Hi,<br><br>I've had a look at this problem a little while ago and found an issue with the creation of the<br>temporary directory into which the TNEF file is unpacked<br>(<a href="https://github.com/MailScanner/MailScanner/issues/7">https://github.com/MailScanner/MailScanner/issues/7</a>).<br>
<br>I've 'hacked' at temporary solution which seems to have fixed these problems.<br>I made the following changes to the '/usr/lib/MailScanner/mailScanner/TNEF.pm' file:<br><br>232,233c232,239<br>< my ($tmpfh, $unpackdir) = tempfile("tnefXXXXXX", TMPDIR => $dir, UNLINK => 0);<br>
< $dir =~ s,^.*/,,;<br>---<br>> #my ($tmpfh, $unpackdir) = tempfile("tnefXXXXXX", TMPDIR => $dir, UNLINK => 0);<br>> #$dir =~ s,^.*/,,;<br>> <br>> my @a = map { chr } (48..57, 65..90, 97..122); # printable ASCII chars<br>
> my $ranstring;<br>> $ranstring .= $a[rand(@a)] for 1..6;<br>> my $unpackdir = "tnef" . $ranstring;<br><br>I've also changed the permissions applied to the unpack directory. Ideally these<br>
should be changed to the appropriate values as specified in the MailScanner config file.<br><br>240c246,247<br>< chmod 0700, "$dir/$unpackdir";<br>---<br>> chmod 0750, "$dir/$unpackdir";<br>> chown $owner, $group, "$dir/$unpackdir";<br>
<br>Note that I do not have a very good working knowledge of the MailScanner code, so these<br>code changes may be not the best way to fix the problems.<br><br>Regards<br>David<br><br><div class="gmail_quote">On Thu, Feb 7, 2013 at 6:32 PM, Berndt, Achim <span dir="ltr"><<a href="mailto:aberndt@studio-hamburg.de" target="_blank">aberndt@studio-hamburg.de</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div link="blue" vlink="purple" lang="DE">
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US">Hello,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US">it might be a 1 year old bug in the TNEF decoder from previous version of MailScanner.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US">Is there a new fix for the MailScanner Version 4.84.5-3, or can I use the old one?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US">Can I download the TNEF.pm file from anywhere, or should I change the lines inside myself?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US">If so, which lines I need to change?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US">Regards<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US">Achim<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:10pt;font-family:"Tahoma","sans-serif"">Von:</span></b><span style="font-size:10pt;font-family:"Tahoma","sans-serif""> <a href="mailto:mailscanner-bounces@lists.mailscanner.info" target="_blank">mailscanner-bounces@lists.mailscanner.info</a> [mailto:<a href="mailto:mailscanner-bounces@lists.mailscanner.info" target="_blank">mailscanner-bounces@lists.mailscanner.info</a>]
<b>Im Auftrag von </b>Alex Neuman<br>
<b>Gesendet:</b> Mittwoch, 6. Februar 2013 17:08<br>
<b>An:</b> MailScanner discussion<br>
<b>Betreff:</b> Re: winmail.dat problem in version 4.84.5<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Wed, Feb 6, 2013 at 2:29 AM, Berndt, Achim <<a href="mailto:aberndt@studio-hamburg.de" target="_blank">aberndt@studio-hamburg.de</a>> wrote:<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)">Hi Alex,</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)">thanks for your answer.
</span><u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal">You're welcome! <u></u><u></u></p>
</div>
<blockquote style="border-width:medium medium medium 1pt;border-style:none none none solid;border-color:-moz-use-text-color -moz-use-text-color -moz-use-text-color rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US">Splitting of the mails is not the problem, because there are the same failures with
single-recipient mails also.</span><u></u><u></u></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal">You mentioned it. <u></u><u></u></p>
</div>
<blockquote style="border-width:medium medium medium 1pt;border-style:none none none solid;border-color:-moz-use-text-color -moz-use-text-color -moz-use-text-color rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US">MailScanner can’t create a sub-directory sometimes, but I don’t know why?!</span><u></u><u></u></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal">When a program "can't create" subdirectories or folders, it usually means it doesn't have permission to.
<u></u><u></u></p>
</div>
<blockquote style="border-width:medium medium medium 1pt;border-style:none none none solid;border-color:-moz-use-text-color -moz-use-text-color -moz-use-text-color rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:15 mxi2 MailScanner[26300]: Trying to unpack nwinmail.dat in message r14FCB3H032743, could not create subdirectory r14FCB3H032743//tnefgKmhWJ, failed
to unpack TNEF message</span><u></u><u></u></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal">That appears to be caused by the user MailScanner is running as not having permission to create the file. It could also be that the disk is full (not likely) or that it ran out of inodes (also not likely).
