Solved

Email hearder encoded

Posted on 2014-02-28
9
663 Views
Last Modified: 2014-06-10
Hi,

Sometimes I receive email in my Outlook client that has an encoded header followed be a string of encryption.  The body of the email is readable though.  It looks similar to this below.  I am using Icewarp email server and the sender of this particular email was from Exchange or Office 365, not sure.  Is this caused from the sender?  Or is there something I can do on my end to stop the issue?  It doesn't happen all of the time- its at random from different sending domains.

SFV:NSPM;SFS:(10009001)(189002)(199002)(69234005)(40134004)(2656002)(74316001)(81686001)(19580405001)(86362001)(81816001)(54316002)(56776001)(15975445006)(18206015023)(93516002)(76482001)(63696002)(77096001)(15395725003)(87266001)(16236675002)(518
      56001)(76786001)(46102001)(76796001)(94316002)(66066001)(65816001)(19617315010)(54356001)(80022001)(53806001)(19580395003)(4396001)(19300405004)(74706001)(74876001)(83322001)(95416001)(33646001)(76576001)(19618595001)(83072002)(19618635001)(949460
      01)(80976001)(87936001)(15202345003)(92566001)(49866001)(56816005)(47736001)(47976001)(76176001)(77982001)(90146001)(59766001)(85852003)(17760045001)(79102001)(69226001)(74502001)(19609705001)(31966008)(74662001)(74366001)(85306002)(93136001)(8134
      2001)(50986001)(47446002)(81542001
0
Comment
Question by:W2Market
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 39896852
Did it have "X-Forefront-Antispam-Report-Untrusted: " in front of it?  More info: http://www.gossamer-threads.com/lists/spamassassin/users/180618

What problem is it causing you?
0
 

Author Comment

by:W2Market
ID: 39900530
It does not have "X-Forefront-Antispam-Report-Untrusted:  in any of it.

It is not causing any problems that I can tell.  As an email provider though, I want to determine if this is happening from the sender or if there is something I can do on my mail server to stop it.  Basically I just want an explanation on what is causing it so that I can relay that to my clients.
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 39901069
I wouldn't worry about it then.  Since it is apparently put there by someone else's spam/anti-spam tracking software, you would have to stop accepting email from them to stop it.  Seems like everyone wants to put their 'stamp' in the headers to show that they have checked it.  Often short messages have more characters in the headers than in the text of the message.  Many anti-virus programs put a couple of lines in the headers too.
0
Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

 

Author Comment

by:W2Market
ID: 39901097
It is more in depth than that.  I think that it has to do with base64 encoding and the email client not able to decode the message properly.  does anyone have experiance with Exchange that could enlighten me on this?  I read this on Microsoft's site and it sounds ver similar to my issue:
This problem occurs because Exchange Server 2003 sets the PR_INTERNET_CPID property to the UTF-8 character set. The PR_INTERNET_CPID property is a superset for any header field character set and body field character set. When a message uses two different language groups, Outlook tries to display the body of the message in UTF-8. Therefore, the body of the message is garbled.
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 39901113
This search https://www.google.com/search?q=SFV%3ANSPM%3BSFS%3A will bring up a lot of pages referencing 'SFV:NSPM;SFS:'.

MXToolbox has a lot email related features on their site including this Email Header Analyzer:  http://mxtoolbox.com/EmailHeaders.aspx
0
 

Author Comment

by:W2Market
ID: 39943117
I spoke with our Firewall/SpamFilter provider and it is possible that it is a bug in the software version.  After it checks for Spam it is not always closing the header properly so the entire message gets corrupt.  I will be upgrading the software soon to see if it will fix it.
0
 
LVL 83

Assisted Solution

by:Dave Baldwin
Dave Baldwin earned 500 total points
ID: 39943165
I've seen that problem with some anti-virus programs in the past.  Emails in that case were appearing blank until you looked at the source and could that all the content was there but not displayed because of broken headers or boundaries.
0
 

Accepted Solution

by:
W2Market earned 0 total points
ID: 40114938
The Problem ended up being a bug in our firewall software that was corrupting the email header.  After upgrading to the latest version it was fixed!
0
 

Author Closing Comment

by:W2Market
ID: 40124007
The issue was being caused by our own firewall.
0

Featured Post

Creating Instructional Tutorials  

For Any Use & On Any Platform

Contextual Guidance at the moment of need helps your employees/users adopt software o& achieve even the most complex tasks instantly. Boost knowledge retention, software adoption & employee engagement with easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question