Use Following options in MailScanner.conf file. This might help you out.<br><br>Deliver Unparsable TNEF = yes<br><br><br><br><div><span class="gmail_quote">On 10/31/06, <b class="gmail_sendername">Scott Silva</b> <<a href="mailto:ssilva@sgvwater.com">
ssilva@sgvwater.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">David Vosburgh spake the following on 10/30/2006 12:50 PM:
<br>> Scott Silva wrote:<br>>> David Vosburgh spake the following on 10/30/2006 10:35 AM:<br>>><br>>>> I have three inbound mail servers with equal weighted MX values, all<br>>>> running MS/SA/DCC/Razor/RDJ/milter-greylist/ImageInfo on CentOS
4.4<br>>>> using sendmail 8.13. The last of these three servers was upgraded about<br>>>> 30 days ago, and all have been running great since then. After getting<br>>>> in this morning (but prior to coffee), I checked out the Vispan web page
<br>>>> on each server and noticed that one server had stats much different than<br>>>> the others. To make a long story shorter, there were two messages in<br>>>> <a href="http://mqueue.in">mqueue.in
</a> that appear to have been processed 1651 and 548 times (but not<br>>>> delivered) during a three hour stretch until I moved them out of the<br>>>> inbound queue. Here's what was showing up in the maillog for one of the
<br>>>> messages:<br>>>><br>>><br>>> Are there any thing common to these messages? TNEF? Mimetype? Encoding?<br>>> Are they overly large than average?<br>>> I have seen this in messages that failed the TNEF decoder in the past,
<br>>> but any<br>>> process that chokes on them could be leaving them un-processed.<br>>><br>> The two messages appear very dissimilar. The one processed 1651 times<br>> was about 8kb and was just plain text/HTML, while the other was about
<br>> 650kb and was TNEF encoded (you may be on to something). Here are some<br>> of the headers from the TNEF message:<br>><br>> H??Content-class: urn:content-classes:message<br>> H??MIME-Version: 1.0<br>
> H??Content-Type: multipart/mixed;<br>> boundary="----_=_NextPart_001_01C6FC06.9C7EA78E"<br>> H??X-MimeOLE: Produced By Microsoft Exchange V6.5<br>> H??X-MS-Has-Attach:<br>> H??X-MS-TNEF-Correlator:
<br>> <<a href="mailto:BE948B9BBFB80445B8954769B643E2923D2322@xxx.yyy.zzz.jp">BE948B9BBFB80445B8954769B643E2923D2322@xxx.yyy.zzz.jp</a>><br>><br>> And here are the (repeating) maillog entries for it:<br>>
<br>> Oct 30 03:33:46 milter-greylist: k9U9XevM016782: addr <a href="http://61.204.177.252">61.204.177.252</a><br>> from <<a href="mailto:sss@ttt.com.ph">sss@ttt.com.ph</a>> rcpt <<a href="mailto:mmmm@dalsemi.com">
mmmm@dalsemi.com</a>>: autowhitelisted for more<br>> 768:00:00<br>> Oct 30 03:34:09 sendmail[16782]: k9U9XevM016782: from=<<a href="mailto:sss@ttt.com.ph">sss@ttt.com.ph</a>>,<br>> size=662042, class=0, nrcpts=1,
<br>> msgid=<<a href="mailto:BE948B9BBFB80445B8954769B643E2923D2322@xxx.yyy.zzz.jp">BE948B9BBFB80445B8954769B643E2923D2322@xxx.yyy.zzz.jp</a>>,<br>> proto=SMTP, daemon=MTA, relay=<a href="http://xxx.yyy.zzz.jp">
xxx.yyy.zzz.jp</a> [www.xxx.yyy.zzz]<br>> Oct 30 03:34:09 sendmail[16782]: k9U9XevM016782: Milter add: header:<br>> X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by<br>> milter-greylist-2.0.2
(<a href="http://xxxxx.dalsemi.com">xxxxx.dalsemi.com</a> [aaa.bbb.ccc.ddd]);<br>> Mon, 30 Oct 2006 03:34:09 -0600 (CST)<br>> Oct 30 03:34:09 sendmail[16782]: k9U9XevM016782: to=<<a href="mailto:aaa@dalsemi.com">
aaa@dalsemi.com</a>>,<br>> delay=00:00:23, mailer=smtp, pri=692042, stat=queued<br>> Oct 30 03:34:10 MailScanner[14011]: Expanding TNEF archive at<br>> /var/spool/MailScanner/incoming/14011/k9U9XevM016782/winmail.dat
<br>> Oct 30 03:34:10 MailScanner[14011]: Message k9U9XevM016782 added TNEF<br>> contents p1,msg-14011-1301.txt<br>> Oct 30 03:34:10 MailScanner[14011]: Message k9U9XevM016782 has had TNEF<br>> winmail.dat removed
<br>> Oct 30 03:34:13 MailScanner[16473]: SpamAssassin cache hit for message<br>> k9U9XevM016782<br>> Oct 30 03:34:13 MailScanner[16473]: Expanding TNEF archive at<br>> /var/spool/MailScanner/incoming/16473/k9U9XevM016782/winmail.dat
<br>> Oct 30 03:34:13 MailScanner[16473]: Message k9U9XevM016782 added TNEF<br>> contents p1,msg-16473-1361.txt<br>> Oct 30 03:34:13 MailScanner[16473]: Message k9U9XevM016782 has had TNEF<br>> winmail.dat removed
<br>> Oct 30 03:34:15 MailScanner[17154]: SpamAssassin cache hit for message<br>> k9U9XevM016782<br>> Oct 30 03:34:15 MailScanner[17154]: Expanding TNEF archive at<br>> /var/spool/MailScanner/incoming/17154/k9U9XevM016782/winmail.dat
<br>> Oct 30 03:34:15 MailScanner[17154]: Message k9U9XevM016782 added TNEF<br>> contents p1,msg-17154-961.txt<br>> Oct 30 03:34:15 MailScanner[17154]: Message k9U9XevM016782 has had TNEF<br>> winmail.dat removed
<br>> ...<br>><br>You could try and use the opposite TNEF decoder from what you are using now<br>(internal vs. external). I haven't had a problem for quite some time, but I am<br>pretty sure they were some bad mojo between the mime-tools I had at the time
<br>and the TNEF decoder. This was back on Redhat 9 more than a year ago, so my<br>memory on the subject is fading.<br>With only 2 failures, it seems to rule out a locking problem.<br><br>Looking at the log snippets, it seems to be choking at the point of replacing
<br>the winmail.dat with the extracted contents. Maybe you could play with those<br>settings in mailscanner. Keep those messages just in case Julian wants to see<br>them. Unless it is priviledged comm's.<br><br><br><br>--
<br><br>MailScanner is like deodorant...<br>You hope everybody uses it, and<br>you notice quickly if they don't!!!!<br><br>--<br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info
</a><br><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br><br>Before posting, read <a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting
</a><br><br>Support MailScanner development - buy the book off the website!<br></blockquote></div><br><br clear="all"><br>-- <br>Regards<br><br>Pravin