<div dir="ltr">Debugging...<div><br></div><div>Enable Debug=yes in MailScanner.conf</div><div><br></div><div>Empty all queues</div><div>Stop MailScanner daemons</div><div><br></div><div>Submit the suspect message to mta using appropriate mta tool</div><div><br></div><div>Run /usr/sbin/MailScanner, let it try to process the message, and capture all output and the output in /var/log/maillog</div><div><br></div><div>You can process winmail.dat yourself using the tnef binary utility on your server.</div></div><br><div class="gmail_quote"><div dir="ltr">On Wed, Oct 3, 2018 at 4:54 AM DobriL Dobrilov <<a href="mailto:dobril@stanga.net">dobril@stanga.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="BG" link="blue" vlink="purple"><div class="m_-5091620555824362460WordSection1"><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif">Hello,<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif">I just received error notification from MailScanner.<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif">Other Bad Content Detected –<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Arial",sans-serif">Report: MailScanner: Message attempted to kill MailScanner<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif">…<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif">Then I try to review the mail from archive. Temporary bypass scanning and deliver to my box. The mail contain another attached email which contain attached email too which  finally contain JPG image.<u></u><u></u></span></p><p class="m_-5091620555824362460MsoPlainText"><span lang="EN-US" style="font-family:"Arial",sans-serif">I try to forward to myself this time I get: <u></u><u></u></span></p><p class="m_-5091620555824362460MsoPlainText"><span style="font-family:"Arial",sans-serif">The following e-mails were found to have: Other Bad Content Detected - <u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif">The question is how I can debug those email and to find what exactly cause the issue.<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif">Possible reasons for me are: <u></u><u></u></span></p><p class="m_-5091620555824362460MsoListParagraph"><u></u><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif"><span>-<span style="font:7.0pt "Times New Roman"">       </span></span></span><u></u><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif">Bad character in the subject  because the Subject is <u></u><u></u></span></p><p class="m_-5091620555824362460MsoListParagraph"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif">“Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=<u></u><u></u></span></p><p class="m_-5091620555824362460MsoListParagraph"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif">=?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=<u></u><u></u></span></p><p class="MsoNormal" style="text-indent:35.4pt"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif"> =?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=” <u></u><u></u></span></p><p class="m_-5091620555824362460MsoListParagraph"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif"><u></u> <u></u></span></p><p class="m_-5091620555824362460MsoListParagraph"><u></u><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif"><span>-<span style="font:7.0pt "Times New Roman"">       </span></span></span><u></u><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif">TNEF just cannot process attached email. From this perspective how I can extract winmail.dat from the message and to process it manually with TNEF.<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Arial",sans-serif"><u></u> <u></u></span></p></div></div><br>
<br>
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr">Shawn Iverson, CETL<div>Director of Technology</div><div>Rush County Schools</div><div>765-932-3901 x1171</div><div><a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a></div><div><br></div><div><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ" width="96" height="96" style="font-size:12.8px"><img src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ" width="89" height="96"></div><div><img src="https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ" style="font-size:12.8px"><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>