Solved

Email hearder encoded

Posted on 2014-02-28
9
637 Views
Last Modified: 2014-06-10
Hi,

Sometimes I receive email in my Outlook client that has an encoded header followed be a string of encryption.  The body of the email is readable though.  It looks similar to this below.  I am using Icewarp email server and the sender of this particular email was from Exchange or Office 365, not sure.  Is this caused from the sender?  Or is there something I can do on my end to stop the issue?  It doesn't happen all of the time- its at random from different sending domains.

SFV:NSPM;SFS:(10009001)(189002)(199002)(69234005)(40134004)(2656002)(74316001)(81686001)(19580405001)(86362001)(81816001)(54316002)(56776001)(15975445006)(18206015023)(93516002)(76482001)(63696002)(77096001)(15395725003)(87266001)(16236675002)(518
      56001)(76786001)(46102001)(76796001)(94316002)(66066001)(65816001)(19617315010)(54356001)(80022001)(53806001)(19580395003)(4396001)(19300405004)(74706001)(74876001)(83322001)(95416001)(33646001)(76576001)(19618595001)(83072002)(19618635001)(949460
      01)(80976001)(87936001)(15202345003)(92566001)(49866001)(56816005)(47736001)(47976001)(76176001)(77982001)(90146001)(59766001)(85852003)(17760045001)(79102001)(69226001)(74502001)(19609705001)(31966008)(74662001)(74366001)(85306002)(93136001)(8134
      2001)(50986001)(47446002)(81542001
0
Comment
Question by:W2Market
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 39896852
Did it have "X-Forefront-Antispam-Report-Untrusted: " in front of it?  More info: http://www.gossamer-threads.com/lists/spamassassin/users/180618

What problem is it causing you?
0
 

Author Comment

by:W2Market
ID: 39900530
It does not have "X-Forefront-Antispam-Report-Untrusted:  in any of it.

It is not causing any problems that I can tell.  As an email provider though, I want to determine if this is happening from the sender or if there is something I can do on my mail server to stop it.  Basically I just want an explanation on what is causing it so that I can relay that to my clients.
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 39901069
I wouldn't worry about it then.  Since it is apparently put there by someone else's spam/anti-spam tracking software, you would have to stop accepting email from them to stop it.  Seems like everyone wants to put their 'stamp' in the headers to show that they have checked it.  Often short messages have more characters in the headers than in the text of the message.  Many anti-virus programs put a couple of lines in the headers too.
0
MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

 

Author Comment

by:W2Market
ID: 39901097
It is more in depth than that.  I think that it has to do with base64 encoding and the email client not able to decode the message properly.  does anyone have experiance with Exchange that could enlighten me on this?  I read this on Microsoft's site and it sounds ver similar to my issue:
This problem occurs because Exchange Server 2003 sets the PR_INTERNET_CPID property to the UTF-8 character set. The PR_INTERNET_CPID property is a superset for any header field character set and body field character set. When a message uses two different language groups, Outlook tries to display the body of the message in UTF-8. Therefore, the body of the message is garbled.
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 39901113
This search https://www.google.com/search?q=SFV%3ANSPM%3BSFS%3A will bring up a lot of pages referencing 'SFV:NSPM;SFS:'.

MXToolbox has a lot email related features on their site including this Email Header Analyzer:  http://mxtoolbox.com/EmailHeaders.aspx
0
 

Author Comment

by:W2Market
ID: 39943117
I spoke with our Firewall/SpamFilter provider and it is possible that it is a bug in the software version.  After it checks for Spam it is not always closing the header properly so the entire message gets corrupt.  I will be upgrading the software soon to see if it will fix it.
0
 
LVL 83

Assisted Solution

by:Dave Baldwin
Dave Baldwin earned 500 total points
ID: 39943165
I've seen that problem with some anti-virus programs in the past.  Emails in that case were appearing blank until you looked at the source and could that all the content was there but not displayed because of broken headers or boundaries.
0
 

Accepted Solution

by:
W2Market earned 0 total points
ID: 40114938
The Problem ended up being a bug in our firewall software that was corrupting the email header.  After upgrading to the latest version it was fixed!
0
 

Author Closing Comment

by:W2Market
ID: 40124007
The issue was being caused by our own firewall.
0

Featured Post

Secure Your Active Directory - April 20, 2017

Active Directory plays a critical role in your company’s IT infrastructure and keeping it secure in today’s hacker-infested world is a must.
Microsoft published 300+ pages of guidance, but who has the time, money, and resources to implement? Register now to find an easier way.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Connectivity issues after power outage 5 64
Dell PowerConnect 2824 w/ two DHCP 6 54
Can't access router with user and pass 10 80
Blocking outside IP Addresses 16 56
Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question