<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='color:#1F497D'>I have change the mailscanner
conf instead of replace (use TNEF Contents = replace) I set it to no and
now they are making it every time? Is there something wrong with the version I
have or is clamd causing this kind of behavior? I am running clam 0.95.2<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info]
<b>On Behalf Of </b>dcurtis@sbschools.net<br>
<b>Sent:</b> Friday, January 29, 2010 3:03 PM<br>
<b>To:</b> mailscanner@lists.mailscanner.info<br>
<b>Subject:</b> RE: stripped attachments<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='color:#1F497D'>I have been doing more digging
and have found this info:<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Jan 29 14:52:44 spamfilter
MailScanner[19613]: Expanding TNEF archive at
/dev/shm/19613/EBC4F177500.A6656/winmail.dat <o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Jan 29 14:52:44 spamfilter
MailScanner[19613]: Message EBC4F177500.A6656 added TNEF contents Statement.RTF
<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Jan 29 14:52:44 spamfilter
MailScanner[19613]: Message EBC4F177500.A6656 has had TNEF winmail.dat removed <o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Jan 29 14:52:44 spamfilter
MailScanner[19613]: Requeue: EBC4F177500.A6656 to CC245177506 <o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Jan 29 14:52:44 spamfilter
MailScanner[19613]: Logging message EBC4F177500.A6656 to SQL<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <b>On Behalf Of </b>dcurtis@sbschools.net<br>
<b>Sent:</b> Friday, January 29, 2010 2:56 PM<br>
<b>To:</b> mailscanner@lists.mailscanner.info<br>
<b>Subject:</b> stripped attachments<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I have an end user that keeps getting his attachements
stripped on outgoing email. I see nothing in the log, he is whitelisted. At
first I thought it might have simply been a pdf issue but I had him try it
again as rtf and it still is getting killed. The attachments show up at the end
users as 0k so there is something killing it but since I have nothing in the
maillog I have no idea as to what might be doing this.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Any ideas? Anyone else have anything happen like this?<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Linux sbmail.sbschools.net 2.6.18-128.7.1.el5 #1 SMP Mon Aug
24 08:21:56 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux<o:p></o:p></p>
<p class=MsoNormal>This is CentOS release 5.3 (Final)<o:p></o:p></p>
<p class=MsoNormal>This is Perl version 5.008008 (5.8.8)<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>This is MailScanner version 4.76.25<o:p></o:p></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><br>
______________________________________________________________
______________________________________________________________ <br>
This email may contain information protected under the Family Educational
Rights and Privacy Act (FERPA) or the Health Insurance Portability and
Accountability Act (HIPAA). If this email contains confidential and/or
privileged health or student information and you are not entitled to access
such information under FERPA or HIPAA, federal regulations require that you
destroy this email without reviewing it and you may not forward it to anyone. <br>
-- <br>
This message has been scanned for viruses and <br>
dangerous content by <a href="http://www.mailscanner.info/"><b>MailScanner</b></a>
,<a href="http://www.clamav.net/"><b>ClamAV</b></a> and <a
href="http://www.bitdefender.com/"><b>Bitdefender</b></a>, and is <br>
believed to be clean. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><br>
______________________________________________________________
______________________________________________________________ <br>
This email may contain information protected under the Family Educational
Rights and Privacy Act (FERPA) or the Health Insurance Portability and
Accountability Act (HIPAA). If this email contains confidential and/or
privileged health or student information and you are not entitled to access
such information under FERPA or HIPAA, federal regulations require that you
destroy this email without reviewing it and you may not forward it to anyone. <br>
-- <br>
This message has been scanned for viruses and <br>
dangerous content by <a href="http://www.mailscanner.info/"><b>MailScanner</b></a>
,<a href="http://www.clamav.net/"><b>ClamAV</b></a> and <a
href="http://www.bitdefender.com/"><b>Bitdefender</b></a>, and is <br>
believed to be clean. <o:p></o:p></span></p>
</div>
<br />
______________________________________________________________
______________________________________________________________
<br />
This email may contain information protected under the Family
Educational Rights and Privacy Act (FERPA) or the Health Insurance
Portability and Accountability Act (HIPAA). If this email contains
confidential and/or privileged health or student information and you
are not entitled to access such information under FERPA or HIPAA,
federal regulations require that you destroy this email without
reviewing it and you may not forward it to anyone.
<br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a> ,<a
href="http://www.clamav.net/"><b>ClamAV</b></a> and <a
href="http://www.bitdefender.com/"><b>Bitdefender</b></a>, and is
<br />believed to be clean.
<br />
</body>
</html>