outlook email forwarding problem

O

Obiwanji

Recently, when forwarding emails as attachments, lines in the header of the
attached email are being reordered. This causes a major problem for the
recipient - SpamCop, who need those lines intact and in the original order to
enable accurate investigation of the email's source. Forwarding as attachment
has worked fine for the previous few years...
 
R

Roady [MVP]

Reordered in which way?
What/been added/removed?
Which version of Outlook are you using?
Which mail account type are you using?
Are you using a virus scanner that integrates with Outlook which could have
caused this?

Don't be afraid to share some information which could allow us to provide
any answer.
 
O

Obiwanji

Sorry 'bout that. More info follows;

Using Outlook 2003 (part of Office suite), under XP-Pro, fully patched.
Collecting from POP3, sending via SMTP
Not using email virus scanner, just to be sure I removed my AV (AVG) and
reinstalled in custom mode without any Outlook plugins etc.

Here is an example of what happens. I have obfuscated email addresses..

These were the headers of the originally received email;

Return-Path: <[email protected]>
Received: from punt3.mail.demon.net by mailstore
for (e-mail address removed) id 1LnXeb-39cVbs-02-FRu;
Sat, 28 Mar 2009 12:28:49 +0000
Received: from [194.217.242.245] (lhlo=lon1-hub.mail.demon.net)
by punt3.mail.demon.net with lmtp id 1LnXeb-39cVbs-02
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from [213.36.80.105] (helo=mail.libertysurf.net)
by lon1-hub.mail.demon.net with esmtp id 1LnXeb-00074M-II
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from aliceadsl.fr (192.168.10.85) by mail.libertysurf.net
(8.0.015)
id 49B52AA00007F002 for (e-mail address removed); Sat, 28 Mar
2009 13:28:49 +0100
Date: Sat, 28 Mar 2009 13:28:49 +0100
Message-Id: <[email protected]>
Subject: =?iso-8859-1?Q?headers_testing?=
MIME-Version: 1.0
X-Sensitivity: 3
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
From: "[email protected]?=" <[email protected]>
To: "=?iso-8859-1?Q?anji?=" <[email protected]>
X-XaM3-API-Version: 3.2 R18 (B34 pl1)
X-type: 0
X-SenderIP: 82.152.156.153
X-CNFS-Analysis: v=1.0 c=1 a=c4TonTonn9kA:10 a=28VDY0vrntkA:10
a=Sp7vXyLCAAAA:8 a=wTUfgrf9WjUlQPH1f44A:9 a=7C5IW-of0JsZxlZUNG0A:7
a=Wsx4UY4pOE3RpoK8bU7Vme6zECQA:4 a=JqzK7hVu6n4A:10


After forwarding (as attachment), the recipient can examine the headers
again and sees this;


Received: from [194.217.242.245] (lhlo=lon1-hub.mail.demon.net)
by punt3.mail.demon.net with lmtp id 1LnXeb-39cVbs-02
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from [213.36.80.105] (helo=mail.libertysurf.net)
by lon1-hub.mail.demon.net with esmtp id 1LnXeb-00074M-II
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from aliceadsl.fr (192.168.10.85) by mail.libertysurf.net (8.0.015)
id 49B52AA00007F002 for (e-mail address removed); Sat, 28 Mar 2009
13:28:49 +0100
Received: from punt3.mail.demon.net by mailstore
for (e-mail address removed) id 1LnXeb-39cVbs-02-FRu;
Sat, 28 Mar 2009 12:28:49 +0000
Return-Path: <[email protected]>
From: <[email protected]>
To: "anji" <[email protected]>
Subject: headers testing
Date: Sat, 28 Mar 2009 13:28:49 +0100
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
Thread-Index: AcmvoL7zIkbmusYIT6OHnz//bfE/pw==
x-senderip: 82.152.156.153
x-type: 0
x-xam3-api-version: 3.2 R18 (B34 pl1)
x-sensitivity: 3


--You can see the added lines (Thread index etc) and that the received-by
lines are now out of order. That makes tracing source of spam impossible.

HTH

Thanks in advance for your advice.
 
