<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=utf-8">
<META content="MSHTML 6.00.6000.17023" name=GENERATOR></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Tahoma">
<DIV>I can get the message in the spam quarantine folder but how do I get the raw message? Do I need to shutdown MailScanner and only have sendmail running until after they say it was sent or is there some other way to get it?</DIV>
<DIV> </DIV>
<DIV>Gary<BR><BR>>>> Julian Field <MailScanner@ecs.soton.ac.uk> 5/21/2010 5:33 AM >>><BR>Can you send me a URL of a sample message (raw queue files preferred) so <BR>that I can try this out for you please?<BR><BR>Jules.<BR><BR>On 19/05/2010 21:12, Gary Faith wrote:<BR>> I have some e-mail being sent by one individual to MailScanner running ver 4.79.11 and the messages are getting tagged as {Dangerous Content?}. I am running MailScanner with clamav& sanesecurity signatures, scamnailer, razor, pyzor& dcc. Mailwatch reports that it isn't a virus it is "Other Infection":<BR>><BR>> Anti-Virus/Dangerous Content Protection<BR>> Virus: N<BR>> Blocked File: N<BR>> Other Infection: Y<BR>> Report:MailScanner: Could not analyze message<BR>><BR>> The message has contains this:<BR>><BR>> Warning: This message has had one or more attachments removed<BR>> Warning: (the entire message).<BR>> Warning: Please read the "XXX-Attachment-Warning.txt" attachment(s) for more information.<BR>><BR>> This is a message from the MailScanner E-Mail Virus Protection Service<BR>> ----------------------------------------------------------------------<BR>> The original e-mail message contained potentially dangerous content,<BR>> which has been removed for your safety.<BR>><BR>> At Wed May 19 15:36:22 2010 the content filters said:<BR>> MailScanner: Could not analyze message<BR>><BR>> The sender uses Maximizer to generate the e-mail with a PDF attachment. I had the sender use Maximizer and send only the message without the attachment and it comes in fine. I had them send only the attachment via Outlook and it comes in fine. It seems the problem is with Mazimizer but I am not sure why.<BR>><BR>> I can send the quarantined message or whatever is needed to determine the problem off list.<BR>><BR>> I need help in tracking down where the problem is and getting it fixed.<BR>><BR>> Thanks,<BR>><BR>> Gary Faith<BR>><BR>><BR>> <BR><BR>Jules<BR><BR>-- <BR>Julian Field MEng CITP CEng<BR>www.MailScanner.info<BR>Buy the MailScanner book at www.MailScanner.info/store<BR><BR>Need help customising MailScanner?<BR>Contact me!<BR>Need help fixing or optimising your systems?<BR>Contact me!<BR>Need help getting you started solving new requirements from your boss?<BR>Contact me!<BR><BR>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654<BR>Follow me at twitter.com/JulesFM and twitter.com/MailScanner<BR><BR><BR>-- <BR>This message has been scanned for viruses and<BR>dangerous content by MailScanner, and is<BR>believed to be clean.<BR><BR>-- <BR>MailScanner mailing list<BR>mailscanner@lists.mailscanner.info<BR><A href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR><BR>Before posting, read <A href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A><BR><BR>Support MailScanner development - buy the book off the website! <BR></DIV></BODY></HTML>