J
JGurtz
A related post in a programing forum is here (with no answer)
http://social.msdn.microsoft.com/Forums/en-US/vsto/thread/61a98015-24a4-472c-a100-37b1e99d4ce4
After upgrading to 2010 recently I have discovered a significant problem in
trying to submit spam/ham reports to the Cisco/Ironport automated submission
system (they want RFC 822 attachment). Crucialy, they are missing the
No matter what method I try (ctrl+alt+f, or drag msg attaching to new msg,
or using spamgrabber COM add-in) some Internet headers are being stripped
when I forward the message as an attachment.
Headers AFTER forwarded:
Received: from mxgateway.npumail.com ([192.168.2.10]) by
exchgsrv.nputilities.local with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 May
2010 18:19:03 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: base64
Received: from tus1smtoutpex02.symantec.com ([216.10.195.242]) by
mxgateway.npumail.com with ESMTP; 18 May 2010 18:18:57 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5
Received: from tus1opsmtapin02.ges.symantec.com
(tus1opsmtapin02.ges.symantec.com [192.168.214.44]) by (Symantec Brightmail
Gateway out) with SMTP id C9.4B.27235.F5D03FB4; Tue, 18 May 2010 14:57:52
-0700 (MST)
Received: from reserved-155-64-230-18.ges.symantec.com ([155.64.230.18]
helo=TUS1XCHECNPIN01.enterprise.veritas.com) by
tus1opsmtapin02.ges.symantec.com with esmtp (Exim 4.67) (envelope-from
<[email protected]>) id 1OEUmY-0000F2-7K; Tue, 18 May 2010 14:56:58
-0700
Received: from TUS1XCHEVSPIN04.enterprise.veritas.com ([155.64.230.53]) by
TUS1XCHECNPIN01.enterprise.veritas.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 14:56:57 -0700
Content-class: urn:content-classes:message
Subject: Learn How Symantec spams its customers Webcast.
Date: Tue, 18 May 2010 17:58:10 -0400
Message-ID:
<1BF6BA633BDC0E48B81213232B41E615A997B6@TUS1XCHCLUPIN09.enterprise.veritas.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Learn How Symantec spams its customers Webcast.
Thread-Index: Acr2qeWaE/cQLtszSauixh7WqOhtNwACya8w
From: "Chris Austin" <[email protected]>
To: "Chris Austin" <[email protected]>
ACTUAL Headers:
Microsoft Mail Internet Headers Version 2.0
Received: from mxgateway.npumail.com ([192.168.2.10]) by
exchgsrv.nputilities.local with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 18:19:03 -0400
Subject: Learn How Symantec spams its customers Webcast.
Authentication-Results: mxgateway.npumail.com; dkim=neutral (message not
signed) header.i=none
Received-SPF: None identity=pra; client-ip=216.10.195.242;
receiver=npumail.com;
envelope-from="(e-mail address removed)";
x-sender="(e-mail address removed)";
x-conformance=sidf_compatible
Received-SPF: Pass identity=mailfrom; client-ip=216.10.195.242;
receiver=npumail.com;
envelope-from="(e-mail address removed)";
x-sender="(e-mail address removed)";
x-conformance=sidf_compatible;
x-record-type="v=spf1"
Received-SPF: None identity=helo; client-ip=216.10.195.242;
receiver=npumail.com;
envelope-from="(e-mail address removed)";
x-sender="(e-mail address removed)";
x-conformance=sidf_compatible
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
AvQCAHmv8kvYCsPymWdsb2JhbACBPoFVBJoBbxUBAQEBAQgLCgcRIqsgg1ONHYJ1gTFqBINA
X-IronPort-AV: E=Sophos;i="4.53,258,1272859200";
d="scan'208,217";a="1861722"
Received: from tus1smtoutpex02.symantec.com ([216.10.195.242])
