Message attempted to kill MailScanner

[Shawn Iverson]

I haven't had a chance to look at it yet (working 2 jobs at the moment),
but as soon as I can I will take a look, unless someone else happens to
jump in.

On Mon, Oct 8, 2018 at 6:48 AM DobriL Dobrilov <dobril at stanga.net> wrote:

> Does anyone know how I can solve this issue.
>
>
>
>
>
>
>
>
>
> *Dobril Dobrilov*
>
> IT Manager
>
> *dobril at stanga.net <dobril at stanga.net>*
>
> [image: StangaOne1 unit fo STANGA AD]
>
> 43, Cherni Vrah Blvd. | 1407 Sofia - Bulgaria
> Phone: +359 2 81 960 69 Fax: +359 2 81 960 70
> Mobile: +359 878 749 387
>
>
>
> [image: StangaOne1]
>
> We shape Digital *www.stanga.net* <http://www.stanga.net>
>
> [image: BSB]
>
> We re-invent Video *www.bsbvision.com* <http://www.bsbvision.com>
>
> [image: Shanga]
>
> We build Apps *www.shanga.co* <http://www.shanga.co>
>
> [image: S*Bar]
>
> We support Start-Ups *www.mysbar.net* <http://www.mysbar.net>
>
>
>
>
>
> *From:* MailScanner [mailto:mailscanner-bounces+dobril=
> stanga.net at lists.mailscanner.info] *On Behalf Of *DobriL Dobrilov
> *Sent:* Thursday, October 4, 2018 3:11 PM
> *To:* 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
> *Subject:* RE: Message attempted to kill MailScanner
>
>
>
> Hello,
>
>
>
> This is the error message which MailScanner show in debug mode, after that
> immediately quit.
>
>
>
>
>
> Wide character in subroutine entry at
> /usr/local/share/perl/5.24.1/MIME/WordDecoder.pm lin 616
>
> *From:* MailScanner [
> mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info
> <mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info>] *On
> Behalf Of *Shawn Iverson via MailScanner
> *Sent:* Wednesday, October 3, 2018 6:04 PM
> *To:* mailscanner at lists.mailscanner.info
> *Cc:* Shawn Iverson <iversons at rushville.k12.in.us>
> *Subject:* Re: Message attempted to kill MailScanner
>
>
>
> Debugging...
>
>
>
> Enable Debug=yes in MailScanner.conf
>
>
>
> Empty all queues
>
> Stop MailScanner daemons
>
>
>
> Submit the suspect message to mta using appropriate mta tool
>
>
>
> Run /usr/sbin/MailScanner, let it try to process the message, and capture
> all output and the output in /var/log/maillog
>
>
>
> You can process winmail.dat yourself using the tnef binary utility on your
> server.
>
>
>
> On Wed, Oct 3, 2018 at 4:54 AM DobriL Dobrilov <dobril at stanga.net> wrote:
>
> Hello,
>
>
>
> I just received error notification from MailScanner.
>
>
>
> Other Bad Content Detected –
>
> Report: MailScanner: Message attempted to kill MailScanner
>
> …
>
>
>
> Then I try to review the mail from archive. Temporary bypass scanning and
> deliver to my box. The mail contain another attached email which contain
> attached email too which  finally contain JPG image.
>
> I try to forward to myself this time I get:
>
> The following e-mails were found to have: Other Bad Content Detected -
>
>
>
> The question is how I can debug those email and to find what exactly cause
> the issue.
>
> Possible reasons for me are:
>
> -       Bad character in the subject  because the Subject is
>
> “Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=
>
> =?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=
>
> =?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=”
>
>
>
> -       TNEF just cannot process attached email. From this perspective
> how I can extract winmail.dat from the message and to process it manually
> with TNEF.
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>
>
> --
>
> Shawn Iverson, CETL
>
> Director of Technology
>
> Rush County Schools
>
> 765-932-3901 x1171
>
> iversons at rushville.k12.in.us
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 3762 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1151 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 853 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.jpg
Type: image/jpeg
Size: 1286 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment-0002.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.jpg
Type: image/jpeg
Size: 930 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment-0003.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1151 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181008/191f98db/attachment-0004.jpg>