<u></u><u></u></p>
</div>
<blockquote style="border-width:medium medium medium 1pt;border-style:none none none solid;border-color:-moz-use-text-color -moz-use-text-color -moz-use-text-color rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US">Is the option “not to scan winmail.dat files” really an option?</span><u></u><u></u></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal">If you look for winmail.dat in the MailScanner.conf and read the comments therein, you'll find options such as:<br>
Expand TNEF = yes<br>
... which has this as its comment:<br>
# Expand TNEF attachments using an external program (or a Perl module)?<br>
# This should be "yes" unless the scanner you are using (Sophos, McAfee) has<br>
# the facility built-in. However, if you set it to "no", then the filenames<br>
# within the TNEF attachment will not be checked against the filename rules.<br>
<br>
If you set it to "no" TNEF messages (those containing winmail.dat) will not be unpacked. Depending on your particular situation, most antivirus programs will still be able to detect viruses inside.<br>
<br>
You will *not*, however, be able to limit the type of files included, so that if you've forbidden people from sending .mov files and they send them in a TNEF-encoded message they will still (probably) go through.<u></u><u></u></p>
</div>
<blockquote style="border-width:medium medium medium 1pt;border-style:none none none solid;border-color:-moz-use-text-color -moz-use-text-color -moz-use-text-color rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US">Regards</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US">Achim</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)" lang="EN-US"> </span><u></u><u></u></p>
<p class="MsoNormal"><b><span style="font-size:10pt;font-family:"Tahoma","sans-serif"">Von:</span></b><span style="font-size:10pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:mailscanner-bounces@lists.mailscanner.info" target="_blank">mailscanner-bounces@lists.mailscanner.info</a> [mailto:<a href="mailto:mailscanner-bounces@lists.mailscanner.info" target="_blank">mailscanner-bounces@lists.mailscanner.info</a>]
<b>Im Auftrag von </b>Alex Neuman<br>
<b>Gesendet:</b> Dienstag, 5. Februar 2013 20:50<br>
<b>An:</b> MailScanner discussion<br>
<b>Betreff:</b> Re: winmail.dat problem in version 4.84.5</span><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Splitting mail is something you have to *do things* for it to happen. If you undo the changes you made to split the e-mails (how to do this depends on which MTA you're using, I'm
assuming sendmail from the logs), you should be able to avoid the problem.<u></u><u></u></p>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Do you know why splitting e-mails to multiple recipients was needed in the first place? Did whoever installed this prior to you taking over document it? The procedure is detailed
here:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><a href="http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:sendmail:how_to:split_mails_per_recipient" target="_blank">http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:sendmail:how_to:split_mails_per_recipient</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12pt">You can also try changing which method you use to process winmail.dat files, or not to process them at all. The risk is minimal. Check your mailscanner.conf settings, there is more information
in the comments.<u></u><u></u></p>
<div>
<p class="MsoNormal">On Tue, Feb 5, 2013 at 12:13 PM, Berndt, Achim <<a href="mailto:aberndt@studio-hamburg.de" target="_blank">aberndt@studio-hamburg.de</a>> wrote:<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US">Hello,</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US"> </span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">we made last week an update of our mail-gateways. We have now the OS-Version openSUSE12.2 and the</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">MailScanner-Version 4.84.5 (from 4.81.4). Unfortunately there is now a problem with scanning of winmail.dat</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">attachments?! If there is a mail with 2 recipients and a winmail.dat attachment, MailScanner split the mail</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">and try to scan it two times. The first scan is successfull, but the second one not?! Do you have an explanation</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">for the problem?</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US"> </span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Mail-Log:</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:14 mxi2 sendmail-in[32743]: r14FCB3G032743: from=<<a href="mailto:alex@bdo.de" target="_blank">alex@bdo.de</a>>, size=274800, class=0, nrcpts=1,
msgid=<<a href="mailto:86D1E45AA30DB1478EB30D571D10BC7AAFA19310EE@HH0EX001.bdocorp.de" target="_blank">86D1E45AA30DB1478EB30D571D10BC7AAFA19310EE@HH0EX001.bdocorp.de</a>>, proto=ESMTP, daemon=MTA, relay=<a href="http://mx01.bdo.de" target="_blank">mx01.bdo.de</a>
<a href="tel:%5B194.76.208.111" target="_blank">[194.76.208.111</a>]</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:14 mxi2 sendmail-in[32743]: r14FCB3G032743: to=<<a href="mailto:peter@studio-hamburg.de" target="_blank">peter@studio-hamburg.de</a>>, delay=00:00:01,
