transfer-Encoding: base64
>>
>> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
>> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> *
>> *
>> *
>> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
>> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
>> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
>> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
>> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
>> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
>> AQAAAA==
>>
>> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
>>
>>
>>
>> *****************
>> Besides the trail end of the two emails being different, I for one have
>> being going blind trying to spot the difference.
>>
>> Hope this helps.
>>
>>
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>>
>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x1171
> iversons at rushville.k12.in.us
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180417/6064e79a/attachment-0001.html>

From foulplay at foulplay.org  Tue Apr 17 20:05:15 2018
From: foulplay at foulplay.org (foulplay at foulplay.org)
Date: Tue, 17 Apr 2018 16:05:15 -0400
Subject: Gmail truncating attachments from MailScanner
In-Reply-To: <CABu_8zL=HQEvOUG4Ypazr1-Qm2Ned8_UZn3x3ER8zh648HFB2Q@mail.gmail.com>
References: <7CF3F926-9721-4C2C-8017-2F8639881584@foulplay.org>
 <0328A394-41DF-47BD-BFBE-D71F03456B24@msapiro.net>
 <C30B8352-BA56-45FC-9E16-401F8C3E7BE3@foulplay.org>
 <CABu_8zKixFBPEEdh1n2d1OQH17jvMcMQjGn-tYZLwhpbQLRBMQ@mail.gmail.com>
 <CABu_8zL=HQEvOUG4Ypazr1-Qm2Ned8_UZn3x3ER8zh648HFB2Q@mail.gmail.com>
Message-ID: <F7997153-86BA-4FDE-B64B-8A18CC8FE555@foulplay.org>

Gmail now shows the documents (docx and pdf) correctly.

This was set to 8 previously. I took this setting as for MailScanner to scan within compressed file as per the comments. I am not sure if disabling this check is a good idea.

Any thoughts around perhaps a compressed executable passing through the checks?



> On Apr 17, 2018, at 3:34 PM, Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>> wrote:
> 
> Can you try setting the following in MailScanner.conf?
> 
> Maximum Archive Depth = 0
> 
> Then restart MailScanner and send the message through.  Does it still get truncated?
> 
> 
> On Tue, Apr 17, 2018 at 3:28 PM, Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>> wrote:
> It is indeed truncated, this is missing on the Mailscanner/Gmail one in the Base64 encoding:
> 
> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
> AQAAAA==
> 
> 
> On Tue, Apr 17, 2018 at 3:08 PM, <foulplay at foulplay.org <mailto:foulplay at foulplay.org>> wrote:
> 
> 
>> On Apr 17, 2018, at 1:58 PM, Mark Sapiro <mark at msapiro.net <mailto:mark at msapiro.net>> wrote:
>> 
>> On April 17, 2018 9:21:07 AM PDT, foulplay at foulplay.org <mailto:foulplay at foulplay.org> wrote:
>>> 
>>> I seem to be going around in circles between MailScanner and Gmail.
>>> Would appreciate any insight that might help me in troubleshooting this
>>> further.
>> 
>> 
>> Please create a test email and send it through the problem MailScanner and post the raw message as received. You could look at the message both in Gmail (view original ) and that for a non-truncated message and see if there's any difference, but post that raw message and maybe we can see something.
>> 
>> 
> 
> 
> This is from Gmail.
> 
> Delivered-To: XXXXX at gmail.com <mailto:XXXXX at gmail.com>
> Received: by 2002:a9d:550c:0:0:0:0:0 with SMTP id l12-v6csp1875991oth;
>         Tue, 17 Apr 2018 06:41:42 -0700 (PDT)
> X-Google-Smtp-Source: AIpwx4+j3zFCvmaZ2PFx98CgodB/xg2LSSREMdxLV2NDiVXMUGTfbWjqJF2U8HN6fKgATr1Fs+0d
> X-Received: by 10.237.39.101 with SMTP id n92mr2523600qtd.215.1523972501998;
>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
> ARC-Seal: i=1; a=rsa-sha256; t=1523972501; cv=none;
>         d=google.com <http://google.com/>; s=arc-20160816;
>         b=RT/BsmBl9DlyW45oUpg1knmQUqXPShd9/jo026IloQhRKyqzFgzTkxutyLmCg3Pbya
>          mVIh2691rjmlJP1PR+RXk+0Y6jxWrTKFNtPpp3oBlrn0HfAYKrkZ2vSa/vZg+BsFTXYt
>          fPGIktK+kVBfnb+UUazLWPjCugnsvAwrnCCN1AjX96KJlrOkrfNhESHRAF1RcgARhDRn
>          m5tZcN/Ver7GrFXi/rvcW2zTZjYR48jViF6bLwTmEgUfhNVmq22jeVPmdf00NYLntOq4
>          HkRT0gkviip9rqT3pUFvyUxixTUgl2wap+fq9XmcMHGME/lUKzO9ffICZa7Nw8311sCH
>          g8Iw==
> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com <http://google.com/>; s=arc-20160816;
>         h=to:cc:date:message-id:subject:mime-version:from
>          :arc-authentication-results;
>         bh=WZ4q8c6jXzVf2rNCF7iO8zr7YrSC0Jg9gbP30U9RwFE=;
>         b=iw0NiFc+6ljVZscRcDzj8ErPM2B8FBpv8lpMHnST8jbFaP9po9VGtcicbBKLZc2c3Z
>          cP/h+N/IED8dFbLm0OFhCNROtcJdSHSEI/uJlQeY7Td/4e6atOed4S+PkvX0Dx13xPDN
>          MzArO37z9Pi7Pypce1Ou5LN6UU4vGUC3BZpN+5wZkacM0fiYZyWPfJp/vb8a+pCN9i0B
>          3MusAkDMxMYw88MZBZXOoZG1wskHVjTmpTcQwHR1hkPN784Hizb51+qjJWPl8BsVXa98
>          hbRRDp7cB4Jpz28uDDPQXZMG0XoPKXWoknSul/WrB4oSrJcYc7CiYTLbO2rOyvS5i/Pd
>          MEsQ==
> ARC-Authentication-Results: i=1; mx.google.com <http://mx.google.com/>;
>        spf=pass (google.com <http://google.com/>: domain of xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx> designates 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx <mailto:smtp.mailfrom=xxxx at xxxxxx.xxx>
> Return-Path: <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>
> Received: from postman2.xxxxxx.xxx [1.2.3.4]
>         by mx.google.com <http://mx.google.com/> with ESMTPS id l8si1486350qtb.265.2018.04.17.06.41.39
>         for <XXXXX at gmail.com <mailto:XXXXX at gmail.com>>
>         (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
> Received-SPF: pass (google.com <http://google.com/>: domain of xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx> designates 1.2.3.4 as permitted sender) client-ip=1.2.3.4;
> Authentication-Results: mx.google.com <http://mx.google.com/>;
>        spf=pass (google.com <http://google.com/>: domain of xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx> designates 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx <mailto:smtp.mailfrom=xxxx at xxxxxx.xxx>
> X-Spam-Status: No
> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
> X-Postman2-MailScanner-From: xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>
> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
> 	SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
> 	ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
> X-Postman2-MailScanner: Found to be clean
> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for more information
> Received: from bentley.xxxxxx.xxx ([172.16.0.254] helo=macbook-pro-2.xxxxxx.xxx)
> 	by postman2.xxxxxxx.xxx with esmtpa (Exim 4.90_1)
> 	(envelope-from <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>)
> 	id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
> From: <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>
> Content-Type: multipart/mixed;
> 	boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
> Subject: Test 39
> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com <mailto:63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>>
> Date: Tue, 17 Apr 2018 09:40:31 -0400
> Cc: <ABC at non-gmail.com <mailto:ABC at non-gmail.com>>
> To: <XXXX at gmail.com <mailto:XXXX at gmail.com>>
> X-Mailer: Apple Mail (2.3445.5.20)
> 
> 
> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
> Content-Type: text/plain; charset="us-ascii"
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
> 
> 
> --
> 39 line long disclaimer removed for brevity.
> 
> 
> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
> Content-Disposition: attachment;
> 	filename="PS Agreement-LLC.docx"
> Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document;
> 	x-unix-mode=0644;
> 	name="PS Agreement-LLC.docx"
> Content-Transfer-Encoding: base64
> 
> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> *
> *
> *
> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
> 
> 
> ****************
> Below is what is received on non-gmail system that was CC?ed.
> 
> Return-Path: <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>
> X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on rx8.non-gmail.org <http://rx8.non-gmail.org/>
> X-Spam-Level: 
> X-Spam-ASN:  
> X-Spam-Status: No, score=-0.4 required=1.5 tests=BAYES_00,KAM_INSURE1
> 	shortcircuit=no autolearn=no autolearn_force=no version=3.4.1
> X-Original-To: ABC at non-gmail.org <mailto:ABC at non-gmail.org>
> Delivered-To: ABC at non-gmail.org <mailto:ABC at non-gmail.org>
> Received: from localhost (localhost.localdomain [127.0.0.1])
> 	by mailhost.non-gmail.org <http://mailhost.non-gmail.org/> (Postfix) with ESMTP id D5AD84399C
> 	for <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>; Tue, 17 Apr 2018 09:42:05 -0400 (EDT)
> Received: from mailhost.non-gmail.org <http://mailhost.non-gmail.org/> ([127.0.0.1])
> 	by localhost (rx8.non-gmail.org <http://rx8.non-gmail.org/> [127.0.0.1]) (amavisd-new, port 10024)
> 	with ESMTP id ZxjGE_cKxEMf for <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>;
> 	Tue, 17 Apr 2018 09:42:04 -0400 (EDT)
> Received: from postman2.xxxxxx.xxx [1.2.3.4]
> 	by mailhost.non-gmail.org <http://mailhost.non-gmail.org/> (Postfix) with ESMTP id 7E63F61E13
> 	for <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>; Tue, 17 Apr 2018 09:41:28 -0400 (EDT)
> DKIM-Filter: OpenDKIM Filter v2.11.0 mailhost.non-gmail.org <http://mailhost.non-gmail.org/> 7E63F61E13
> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
> X-Postman2-MailScanner-From: xxxx at xxxxx.xxx <mailto:xxxx at xxxxx.xxx>
> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
> 	SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
> 	ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
> X-Postman2-MailScanner: Found to be clean
> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for more information
> Received: from bentley.xxxxxx.xxx ([172.16.0.254] helo=macbook-pro-2.xxxxx.xxx)
> 	by postman2.xxxxx.xxx with esmtpa (Exim 4.90_1)
> 	(envelope-from <xxxx at xxxxx.xxx <mailto:xxxx at xxxxx.xxx>>)
> 	id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
> From: <xxxxx at xxxxx.xxx <mailto:xxxxx at xxxxx.xxx>>
> Content-Type: multipart/mixed;
> 	boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
> Subject: Test 39
> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com <mailto:63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>>
> Date: Tue, 17 Apr 2018 09:40:31 -0400
> Cc: <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>
> To: <xxxxx at gmail.com <mailto:xxxxx at gmail.com>>
> X-Mailer: Apple Mail (2.3445.5.20)
> X-Virus-Scanned: clamav-milter 0.99.4 at mailhost.non-gmail.org <http://mailhost.non-gmail.org/>
> X-Virus-Status: Clean
> 
> 
> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
> Content-Type: text/plain; charset="us-ascii"
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
> 
> 
> --
> 39 line long disclaimer removed from here as well
> 
> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
> Content-Disposition: attachment;
> 	filename="PS Agreement-LLC.docx"
> Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document;
> 	x-unix-mode=0644;
> 	name="PS Agreement-LLC.docx"
> Content-Transfer-Encoding: base64
> 
> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> *
> *
> *
> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
> AQAAAA==
> 
> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
> 
> 
> 
> *****************
> Besides the trail end of the two emails being different, I for one have being going blind trying to spot the difference.
> 
> Hope this helps.
> 
> 
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
> 
> 
> 
> 
> 
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x1171
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> 
> 
> 
> 
> 
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x1171
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> 
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180417/0da3f585/attachment.html>

