<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
.MsoChpDefault
{font-size:10.0pt;
font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:72.0pt 72.0pt 72.0pt 72.0pt}
-->
</style>
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Got an issue whereby if Sender1 sends a mail with attachment to Recipient1 the attachment is blocked, with the message:</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"">This is a message from the MailScanner E-Mail Virus Protection Service</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"">----------------------------------------------------------------------</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"">The original e-mail attachment "winmail.dat"</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"">was believed to be infected by a virus and has been replaced by this warning</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"">message.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New""> </span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"">If you wish to receive a copy of the *infected* attachment, please</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"">e-mail helpdesk and include the whole of this message</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"">in your request. Alternatively, you can call them, with</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"">the contents of this message to hand when you call.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New""> </span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"">At Thu Jul 19 09:50:02 2012 the virus scanner said:</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New""> Could not parse Outlook Rich Text attachment</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New""> </span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"">Note to Help Desk: Look on the Taff () MailScanner in /var/spool/MailScanner/quarantine/20120719 (message AC4EA81B55.A3BA3).</span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">But the message is CCed to Recipient2 and the attachment gets through. This behaviour is consistent when Sender1 sends emails to Recipient1 and then forwards the failed message or CCs to Recipient2.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">The blocked attachment in is showing up as MIME Type: application/ms-tnef but on the CC’d the email it’s MIME Type: application/vnd.ms-excel</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Any thoughts on where to start looking for problems? I can sort of see what’s happening but I can’t figure out why the behaviour is different from one recipient to the next.
</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Mailscanner – 4.74.16 (yeah yeah, I know, but I’m using Ubuntu packages)</p>
<p class="MsoNormal">Postfix – 2.8.5-2~build0.10.04 </p>
<p class="MsoNormal">TNEF – 1.4.9</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Cheers,</p>
<p class="MsoNormal">Richard</p>
</div>
<table>
<tbody>
<tr>
<td style="font-family:Arial,Helvetica,sans-serif; color:black"></td>
</tr>
<tr>
<td style="font-family:Arial,Helvetica,sans-serif; color:black">IT Manager </td>
</tr>
</tbody>
</table>
<br>
<table>
<tbody>
<tr>
<td style="width:70px; font-family:Arial,Helvetica,sans-serif; color:#222222; text-align:right; vertical-align:top">
Cyfeiriad</td>
<td style="width:75px; font-family:Arial,Helvetica,sans-serif; color:#222222; background-color:#f3f3f3; vertical-align:top">
Address</td>
<td style="font-family:Arial,Helvetica,sans-serif; color:black">Alexandra House<br>
307-315 Cowbridge Road East<br>
Cardiff<br>
CF5 1JD</td>
</tr>
<tr>
<td style="width:70px; font-family:Arial,Helvetica,sans-serif; color:#222222; text-align:right; vertical-align:top">
Ffon</td>
<td style="width:75px; font-family:Arial,Helvetica,sans-serif; color:#222222; background-color:#f3f3f3; vertical-align:top">
Phone</td>
<td style="font-family:Arial,Helvetica,sans-serif; color:black">02920259182<br>
07966807318</td>
</tr>
<tr>
<td style="width:70px; font-family:Arial,Helvetica,sans-serif; color:#222222; text-align:right">
Ffacs</td>
<td style="width:75px; font-family:Arial,Helvetica,sans-serif; color:#222222; background-color:#f3f3f3">
Fax</td>
<td style="font-family:Arial,Helvetica,sans-serif; color:black">02920259199</td>
</tr>
<tr>
<td style="width:70px; font-family:Arial,Helvetica,sans-serif; color:#222222; text-align:right">
Safle We</td>
<td style="width:75px; font-family:Arial,Helvetica,sans-serif; color:#222222; background-color:#f3f3f3">
Web</td>
<td style="font-family:Arial,Helvetica,sans-serif; color:black"><a href="http://www.twitter.com/taffhousing"><img src="http://www.taffhousing.co.uk/sites/default/files/taff/twitter.jpg" border="0"></a>
<a href="www.facebook.com/taffhousing"><img src="http://www.taffhousing.co.uk/sites/default/files/taff/fb.gif" border="0"></a>
<a href="www.taffhousing.co.uk"><img src="http://www.taffhousing.co.uk/sites/default/files/taff/www.gif" border="0"></a></td>
</tr>
</tbody>
</table>
<br>
<table>
<tbody>
<tr>
<td><img src="http://www.taffhousing.co.uk/sites/default/files/taff/wag.gif"> <img src="http://www.taffhousing.co.uk/sites/default/files/taff/pad.gif">
<img src="http://www.taffhousing.co.uk/sites/default/files/taff/sw.gif"> <img src="http://www.taffhousing.co.uk/sites/default/files/taff/iipg.gif"></td>
</tr>
<tr>
<td><img src="http://www.taffhousing.co.uk/sites/default/files/taff/gptw11.gif">
<img src="http://www.taffhousing.co.uk/sites/default/files/taff/gptw.gif"> <img src="http://www.taffhousing.co.uk/sites/default/files/taff/gd.gif">
<img src="http://www.taffhousing.co.uk/sites/default/files/taff/iipg_w.gif"></td>
</tr>
<tr>
<td style="font-family:Arial,Helvetica,sans-serif; color:black">MEDDYLIWCH CYN I CHI ARGRAFFU! - THINK BEFORE YOU PRINT!</td>
</tr>
</tbody>
</table>
<br>
<br>
<hr>
<font face="Arial" color="Gray" size="2">This message is private and confidential. If you have received this message in error, please notify us and remove it from your system.<br>
Please consider the environment before printing this email.<br>
<br>
Any views or other information in this message which do not relate to our business are not authorised by us, nor does this message form part of any contract unless so stated.<br>
<br>
Taff Housing Association - www.taffhousing.co.uk - A Charitable Housing Association registered under the Industrial and Provident Societies Acts 1965 No. 21408R. Registered by The National Assembly for Wales No. L009. Registered address: Alexandra House, 307-315
Cowbridge Road East, Cardiff CF5 1JD. VAT Registration Number: 869 8405 65.</font>
</body>
</html>