T
Tom Meunier
Customer has an Entourage client (I'm waiting on the version number but I
suspect X). Set up as a POP3 client, sending SMTP against an Exchange 2003
server. Whenever it sends, it munges the recipient address in the SMTP
conversation's RCPT TO: line by prepending a 25/ to it. Below this message
are two conversations from Exchange SMTP logs that show the behavior.
Obviously the mail will bounce as 25/[email protected] isn't the real
address. The address book entries are fine, and the string 25/ is prepended
even on reply and reply-all messages.
I'll get more info, and have the customer rebuild the profile in a little
while, but I'm curious to see whether anyone's seen this behavior before,
and if not at least get it out there for archival purposes.
Examples from SMTP log:
2005-07-20 15:00:18 10.20.30.40 [10.20.30.40] EHLO - +[10.20.30.40] 250 0
310 19 0
2005-07-20 15:00:18 10.20.30.40 [10.20.30.40] MAIL -
+FROM:<[email protected]> 250 0 45 32 0
2005-07-20 15:00:18 10.20.30.40 [10.20.30.40] RCPT -
+TO:<25/[email protected]> 250 0 36 33 16
2005-07-20 15:00:18 10.20.30.40 [10.20.30.40] DATA -
+<BF03CAA2.61%[email protected]> 250 0 118 1421 296
2005-07-20 15:00:18 10.20.30.40 [10.20.30.40] QUIT - [10.20.30.40] 240 375
67 4 0
2005-07-20 16:36:44 10.20.30.40 [10.20.30.40] EHLO - +[10.20.30.40] 250 0
310 19 0
2005-07-20 16:36:44 10.20.30.40 [10.20.30.40] MAIL -
+FROM:<[email protected]> 250 0 45 32 0
2005-07-20 16:36:44 10.20.30.40 [10.20.30.40] RCPT -
+TO:<25/[email protected]> 250 0 37 34 15
2005-07-20 16:36:44 10.20.30.40 [10.20.30.40] DATA -
+<BF03E7B4.63%[email protected]> 250 0 118 339 110
2005-07-20 16:36:44 10.20.30.40 [10.20.30.40] QUIT - [10.20.30.40] 240 188
67 4 0
suspect X). Set up as a POP3 client, sending SMTP against an Exchange 2003
server. Whenever it sends, it munges the recipient address in the SMTP
conversation's RCPT TO: line by prepending a 25/ to it. Below this message
are two conversations from Exchange SMTP logs that show the behavior.
Obviously the mail will bounce as 25/[email protected] isn't the real
address. The address book entries are fine, and the string 25/ is prepended
even on reply and reply-all messages.
I'll get more info, and have the customer rebuild the profile in a little
while, but I'm curious to see whether anyone's seen this behavior before,
and if not at least get it out there for archival purposes.
Examples from SMTP log:
2005-07-20 15:00:18 10.20.30.40 [10.20.30.40] EHLO - +[10.20.30.40] 250 0
310 19 0
2005-07-20 15:00:18 10.20.30.40 [10.20.30.40] MAIL -
+FROM:<[email protected]> 250 0 45 32 0
2005-07-20 15:00:18 10.20.30.40 [10.20.30.40] RCPT -
+TO:<25/[email protected]> 250 0 36 33 16
2005-07-20 15:00:18 10.20.30.40 [10.20.30.40] DATA -
+<BF03CAA2.61%[email protected]> 250 0 118 1421 296
2005-07-20 15:00:18 10.20.30.40 [10.20.30.40] QUIT - [10.20.30.40] 240 375
67 4 0
2005-07-20 16:36:44 10.20.30.40 [10.20.30.40] EHLO - +[10.20.30.40] 250 0
310 19 0
2005-07-20 16:36:44 10.20.30.40 [10.20.30.40] MAIL -
+FROM:<[email protected]> 250 0 45 32 0
2005-07-20 16:36:44 10.20.30.40 [10.20.30.40] RCPT -
+TO:<25/[email protected]> 250 0 37 34 15
2005-07-20 16:36:44 10.20.30.40 [10.20.30.40] DATA -
+<BF03E7B4.63%[email protected]> 250 0 118 339 110
2005-07-20 16:36:44 10.20.30.40 [10.20.30.40] QUIT - [10.20.30.40] 240 188
67 4 0