EFA MailWatch: Attachments not in email until re-released

Bugs in eFa 4
Post Reply
breliable
Posts: 3
Joined: 26 Apr 2022 01:40

EFA MailWatch: Attachments not in email until re-released

Post by breliable »

Hey,
I am seeking support in regards to an issue on the EFA MailWatch product.
We are using MailWatch for MailScanner v1.2.18 running on eFa-4.0.4.

The issue we are having is that a certain email address is sending an email with an attached PDF file, this PDF file is not listed under attachments in the Quarantine section (as displayed in this screenshot: https://i.gyazo.com/84cd6f9a588e1afba4e ... c759e0.png) but if I go into the message file in the Path to message and scroll down the bottom I can see that there is a PDF file attached to the email: https://i.gyazo.com/adc984c974a447d4252 ... 373a7f.png

Initially when the user is sent this email, they receive the email without the PDF attachment. When I go in and release it to myself, I get the email with the attachment and forward it onto the recipient.
I get the attachment when I forward it to myself outside the domain and to the Administrator mailbox inside the domain.

The client's ecosystem is a Exchange Office 365 Environment.

Hope to hear from someone soon in regards to my query.

Thanks!
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: EFA MailWatch: Attachments not in email until re-released

Post by shawniverson »

Is there any indication in the report that something is being blocked for some reason, like because a filename is too long?
breliable
Posts: 3
Joined: 26 Apr 2022 01:40

Re: EFA MailWatch: Attachments not in email until re-released

Post by breliable »

Hi Shawn,
I have attached a screenshot from a new message this morning and there doesn't seem to be any blockage for any reason.
Because usually EFA would send through the email with a WARNING saying that the attachment has been blocked with the reason with something like the filename is too long, but there is nothing and there is no WARNING, just like a normal email but not attachment.

https://i.gyazo.com/76c87a89357bb7c3625 ... 1f9243.png
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: EFA MailWatch: Attachments not in email until re-released

Post by shawniverson »

Very interested in this, any chance I can get a sample raw message with headers? This sounds like some kind of MIME parsing issue.
breliable
Posts: 3
Joined: 26 Apr 2022 01:40

Re: EFA MailWatch: Attachments not in email until re-released

Post by breliable »

Hey Shawn,
You sure can. Since this contains sensitive client information, can I email you or contact you via other means with a pastebin dump for you.
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: EFA MailWatch: Attachments not in email until re-released

Post by shawniverson »

Sent you a PM
Post Reply