bounce-message

[Mohammed Ejaz]

Hi all





Some of the emails are bouncing back with below error message, any clue what
could be the reason



Thanks in advance for your kind support.



Ejaz







Our virus detector failed to completely analyse a message you sent:-

To: ***@mcdonalds.com.sa, ***@mcdonalds.com.sa,
***@mcdonalds.com.sa, ***@mcdonalds.com.sa, ***@mcdonalds.com.sa,
***@mcdonalds.com.sa, ***@mcdonalds.com.sa, ***@mcdonalds.com.sa,
***@mcdonalds.com.sa, ***@mcdonalds.com.sa

Subject: LINEN ORDERING (REMINDER)

Date: Wed Mar 11 08:50:32 2015

Any parts of the message that could not be analysed will not have been
delivered.



If you are using Microsoft Outlook, we strongly recommend you change your
outgoing message format from "Rich Text" to "HTML" or "Plain Text".



1) Click on the "Tools" menu and choose "Options..."

2) Go to the "Mail Format" tab

3) For message format, select "HTML" or "Plain text"

4) Click OK



The virus detector said this about the message:

Report: Report: MailScanner: Message attempted to kill MailScanner

[Mohammed Ejaz]

In addition to below, here my mailscanner logs of to the problematic email.





***@nmersal ~]# grep -i ***@mcdonalds.com.sa /var/log/maillog

Mar 11 08:29:32 nmersal postfix/cleanup[12092]: 36F1F5DFFBA: hold: header
Received: from mail.unitedgroup.com.sa (SRV-EXCHHUB.unitedgroup.com.sa
[213.210.243.36
])??by nmersal.cyberia.net.sa (Postfix) with ESMTP id 36F1F5DFFBA;??Wed, 11
Mar2015 08:29:32 +0300 (AST) from
SRV-EXCHHUB.unitedgroup.com.sa[213.210.243.36]; f
rom=<***@unitedgroup.com.sa> to=<***@mcdonalds.com.sa> proto=ESMTP
helo =<mail.unitedgroup.com.sa>

Mar 11 10:26:49 nmersal postfix/cleanup[17702]: DC9985DFFDE: hold: header
Receiv ed: from mail.unitedgroup.com.sa (SRV-EXCHHUB.unitedgroup.com.sa
[213.210.243.36
])??by nmersal.cyberia.net.sa (Postfix) with ESMTP id DC9985DFFDE;??Wed, 11
Mar 2015 10:26:49 +0300 (AST) from
SRV-EXCHHUB.unitedgroup.com.sa[213.210.243.36]; f
rom=<***@unitedgroup.com.sa> to=<***@mcdonalds.com.sa> proto=ESMTP
helo =<mail.unitedgroup.com.sa>

You have mail in /var/spool/mail/root

[***@nmersal ~]# grep -i DC9985DFFDE /var/log/maillog

Mar 11 10:26:49 nmersal postfix/smtpd[17698]: DC9985DFFDE:
client=SRV-EXCHHUB.unitedgroup.com.sa[213.210.243.36]

Mar 11 10:26:49 nmersal postfix/cleanup[17702]: DC9985DFFDE: hold: header
Received: from mail.unitedgroup.com.sa (SRV-EXCHHUB.unitedgroup.com.sa
[213.210.243.36])??by nmersal.cyberia.net.sa (Postfix) with ESMTP id
DC9985DFFDE;??Wed, 11 Mar 2015 10:26:49 +0300 (AST) from
SRV-EXCHHUB.unitedgroup.com.sa[213.210.243.36];
from=<***@unitedgroup.com.sa> to=<***@mcdonalds.com.sa> proto=ESMTP
helo=<mail.unitedgroup.com.sa>

Mar 11 10:26:49 nmersal postfix/cleanup[17702]: DC9985DFFDE:
message-id=<***@SRV-EXCHANGE.unitedgr
oup.com.sa>

Mar 11 10:29:20 nmersal MailScanner[17677]: Making attempt 2 at processing
message DC9985DFFDE.A112E

Mar 11 10:29:20 nmersal MailScanner[17677]: SpamAssassin cache hit for
message DC9985DFFDE.A112E

Mar 11 10:34:26 nmersal MailScanner[18000]: Making attempt 3 at processing
message DC9985DFFDE.A112E

Mar 11 10:34:26 nmersal MailScanner[18000]: SpamAssassin cache hit for
message DC9985DFFDE.A112E

Mar 11 10:37:46 nmersal MailScanner[18480]: Making attempt 4 at processing
message DC9985DFFDE.A112E

Mar 11 10:37:46 nmersal MailScanner[18480]: SpamAssassin cache hit for
message DC9985DFFDE.A112E

Mar 11 10:40:54 nmersal MailScanner[18712]: Making attempt 5 at processing
message DC9985DFFDE.A112E

Mar 11 10:40:54 nmersal MailScanner[18712]: SpamAssassin cache hit for
message DC9985DFFDE.A112E

Mar 11 10:43:11 nmersal MailScanner[18763]: Making attempt 6 at processing
message DC9985DFFDE.A112E

Mar 11 10:43:11 nmersal MailScanner[18763]: SpamAssassin cache hit for
message DC9985DFFDE.A112E

Mar 11 10:43:12 nmersal MailScanner[18850]: Warning: skipping message
DC9985DFFDE.A112E as it has been attempted too many times

Mar 11 10:43:12 nmersal MailScanner[18850]: Quarantined message
DC9985DFFDE.A112E as it caused MailScanner to crash several times

Mar 11 10:43:12 nmersal MailScanner[18850]: Saved entire message to
/var/spool/MailScanner/quarantine/20150311/DC9985DFFDE.A112E



Ejaz



From: mailscanner-***@lists.mailscanner.info
[mailto:mailscanner-***@lists.mailscanner.info] On Behalf Of Mohammed
Ejaz
Sent: Wednesday, March 11, 2015 9:46 AM
To: ***@lists.mailscanner.info
Subject: bounce-message



Hi all





Some of the emails are bouncing back with below error message, any clue what
could be the reason



Thanks in advance for your kind support.



