<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.hoenzb
{mso-style-name:hoenzb;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Courier New";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Courier New";color:#1F497D'>Just a quick followup. After experimenting with the internal and external TNEF decoders in MailScanner to no avail we narrowed down the issue to only messages sent to my internal user. The sender was able to email me in both plain and html formats with and without attachments. It turns out that having her delete her nickname entry in Outlook for Jane (the internal user) was the cure. Apparently whatever is cached there will override default or run-time settings. TNEF is still problematic in some cases, but in this case it was yet another odd Microsoft command decision to behave oddly that hindered the troubleshooting.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Courier New";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Courier New";color:#1F497D'>I stumbled across this page: <a href="http://www.officeformachelp.com/office/glossary/winmail-dat/">http://www.officeformachelp.com/office/glossary/winmail-dat/</a> which provided the necessary clue to at least work around the problem. Hope it is helpful to others…<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Courier New";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;color:#1F497D'> ...Kevin<br>--<br>Kevin Miller<br>Network/email Administrator, CBJ MIS Dept.<br>155 South Seward Street<br>Juneau, Alaska 99801<br>Phone: (907) 586-0242, Fax: (907) 586-4500<br>Registered Linux User No: 307357</span><span style='color:#1F497D'> </span><span style='font-size:11.0pt;font-family:"Courier New";color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] <b>On Behalf Of </b>Martin Hepworth<br><b>Sent:</b> Friday, June 06, 2014 12:00 AM<br><b>To:</b> MailScanner discussion<br><b>Subject:</b> Re: tnef madness<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>you tried using the external tnef scanner at all?<o:p></o:p></p></div><div><p class=MsoNormal><br clear=all><o:p></o:p></p><div><p class=MsoNormal>-- <br>Martin Hepworth, CISSP<br>Oxford, UK<o:p></o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal>On 6 June 2014 00:28, Kevin Miller <<a href="mailto:Kevin_Miller@ci.juneau.ak.us" target="_blank">Kevin_Miller@ci.juneau.ak.us</a>> wrote:<o:p></o:p></p><p class=MsoNormal>I've been having trouble with tnef attachements from one person. Most get through OK, but this one is stumping me. The sender is not using rich text format. The mail administrator at her site sent me the following:<br><br>" I have deleted Anita's outlook profile and recreated it and have also checked the Exchange settings to see if it is enforcing rich-text format over the user's settings (it is not). Her email still gets bounced back when sent as HTML with or without an attachment. Her email is successful as plain text without an attachment, but fails with an attachment. The attachment is a PDF."<br><br>It works for other users at this site - it's just her email that is acting oddly. She's using Outlook - I'm not sure what version or which version of Exchange they're on.<br><br>Looking in the /var/spool/MailScanner/quarantine/20140605 I see a couple of odd directories:<br>mxg:/var/spool/MailScanner/quarantine/20140605 # l<br>total 145<br>drwxrwx--- 6 root www 160 Jun 5 13:05 ./<br>drwxrwx--- 33 root www 800 Jun 5 09:47 ../<br>drwxrwx--- 2 root www 123760 Jun 5 15:04 nonspam/<br>drwxrwx--- 2 root www 72 Jun 5 12:22 s55K40Y6019591/<br>drwxrwx--- 2 root www 72 Jun 5 13:05 s55Kkmnf026492/<br>drwxrwx--- 2 root www 24240 Jun 5 15:01 spam/<br><br>Normally I just see nonspam and spam.<br>Within s55K40Y6019591/ is a single file named message. Contents are at <a href="http://pastebin.com/kGrmSpN5" target="_blank">http://pastebin.com/kGrmSpN5</a><br>I munged the email addresses, and stripped out the middle of the attachment but all else is otherwise intact.<br><br>TNEF settings in MailScanner.conf:<br><br>Expand TNEF = yes<br>Use TNEF Contents = replace<br>Deliver Unparsable TNEF = no<br>TNEF Expander = internal<br>TNEF Timeout = 120<br><br>In Mailwatch, I see this when looking at the message:<br>message/rfc822 20140605/nonspam/s55Kkmnf026492<br>message/rfc822\0117bit 20140605/s55Kkmnf026492/message<br><br>No idea what rfc822\0117bit indicates but suspect it's a clue...<br><br> ...Kevin<br>--<br>Kevin Miller<br>Network/email Administrator, CBJ MIS Dept.<br>155 South Seward Street<br>Juneau, Alaska 99801<br>Phone: (907) 586-0242, Fax: (907) 586-4500<br>Registered Linux User No: 307357<br><span style='color:#888888'><br><br><span class=hoenzb>--</span><br><span class=hoenzb>MailScanner mailing list</span><br><span class=hoenzb><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a></span><br><span class=hoenzb><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a></span><br><br><span class=hoenzb>Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a></span><br><br><span class=hoenzb>Support MailScanner development - buy the book off the website!</span></span><o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p></div></div></body></html>