From iversons at rushville.k12.in.us  Tue Apr 17 20:07:50 2018
From: iversons at rushville.k12.in.us (Shawn Iverson)
Date: Tue, 17 Apr 2018 16:07:50 -0400
Subject: Gmail truncating attachments from MailScanner
In-Reply-To: <F7997153-86BA-4FDE-B64B-8A18CC8FE555@foulplay.org>
References: <7CF3F926-9721-4C2C-8017-2F8639881584@foulplay.org>
 <0328A394-41DF-47BD-BFBE-D71F03456B24@msapiro.net>
 <C30B8352-BA56-45FC-9E16-401F8C3E7BE3@foulplay.org>
 <CABu_8zKixFBPEEdh1n2d1OQH17jvMcMQjGn-tYZLwhpbQLRBMQ@mail.gmail.com>
 <CABu_8zL=HQEvOUG4Ypazr1-Qm2Ned8_UZn3x3ER8zh648HFB2Q@mail.gmail.com>
 <F7997153-86BA-4FDE-B64B-8A18CC8FE555@foulplay.org>
Message-ID: <CABu_8z+ibhuzUrx+cbjBeT3f2t+F1hQs5AB993gerx=sLEDDKw@mail.gmail.com>

Yeah, that's not the solution, but it narrows down the problem.

Next, can you disable the 7zip archiver...

Change
Un7zip Command = /usr/bin/7z
Un7zip Command =

Set the depth back to 8 and restart MailScanner.



On Tue, Apr 17, 2018 at 4:05 PM, <foulplay at foulplay.org> wrote:

