Exchange 2003 rewrite internal mail issue


I have an Exchange 2003 environment
An incoming email was sent to when it got to the internal user the recipient address had changed to ">"

The  ">" is correct then was in the to: field in Outlook. is not an internal address.

Looking at the spam filtering logs its shows the incoming mail correctly as

Here are the headers from the mail.
Anyone know what could be going on here.

Microsoft Mail Internet Headers Version 2.0
Received: from ([]) by with Microsoft SMTPSVC(6.0.3790.4675);
                Thu, 31 Jan 2013 15:08:58 +0000
Received: from ([]) by with Microsoft SMTPSVC(6.0.3790.4675);
                Thu, 31 Jan 2013 15:08:57 +0000
Subject: [WARNING :  MESSAGE ENCRYPTED]Your January 2013 VOIP eBilling Report
Received: from ([])
  by with ESMTP/TLS/AES128-SHA; 31 Jan 2013 15:08:57 +0000
Received: from ([::1]) by ([::1])
with mapi id 14.02.0318.004; Thu, 31 Jan 2013 15:08:55 +0000
From: Data Processing <>
To: 'Ronan' < ">">
Thread-Topic: Your January 2013 VOIP eBilling Report
Thread-Index: Ac3/sltT4TmIguD2TLGBKyJPS/FnOg==
Content-Class: urn:content-classes:message
Date: Thu, 31 Jan 2013 15:08:55 +0000
Message-ID: <>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
x-originalarrivaltime: 31 Jan 2013 13:14:18.0994 (UTC)
x-originating-ip: []
Content-Type: multipart/mixed;
MIME-Version: 1.0

Content-Type: text/plain; charset="us-ascii"
Content-ID: <>
Content-Transfer-Encoding: quoted-printable

Content-Type: application/x-zip-compressed; name=""
Content-Disposition: attachment; filename=""; size=133860;
                creation-date="Thu, 31 Jan 2013 13:31:06 GMT";
                modification-date="Thu, 31 Jan 2013 13:31:06 GMT"
Content-ID: <>
Content-Transfer-Encoding: base64


Who is Participating?
joe90kaneConnect With a Mentor Author Commented:
Ended up being an issue with spam filter appliance
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Does user has some Forwarding ?
Is this happening for some or all users ?

- Rancy
joe90kaneAuthor Commented:
Hi Rancy,

No forwarding setup and Exarcfg.EXE -l shows no rewrites.
joe90kaneAuthor Commented:
Fixed myself
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.