mailer=esmtp, pri=304800, stat=queued</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:14 mxi2 MailScanner[26355]: New Batch: Scanning 1 messages, 275339 bytes</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:14 mxi2 MailScanner[26355]: Virus and Content Scanning: Starting</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:14 mxi2 MailScanner[26355]: Message r14FCB3G032743 from 194.76.208.111 (<a href="mailto:alex@bdo.de" target="_blank">alex@bdo.de</a>) to
<a href="http://studio-hamburg.de" target="_blank">studio-hamburg.de</a> is too big for spam checks (275339 > 200000 bytes)</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:14 mxi2 MailScanner[26355]: Uninfected: Delivered 1 messages</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:14 mxi2 MailScanner[26355]: Deleted 1 messages from processing-database</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:14 mxi2 sendmail-in[32743]: r14FCB3H032743: from=<<a href="mailto:alex@bdo.de" target="_blank">alex@bdo.de</a>>, size=282469, class=0, nrcpts=1,
msgid=<<a href="mailto:86D1E45AA30DB1478EB30D571D10BC7AAFA19310EE@HH0EX001.bdocorp.de" target="_blank">86D1E45AA30DB1478EB30D571D10BC7AAFA19310EE@HH0EX001.bdocorp.de</a>>, proto=ESMTP, daemon=MTA, relay=<a href="http://mx01.bdo.de" target="_blank">mx01.bdo.de</a>
<a href="tel:%5B194.76.208.111" target="_blank">[194.76.208.111</a>]</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:14 mxi2 sendmail-in[32743]: r14FCB3H032743: to=<<a href="mailto:waller@studio-hamburg.de" target="_blank">waller@studio-hamburg.de</a>>, delay=00:00:00,
mailer=esmtp, pri=312469, stat=queued</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:15 mxi2 MailScanner[26300]: New Batch: Scanning 1 messages, 283011 bytes</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:15 mxi2 MailScanner[26300]: Expanding TNEF archive at /var/spool/MailScanner/incoming/26300/r14FCB3H032743/winmail.dat</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:15 mxi2 MailScanner[26300]: Trying to unpack nwinmail.dat in message r14FCB3H032743, could not create subdirectory r14FCB3H032743//tnefgKmhWJ, failed
to unpack TNEF message</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:15 mxi2 MailScanner[26300]: Corrupt TNEF winmail.dat that cannot be analysed in message r14FCB3H032743</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:15 mxi2 MailScanner[26300]: Virus and Content Scanning: Starting</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:15 mxi2 MailScanner[26300]: Message r14FCB3H032743 from 194.76.208.111 (<a href="mailto:alex@bdo.de" target="_blank">alex@bdo.de</a>) to
<a href="http://studio-hamburg.de" target="_blank">studio-hamburg.de</a> is too big for spam checks (283011 > 200000 bytes)</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Feb 4 16:12:15 mxi2 MailScanner[26300]: Cleaned: Delivered 1 cleaned messages</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US"> </span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Regards</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(136,136,136)" lang="EN-US">Achim</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(136,136,136)" lang="EN-US"> </span><u></u><u></u></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12pt"><br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<u></u><u></u></p>
</div>
<p class="MsoNormal"><br>
<br clear="all">
<u></u><u></u></p>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<p class="MsoNormal">--
<br>
<br>
--<br>
<br>
Alex Neuman van der Hans<br>
Reliant Technologies / Vida Digital<br>
<a href="http://vidadigital.com.pa/" target="_blank">http://vidadigital.com.pa/</a><br>
<br>
<a href="tel:%2B507-6781-9505" target="_blank">+507-6781-9505</a><br>
<a href="tel:%2B507-832-6725" target="_blank">+507-832-6725</a><br>
<a href="tel:%2B1-440-253-9789" target="_blank">+1-440-253-9789</a> (USA)<br>
<br>
Follow @AlexNeuman on Twitter<br>
<a href="http://facebook.com/vidadigital" target="_blank">http://facebook.com/vidadigital</a><br>
<br>
<br>
-- So-called "legal disclaimers" are not legally binding, so don't bother. A cute graphic saying "save the planet, don't print this" can potentially create more CO2, not less, so don't bother either.
<u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12pt"><br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"><br>
<br clear="all">
<br>
-- <br>
<br>
--<br>
<br>
Alex Neuman van der Hans<br>
Reliant Technologies / Vida Digital<br>
<a href="http://vidadigital.com.pa/" target="_blank">http://vidadigital.com.pa/</a><br>
<br>
<a href="tel:%2B507-6781-9505" value="+50767819505" target="_blank">+507-6781-9505</a><br>
<a href="tel:%2B507-832-6725" value="+5078326725" target="_blank">+507-832-6725</a><br>
<a href="tel:%2B1-440-253-9789" value="+14402539789" target="_blank">+1-440-253-9789</a> (USA)<br>
<br>
Follow @AlexNeuman on Twitter<br>
<a href="http://facebook.com/vidadigital" target="_blank">http://facebook.com/vidadigital</a><br>
<br>
<br>
-- So-called "legal disclaimers" are not legally binding, so don't bother. A cute graphic saying "save the planet, don't print this" can potentially create more CO2, not less, so don't bother either.
<u></u><u></u></p>
</div>
</div>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>