> Gmail now shows the documents (docx and pdf) correctly.
>
> This was set to 8 previously. I took this setting as for MailScanner to
> scan within compressed file as per the comments. I am not sure if disabling
> this check is a good idea.
>
> Any thoughts around perhaps a compressed executable passing through the
> checks?
>
>
>
> On Apr 17, 2018, at 3:34 PM, Shawn Iverson <iversons at rushville.k12.in.us>
> wrote:
>
> Can you try setting the following in MailScanner.conf?
>
> Maximum Archive Depth = 0
>
> Then restart MailScanner and send the message through.  Does it still get
> truncated?
>
>
> On Tue, Apr 17, 2018 at 3:28 PM, Shawn Iverson <
> iversons at rushville.k12.in.us> wrote:
>
>> It is indeed truncated, this is missing on the Mailscanner/Gmail one in
>> the Base64 encoding:
>>
>> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
>> AQAAAA==
>>
>>
>> On Tue, Apr 17, 2018 at 3:08 PM, <foulplay at foulplay.org> wrote:
>>
>>>
>>>
>>> On Apr 17, 2018, at 1:58 PM, Mark Sapiro <mark at msapiro.net> wrote:
>>>
>>> On April 17, 2018 9:21:07 AM PDT, foulplay at foulplay.org wrote:
>>>
>>>
>>> I seem to be going around in circles between MailScanner and Gmail.
>>> Would appreciate any insight that might help me in troubleshooting this
>>> further.
>>>
>>>
>>>
>>> Please create a test email and send it through the problem MailScanner
>>> and post the raw message as received. You could look at the message both in
>>> Gmail (view original ) and that for a non-truncated message and see if
>>> there's any difference, but post that raw message and maybe we can see
>>> something.
>>>
>>>
>>>
>>> This is from Gmail.
>>>
>>> Delivered-To: XXXXX at gmail.com
>>> Received: by 2002:a9d:550c:0:0:0:0:0 with SMTP id l12-v6csp1875991oth;
>>>         Tue, 17 Apr 2018 06:41:42 -0700 (PDT)
>>> X-Google-Smtp-Source: AIpwx4+j3zFCvmaZ2PFx98CgodB/xg
>>> 2LSSREMdxLV2NDiVXMUGTfbWjqJF2U8HN6fKgATr1Fs+0d
>>> X-Received: by 10.237.39.101 with SMTP id n92mr2523600qtd.215.1523972501
>>> 998;
>>>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
>>> ARC-Seal: i=1; a=rsa-sha256; t=1523972501; cv=none;
>>>         d=google.com; s=arc-20160816;
>>>         b=RT/BsmBl9DlyW45oUpg1knmQUqXPShd9/jo026IloQhRKyqzFgzTkxutyL
>>> mCg3Pbya
>>>          mVIh2691rjmlJP1PR+RXk+0Y6jxWrTKFNtPpp3oBlrn0HfAYKrkZ2vSa/vZ
>>> g+BsFTXYt
>>>          fPGIktK+kVBfnb+UUazLWPjCugnsvAwrnCCN1AjX96KJlrOkrfNhESHRAF1
>>> RcgARhDRn
>>>          m5tZcN/Ver7GrFXi/rvcW2zTZjYR48jViF6bLwTmEgUfhNVmq22jeVPmdf0
>>> 0NYLntOq4
>>>          HkRT0gkviip9rqT3pUFvyUxixTUgl2wap+fq9XmcMHGME/lUKzO9ffICZa7
>>> Nw8311sCH
>>>          g8Iw==
>>> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=
>>> google.com; s=arc-20160816;
>>>         h=to:cc:date:message-id:subject:mime-version:from
>>>          :arc-authentication-results;
>>>         bh=WZ4q8c6jXzVf2rNCF7iO8zr7YrSC0Jg9gbP30U9RwFE=;
>>>         b=iw0NiFc+6ljVZscRcDzj8ErPM2B8FBpv8lpMHnST8jbFaP9po9VGtcicbB
>>> KLZc2c3Z
>>>          cP/h+N/IED8dFbLm0OFhCNROtcJdSHSEI/uJlQeY7Td/4e6atOed4S+PkvX
>>> 0Dx13xPDN
>>>          MzArO37z9Pi7Pypce1Ou5LN6UU4vGUC3BZpN+5wZkacM0fiYZyWPfJp/vb8
>>> a+pCN9i0B
>>>          3MusAkDMxMYw88MZBZXOoZG1wskHVjTmpTcQwHR1hkPN784Hizb51+qjJWP
>>> l8BsVXa98
>>>          hbRRDp7cB4Jpz28uDDPQXZMG0XoPKXWoknSul/WrB4oSrJcYc7CiYTLbO2r
>>> OyvS5i/Pd
>>>          MEsQ==
>>> ARC-Authentication-Results: i=1; mx.google.com;
>>>        spf=pass (google.com: domain of xxxx at xxxxxx.xxx designates
>>> 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx
>>> Return-Path: <xxxx at xxxxxx.xxx>
>>> Received: from postman2.xxxxxx.xxx [1.2.3.4]
>>>         by mx.google.com with ESMTPS id l8si1486350qtb.265.2018.04.17.
>>> 06.41.39
>>>         for <XXXXX at gmail.com>
>>>         (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256
>>> bits=128/128);
>>>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
>>> Received-SPF: pass (google.com: domain of xxxx at xxxxxx.xxx designates
>>> 1.2.3.4 as permitted sender) client-ip=1.2.3.4;
>>> Authentication-Results: mx.google.com;
>>>        spf=pass (google.com: domain of xxxx at xxxxxx.xxx designates
>>> 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx
>>> X-Spam-Status: No
>>> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
>>> X-Postman2-MailScanner-From: xxxx at xxxxxx.xxx
>>> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
>>> SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
>>> ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
>>> X-Postman2-MailScanner: Found to be clean
>>> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
>>> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for
>>> more information
>>> Received: from bentley.xxxxxx.xxx ([172.16.0.254]
>>> helo=macbook-pro-2.xxxxxx.xxx)
>>> by postman2.xxxxxxx.xxx with esmtpa (Exim 4.90_1)
>>> (envelope-from <xxxx at xxxxxx.xxx>)
>>> id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
>>> From: <xxxx at xxxxxx.xxx>
>>> Content-Type: multipart/mixed;
>>> boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
>>> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
>>> Subject: Test 39
>>> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>
>>> Date: Tue, 17 Apr 2018 09:40:31 -0400
>>> Cc: <ABC at non-gmail.com>
>>> To: <XXXX at gmail.com>
>>> X-Mailer: Apple Mail (2.3445.5.20)
>>>
>>>
>>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>>> Content-Type: text/plain; charset="us-ascii"
>>> Content-Disposition: inline
>>> Content-Transfer-Encoding: quoted-printable
>>>
>>>
>>> --
>>> 39 line long disclaimer removed for brevity.
>>>
>>>
>>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>>> Content-Disposition: attachment;
>>> filename="PS Agreement-LLC.docx"
>>> Content-Type: application/vnd.openxmlformats
>>> -officedocument.wordprocessingml.document;
>>> x-unix-mode=0644;
>>> name="PS Agreement-LLC.docx"
>>> Content-Transfer-Encoding: base64
>>>
>>> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
>>> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>> *
>>> *
>>> *
>>> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
>>> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
>>> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
>>> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
>>> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
>>>
>>>
>>> ****************
>>> Below is what is received on non-gmail system that was CC?ed.
>>>
>>> Return-Path: <xxxx at xxxxxx.xxx>
>>> X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
>>> rx8.non-gmail.org
>>> X-Spam-Level:
>>> X-Spam-ASN:
>>> X-Spam-Status: No, score=-0.4 required=1.5 tests=BAYES_00,KAM_INSURE1
>>> shortcircuit=no autolearn=no autolearn_force=no version=3.4.1
>>> X-Original-To: ABC at non-gmail.org
>>> Delivered-To: ABC at non-gmail.org
>>> Received: from localhost (localhost.localdomain [127.0.0.1])
>>> by mailhost.non-gmail.org (Postfix) with ESMTP id D5AD84399C
>>> for <ABC at non-gmail.org>; Tue, 17 Apr 2018 09:42:05 -0400 (EDT)
>>> Received: from mailhost.non-gmail.org ([127.0.0.1])
>>> by localhost (rx8.non-gmail.org [127.0.0.1]) (amavisd-new, port 10024)
>>> with ESMTP id ZxjGE_cKxEMf for <ABC at non-gmail.org>;
>>> Tue, 17 Apr 2018 09:42:04 -0400 (EDT)
>>> Received: from postman2.xxxxxx.xxx [1.2.3.4]
>>> by mailhost.non-gmail.org (Postfix) with ESMTP id 7E63F61E13
>>> for <ABC at non-gmail.org>; Tue, 17 Apr 2018 09:41:28 -0400 (EDT)
>>> DKIM-Filter: OpenDKIM Filter v2.11.0 mailhost.non-gmail.org 7E63F61E13
>>> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
>>> X-Postman2-MailScanner-From: xxxx at xxxxx.xxx
>>> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
>>> SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
>>> ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
>>> X-Postman2-MailScanner: Found to be clean
>>> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
>>> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for
>>> more information
>>> Received: from bentley.xxxxxx.xxx ([172.16.0.254]
>>> helo=macbook-pro-2.xxxxx.xxx)
>>> by postman2.xxxxx.xxx with esmtpa (Exim 4.90_1)
>>> (envelope-from <xxxx at xxxxx.xxx>)
>>> id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
>>> From: <xxxxx at xxxxx.xxx>
>>> Content-Type: multipart/mixed;
>>> boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
>>> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
>>> Subject: Test 39
>>> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>
>>> Date: Tue, 17 Apr 2018 09:40:31 -0400
>>> Cc: <ABC at non-gmail.org>
>>> To: <xxxxx at gmail.com>
>>> X-Mailer: Apple Mail (2.3445.5.20)
>>> X-Virus-Scanned: clamav-milter 0.99.4 at mailhost.non-gmail.org
>>> X-Virus-Status: Clean
>>>
>>>
>>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>>> Content-Type: text/plain; charset="us-ascii"
>>> Content-Disposition: inline
>>> Content-Transfer-Encoding: quoted-printable
>>>
>>>
>>> --
>>> 39 line long disclaimer removed from here as well
>>>
>>> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
>>> Content-Disposition: attachment;
>>> filename="PS Agreement-LLC.docx"
>>> Content-Type: application/vnd.openxmlformats
>>> -officedocument.wordprocessingml.document;
>>> x-unix-mode=0644;
>>> name="PS Agreement-LLC.docx"
>>> Content-Transfer-Encoding: base64
>>>
>>> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
>>> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>> *
>>> *
>>> *
>>> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
>>> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
>>> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
>>> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
>>> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
>>> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
>>> AQAAAA==
>>>
>>> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
>>>
>>>
>>>
>>> *****************
>>> Besides the trail end of the two emails being different, I for one have
>>> being going blind trying to spot the difference.
>>>
>>> Hope this helps.
>>>
>>>
>>>
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>>
>>>
>>
>>
>> --
>> Shawn Iverson, CETL
>> Director of Technology
>> Rush County Schools
>> 765-932-3901 x1171
>> iversons at rushville.k12.in.us
>>
>>
>>
>
>
> --
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x1171
> iversons at rushville.k12.in.us
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180417/6bbed5f6/attachment.html>

From foulplay at foulplay.org  Tue Apr 17 20:21:44 2018
From: foulplay at foulplay.org (foulplay at foulplay.org)
Date: Tue, 17 Apr 2018 16:21:44 -0400
Subject: Gmail truncating attachments from MailScanner
In-Reply-To: <CABu_8z+ibhuzUrx+cbjBeT3f2t+F1hQs5AB993gerx=sLEDDKw@mail.gmail.com>
References: <7CF3F926-9721-4C2C-8017-2F8639881584@foulplay.org>
 <0328A394-41DF-47BD-BFBE-D71F03456B24@msapiro.net>
 <C30B8352-BA56-45FC-9E16-401F8C3E7BE3@foulplay.org>
 <CABu_8zKixFBPEEdh1n2d1OQH17jvMcMQjGn-tYZLwhpbQLRBMQ@mail.gmail.com>
 <CABu_8zL=HQEvOUG4Ypazr1-Qm2Ned8_UZn3x3ER8zh648HFB2Q@mail.gmail.com>
 <F7997153-86BA-4FDE-B64B-8A18CC8FE555@foulplay.org>
 <CABu_8z+ibhuzUrx+cbjBeT3f2t+F1hQs5AB993gerx=sLEDDKw@mail.gmail.com>
Message-ID: <7BF5CFFF-DA03-4069-A8B3-26173EAE7F38@foulplay.org>

Setting Maximum Archive Depth = 7 worked good. No truncation.

Putting this back to 8 and disabling the 7zip archiver worked as well.

I do not have a follow up or any other details yet, since I just finished testing and haven?t done the research if the 7z binary might be the root cause. That is my next step.