Ejaz







Our virus detector failed to completely analyse a message you sent:-

To: ***@mcdonalds.com.sa, ***@mcdonalds.com.sa,
***@mcdonalds.com.sa, ***@mcdonalds.com.sa, ***@mcdonalds.com.sa,
***@mcdonalds.com.sa, ***@mcdonalds.com.sa, ***@mcdonalds.com.sa,
***@mcdonalds.com.sa, ***@mcdonalds.com.sa

Subject: LINEN ORDERING (REMINDER)

Date: Wed Mar 11 08:50:32 2015

Any parts of the message that could not be analysed will not have been
delivered.



If you are using Microsoft Outlook, we strongly recommend you change your
outgoing message format from "Rich Text" to "HTML" or "Plain Text".



1) Click on the "Tools" menu and choose "Options..."

2) Go to the "Mail Format" tab

3) For message format, select "HTML" or "Plain text"

4) Click OK



The virus detector said this about the message:

Report: Report: MailScanner: Message attempted to kill MailScanner

[Alex Neuman]

As it says on the bounce, improperly configured Outlook settings prevent
the message from being properly analyzed. Follow the instructions and
change the outgoing message format to either HTML or Plain Text, as "Rich
Text" is proprietary, has been obsolete for over a decade, and is
potentially dangerous for your users.



*Alex Neuman van der Hans*
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

Mobile: [phone]
Work: [phone] <http://[phone]/>
Work (USA): [phone]
Skype: AlexNeuman

Don't miss Vida Digital on LiveStream
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=http%3A%2F%2Fnew.livestream.com%2Faccounts%2F5061819&si=5887134288314368&pi=414a73b4-dd68-4566-887c-3ab01ce3e4ea>
!
Saturdays 8am-10am on Máxima 91.7FM Panama

Follow *@AlexNeuman
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Ftwitter.com%2Falexneuman&si=5887134288314368&pi=414a73b4-dd68-4566-887c-3ab01ce3e4ea>*
on
Twitter
Like Vida Digital
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Ffacebook.com%2Fvidadigital%2F&si=5887134288314368&pi=414a73b4-dd68-4566-887c-3ab01ce3e4ea>
on
Facebook
Follow VidaDigital
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=http%3A%2F%2Finstagram.com%2Fvidadigital&si=5887134288314368&pi=414a73b4-dd68-4566-887c-3ab01ce3e4ea>
on
Instagram
Subscribe to Vida Digital
<http://t.signaleuna.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJN7t5XZsQByMPN7d-5TTRYFRKW7fsH1M56dwbYf6CVDXz02?t=https%3A%2F%2Fyoutube.com%2Freliantpty&si=5887134288314368&pi=414a73b4-dd68-4566-887c-3ab01ce3e4ea>
on
Youtube

Post by Mohammed Ejaz
Hi all
Some of the emails are bouncing back with below error message, any clue
what could be the reason
Thanks in advance for your kind support.
Ejaz
Our virus detector failed to completely analyse a message you sent:-
Subject: LINEN ORDERING (REMINDER)
Date: Wed Mar 11 08:50:32 2015
Any parts of the message that could not be analysed will not have been
delivered.
If you are using Microsoft Outlook, we strongly recommend you change your
outgoing message format from "Rich Text" to "HTML" or "Plain Text".
1) Click on the "Tools" menu and choose "Options..."
2) Go to the "Mail Format" tab
3) For message format, select "HTML" or "Plain text"
4) Click OK
Report: Report: MailScanner: Message attempted to kill MailScanner
--
MailScanner mailing list
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!

[Kevin Miller]

Additionally, it could be dependent on whether you're using the internal or external TNEF decoder. Query the archives for TNEF and you'll find lots of posts about this issue. No perfect solutions however.

I'll see it every once in a while from external users that are using Microsoft email clients. I haven't had a problem lately however. My settings are:
Expand TNEF = yes
Use TNEF Contents = replace
Deliver Unparsable TNEF = no
TNEF Expander = internal
TNEF Timeout = 120

IIRC, when I began using "Use TNEF Contents = replace" things got better.

...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: [phone], Fax: [phone]
Registered Linux User No: 307357

From: mailscanner-***@lists.mailscanner.info [mailto:mailscanner-***@lists.mailscanner.info] On Behalf Of Alex Neuman
Sent: Wednesday, March 11, 2015 4:59 AM
To: MailScanner discussion
Subject: Re: bounce-message

As it says on the bounce, improperly configured Outlook settings prevent the message from being properly analyzed. Follow the instructions and change the outgoing message format to either HTML or Plain Text, as "Rich Text" is proprietary, has been obsolete for over a decade, and is potentially dangerous for your users.