<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.m-5091620555824362460msoplaintext, li.m-5091620555824362460msoplaintext, div.m-5091620555824362460msoplaintext
{mso-style-name:m_-5091620555824362460msoplaintext;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.m-5091620555824362460msolistparagraph, li.m-5091620555824362460msolistparagraph, div.m-5091620555824362460msolistparagraph
{mso-style-name:m_-5091620555824362460msolistparagraph;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=BG link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Hello,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>This is the error message which MailScanner show in debug mode, after that immediately quit.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Wide character in subroutine entry at /usr/local/share/perl/5.24.1/MIME/WordDecoder.pm lin 616<br><br><br></span><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'> MailScanner [mailto:mailscanner-bounces+dobril=stanga.net@lists.mailscanner.info] <b>On Behalf Of </b>Shawn Iverson via MailScanner<br><b>Sent:</b> Wednesday, October 3, 2018 6:04 PM<br><b>To:</b> mailscanner@lists.mailscanner.info<br><b>Cc:</b> Shawn Iverson <iversons@rushville.k12.in.us><br><b>Subject:</b> Re: Message attempted to kill MailScanner<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Debugging...<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Enable Debug=yes in MailScanner.conf<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Empty all queues<o:p></o:p></p></div><div><p class=MsoNormal>Stop MailScanner daemons<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Submit the suspect message to mta using appropriate mta tool<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Run /usr/sbin/MailScanner, let it try to process the message, and capture all output and the output in /var/log/maillog<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>You can process winmail.dat yourself using the tnef binary utility on your server.<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>On Wed, Oct 3, 2018 at 4:54 AM DobriL Dobrilov <<a href="mailto:dobril@stanga.net">dobril@stanga.net</a>> wrote:<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>Hello,</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>I just received error notification from MailScanner.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>Other Bad Content Detected –</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Arial",sans-serif'>Report: MailScanner: Message attempted to kill MailScanner</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>…</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>Then I try to review the mail from archive. Temporary bypass scanning and deliver to my box. The mail contain another attached email which contain attached email too which finally contain JPG image.</span><o:p></o:p></p><p class=m-5091620555824362460msoplaintext><span lang=EN-US style='font-family:"Arial",sans-serif'>I try to forward to myself this time I get: </span><o:p></o:p></p><p class=m-5091620555824362460msoplaintext><span style='font-family:"Arial",sans-serif'>The following e-mails were found to have: Other Bad Content Detected - </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>The question is how I can debug those email and to find what exactly cause the issue.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>Possible reasons for me are: </span><o:p></o:p></p><p class=m-5091620555824362460msolistparagraph><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>-</span><span lang=EN-US style='font-size:7.0pt'> </span><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>Bad character in the subject because the Subject is </span><o:p></o:p></p><p class=m-5091620555824362460msolistparagraph><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>“Subject: =?UTF-8?Q?Fw:_Fwd:_Re:_?=</span><o:p></o:p></p><p class=m-5091620555824362460msolistparagraph><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>=?UTF-8?Q?=D0=A6=D0=B5=D0=BD=D0=B0_=D0=B7?=</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-indent:35.4pt'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>=?UTF-8?Q?=D0=B0_=D0=BF=D0=B5=D1=87=D0=B0=D1=82?=” </span><o:p></o:p></p><p class=m-5091620555824362460msolistparagraph><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=m-5091620555824362460msolistparagraph><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>-</span><span lang=EN-US style='font-size:7.0pt'> </span><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'>TNEF just cannot process attached email. From this perspective how I can extract winmail.dat from the message and to process it manually with TNEF.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Arial",sans-serif'> </span><o:p></o:p></p></div></div><p class=MsoNormal style='margin-bottom:12.0pt'><br><br>-- <br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><o:p></o:p></p></blockquote></div><p class=MsoNormal><br clear=all><o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal>-- <o:p></o:p></p><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p class=MsoNormal>Shawn Iverson, CETL<o:p></o:p></p><div><p class=MsoNormal>Director of Technology<o:p></o:p></p></div><div><p class=MsoNormal>Rush County Schools<o:p></o:p></p></div><div><p class=MsoNormal>765-932-3901 x1171<o:p></o:p></p></div><div><p class=MsoNormal><a href="mailto:iversons@rushville.k12.in.us" target="_blank">iversons@rushville.k12.in.us</a><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><img border=0 width=96 height=96 style='width:1.0in;height:1.0in' id="_x0000_i1025" src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ"><img border=0 width=89 height=96 style='width:.927in;height:1.0in' id="_x0000_i1026" src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ"><o:p></o:p></p></div><div><p class=MsoNormal><img border=0 id="_x0000_i1027" src="https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ"><o:p></o:p></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></body></html>