outlook email forwarding problem

  • Thread starter Thread starter Obiwanji
  • Start date Start date
O

Obiwanji

Recently, when forwarding emails as attachments, lines in the header of the
attached email are being reordered. This causes a major problem for the
recipient - SpamCop, who need those lines intact and in the original order to
enable accurate investigation of the email's source. Forwarding as attachment
has worked fine for the previous few years...
 
Reordered in which way?
What/been added/removed?
Which version of Outlook are you using?
Which mail account type are you using?
Are you using a virus scanner that integrates with Outlook which could have
caused this?

Don't be afraid to share some information which could allow us to provide
any answer.
 
Sorry 'bout that. More info follows;

Using Outlook 2003 (part of Office suite), under XP-Pro, fully patched.
Collecting from POP3, sending via SMTP
Not using email virus scanner, just to be sure I removed my AV (AVG) and
reinstalled in custom mode without any Outlook plugins etc.

Here is an example of what happens. I have obfuscated email addresses..

These were the headers of the originally received email;

Return-Path: <[email protected]>
Received: from punt3.mail.demon.net by mailstore
for (e-mail address removed) id 1LnXeb-39cVbs-02-FRu;
Sat, 28 Mar 2009 12:28:49 +0000
Received: from [194.217.242.245] (lhlo=lon1-hub.mail.demon.net)
by punt3.mail.demon.net with lmtp id 1LnXeb-39cVbs-02
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from [213.36.80.105] (helo=mail.libertysurf.net)
by lon1-hub.mail.demon.net with esmtp id 1LnXeb-00074M-II
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from aliceadsl.fr (192.168.10.85) by mail.libertysurf.net
(8.0.015)
id 49B52AA00007F002 for (e-mail address removed); Sat, 28 Mar
2009 13:28:49 +0100
Date: Sat, 28 Mar 2009 13:28:49 +0100
Message-Id: <[email protected]>
Subject: =?iso-8859-1?Q?headers_testing?=
MIME-Version: 1.0
X-Sensitivity: 3
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
From: "[email protected]?=" <[email protected]>
To: "=?iso-8859-1?Q?anji?=" <[email protected]>
X-XaM3-API-Version: 3.2 R18 (B34 pl1)
X-type: 0
X-SenderIP: 82.152.156.153
X-CNFS-Analysis: v=1.0 c=1 a=c4TonTonn9kA:10 a=28VDY0vrntkA:10
a=Sp7vXyLCAAAA:8 a=wTUfgrf9WjUlQPH1f44A:9 a=7C5IW-of0JsZxlZUNG0A:7
a=Wsx4UY4pOE3RpoK8bU7Vme6zECQA:4 a=JqzK7hVu6n4A:10


After forwarding (as attachment), the recipient can examine the headers
again and sees this;


Received: from [194.217.242.245] (lhlo=lon1-hub.mail.demon.net)
by punt3.mail.demon.net with lmtp id 1LnXeb-39cVbs-02
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from [213.36.80.105] (helo=mail.libertysurf.net)
by lon1-hub.mail.demon.net with esmtp id 1LnXeb-00074M-II
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from aliceadsl.fr (192.168.10.85) by mail.libertysurf.net (8.0.015)
id 49B52AA00007F002 for (e-mail address removed); Sat, 28 Mar 2009
13:28:49 +0100
Received: from punt3.mail.demon.net by mailstore
for (e-mail address removed) id 1LnXeb-39cVbs-02-FRu;
Sat, 28 Mar 2009 12:28:49 +0000
Return-Path: <[email protected]>
From: <[email protected]>
To: "anji" <[email protected]>
Subject: headers testing
Date: Sat, 28 Mar 2009 13:28:49 +0100
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
Thread-Index: AcmvoL7zIkbmusYIT6OHnz//bfE/pw==
x-senderip: 82.152.156.153
x-type: 0
x-xam3-api-version: 3.2 R18 (B34 pl1)
x-sensitivity: 3


--You can see the added lines (Thread index etc) and that the received-by
lines are now out of order. That makes tracing source of spam impossible.