by mxgateway.npumail.com with ESMTP; 18 May 2010 18:18:57 -0400
X-AuditID: d80ac3f2-b7cd2ae000006a63-3a-4bf30d5f67ff
Received: from tus1opsmtapin02.ges.symantec.com
(tus1opsmtapin02.ges.symantec.com [192.168.214.44])
by (Symantec Brightmail Gateway out) with SMTP id C9.4B.27235.F5D03FB4;
Tue, 18 May 2010 14:57:52 -0700 (MST)
Received: from reserved-155-64-230-18.ges.symantec.com ([155.64.230.18]
helo=TUS1XCHECNPIN01.enterprise.veritas.com)
by tus1opsmtapin02.ges.symantec.com with esmtp (Exim 4.67)
(envelope-from <[email protected]>)
id 1OEUmY-0000F2-7K; Tue, 18 May 2010 14:56:58 -0700
Received: from TUS1XCHEVSPIN04.enterprise.veritas.com ([155.64.230.53]) by
TUS1XCHECNPIN01.enterprise.veritas.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 14:56:57 -0700
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01CAF6D5.03EE53D6"
X-MimeOLE: Produced By Microsoft Exchange V6.5
Date: Tue, 18 May 2010 14:58:10 -0700
Message-ID:
<1BF6BA633BDC0E48B81213232B41E615A997B6@TUS1XCHCLUPIN09.enterprise.veritas.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Learn How Symantec spams its customers Webcast.
Thread-Index: Acr2qeWaE/cQLtszSauixh7WqOhtNwACya8w
From: "Chris Austin" <[email protected]>
To: "Chris Austin" <[email protected]>
X-OriginalArrivalTime: 18 May 2010 21:56:57.0277 (UTC)
FILETIME=[08FD5ED0:01CAF6D5]
X-Brightmail-Tracker: AAAAAA==
Return-Path: (e-mail address removed)
------_=_NextPart_001_01CAF6D5.03EE53D6
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: base64
------_=_NextPart_001_01CAF6D5.03EE53D6
Content-Type: text/html;
charset="UTF-8"
Content-Transfer-Encoding: base64
------_=_NextPart_001_01CAF6D5.03EE53D6--
http://social.msdn.microsoft.com/Forums/en-US/vsto/thread/61a98015-24a4-472c-a100-37b1e99d4ce4
After upgrading to 2010 recently I have discovered a significant problem in
trying to submit spam/ham reports to the Cisco/Ironport automated submission
system (they want RFC 822 attachment). Crucialy, they are missing the
No matter what method I try (ctrl+alt+f, or drag msg attaching to new msg,
or using spamgrabber COM add-in) some Internet headers are being stripped
when I forward the message as an attachment.
Headers AFTER forwarded:
Received: from mxgateway.npumail.com ([192.168.2.10]) by
exchgsrv.nputilities.local with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 May
2010 18:19:03 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: base64
Received: from tus1smtoutpex02.symantec.com ([216.10.195.242]) by
mxgateway.npumail.com with ESMTP; 18 May 2010 18:18:57 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5
Received: from tus1opsmtapin02.ges.symantec.com
(tus1opsmtapin02.ges.symantec.com [192.168.214.44]) by (Symantec Brightmail
Gateway out) with SMTP id C9.4B.27235.F5D03FB4; Tue, 18 May 2010 14:57:52
-0700 (MST)
Received: from reserved-155-64-230-18.ges.symantec.com ([155.64.230.18]
helo=TUS1XCHECNPIN01.enterprise.veritas.com) by
tus1opsmtapin02.ges.symantec.com with esmtp (Exim 4.67) (envelope-from
<[email protected]>) id 1OEUmY-0000F2-7K; Tue, 18 May 2010 14:56:58
-0700
Received: from TUS1XCHEVSPIN04.enterprise.veritas.com ([155.64.230.53]) by
TUS1XCHECNPIN01.enterprise.veritas.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 14:56:57 -0700
Content-class: urn:content-classes:message
Subject: Learn How Symantec spams its customers Webcast.
