Message attempted to kill MailScanner

DobriL Dobrilov dobril at stanga.net
Mon Oct 15 07:31:08 UTC 2018


Hello Shawn,

 

Mime tools version looks very similar to your

MIME::Tools

-------------------------------------------------------------------------

        (no description)

        D/DS/DSKOLL/MIME-tools-5.509.tar.gz

        /usr/local/share/perl/5.24.1/MIME/Tools.pm

        Installed: 5.509

        CPAN:      5.509  up to date

        Dianne Skoll (DSKOLL)

        dfs+pause at roaringpenguin.com <mailto:dfs+pause at roaringpenguin.com> 

 

 

Until now the issues happens few times from same mail provider.

All the times it is email with attached inside 2nd email.

Let me know where I can send you some of these problematic emails as file, which I can take from MailScanner archive folder.

 

 

 

From: MailScanner [mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info] On Behalf Of Shawn Iverson via MailScanner
Sent: Monday, October 15, 2018 1:55 AM
To: mailscanner at lists.mailscanner.info
Cc: Shawn Iverson <iversons at rushville.k12.in.us>
Subject: Re: Message attempted to kill MailScanner

 

Dobril, 

 

Can you share with me what version of MIME::Tools you have on your system?

 

You can run "cpan -D MIME::Tools"

 

My version 5.505, and I cannot reproduce your issue with the provided subject line.

 

 

 

On Mon, Oct 8, 2018 at 7:57 AM Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> > wrote:

I haven't had a chance to look at it yet (working 2 jobs at the moment), but as soon as I can I will take a look, unless someone else happens to jump in.

 

On Mon, Oct 8, 2018 at 6:48 AM DobriL Dobrilov <dobril at stanga.net <mailto:dobril at stanga.net> > wrote:

Does anyone know how I can solve this issue.

 

 

 

 



Dobril Dobrilov


IT Manager


 <mailto:dobril at stanga.net> dobril at stanga.net




43, Cherni Vrah Blvd. | 1407 Sofia - Bulgaria
Phone: +359 2 81 960 69 Fax: +359 2 81 960 70
Mobile: +359 878 749 387

 


We shape Digital  <http://www.stanga.net> www.stanga.net


We re-invent Video  <http://www.bsbvision.com> www.bsbvision.com


We build Apps  <http://www.shanga.co> www.shanga.co


We support Start-Ups  <http://www.mysbar.net> www.mysbar.net

 

 

From: MailScanner [mailto:mailscanner-bounces+dobril <mailto:mailscanner-bounces%2Bdobril> =stanga.net at lists.mailscanner.info <mailto:stanga.net at lists.mailscanner.info> ] On Behalf Of DobriL Dobrilov
Sent: Thursday, October 4, 2018 3:11 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: RE: Message attempted to kill MailScanner

 

Hello,

 

This is the error message which MailScanner show in debug mode, after that immediately quit.

 

 

Wide character in subroutine entry at /usr/local/share/perl/5.24.1/MIME/WordDecoder.pm lin 616

From: MailScanner [mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info] On Behalf Of Shawn Iverson via MailScanner
Sent: Wednesday, October 3, 2018 6:04 PM
To: mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
Cc: Shawn Iverson <iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> >
Subject: Re: Message attempted to kill MailScanner

 

Debugging...

 

Enable Debug=yes in MailScanner.conf

 

Empty all queues

Stop MailScanner daemons

 

Submit the suspect message to mta using appropriate mta tool

 

Run /usr/sbin/MailScanner, let it try to process the message, and capture all output and the output in /var/log/maillog

 

You can process winmail.dat yourself using the tnef binary utility on your server.

 

On Wed, Oct 3, 2018 at 4:54 AM DobriL Dobrilov <dobril at stanga.net <mailto:dobril at stanga.net> > wrote:

Hello,

 

I just received error notification from MailScanner.

 

Other Bad Content Detected –

Report: MailScanner: Message attempted to kill MailScanner

…

 

Then I try to review the mail from archive. Temporary bypass scanning and deliver to my box. The mail contain another attached email which contain attached email too which  finally contain JPG image.

I try to forward to myself this time I get: 

The following e-mails were found to have: Other Bad Content Detected - 

 

The question is how I can debug those email and to find what exactly cause the issue.

Possible reasons for me are: 

-       Bad character in the subject  because the Subject is 

“Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=

=?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=

=?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=” 

 

-       TNEF just cannot process attached email. From this perspective how I can extract winmail.dat from the message and to process it manually with TNEF.

 



-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




 

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> 

 

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ> 

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ> 



-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner




 

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> 

 

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ> 

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ> 




 

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 option 7

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> 

 

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ> 

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20181015/fc26e35f/attachment.html>


More information about the MailScanner mailing list