<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I can confirm this behavior....the error code that I was getting was
13 which is a permission denied error. Unfortunately, it was
happening too often on legitimate mail that I had to turn off the
feature.<br>
<br>
I would really like to determine the cause....<br>
<br>
<div class="moz-cite-prefix">On 08/22/2016 08:15 AM, Andy Southgate
wrote:<br>
</div>
<blockquote cite="mid:000601d1fc7f$a64c00e0$f2e402a0$@com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<meta name="Generator" content="Microsoft Word 12 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.sig
{mso-style-name:sig;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">It
still happens for me, AFAIK all that was worked out was that
for some reason there is an intermittant permission problem
that occasionally causes the spawned child process to fail
to run causing that error on the message, but there was
never any insight as to why that should be.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif""
lang="EN-US">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif""
lang="EN-US"> MailScanner
[<a class="moz-txt-link-freetext" href="mailto:mailscanner-bounces+andy=z00b.com@lists.mailscanner.info">mailto:mailscanner-bounces+andy=z00b.com@lists.mailscanner.info</a>]
<b>On Behalf Of </b>Aaron Pursell<br>
<b>Sent:</b> 22 August 2016 15:01<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<b>Subject:</b> Re: Denial of Service attack Messages
Constantly<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""> <o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif"">I
read pretty much every message and tried everything, most
of those messages are years old and it appears it was
fixed and now in the new version is the first time I'm
experiencing them in many, many years, the fixes worked
originally back in a way older versiona. Nothing really
changed except the fact there's this new version, too bad
it only happens to legitimate messages and not spam.... So
who knows. I'll continue to look, the log really never
says anything specific. I<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif"">---<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New""><br>
<br>
Regards,<br>
<br>
Aaron<o:p></o:p></span></p>
</div>
</div>
<p><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""><br>
Message: 1<br>
Date: Fri, 19 Aug 2016 08:26:31 -0600<br>
From: Steven Jardine <<a moz-do-not-send="true"
href="mailto:steve@mjnservices.com">steve@mjnservices.com</a>><br>
To: MailScanner Discussion <<a moz-do-not-send="true"
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br>
Subject: Re: Denial of Service attack Messages Constantly<br>
Message-ID: <<a moz-do-not-send="true"
href="mailto:9dbfad5c-651a-3a7f-e9c8-2c623adf51c1@mjnservices.com">9dbfad5c-651a-3a7f-e9c8-2c623adf51c1@mjnservices.com</a>><br>
Content-Type: text/plain; charset=windows-1252;
format=flowed<br>
<br>
I still haven't found a good solution to this even after
trying all of <br>
the suggestions posted on the previous threads. If turn off
"Dangerous <br>
Content Scanning" the error goes away but you lose that
functionality.<br>
<br>
I have had to disable it until a solution can be found. Its
not ideal.<br>
<br>
Good luck!<br>
Steve<br>
<br>
On 08/18/2016 04:43 PM, Mark Sapiro wrote:<o:p></o:p></span></p>
<blockquote style="border:none;border-left:solid #1010FF
1.5pt;padding:0cm 0cm 0cm
5.0pt;margin-left:0cm;margin-right:0cm">
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif"">On
08/18/2016 08:49 AM, Aaron Pursell wrote: <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""> <br>
The problem is, my users and I keep getting messages like
this:<br>
<br>
" <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif"">MailScanner
was attacked by a Denial Of Service attack, and has<br>
therefore deleted this part of the message. Please contact
your e-mail<br>
providers for more information if you need it, giving them
the whole<br>
of this report. Attack in:<br>
/var/spool/MailScanner/incoming/12835/78C9F481B0DA.ACDF4/nmsg-12835-2.html"<br>
<br>
<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""> <br>
The path doesn't exist when you look and the message never
gets<br>
delivered. What can I turn off or adjust to make sure this
doesn't happen?<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""><br>
What's in the Mail log associated with this?<br>
<br>
There's a long thread on this with Subject: Denial Of
Service Attack<br>
Messages in the archives of this list at<br>
<<a moz-do-not-send="true"
href="http://lists.mailscanner.info/pipermail/mailscanner/2016-May/thread.html">http://lists.mailscanner.info/pipermail/mailscanner/2016-May/thread.html</a>><br>
and<br>
<<a moz-do-not-send="true"
href="http://lists.mailscanner.info/pipermail/mailscanner/2016-June/thread.html">http://lists.mailscanner.info/pipermail/mailscanner/2016-June/thread.html</a>><br>
which may be helpful.<o:p></o:p></span></p>
</blockquote>
<p><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""><br>
<br>
<br>
IMPORTANT: This email does not constitute a contract or an
offer or acceptance of an offer to enter into a contract.