> On Apr 17, 2018, at 4:07 PM, Shawn Iverson <iversons at rushville.k12.in.us> wrote:
> 
> Yeah, that's not the solution, but it narrows down the problem.
> 
> Next, can you disable the 7zip archiver...
> 
> Change
> Un7zip Command = /usr/bin/7z
> Un7zip Command =
> 
> Set the depth back to 8 and restart MailScanner.
> 
> 
> 
> On Tue, Apr 17, 2018 at 4:05 PM, <foulplay at foulplay.org <mailto:foulplay at foulplay.org>> wrote:
> Gmail now shows the documents (docx and pdf) correctly.
> 
> This was set to 8 previously. I took this setting as for MailScanner to scan within compressed file as per the comments. I am not sure if disabling this check is a good idea.
> 
> Any thoughts around perhaps a compressed executable passing through the checks?
> 
> 
> 
>> On Apr 17, 2018, at 3:34 PM, Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>> wrote:
>> 
>> Can you try setting the following in MailScanner.conf?
>> 
>> Maximum Archive Depth = 0
>> 
>> Then restart MailScanner and send the message through.  Does it still get truncated?
>> 
>> 
>> On Tue, Apr 17, 2018 at 3:28 PM, Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>> wrote:
>> It is indeed truncated, this is missing on the Mailscanner/Gmail one in the Base64 encoding:
>> 
>> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
>> AQAAAA==
>> 
>> 
>> On Tue, Apr 17, 2018 at 3:08 PM, <foulplay at foulplay.org <mailto:foulplay at foulplay.org>> wrote:
>> 
>> 
>>> On Apr 17, 2018, at 1:58 PM, Mark Sapiro <mark at msapiro.net <mailto:mark at msapiro.net>> wrote:
>>> 
>>> On April 17, 2018 9:21:07 AM PDT, foulplay at foulplay.org <mailto:foulplay at foulplay.org> wrote:
>>>> 
>>>> I seem to be going around in circles between MailScanner and Gmail.
>>>> Would appreciate any insight that might help me in troubleshooting this
>>>> further.
>>> 
>>> 
>>> Please create a test email and send it through the problem MailScanner and post the raw message as received. You could look at the message both in Gmail (view original ) and that for a non-truncated message and see if there's any difference, but post that raw message and maybe we can see something.
>>> 
>>> 
>> 
>> 
>> This is from Gmail.
>> 
>> Delivered-To: XXXXX at gmail.com <mailto:XXXXX at gmail.com>
>> Received: by 2002:a9d:550c:0:0:0:0:0 with SMTP id l12-v6csp1875991oth;
>>         Tue, 17 Apr 2018 06:41:42 -0700 (PDT)
>> X-Google-Smtp-Source: AIpwx4+j3zFCvmaZ2PFx98CgodB/xg2LSSREMdxLV2NDiVXMUGTfbWjqJF2U8HN6fKgATr1Fs+0d
>> X-Received: by 10.237.39.101 with SMTP id n92mr2523600qtd.215.1523972501998;
>>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
>> ARC-Seal: i=1; a=rsa-sha256; t=1523972501; cv=none;
>>         d=google.com <http://google.com/>; s=arc-20160816;
>>         b=RT/BsmBl9DlyW45oUpg1knmQUqXPShd9/jo026IloQhRKyqzFgzTkxutyLmCg3Pbya
>>          mVIh2691rjmlJP1PR+RXk+0Y6jxWrTKFNtPpp3oBlrn0HfAYKrkZ2vSa/vZg+BsFTXYt
>>          fPGIktK+kVBfnb+UUazLWPjCugnsvAwrnCCN1AjX96KJlrOkrfNhESHRAF1RcgARhDRn
>>          m5tZcN/Ver7GrFXi/rvcW2zTZjYR48jViF6bLwTmEgUfhNVmq22jeVPmdf00NYLntOq4
>>          HkRT0gkviip9rqT3pUFvyUxixTUgl2wap+fq9XmcMHGME/lUKzO9ffICZa7Nw8311sCH
>>          g8Iw==
>> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com <http://google.com/>; s=arc-20160816;
>>         h=to:cc:date:message-id:subject:mime-version:from
>>          :arc-authentication-results;
>>         bh=WZ4q8c6jXzVf2rNCF7iO8zr7YrSC0Jg9gbP30U9RwFE=;
>>         b=iw0NiFc+6ljVZscRcDzj8ErPM2B8FBpv8lpMHnST8jbFaP9po9VGtcicbBKLZc2c3Z
>>          cP/h+N/IED8dFbLm0OFhCNROtcJdSHSEI/uJlQeY7Td/4e6atOed4S+PkvX0Dx13xPDN
>>          MzArO37z9Pi7Pypce1Ou5LN6UU4vGUC3BZpN+5wZkacM0fiYZyWPfJp/vb8a+pCN9i0B
>>          3MusAkDMxMYw88MZBZXOoZG1wskHVjTmpTcQwHR1hkPN784Hizb51+qjJWPl8BsVXa98
>>          hbRRDp7cB4Jpz28uDDPQXZMG0XoPKXWoknSul/WrB4oSrJcYc7CiYTLbO2rOyvS5i/Pd
>>          MEsQ==
>> ARC-Authentication-Results: i=1; mx.google.com <http://mx.google.com/>;
>>        spf=pass (google.com <http://google.com/>: domain of xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx> designates 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx <mailto:smtp.mailfrom=xxxx at xxxxxx.xxx>
>> Return-Path: <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>
>> Received: from postman2.xxxxxx.xxx [1.2.3.4]
>>         by mx.google.com <http://mx.google.com/> with ESMTPS id l8si1486350qtb.265.2018.04.17.06.41.39
>>         for <XXXXX at gmail.com <mailto:XXXXX at gmail.com>>
>>         (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
>>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
>> Received-SPF: pass (google.com <http://google.com/>: domain of xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx> designates 1.2.3.4 as permitted sender) client-ip=1.2.3.4;
>> Authentication-Results: mx.google.com <http://mx.google.com/>;
>>        spf=pass (google.com <http://google.com/>: domain of xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx> designates 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx <mailto:smtp.mailfrom=xxxx at xxxxxx.xxx>
>> X-Spam-Status: No
>> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
>> X-Postman2-MailScanner-From: xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>
>> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
>> 	SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
>> 	ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
>> X-Postman2-MailScanner: Found to be clean
>> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
>> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for more information
>> Received: from bentley.xxxxxx.xxx ([172.16.0.254] helo=macbook-pro-2.xxxxxx.xxx)
>> 	by postman2.xxxxxxx.xxx with esmtpa (Exim 4.90_1)
>> 	(envelope-from <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>)
>> 	id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
>> From: <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>
>> Content-Type: multipart/mixed;
>> 	boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
>> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
>> Subject: Test 39
>> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com <mailto:63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>>
>> Date: Tue, 17 Apr 2018 09:40:31 -0400
>> Cc: <ABC at non-gmail.com <mailto:ABC at non-gmail.com>>
>> To: <XXXX at gmail.com <mailto:XXXX at gmail.com>>
>> X-Mailer: Apple Mail (2.3445.5.20)
>> 
>> 
>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>> Content-Type: text/plain; charset="us-ascii"
>> Content-Disposition: inline
>> Content-Transfer-Encoding: quoted-printable
>> 
>> 
>> --
>> 39 line long disclaimer removed for brevity.
>> 
>> 
>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>> Content-Disposition: attachment;
>> 	filename="PS Agreement-LLC.docx"
>> Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document;
>> 	x-unix-mode=0644;
>> 	name="PS Agreement-LLC.docx"
>> Content-Transfer-Encoding: base64
>> 
>> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
>> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> *
>> *
>> *
>> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
>> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
>> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
>> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
>> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
>> 
>> 
>> ****************
>> Below is what is received on non-gmail system that was CC?ed.
>> 
>> Return-Path: <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>
>> X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on rx8.non-gmail.org <http://rx8.non-gmail.org/>
>> X-Spam-Level: 
>> X-Spam-ASN:  
>> X-Spam-Status: No, score=-0.4 required=1.5 tests=BAYES_00,KAM_INSURE1
>> 	shortcircuit=no autolearn=no autolearn_force=no version=3.4.1
>> X-Original-To: ABC at non-gmail.org <mailto:ABC at non-gmail.org>
>> Delivered-To: ABC at non-gmail.org <mailto:ABC at non-gmail.org>
>> Received: from localhost (localhost.localdomain [127.0.0.1])
>> 	by mailhost.non-gmail.org <http://mailhost.non-gmail.org/> (Postfix) with ESMTP id D5AD84399C
>> 	for <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>; Tue, 17 Apr 2018 09:42:05 -0400 (EDT)
>> Received: from mailhost.non-gmail.org <http://mailhost.non-gmail.org/> ([127.0.0.1])
>> 	by localhost (rx8.non-gmail.org <http://rx8.non-gmail.org/> [127.0.0.1]) (amavisd-new, port 10024)
>> 	with ESMTP id ZxjGE_cKxEMf for <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>;
>> 	Tue, 17 Apr 2018 09:42:04 -0400 (EDT)
>> Received: from postman2.xxxxxx.xxx [1.2.3.4]
>> 	by mailhost.non-gmail.org <http://mailhost.non-gmail.org/> (Postfix) with ESMTP id 7E63F61E13
>> 	for <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>; Tue, 17 Apr 2018 09:41:28 -0400 (EDT)
>> DKIM-Filter: OpenDKIM Filter v2.11.0 mailhost.non-gmail.org <http://mailhost.non-gmail.org/> 7E63F61E13
>> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
>> X-Postman2-MailScanner-From: xxxx at xxxxx.xxx <mailto:xxxx at xxxxx.xxx>
>> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
>> 	SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
>> 	ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
>> X-Postman2-MailScanner: Found to be clean
>> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
>> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for more information
>> Received: from bentley.xxxxxx.xxx ([172.16.0.254] helo=macbook-pro-2.xxxxx.xxx)
>> 	by postman2.xxxxx.xxx with esmtpa (Exim 4.90_1)
>> 	(envelope-from <xxxx at xxxxx.xxx <mailto:xxxx at xxxxx.xxx>>)
>> 	id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
>> From: <xxxxx at xxxxx.xxx <mailto:xxxxx at xxxxx.xxx>>
>> Content-Type: multipart/mixed;
>> 	boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
>> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
>> Subject: Test 39
>> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com <mailto:63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>>
>> Date: Tue, 17 Apr 2018 09:40:31 -0400
>> Cc: <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>
>> To: <xxxxx at gmail.com <mailto:xxxxx at gmail.com>>
>> X-Mailer: Apple Mail (2.3445.5.20)
>> X-Virus-Scanned: clamav-milter 0.99.4 at mailhost.non-gmail.org <http://mailhost.non-gmail.org/>
>> X-Virus-Status: Clean
>> 
>> 
>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>> Content-Type: text/plain; charset="us-ascii"
>> Content-Disposition: inline
>> Content-Transfer-Encoding: quoted-printable
>> 
>> 
>> --
>> 39 line long disclaimer removed from here as well
>> 
>> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
>> Content-Disposition: attachment;
>> 	filename="PS Agreement-LLC.docx"
>> Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document;
>> 	x-unix-mode=0644;
>> 	name="PS Agreement-LLC.docx"
>> Content-Transfer-Encoding: base64
>> 
>> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
>> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> *
>> *
>> *
>> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
>> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
>> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
>> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
>> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
>> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
>> AQAAAA==
>> 
>> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
>> 
>> 
>> 
>> *****************
>> Besides the trail end of the two emails being different, I for one have being going blind trying to spot the difference.
>> 
>> Hope this helps.
>> 
>> 
>> 
>> 
>> 
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>> 
>> 
>> 
>> 
>> 
>> -- 
>> Shawn Iverson, CETL
>> Director of Technology
>> Rush County Schools
>> 765-932-3901 x1171
>> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>> 
>> 
>> 
>> 
>> 
>> 
>> -- 
>> Shawn Iverson, CETL
>> Director of Technology
>> Rush County Schools
>> 765-932-3901 x1171
>> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>> 
>> 
>> 
>> 
>> 
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>> 
> 
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
> 
> 
> 
> 
> 
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x1171
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> 
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180417/24febdef/attachment-0001.html>

