Message attempted to kill MailScanner

Mon Oct 8 10:48:14 UTC 2018

Does anyone know how I can solve this issue.

Dobril Dobrilov

IT Manager

 <mailto:dobril at stanga.net> dobril at stanga.net

43, Cherni Vrah Blvd. | 1407 Sofia - Bulgaria
Phone: +359 2 81 960 69 Fax: +359 2 81 960 70
Mobile: +359 878 749 387

We shape Digital  <http://www.stanga.net> www.stanga.net

We re-invent Video  <http://www.bsbvision.com> www.bsbvision.com

We build Apps  <http://www.shanga.co> www.shanga.co

We support Start-Ups  <http://www.mysbar.net> www.mysbar.net

From: MailScanner [mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info] On Behalf Of DobriL Dobrilov
Sent: Thursday, October 4, 2018 3:11 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: Message attempted to kill MailScanner

Hello,

This is the error message which MailScanner show in debug mode, after that immediately quit.

Wide character in subroutine entry at /usr/local/share/perl/5.24.1/MIME/WordDecoder.pm lin 616

From: MailScanner [mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info] On Behalf Of Shawn Iverson via MailScanner
Sent: Wednesday, October 3, 2018 6:04 PM
To: mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
Cc: Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> >
Subject: Re: Message attempted to kill MailScanner

Debugging...

Enable Debug=yes in MailScanner.conf

Empty all queues

Stop MailScanner daemons

Submit the suspect message to mta using appropriate mta tool

Run /usr/sbin/MailScanner, let it try to process the message, and capture all output and the output in /var/log/maillog

You can process winmail.dat yourself using the tnef binary utility on your server.

On Wed, Oct 3, 2018 at 4:54 AM DobriL Dobrilov <dobril at stanga.net <mailto:dobril at stanga.net> > wrote:

Hello,

I just received error notification from MailScanner.

Other Bad Content Detected –

Report: MailScanner: Message attempted to kill MailScanner

…

Then I try to review the mail from archive. Temporary bypass scanning and deliver to my box. The mail contain another attached email which contain attached email too which  finally contain JPG image.

I try to forward to myself this time I get: 

The following e-mails were found to have: Other Bad Content Detected - 

The question is how I can debug those email and to find what exactly cause the issue.

Possible reasons for me are: 

-       Bad character in the subject  because the Subject is 

“Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=

=?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=

=?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=” 

-       TNEF just cannot process attached email. From this perspective how I can extract winmail.dat from the message and to process it manually with TNEF.

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> 

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ> 

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/b730ad7e/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 3762 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/b730ad7e/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1151 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/b730ad7e/attachment-0004.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 853 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/b730ad7e/attachment-0005.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.jpg
Type: image/jpeg
Size: 1286 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/b730ad7e/attachment-0006.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.jpg
Type: image/jpeg
Size: 930 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/b730ad7e/attachment-0007.jpg>