Some Internet Headers stripped, even when fwd as attachment in OL2

[JGurtz]

A related post in a programing forum is here (with no answer)
http://social.msdn.microsoft.com/Forums/en-US/vsto/thread/61a98015-24a4-472c-a100-37b1e99d4ce4

After upgrading to 2010 recently I have discovered a significant problem in
trying to submit spam/ham reports to the Cisco/Ironport automated submission
system (they want RFC 822 attachment). Crucialy, they are missing the

No matter what method I try (ctrl+alt+f, or drag msg attaching to new msg,
or using spamgrabber COM add-in) some Internet headers are being stripped
when I forward the message as an attachment.

Headers AFTER forwarded:

Received: from mxgateway.npumail.com ([192.168.2.10]) by
exchgsrv.nputilities.local with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 May
2010 18:19:03 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: base64
Received: from tus1smtoutpex02.symantec.com ([216.10.195.242]) by
mxgateway.npumail.com with ESMTP; 18 May 2010 18:18:57 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5
Received: from tus1opsmtapin02.ges.symantec.com
(tus1opsmtapin02.ges.symantec.com [192.168.214.44]) by (Symantec Brightmail
Gateway out) with SMTP id C9.4B.27235.F5D03FB4; Tue, 18 May 2010 14:57:52
-0700 (MST)
Received: from reserved-155-64-230-18.ges.symantec.com ([155.64.230.18]
helo=TUS1XCHECNPIN01.enterprise.veritas.com) by
tus1opsmtapin02.ges.symantec.com with esmtp (Exim 4.67) (envelope-from
<[email protected]>) id 1OEUmY-0000F2-7K; Tue, 18 May 2010 14:56:58
-0700
Received: from TUS1XCHEVSPIN04.enterprise.veritas.com ([155.64.230.53]) by
TUS1XCHECNPIN01.enterprise.veritas.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 14:56:57 -0700
Content-class: urn:content-classes:message
Subject: Learn How Symantec spams its customers Webcast.
Date: Tue, 18 May 2010 17:58:10 -0400
Message-ID:
<1BF6BA633BDC0E48B81213232B41E615A997B6@TUS1XCHCLUPIN09.enterprise.veritas.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Learn How Symantec spams its customers Webcast.
Thread-Index: Acr2qeWaE/cQLtszSauixh7WqOhtNwACya8w
From: "Chris Austin" <[email protected]>
To: "Chris Austin" <[email protected]>


ACTUAL Headers:

Microsoft Mail Internet Headers Version 2.0
Received: from mxgateway.npumail.com ([192.168.2.10]) by
exchgsrv.nputilities.local with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 18:19:03 -0400
Subject: Learn How Symantec spams its customers Webcast.
Authentication-Results: mxgateway.npumail.com; dkim=neutral (message not
signed) header.i=none
Received-SPF: None identity=pra; client-ip=216.10.195.242;
receiver=npumail.com;
envelope-from="(e-mail address removed)";
x-sender="(e-mail address removed)";
x-conformance=sidf_compatible
Received-SPF: Pass identity=mailfrom; client-ip=216.10.195.242;
receiver=npumail.com;
envelope-from="(e-mail address removed)";
x-sender="(e-mail address removed)";
x-conformance=sidf_compatible;
x-record-type="v=spf1"
Received-SPF: None identity=helo; client-ip=216.10.195.242;
receiver=npumail.com;
envelope-from="(e-mail address removed)";
x-sender="(e-mail address removed)";
x-conformance=sidf_compatible
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
AvQCAHmv8kvYCsPymWdsb2JhbACBPoFVBJoBbxUBAQEBAQgLCgcRIqsgg1ONHYJ1gTFqBINA
X-IronPort-AV: E=Sophos;i="4.53,258,1272859200";
d="scan'208,217";a="1861722"
Received: from tus1smtoutpex02.symantec.com ([216.10.195.242])
by mxgateway.npumail.com with ESMTP; 18 May 2010 18:18:57 -0400
X-AuditID: d80ac3f2-b7cd2ae000006a63-3a-4bf30d5f67ff
Received: from tus1opsmtapin02.ges.symantec.com
(tus1opsmtapin02.ges.symantec.com [192.168.214.44])
by (Symantec Brightmail Gateway out) with SMTP id C9.4B.27235.F5D03FB4;
Tue, 18 May 2010 14:57:52 -0700 (MST)
Received: from reserved-155-64-230-18.ges.symantec.com ([155.64.230.18]
helo=TUS1XCHECNPIN01.enterprise.veritas.com)
by tus1opsmtapin02.ges.symantec.com with esmtp (Exim 4.67)
(envelope-from <[email protected]>)
id 1OEUmY-0000F2-7K; Tue, 18 May 2010 14:56:58 -0700
Received: from TUS1XCHEVSPIN04.enterprise.veritas.com ([155.64.230.53]) by
TUS1XCHECNPIN01.enterprise.veritas.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 14:56:57 -0700
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01CAF6D5.03EE53D6"
X-MimeOLE: Produced By Microsoft Exchange V6.5
Date: Tue, 18 May 2010 14:58:10 -0700
Message-ID:
<1BF6BA633BDC0E48B81213232B41E615A997B6@TUS1XCHCLUPIN09.enterprise.veritas.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Learn How Symantec spams its customers Webcast.
Thread-Index: Acr2qeWaE/cQLtszSauixh7WqOhtNwACya8w
From: "Chris Austin" <[email protected]>
To: "Chris Austin" <[email protected]>
X-OriginalArrivalTime: 18 May 2010 21:56:57.0277 (UTC)
FILETIME=[08FD5ED0:01CAF6D5]
X-Brightmail-Tracker: AAAAAA==
Return-Path: (e-mail address removed)

------_=_NextPart_001_01CAF6D5.03EE53D6
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: base64

------_=_NextPart_001_01CAF6D5.03EE53D6
Content-Type: text/html;
charset="UTF-8"
Content-Transfer-Encoding: base64


------_=_NextPart_001_01CAF6D5.03EE53D6--

 

[Brian Tillman [MVP-Outlook]]

No matter what method I try (ctrl+alt+f, or drag msg attaching to new msg,
or using spamgrabber COM add-in) some Internet headers are being stripped
when I forward the message as an attachment.

Outlook is simply not good at retaining all the headers and, in particular,
the MIME separators. I don't think Outlook retains all of the information in
the message store. There's a registry key that may help. See this:
http://www.slipstick.com/mail1/viewheaders.htm.

Here's some VBA code that may help:
http://www.slovaktech.com/code_samples.htm#InternetHeaders.

 

[JGurtz]

Outlook is simply not good at retaining all the headers and, in particular,
the MIME separators. I don't think Outlook retains all of the information in
the message store. There's a registry key that may help. See this:
http://www.slipstick.com/mail1/viewheaders.htm.

Here's some VBA code that may help:
http://www.slovaktech.com/code_samples.htm#InternetHeaders.

There is no problem displaying the full message headers. Neither link
seemed to have any ref. to a reg key that would help. The problem is a
regression when forwarding messages as an attachment in 2010 (this worked
properly in 2003/2007). Look at the example headers in my post as viewed
"on-the wire."

I'm not sure what you mean about not retaining the full message headers
because Outlook does (at least in 2003/2007/2010). It is well known that
forwarding in-line with outlook throws out nearly all headers in the
forwarded message; forwarding as an attachment (the attachment OL creates is
in fact RFC 822 compliant) retains all headers in the attachment (until 2010
apparently).

Outlook 2010 is throwing out all the custom headers, leaving only
"Recieved:" and other headers as necc. for a minimally compliant RFC 822
message. This occurs also when using programmatic methods, such as COM
add-ins as well at by using the UI.

This is really a frustration for me because I've been working through a
ticket with Cisco (seems they have a bug processing sMIME signed messages).
Now, after upgrading to 2010 I can't even generate a proper submission
because they need their custom headers which are added by the SMTP gateway at
the edge. I will need to go back to 2007 to close that ticket unless there
will be a hotfix out soon.