Date: Tue, 18 May 2010 17:58:10 -0400
Message-ID:
<1BF6BA633BDC0E48B81213232B41E615A997B6@TUS1XCHCLUPIN09.enterprise.veritas.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Learn How Symantec spams its customers Webcast.
Thread-Index: Acr2qeWaE/cQLtszSauixh7WqOhtNwACya8w
From: "Chris Austin" <[email protected]>
To: "Chris Austin" <[email protected]>
ACTUAL Headers:
Microsoft Mail Internet Headers Version 2.0
Received: from mxgateway.npumail.com ([192.168.2.10]) by
exchgsrv.nputilities.local with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 18:19:03 -0400
Subject: Learn How Symantec spams its customers Webcast.
Authentication-Results: mxgateway.npumail.com; dkim=neutral (message not
signed) header.i=none
Received-SPF: None identity=pra; client-ip=216.10.195.242;
receiver=npumail.com;
envelope-from="(e-mail address removed)";
x-sender="(e-mail address removed)";
x-conformance=sidf_compatible
Received-SPF: Pass identity=mailfrom; client-ip=216.10.195.242;
receiver=npumail.com;
envelope-from="(e-mail address removed)";
x-sender="(e-mail address removed)";
x-conformance=sidf_compatible;
x-record-type="v=spf1"
Received-SPF: None identity=helo; client-ip=216.10.195.242;
receiver=npumail.com;
envelope-from="(e-mail address removed)";
x-sender="(e-mail address removed)";
x-conformance=sidf_compatible
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
AvQCAHmv8kvYCsPymWdsb2JhbACBPoFVBJoBbxUBAQEBAQgLCgcRIqsgg1ONHYJ1gTFqBINA
X-IronPort-AV: E=Sophos;i="4.53,258,1272859200";
d="scan'208,217";a="1861722"
Received: from tus1smtoutpex02.symantec.com ([216.10.195.242])
by mxgateway.npumail.com with ESMTP; 18 May 2010 18:18:57 -0400
X-AuditID: d80ac3f2-b7cd2ae000006a63-3a-4bf30d5f67ff
Received: from tus1opsmtapin02.ges.symantec.com
(tus1opsmtapin02.ges.symantec.com [192.168.214.44])
by (Symantec Brightmail Gateway out) with SMTP id C9.4B.27235.F5D03FB4;
Tue, 18 May 2010 14:57:52 -0700 (MST)
Received: from reserved-155-64-230-18.ges.symantec.com ([155.64.230.18]
helo=TUS1XCHECNPIN01.enterprise.veritas.com)
by tus1opsmtapin02.ges.symantec.com with esmtp (Exim 4.67)
(envelope-from <[email protected]>)
id 1OEUmY-0000F2-7K; Tue, 18 May 2010 14:56:58 -0700
Received: from TUS1XCHEVSPIN04.enterprise.veritas.com ([155.64.230.53]) by
TUS1XCHECNPIN01.enterprise.veritas.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 14:56:57 -0700
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01CAF6D5.03EE53D6"
X-MimeOLE: Produced By Microsoft Exchange V6.5
Date: Tue, 18 May 2010 14:58:10 -0700
Message-ID:
<1BF6BA633BDC0E48B81213232B41E615A997B6@TUS1XCHCLUPIN09.enterprise.veritas.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Learn How Symantec spams its customers Webcast.
Thread-Index: Acr2qeWaE/cQLtszSauixh7WqOhtNwACya8w
From: "Chris Austin" <[email protected]>
To: "Chris Austin" <[email protected]>
X-OriginalArrivalTime: 18 May 2010 21:56:57.0277 (UTC)
FILETIME=[08FD5ED0:01CAF6D5]
X-Brightmail-Tracker: AAAAAA==
Return-Path: (e-mail address removed)
------_=_NextPart_001_01CAF6D5.03EE53D6
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: base64
------_=_NextPart_001_01CAF6D5.03EE53D6
Content-Type: text/html;
charset="UTF-8"
Content-Transfer-Encoding: base64
------_=_NextPart_001_01CAF6D5.03EE53D6--