[TriLUG] Bizarre email attachment problem

Sean Leinart sleinart at fscarolina.com
Tue Feb 10 14:11:07 EST 2009


-----Original Message-----
From: "Lance A. Brown" <lance at bearcircle.net>
To: "Triangle Linux Users Group General Discussion" <trilug at trilug.org>
Sent: 2/10/2009 1:54 PM
Subject: Re: [TriLUG] Bizarre email attachment problem



Sean Leinart wrote:
> Greetings. I am having a strange email issue. The mailserver is
> running postfix, clamd, and spamd. If one particlar outside domain
> sends an email with no attachment(s), the email reaches the inside
> recipient just fine. If there is an attachment, the message never
> reaches the inside recipient. Though the same email reaches a RR
> account fine. If the email is either forwarded from the RR account,
> or recomposed and the same attachments added, it reaches the inside
> recipient fine. I have checked the various associated logs /
> quarantines and nothing is providing and evidence. Anyone have any
> ideas? Thanks. Sean Leinart

I recently ran into a problem where a
forwarded-via-proper-MIME-attachment Amazon receipt email was dropped
because the filename of the attachment matched the pattern for an old
auto-forwarded-around trojan that the previous sysadmin here had
installed a postfix header regex to detect and flat out drop.

Took me hours to track down why that message could be forwarded one way
and arrive, but disappeared when forwarded a different way.

Go over ALL the stuff postfix is doing.

--[Lance]


-- 
 GPG Fingerprint: 409B A409 A38D 92BF 15D9 6EEE 9A82 F2AC 69AC 07B9
 CACert.org Assurer
--
Thanks a bunch for the responses guys.
I will comb over the postfix config and see if it gleans any info. Thanks.
 
Sean
TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions





More information about the TriLUG mailing list