HTH

Thanks in advance for your advice.
 
Bad form I know, replying to my own posting, but anyone any ideas yet?
Roady [MVP], did that full description help you any?

Any suggestions for things I could try changing will be gratefully accepted.

Anji.

Obiwanji said:
Sorry 'bout that. More info follows;

Using Outlook 2003 (part of Office suite), under XP-Pro, fully patched.
Collecting from POP3, sending via SMTP
Not using email virus scanner, just to be sure I removed my AV (AVG) and
reinstalled in custom mode without any Outlook plugins etc.

Here is an example of what happens. I have obfuscated email addresses..

These were the headers of the originally received email;

Return-Path: <[email protected]>
Received: from punt3.mail.demon.net by mailstore
for (e-mail address removed) id 1LnXeb-39cVbs-02-FRu;
Sat, 28 Mar 2009 12:28:49 +0000
Received: from [194.217.242.245] (lhlo=lon1-hub.mail.demon.net)
by punt3.mail.demon.net with lmtp id 1LnXeb-39cVbs-02
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from [213.36.80.105] (helo=mail.libertysurf.net)
by lon1-hub.mail.demon.net with esmtp id 1LnXeb-00074M-II
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from aliceadsl.fr (192.168.10.85) by mail.libertysurf.net
(8.0.015)
id 49B52AA00007F002 for (e-mail address removed); Sat, 28 Mar
2009 13:28:49 +0100
Date: Sat, 28 Mar 2009 13:28:49 +0100
Message-Id: <[email protected]>
Subject: =?iso-8859-1?Q?headers_testing?=
MIME-Version: 1.0
X-Sensitivity: 3
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
From: "[email protected]?=" <[email protected]>
To: "=?iso-8859-1?Q?anji?=" <[email protected]>
X-XaM3-API-Version: 3.2 R18 (B34 pl1)
X-type: 0
X-SenderIP: 82.152.156.153
X-CNFS-Analysis: v=1.0 c=1 a=c4TonTonn9kA:10 a=28VDY0vrntkA:10
a=Sp7vXyLCAAAA:8 a=wTUfgrf9WjUlQPH1f44A:9 a=7C5IW-of0JsZxlZUNG0A:7
a=Wsx4UY4pOE3RpoK8bU7Vme6zECQA:4 a=JqzK7hVu6n4A:10


After forwarding (as attachment), the recipient can examine the headers
again and sees this;


Received: from [194.217.242.245] (lhlo=lon1-hub.mail.demon.net)
by punt3.mail.demon.net with lmtp id 1LnXeb-39cVbs-02
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from [213.36.80.105] (helo=mail.libertysurf.net)
by lon1-hub.mail.demon.net with esmtp id 1LnXeb-00074M-II
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from aliceadsl.fr (192.168.10.85) by mail.libertysurf.net (8.0.015)
id 49B52AA00007F002 for (e-mail address removed); Sat, 28 Mar 2009
13:28:49 +0100
Received: from punt3.mail.demon.net by mailstore
for (e-mail address removed) id 1LnXeb-39cVbs-02-FRu;
Sat, 28 Mar 2009 12:28:49 +0000
Return-Path: <[email protected]>
From: <[email protected]>
To: "anji" <[email protected]>
Subject: headers testing
Date: Sat, 28 Mar 2009 13:28:49 +0100
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
Thread-Index: AcmvoL7zIkbmusYIT6OHnz//bfE/pw==
x-senderip: 82.152.156.153
x-type: 0
x-xam3-api-version: 3.2 R18 (B34 pl1)
x-sensitivity: 3


--You can see the added lines (Thread index etc) and that the received-by
lines are now out of order. That makes tracing source of spam impossible.

HTH

Thanks in advance for your advice.


Roady said:
Reordered in which way?
What/been added/removed?
Which version of Outlook are you using?
Which mail account type are you using?
Are you using a virus scanner that integrates with Outlook which could have
caused this?

Don't be afraid to share some information which could allow us to provide
any answer.
Click to expand...
Click to expand...
 
Back
Top