From foulplay at foulplay.org  Thu Apr 19 19:59:15 2018
From: foulplay at foulplay.org (foulplay at foulplay.org)
Date: Thu, 19 Apr 2018 15:59:15 -0400
Subject: Gmail truncating attachments from MailScanner
In-Reply-To: <CABu_8z+ibhuzUrx+cbjBeT3f2t+F1hQs5AB993gerx=sLEDDKw@mail.gmail.com>
References: <7CF3F926-9721-4C2C-8017-2F8639881584@foulplay.org>
 <0328A394-41DF-47BD-BFBE-D71F03456B24@msapiro.net>
 <C30B8352-BA56-45FC-9E16-401F8C3E7BE3@foulplay.org>
 <CABu_8zKixFBPEEdh1n2d1OQH17jvMcMQjGn-tYZLwhpbQLRBMQ@mail.gmail.com>
 <CABu_8zL=HQEvOUG4Ypazr1-Qm2Ned8_UZn3x3ER8zh648HFB2Q@mail.gmail.com>
 <F7997153-86BA-4FDE-B64B-8A18CC8FE555@foulplay.org>
 <CABu_8z+ibhuzUrx+cbjBeT3f2t+F1hQs5AB993gerx=sLEDDKw@mail.gmail.com>
Message-ID: <7408C373-F521-412F-B5D4-B80CAAF351E1@foulplay.org>

It looks like the disclaimer, in text format, is interfering somewhere. As a test, exempting myself from the inline signature rules, the gmail address gets the file attachment intact.

Sending the email in html format, the html inline file gets inserted without any negative impact. So this is definitely something to do with how the text file is getting read.

With the thought that perhaps the newline character was causing grief, modified the disclaimer text by ending the newline with \r\n. There was no change in the result.

Anybody have any ideas what to look for here?