Further, this email may not be used to modify, supplement,
novate, or waive any rights with respect to an existing
contract or other binding commercial terms. MJN Services,
Inc. conducts business under our service terms and
conditions found at <a moz-do-not-send="true"
href="http://www.mjnservices.com">www.mjnservices.com</a>
unless otherwise agreed to in writing by an officer of MJN
Services, Inc. <br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Fri, 19 Aug 2016 09:30:29 -0500<br>
From: Jerry Benton <<a moz-do-not-send="true"
href="mailto:jerry.benton@mailborder.com">jerry.benton@mailborder.com</a>><br>
To: MailScanner Discussion <<a moz-do-not-send="true"
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br>
Subject: Re: Denial of Service attack Messages Constantly<br>
Message-ID:<br>
<<a moz-do-not-send="true"
href="mailto:CAED3VzD1=fCW8a=t4V_xDX-d=3YX+QLZz2Xkwr05vFWSGMs48w@mail.gmail.com">CAED3VzD1=fCW8a=t4V_xDX-d=3YX+QLZz2Xkwr05vFWSGMs48w@mail.gmail.com</a>><br>
Content-Type: text/plain; charset=UTF-8<br>
<br>
Steve,<br>
<br>
Can you zip the raw source of a message (the file) that
triggers this<br>
and email it directly to me?<br>
<br>
<br>
-<br>
Jerry Benton<br>
<a moz-do-not-send="true" href="http://www.mailborder.com">www.mailborder.com</a><br>
+1 - 844-436-6245<br>
<br>
<br>
-----Original Message-----<br>
From:?Steven Jardine <<a moz-do-not-send="true"
href="mailto:steve@mjnservices.com">steve@mjnservices.com</a>><br>
Reply:?MailScanner Discussion <<a moz-do-not-send="true"
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br>
Date:?August 19, 2016 at 10:27:05 AM<br>
To:?MailScanner Discussion <<a moz-do-not-send="true"
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br>
Subject:? Re: Denial of Service attack Messages Constantly<o:p></o:p></span></p>
<blockquote style="border:none;border-left:solid #1010FF
1.5pt;padding:0cm 0cm 0cm
5.0pt;margin-left:0cm;margin-right:0cm">
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif"">I
still haven't found a good solution to this even after
trying all of<br>
the suggestions posted on the previous threads. If turn
off "Dangerous<br>
Content Scanning" the error goes away but you lose that
functionality.<br>
<br>
I have had to disable it until a solution can be found.
Its not ideal.<br>
<br>
Good luck!<br>
Steve<br>
<br>
On 08/18/2016 04:43 PM, Mark Sapiro wrote: <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif"">On
08/18/2016 08:49 AM, Aaron Pursell wrote: <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""><br>
The problem is, my users and I keep getting messages like
this:<br>
<br>
" <o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif"">MailScanner
was attacked by a Denial Of Service attack, and has<br>
therefore deleted this part of the message. Please contact
your e-mail<br>
providers for more information if you need it, giving them
the whole<br>
of this report. Attack in:<br>
/var/spool/MailScanner/incoming/12835/78C9F481B0DA.ACDF4/nmsg-12835-2.html"<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""><br>
The path doesn't exist when you look and the message never
gets<br>
delivered. What can I turn off or adjust to make sure this
doesn't happen?<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""><br>
What's in the Mail log associated with this?<br>
<br>
There's a long thread on this with Subject: Denial Of
Service Attack<br>
Messages in the archives of this list at<br>
<br>
and<br>
<br>
which may be helpful.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""><br>
<br>
<br>
IMPORTANT: This email does not constitute a contract or an
offer or acceptance of an offer<br>
to enter into a contract. Further, this email may not be
used to modify, supplement, novate,<br>
or waive any rights with respect to an existing contract
or other binding commercial<br>
terms. MJN Services, Inc. conducts business under our
service terms and conditions<br>
found at <a moz-do-not-send="true"
href="http://www.mjnservices.com">www.mjnservices.com</a>
unless otherwise agreed to in writing by an officer of<br>
MJN Services, Inc.<br>
<br>
<br>
<br>
--<br>
MailScanner mailing list<br>
<a moz-do-not-send="true"
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a moz-do-not-send="true"
href="http://lists.mailscanner.info/listinfo/mailscanner">http://lists.mailscanner.info/listinfo/mailscanner</a><o:p></o:p></span></p>
</blockquote>
<p><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
<br>
<br>
<span class="sig">-- </span><br>
<span class="sig">MailScanner mailing list</span><br>
<span class="sig"><a moz-do-not-send="true"
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a></span><br>
<span class="sig"><a moz-do-not-send="true"
href="http://lists.mailscanner.info/listinfo/mailscanner">http://lists.mailscanner.info/listinfo/mailscanner</a></span><br>
<br>
<br>
<span class="sig">------------------------------</span><br>
<br>
<span class="sig">End of MailScanner Digest, Vol 128, Issue
16</span><br>
<span class="sig">********************************************</span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana","sans-serif""><br>
-- <br>
This message has been scanned for viruses and <br>
dangerous content by <a moz-do-not-send="true"
href="http://www.mailscanner.info/"><b>MailScanner</b></a>,
and is <br>
believed to be clean. <o:p></o:p></span></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">
</pre>
</blockquote>
<br>
<div style="font-size: 8pt;color:gray;padding-top:10px;"><b>IMPORTANT:</b> This email does not constitute a contract or an offer or acceptance of an offer to enter into a contract. Further, this email may not be used to modify, supplement, novate, or waive any rights with respect to an existing contract or other binding commercial terms. MJN Services, Inc. conducts business under our service terms and conditions found at www.mjnservices.com unless otherwise agreed to in writing by an officer of MJN Services, Inc.</div>
</body>
</html>