O

Obiwanji

Bad form I know, replying to my own posting, but anyone any ideas yet?
Roady [MVP], did that full description help you any?

Any suggestions for things I could try changing will be gratefully accepted.

Anji.

Obiwanji said:
Sorry 'bout that. More info follows;

Using Outlook 2003 (part of Office suite), under XP-Pro, fully patched.
Collecting from POP3, sending via SMTP
Not using email virus scanner, just to be sure I removed my AV (AVG) and
reinstalled in custom mode without any Outlook plugins etc.

Here is an example of what happens. I have obfuscated email addresses..

These were the headers of the originally received email;

Return-Path: <[email protected]>
Received: from punt3.mail.demon.net by mailstore
for (e-mail address removed) id 1LnXeb-39cVbs-02-FRu;
Sat, 28 Mar 2009 12:28:49 +0000
Received: from [194.217.242.245] (lhlo=lon1-hub.mail.demon.net)
by punt3.mail.demon.net with lmtp id 1LnXeb-39cVbs-02
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from [213.36.80.105] (helo=mail.libertysurf.net)
by lon1-hub.mail.demon.net with esmtp id 1LnXeb-00074M-II
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from aliceadsl.fr (192.168.10.85) by mail.libertysurf.net
(8.0.015)
id 49B52AA00007F002 for (e-mail address removed); Sat, 28 Mar
2009 13:28:49 +0100
Date: Sat, 28 Mar 2009 13:28:49 +0100
Message-Id: <[email protected]>
Subject: =?iso-8859-1?Q?headers_testing?=
MIME-Version: 1.0
X-Sensitivity: 3
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
From: "[email protected]?=" <[email protected]>
To: "=?iso-8859-1?Q?anji?=" <[email protected]>
X-XaM3-API-Version: 3.2 R18 (B34 pl1)
X-type: 0
X-SenderIP: 82.152.156.153
X-CNFS-Analysis: v=1.0 c=1 a=c4TonTonn9kA:10 a=28VDY0vrntkA:10
a=Sp7vXyLCAAAA:8 a=wTUfgrf9WjUlQPH1f44A:9 a=7C5IW-of0JsZxlZUNG0A:7
a=Wsx4UY4pOE3RpoK8bU7Vme6zECQA:4 a=JqzK7hVu6n4A:10


After forwarding (as attachment), the recipient can examine the headers
again and sees this;


Received: from [194.217.242.245] (lhlo=lon1-hub.mail.demon.net)
by punt3.mail.demon.net with lmtp id 1LnXeb-39cVbs-02
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from [213.36.80.105] (helo=mail.libertysurf.net)
by lon1-hub.mail.demon.net with esmtp id 1LnXeb-00074M-II
for (e-mail address removed); Sat, 28 Mar 2009 12:28:49 +0000
Received: from aliceadsl.fr (192.168.10.85) by mail.libertysurf.net (8.0.015)
id 49B52AA00007F002 for (e-mail address removed); Sat, 28 Mar 2009
13:28:49 +0100
Received: from punt3.mail.demon.net by mailstore
for (e-mail address removed) id 1LnXeb-39cVbs-02-FRu;
Sat, 28 Mar 2009 12:28:49 +0000
Return-Path: <[email protected]>
From: <[email protected]>
To: "anji" <[email protected]>
Subject: headers testing
Date: Sat, 28 Mar 2009 13:28:49 +0100
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
Thread-Index: AcmvoL7zIkbmusYIT6OHnz//bfE/pw==
x-senderip: 82.152.156.153
x-type: 0
x-xam3-api-version: 3.2 R18 (B34 pl1)
x-sensitivity: 3


--You can see the added lines (Thread index etc) and that the received-by
lines are now out of order. That makes tracing source of spam impossible.

HTH

Thanks in advance for your advice.


Roady said:
Reordered in which way?
What/been added/removed?
Which version of Outlook are you using?
Which mail account type are you using?
Are you using a virus scanner that integrates with Outlook which could have
caused this?

Don't be afraid to share some information which could allow us to provide
any answer.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top