> On Apr 17, 2018, at 4:07 PM, Shawn Iverson <iversons at rushville.k12.in.us> wrote:
> 
> Yeah, that's not the solution, but it narrows down the problem.
> 
> Next, can you disable the 7zip archiver...
> 
> Change
> Un7zip Command = /usr/bin/7z
> Un7zip Command =
> 
> Set the depth back to 8 and restart MailScanner.
> 
> 
> 
> On Tue, Apr 17, 2018 at 4:05 PM, <foulplay at foulplay.org <mailto:foulplay at foulplay.org>> wrote:
> Gmail now shows the documents (docx and pdf) correctly.
> 
> This was set to 8 previously. I took this setting as for MailScanner to scan within compressed file as per the comments. I am not sure if disabling this check is a good idea.
> 
> Any thoughts around perhaps a compressed executable passing through the checks?
> 
> 
> 
>> On Apr 17, 2018, at 3:34 PM, Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>> wrote:
>> 
>> Can you try setting the following in MailScanner.conf?
>> 
>> Maximum Archive Depth = 0
>> 
>> Then restart MailScanner and send the message through.  Does it still get truncated?
>> 
>> 
>> On Tue, Apr 17, 2018 at 3:28 PM, Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>> wrote:
>> It is indeed truncated, this is missing on the Mailscanner/Gmail one in the Base64 encoding:
>> 
>> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
>> AQAAAA==
>> 
>> 
>> On Tue, Apr 17, 2018 at 3:08 PM, <foulplay at foulplay.org <mailto:foulplay at foulplay.org>> wrote:
>> 
>> 
>>> On Apr 17, 2018, at 1:58 PM, Mark Sapiro <mark at msapiro.net <mailto:mark at msapiro.net>> wrote:
>>> 
>>> On April 17, 2018 9:21:07 AM PDT, foulplay at foulplay.org <mailto:foulplay at foulplay.org> wrote:
>>>> 
>>>> I seem to be going around in circles between MailScanner and Gmail.
>>>> Would appreciate any insight that might help me in troubleshooting this
>>>> further.
>>> 
>>> 
>>> Please create a test email and send it through the problem MailScanner and post the raw message as received. You could look at the message both in Gmail (view original ) and that for a non-truncated message and see if there's any difference, but post that raw message and maybe we can see something.
>>> 
>>> 
>> 
>> 
>> This is from Gmail.
>> 
>> Delivered-To: XXXXX at gmail.com <mailto:XXXXX at gmail.com>
>> Received: by 2002:a9d:550c:0:0:0:0:0 with SMTP id l12-v6csp1875991oth;
>>         Tue, 17 Apr 2018 06:41:42 -0700 (PDT)
>> X-Google-Smtp-Source: AIpwx4+j3zFCvmaZ2PFx98CgodB/xg2LSSREMdxLV2NDiVXMUGTfbWjqJF2U8HN6fKgATr1Fs+0d
>> X-Received: by 10.237.39.101 with SMTP id n92mr2523600qtd.215.1523972501998;
>>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
>> ARC-Seal: i=1; a=rsa-sha256; t=1523972501; cv=none;
>>         d=google.com <http://google.com/>; s=arc-20160816;
>>         b=RT/BsmBl9DlyW45oUpg1knmQUqXPShd9/jo026IloQhRKyqzFgzTkxutyLmCg3Pbya
>>          mVIh2691rjmlJP1PR+RXk+0Y6jxWrTKFNtPpp3oBlrn0HfAYKrkZ2vSa/vZg+BsFTXYt
>>          fPGIktK+kVBfnb+UUazLWPjCugnsvAwrnCCN1AjX96KJlrOkrfNhESHRAF1RcgARhDRn
>>          m5tZcN/Ver7GrFXi/rvcW2zTZjYR48jViF6bLwTmEgUfhNVmq22jeVPmdf00NYLntOq4
>>          HkRT0gkviip9rqT3pUFvyUxixTUgl2wap+fq9XmcMHGME/lUKzO9ffICZa7Nw8311sCH
>>          g8Iw==
>> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com <http://google.com/>; s=arc-20160816;
>>         h=to:cc:date:message-id:subject:mime-version:from
>>          :arc-authentication-results;
>>         bh=WZ4q8c6jXzVf2rNCF7iO8zr7YrSC0Jg9gbP30U9RwFE=;
>>         b=iw0NiFc+6ljVZscRcDzj8ErPM2B8FBpv8lpMHnST8jbFaP9po9VGtcicbBKLZc2c3Z
>>          cP/h+N/IED8dFbLm0OFhCNROtcJdSHSEI/uJlQeY7Td/4e6atOed4S+PkvX0Dx13xPDN
>>          MzArO37z9Pi7Pypce1Ou5LN6UU4vGUC3BZpN+5wZkacM0fiYZyWPfJp/vb8a+pCN9i0B
>>          3MusAkDMxMYw88MZBZXOoZG1wskHVjTmpTcQwHR1hkPN784Hizb51+qjJWPl8BsVXa98
>>          hbRRDp7cB4Jpz28uDDPQXZMG0XoPKXWoknSul/WrB4oSrJcYc7CiYTLbO2rOyvS5i/Pd
>>          MEsQ==
>> ARC-Authentication-Results: i=1; mx.google.com <http://mx.google.com/>;
>>        spf=pass (google.com <http://google.com/>: domain of xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx> designates 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx <mailto:smtp.mailfrom=xxxx at xxxxxx.xxx>
>> Return-Path: <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>
>> Received: from postman2.xxxxxx.xxx [1.2.3.4]
>>         by mx.google.com <http://mx.google.com/> with ESMTPS id l8si1486350qtb.265.2018.04.17.06.41.39
>>         for <XXXXX at gmail.com <mailto:XXXXX at gmail.com>>
>>         (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
>>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
>> Received-SPF: pass (google.com <http://google.com/>: domain of xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx> designates 1.2.3.4 as permitted sender) client-ip=1.2.3.4;
>> Authentication-Results: mx.google.com <http://mx.google.com/>;
>>        spf=pass (google.com <http://google.com/>: domain of xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx> designates 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx <mailto:smtp.mailfrom=xxxx at xxxxxx.xxx>
>> X-Spam-Status: No
>> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
>> X-Postman2-MailScanner-From: xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>
>> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
>> 	SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
>> 	ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
>> X-Postman2-MailScanner: Found to be clean
>> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
>> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for more information
>> Received: from bentley.xxxxxx.xxx ([172.16.0.254] helo=macbook-pro-2.xxxxxx.xxx)
>> 	by postman2.xxxxxxx.xxx with esmtpa (Exim 4.90_1)
>> 	(envelope-from <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>)
>> 	id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
>> From: <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>
>> Content-Type: multipart/mixed;
>> 	boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
>> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
>> Subject: Test 39
>> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com <mailto:63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>>
>> Date: Tue, 17 Apr 2018 09:40:31 -0400
>> Cc: <ABC at non-gmail.com <mailto:ABC at non-gmail.com>>
>> To: <XXXX at gmail.com <mailto:XXXX at gmail.com>>
>> X-Mailer: Apple Mail (2.3445.5.20)
>> 
>> 
>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>> Content-Type: text/plain; charset="us-ascii"
>> Content-Disposition: inline
>> Content-Transfer-Encoding: quoted-printable
>> 
>> 
>> --
>> 39 line long disclaimer removed for brevity.
>> 
>> 
>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>> Content-Disposition: attachment;
>> 	filename="PS Agreement-LLC.docx"
>> Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document;
>> 	x-unix-mode=0644;
>> 	name="PS Agreement-LLC.docx"
>> Content-Transfer-Encoding: base64
>> 
>> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
>> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> *
>> *
>> *
>> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
>> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
>> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
>> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
>> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
>> 
>> 
>> ****************
>> Below is what is received on non-gmail system that was CC?ed.
>> 
>> Return-Path: <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>
>> X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on rx8.non-gmail.org <http://rx8.non-gmail.org/>
>> X-Spam-Level: 
>> X-Spam-ASN:  
>> X-Spam-Status: No, score=-0.4 required=1.5 tests=BAYES_00,KAM_INSURE1
>> 	shortcircuit=no autolearn=no autolearn_force=no version=3.4.1
>> X-Original-To: ABC at non-gmail.org <mailto:ABC at non-gmail.org>
>> Delivered-To: ABC at non-gmail.org <mailto:ABC at non-gmail.org>
>> Received: from localhost (localhost.localdomain [127.0.0.1])
>> 	by mailhost.non-gmail.org <http://mailhost.non-gmail.org/> (Postfix) with ESMTP id D5AD84399C
>> 	for <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>; Tue, 17 Apr 2018 09:42:05 -0400 (EDT)
>> Received: from mailhost.non-gmail.org <http://mailhost.non-gmail.org/> ([127.0.0.1])
>> 	by localhost (rx8.non-gmail.org <http://rx8.non-gmail.org/> [127.0.0.1]) (amavisd-new, port 10024)
>> 	with ESMTP id ZxjGE_cKxEMf for <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>;
>> 	Tue, 17 Apr 2018 09:42:04 -0400 (EDT)
>> Received: from postman2.xxxxxx.xxx [1.2.3.4]
>> 	by mailhost.non-gmail.org <http://mailhost.non-gmail.org/> (Postfix) with ESMTP id 7E63F61E13
>> 	for <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>; Tue, 17 Apr 2018 09:41:28 -0400 (EDT)
>> DKIM-Filter: OpenDKIM Filter v2.11.0 mailhost.non-gmail.org <http://mailhost.non-gmail.org/> 7E63F61E13
>> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
>> X-Postman2-MailScanner-From: xxxx at xxxxx.xxx <mailto:xxxx at xxxxx.xxx>
>> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
>> 	SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
>> 	ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
>> X-Postman2-MailScanner: Found to be clean
>> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
>> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for more information
>> Received: from bentley.xxxxxx.xxx ([172.16.0.254] helo=macbook-pro-2.xxxxx.xxx)
>> 	by postman2.xxxxx.xxx with esmtpa (Exim 4.90_1)
>> 	(envelope-from <xxxx at xxxxx.xxx <mailto:xxxx at xxxxx.xxx>>)
>> 	id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
>> From: <xxxxx at xxxxx.xxx <mailto:xxxxx at xxxxx.xxx>>
>> Content-Type: multipart/mixed;
>> 	boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
>> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
>> Subject: Test 39
>> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com <mailto:63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>>
>> Date: Tue, 17 Apr 2018 09:40:31 -0400
>> Cc: <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>
>> To: <xxxxx at gmail.com <mailto:xxxxx at gmail.com>>
>> X-Mailer: Apple Mail (2.3445.5.20)
>> X-Virus-Scanned: clamav-milter 0.99.4 at mailhost.non-gmail.org <http://mailhost.non-gmail.org/>
>> X-Virus-Status: Clean
>> 
>> 
>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>> Content-Type: text/plain; charset="us-ascii"
>> Content-Disposition: inline
>> Content-Transfer-Encoding: quoted-printable
>> 
>> 
>> --
>> 39 line long disclaimer removed from here as well
>> 
>> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
>> Content-Disposition: attachment;
>> 	filename="PS Agreement-LLC.docx"
>> Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document;
>> 	x-unix-mode=0644;
>> 	name="PS Agreement-LLC.docx"
>> Content-Transfer-Encoding: base64
>> 
>> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
>> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>> *
>> *
>> *
>> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
>> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
>> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
>> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
>> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
>> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
>> AQAAAA==
>> 
>> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
>> 
>> 
>> 
>> *****************
>> Besides the trail end of the two emails being different, I for one have being going blind trying to spot the difference.
>> 
>> Hope this helps.
>> 
>> 
>> 
>> 
>> 
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>> 
>> 
>> 
>> 
>> 
>> -- 
>> Shawn Iverson, CETL
>> Director of Technology
>> Rush County Schools
>> 765-932-3901 x1171
>> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>> 
>> 
>> 
>> 
>> 
>> 
>> -- 
>> Shawn Iverson, CETL
>> Director of Technology
>> Rush County Schools
>> 765-932-3901 x1171
>> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>> 
>> 
>> 
>> 
>> 
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>> 
> 
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
> 
> 
> 
> 
> 
> -- 
> Shawn Iverson, CETL
> Director of Technology
> Rush County Schools
> 765-932-3901 x1171
> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
> 
> 
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180419/1c0792c3/attachment.html>

From kens at kensnet.org  Tue Apr 24 22:02:01 2018
From: kens at kensnet.org (Ken Smith)
Date: Tue, 24 Apr 2018 23:02:01 +0100
Subject: OpenDKIM and MailScanner
In-Reply-To: <CY1PR02MB128805A729C53566ABF737F0C6BC0@CY1PR02MB1288.namprd02.prod.outlook.com>
References: <5ACF2577.5020203@kensnet.org>
 <CY1PR02MB128805A729C53566ABF737F0C6BC0@CY1PR02MB1288.namprd02.prod.outlook.com>
Message-ID: <3d2809d8-2b05-2d11-de46-ae27e8aadc84@kensnet.org>




------------------------------------------------------------------------
*From:* MailScanner 
<mailscanner-bounces+djones=ena.com at lists.mailscanner.info> on behalf of 
Ken Smith <kens at kensnet.org>
*Sent:* Thursday, April 12, 2018 4:23 AM
*To:* MailScanner Discussion
*Subject:* OpenDKIM and MailScanner

Hullo - I'm new to this list but been a MailScanner user for 10+ years.

I have an installation of M'Scanner 5.0.7 on Centos 6 with Sendmail. I'd
like to have all e-mail go out with an appended footer that has company
standard signature / disclaimers etc etc. I'm also using DKIM.

{snip}

The catch appears to be that the message body has been modified, footer
added etc,? after the DKIM signature has been calculated and thus the
DKIM checks fail on delivery. :-(

Would it be possible to arrange for the DKIM signature to be calculated
by the outgoing sendmail on the completed message? This might involve
two different .cf files. One without the DKIM milter for the incoming
Sendmail and one with DKIM settings for the outgoing.

{snip}

Many thanks

Ken

David Jones via MailScanner wrote:
>
> Setup 2 different OpenDKIM instances and run the checking/header 
> adding?one on smtpd_milters and the other signing one on 
> non_smtpd_milters.
>
>
> Dave

Hi list and Dave,

I'd like to try a variation on this idea 
http://www.elandsys.com/resources/sendmail/mailscanner.html

Its not clear to me whether the example in that web site implies that 
the machine is configured with two IP's or whether there are two 
machines, as I have also seen described elsewhere. I'd prefer to run an 
extra instance of sendmail with outgoing DKIM, rather than a second 
server.? In this case I don't require incoming DKIM, although that would 
be a bonus. I've experimented with an extra sendmail instance listening 
on port 26 based on the existing sendmail daemon configuration with its 
own .cf file. With the ms-sendmail instances + MailScanner sending out 
via a smart host on localhost:26.

But I think I'm not properly understanding the roles of the 3 sendmail 
instances that are started by the ms-sendmail init script.? I appreciate 
that I need to have separate queue's and pid etc. In my test setup it 
appears that the ms-sendmail instance is ignoring my smarthost settings 
and just sending out based on mx. I have missed some subtle detail 
somewhere.

Could someone kindly explain three instances or point me to a clear 
explanation of what the three instances of sendmail are doing. In 
particular the two that appear to be started by the incoming part of the 
script.

Much appreciated

Ken

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


From jerry.benton at mailborder.com  Mon Apr 30 15:12:12 2018
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Mon, 30 Apr 2018 11:12:12 -0400
Subject: MailScanner v5.0.7-3 Released
Message-ID: <02cc01d3e095$9dbc5230$d934f690$@mailborder.com>

Thanks again to Shawn Iverson for putting together a new MailScanner build.
Available for download now. 

https://www.mailscanner.info/downloads/


--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5530 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180430/de800548/attachment.bin>

From foulplay at foulplay.org  Mon Apr 30 16:20:24 2018
From: foulplay at foulplay.org (foulplay at foulplay.org)
Date: Mon, 30 Apr 2018 12:20:24 -0400
Subject: [SPAM] Gmail truncating attachments from MailScanner
In-Reply-To: <7BF5CFFF-DA03-4069-A8B3-26173EAE7F38@foulplay.org>
References: <7CF3F926-9721-4C2C-8017-2F8639881584@foulplay.org>
 <0328A394-41DF-47BD-BFBE-D71F03456B24@msapiro.net>
 <C30B8352-BA56-45FC-9E16-401F8C3E7BE3@foulplay.org>
 <CABu_8zKixFBPEEdh1n2d1OQH17jvMcMQjGn-tYZLwhpbQLRBMQ@mail.gmail.com>
 <CABu_8zL=HQEvOUG4Ypazr1-Qm2Ned8_UZn3x3ER8zh648HFB2Q@mail.gmail.com>
 <F7997153-86BA-4FDE-B64B-8A18CC8FE555@foulplay.org>
 <CABu_8z+ibhuzUrx+cbjBeT3f2t+F1hQs5AB993gerx=sLEDDKw@mail.gmail.com>
 <7BF5CFFF-DA03-4069-A8B3-26173EAE7F38@foulplay.org>
Message-ID: <D9B2915D-EF71-44B8-BB0E-772C4A601848@foulplay.org>

The root cause turned out to be a bug in Exim. Ref: https://bugs.exim.org/show_bug.cgi?id=1974 <https://bugs.exim.org/show_bug.cgi?id=1974>

The fix for me was to add chunking_advertise_hosts = doesnotexist.org <http://doesnotexist.org/> in the global section and hosts_try_chunking = doesnotexist.org <http://doesnotexist.org/> in the remote_smtp transport section of exim.conf.



> On Apr 17, 2018, at 4:21 PM, foulplay at foulplay.org wrote:
> 
> Setting Maximum Archive Depth = 7 worked good. No truncation.
> 
> Putting this back to 8 and disabling the 7zip archiver worked as well.
> 
> I do not have a follow up or any other details yet, since I just finished testing and haven?t done the research if the 7z binary might be the root cause. That is my next step.
> 
> 
> 
>> On Apr 17, 2018, at 4:07 PM, Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>> wrote:
>> 
>> Yeah, that's not the solution, but it narrows down the problem.
>> 
>> Next, can you disable the 7zip archiver...
>> 
>> Change
>> Un7zip Command = /usr/bin/7z
>> Un7zip Command =
>> 
>> Set the depth back to 8 and restart MailScanner.
>> 
>> 
>> 
>> On Tue, Apr 17, 2018 at 4:05 PM, <foulplay at foulplay.org <mailto:foulplay at foulplay.org>> wrote:
>> Gmail now shows the documents (docx and pdf) correctly.
>> 
>> This was set to 8 previously. I took this setting as for MailScanner to scan within compressed file as per the comments. I am not sure if disabling this check is a good idea.
>> 
>> Any thoughts around perhaps a compressed executable passing through the checks?
>> 
>> 
>> 
>>> On Apr 17, 2018, at 3:34 PM, Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>> wrote:
>>> 
>>> Can you try setting the following in MailScanner.conf?
>>> 
>>> Maximum Archive Depth = 0
>>> 
>>> Then restart MailScanner and send the message through.  Does it still get truncated?
>>> 
>>> 
>>> On Tue, Apr 17, 2018 at 3:28 PM, Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>> wrote:
>>> It is indeed truncated, this is missing on the Mailscanner/Gmail one in the Base64 encoding:
>>> 
>>> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
>>> AQAAAA==
>>> 
>>> 
>>> On Tue, Apr 17, 2018 at 3:08 PM, <foulplay at foulplay.org <mailto:foulplay at foulplay.org>> wrote:
>>> 
>>> 
>>>> On Apr 17, 2018, at 1:58 PM, Mark Sapiro <mark at msapiro.net <mailto:mark at msapiro.net>> wrote:
>>>> 
>>>> On April 17, 2018 9:21:07 AM PDT, foulplay at foulplay.org <mailto:foulplay at foulplay.org> wrote:
>>>>> 
>>>>> I seem to be going around in circles between MailScanner and Gmail.
>>>>> Would appreciate any insight that might help me in troubleshooting this
>>>>> further.
>>>> 
>>>> 
>>>> Please create a test email and send it through the problem MailScanner and post the raw message as received. You could look at the message both in Gmail (view original ) and that for a non-truncated message and see if there's any difference, but post that raw message and maybe we can see something.
>>>> 
>>>> 
>>> 
>>> 
>>> This is from Gmail.
>>> 
>>> Delivered-To: XXXXX at gmail.com <mailto:XXXXX at gmail.com>
>>> Received: by 2002:a9d:550c:0:0:0:0:0 with SMTP id l12-v6csp1875991oth;
>>>         Tue, 17 Apr 2018 06:41:42 -0700 (PDT)
>>> X-Google-Smtp-Source: AIpwx4+j3zFCvmaZ2PFx98CgodB/xg2LSSREMdxLV2NDiVXMUGTfbWjqJF2U8HN6fKgATr1Fs+0d
>>> X-Received: by 10.237.39.101 with SMTP id n92mr2523600qtd.215.1523972501998;
>>>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
>>> ARC-Seal: i=1; a=rsa-sha256; t=1523972501; cv=none;
>>>         d=google.com <http://google.com/>; s=arc-20160816;
>>>         b=RT/BsmBl9DlyW45oUpg1knmQUqXPShd9/jo026IloQhRKyqzFgzTkxutyLmCg3Pbya
>>>          mVIh2691rjmlJP1PR+RXk+0Y6jxWrTKFNtPpp3oBlrn0HfAYKrkZ2vSa/vZg+BsFTXYt
>>>          fPGIktK+kVBfnb+UUazLWPjCugnsvAwrnCCN1AjX96KJlrOkrfNhESHRAF1RcgARhDRn
>>>          m5tZcN/Ver7GrFXi/rvcW2zTZjYR48jViF6bLwTmEgUfhNVmq22jeVPmdf00NYLntOq4
>>>          HkRT0gkviip9rqT3pUFvyUxixTUgl2wap+fq9XmcMHGME/lUKzO9ffICZa7Nw8311sCH
>>>          g8Iw==
>>> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com <http://google.com/>; s=arc-20160816;
>>>         h=to:cc:date:message-id:subject:mime-version:from
>>>          :arc-authentication-results;
>>>         bh=WZ4q8c6jXzVf2rNCF7iO8zr7YrSC0Jg9gbP30U9RwFE=;
>>>         b=iw0NiFc+6ljVZscRcDzj8ErPM2B8FBpv8lpMHnST8jbFaP9po9VGtcicbBKLZc2c3Z
>>>          cP/h+N/IED8dFbLm0OFhCNROtcJdSHSEI/uJlQeY7Td/4e6atOed4S+PkvX0Dx13xPDN
>>>          MzArO37z9Pi7Pypce1Ou5LN6UU4vGUC3BZpN+5wZkacM0fiYZyWPfJp/vb8a+pCN9i0B
>>>          3MusAkDMxMYw88MZBZXOoZG1wskHVjTmpTcQwHR1hkPN784Hizb51+qjJWPl8BsVXa98
>>>          hbRRDp7cB4Jpz28uDDPQXZMG0XoPKXWoknSul/WrB4oSrJcYc7CiYTLbO2rOyvS5i/Pd
>>>          MEsQ==
>>> ARC-Authentication-Results: i=1; mx.google.com <http://mx.google.com/>;
>>>        spf=pass (google.com <http://google.com/>: domain of xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx> designates 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx <mailto:smtp.mailfrom=xxxx at xxxxxx.xxx>
>>> Return-Path: <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>
>>> Received: from postman2.xxxxxx.xxx [1.2.3.4]
>>>         by mx.google.com <http://mx.google.com/> with ESMTPS id l8si1486350qtb.265.2018.04.17.06.41.39
>>>         for <XXXXX at gmail.com <mailto:XXXXX at gmail.com>>
>>>         (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
>>>         Tue, 17 Apr 2018 06:41:41 -0700 (PDT)
>>> Received-SPF: pass (google.com <http://google.com/>: domain of xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx> designates 1.2.3.4 as permitted sender) client-ip=1.2.3.4;
>>> Authentication-Results: mx.google.com <http://mx.google.com/>;
>>>        spf=pass (google.com <http://google.com/>: domain of xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx> designates 1.2.3.4 as permitted sender) smtp.mailfrom=xxxx at xxxxxx.xxx <mailto:smtp.mailfrom=xxxx at xxxxxx.xxx>
>>> X-Spam-Status: No
>>> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
>>> X-Postman2-MailScanner-From: xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>
>>> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
>>> 	SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
>>> 	ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
>>> X-Postman2-MailScanner: Found to be clean
>>> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
>>> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for more information
>>> Received: from bentley.xxxxxx.xxx ([172.16.0.254] helo=macbook-pro-2.xxxxxx.xxx)
>>> 	by postman2.xxxxxxx.xxx with esmtpa (Exim 4.90_1)
>>> 	(envelope-from <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>)
>>> 	id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
>>> From: <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>
>>> Content-Type: multipart/mixed;
>>> 	boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
>>> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
>>> Subject: Test 39
>>> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com <mailto:63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>>
>>> Date: Tue, 17 Apr 2018 09:40:31 -0400
>>> Cc: <ABC at non-gmail.com <mailto:ABC at non-gmail.com>>
>>> To: <XXXX at gmail.com <mailto:XXXX at gmail.com>>
>>> X-Mailer: Apple Mail (2.3445.5.20)
>>> 
>>> 
>>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>>> Content-Type: text/plain; charset="us-ascii"
>>> Content-Disposition: inline
>>> Content-Transfer-Encoding: quoted-printable
>>> 
>>> 
>>> --
>>> 39 line long disclaimer removed for brevity.
>>> 
>>> 
>>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>>> Content-Disposition: attachment;
>>> 	filename="PS Agreement-LLC.docx"
>>> Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document;
>>> 	x-unix-mode=0644;
>>> 	name="PS Agreement-LLC.docx"
>>> Content-Transfer-Encoding: base64
>>> 
>>> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
>>> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>> *
>>> *
>>> *
>>> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
>>> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
>>> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
>>> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
>>> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
>>> 
>>> 
>>> ****************
>>> Below is what is received on non-gmail system that was CC?ed.
>>> 
>>> Return-Path: <xxxx at xxxxxx.xxx <mailto:xxxx at xxxxxx.xxx>>
>>> X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on rx8.non-gmail.org <http://rx8.non-gmail.org/>
>>> X-Spam-Level: 
>>> X-Spam-ASN:  
>>> X-Spam-Status: No, score=-0.4 required=1.5 tests=BAYES_00,KAM_INSURE1
>>> 	shortcircuit=no autolearn=no autolearn_force=no version=3.4.1
>>> X-Original-To: ABC at non-gmail.org <mailto:ABC at non-gmail.org>
>>> Delivered-To: ABC at non-gmail.org <mailto:ABC at non-gmail.org>
>>> Received: from localhost (localhost.localdomain [127.0.0.1])
>>> 	by mailhost.non-gmail.org <http://mailhost.non-gmail.org/> (Postfix) with ESMTP id D5AD84399C
>>> 	for <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>; Tue, 17 Apr 2018 09:42:05 -0400 (EDT)
>>> Received: from mailhost.non-gmail.org <http://mailhost.non-gmail.org/> ([127.0.0.1])
>>> 	by localhost (rx8.non-gmail.org <http://rx8.non-gmail.org/> [127.0.0.1]) (amavisd-new, port 10024)
>>> 	with ESMTP id ZxjGE_cKxEMf for <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>;
>>> 	Tue, 17 Apr 2018 09:42:04 -0400 (EDT)
>>> Received: from postman2.xxxxxx.xxx [1.2.3.4]
>>> 	by mailhost.non-gmail.org <http://mailhost.non-gmail.org/> (Postfix) with ESMTP id 7E63F61E13
>>> 	for <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>; Tue, 17 Apr 2018 09:41:28 -0400 (EDT)
>>> DKIM-Filter: OpenDKIM Filter v2.11.0 mailhost.non-gmail.org <http://mailhost.non-gmail.org/> 7E63F61E13
>>> X-MailScanner-Watermark: 1524577246.96058 at lKez6aR7qH9NWYmklf9hQg
>>> X-Postman2-MailScanner-From: xxxx at xxxxx.xxx <mailto:xxxx at xxxxx.xxx>
>>> X-Postman2-MailScanner-SpamCheck: not spam (whitelisted),
>>> 	SpamAssassin (not cached, score=0.5, required 9, autolearn=disabled,
>>> 	ALL_TRUSTED -1.00, KAM_INSURE1 1.50)
>>> X-Postman2-MailScanner: Found to be clean
>>> X-Postman2-MailScanner-ID: 1f8Qqh-0001DA-Iq
>>> X-Postman2-MailScanner-Postman2-Information: Please contact the ISP for more information
>>> Received: from bentley.xxxxxx.xxx ([172.16.0.254] helo=macbook-pro-2.xxxxx.xxx)
>>> 	by postman2.xxxxx.xxx with esmtpa (Exim 4.90_1)
>>> 	(envelope-from <xxxx at xxxxx.xxx <mailto:xxxx at xxxxx.xxx>>)
>>> 	id 1f8Qqh-0001DA-Iq; Tue, 17 Apr 2018 09:40:43 -0400
>>> From: <xxxxx at xxxxx.xxx <mailto:xxxxx at xxxxx.xxx>>
>>> Content-Type: multipart/mixed;
>>> 	boundary="Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984"
>>> Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
>>> Subject: Test 39
>>> Message-Id: <63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com <mailto:63EEB38F-DEA2-4D7C-A695-998FEC7196FD at cantella.com>>
>>> Date: Tue, 17 Apr 2018 09:40:31 -0400
>>> Cc: <ABC at non-gmail.org <mailto:ABC at non-gmail.org>>
>>> To: <xxxxx at gmail.com <mailto:xxxxx at gmail.com>>
>>> X-Mailer: Apple Mail (2.3445.5.20)
>>> X-Virus-Scanned: clamav-milter 0.99.4 at mailhost.non-gmail.org <http://mailhost.non-gmail.org/>
>>> X-Virus-Status: Clean
>>> 
>>> 
>>> --Apple-Mail=_14CD8B89-808B-4B73-80B4-639157B2F984
>>> Content-Type: text/plain; charset="us-ascii"
>>> Content-Disposition: inline
>>> Content-Transfer-Encoding: quoted-printable
>>> 
>>> 
>>> --
>>> 39 line long disclaimer removed from here as well
>>> 
>>> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
>>> Content-Disposition: attachment;
>>> 	filename="PS Agreement-LLC.docx"
>>> Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document;
>>> 	x-unix-mode=0644;
>>> 	name="PS Agreement-LLC.docx"
>>> Content-Transfer-Encoding: base64
>>> 
>>> UEsDBBQABgAIAAAAIQBndQ8szgEAABsJAAATAAgCW0NvbnRlbnRfVHlwZXNd
>>> LnhtbCCiBAIooAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>> *
>>> *
>>> *
>>> Ai0AFAAGAAgAAAAhALak2Tv0AQAAoQMAABEAAAAAAAAAAAAAAAAAHSwBAGRv
>>> Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhACjiVUGeBgAAHzoAABIA
>>> AAAAAAAAAAAAAAAASC8BAHdvcmQvbnVtYmVyaW5nLnhtbFBLAQItABQABgAI
>>> AAAAIQD87iYrdwEAAEADAAAUAAAAAAAAAAAAAAAAABY2AQB3b3JkL3dlYlNl
>>> dHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQB2082OIQIAADEEAAAQAAAAAAAA
>>> AAAAAAAAAL83AQBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAATABMAxAQAABY7
>>> AQAAAA==
>>> 
>>> --Apple-Mail=_963D6525-728C-4D7D-B725-99B55CEBBE9B
>>> 
>>> 
>>> 
>>> *****************
>>> Besides the trail end of the two emails being different, I for one have being going blind trying to spot the difference.
>>> 
>>> Hope this helps.
>>> 
>>> 
>>> 
>>> 
>>> 
>>> -- 
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>>> 
>>> 
>>> 
>>> 
>>> 
>>> -- 
>>> Shawn Iverson, CETL
>>> Director of Technology
>>> Rush County Schools
>>> 765-932-3901 x1171
>>> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>>> 
>>> 
>>> 
>>> 
>>> 
>>> 
>>> -- 
>>> Shawn Iverson, CETL
>>> Director of Technology
>>> Rush County Schools
>>> 765-932-3901 x1171
>>> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>>> 
>>> 
>>> 
>>> 
>>> 
>>> -- 
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>>> 
>> 
>> 
>> 
>> 
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>> 
>> 
>> 
>> 
>> 
>> -- 
>> Shawn Iverson, CETL
>> Director of Technology
>> Rush County Schools
>> 765-932-3901 x1171
>> iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us>
>> 
>> 
>> 
>> 
>> 
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> 
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180430/fd9c74c4/attachment.html>