Solved

Email hearder encoded

Posted on 2014-02-28
9
593 Views
Last Modified: 2014-06-10
Hi,

Sometimes I receive email in my Outlook client that has an encoded header followed be a string of encryption.  The body of the email is readable though.  It looks similar to this below.  I am using Icewarp email server and the sender of this particular email was from Exchange or Office 365, not sure.  Is this caused from the sender?  Or is there something I can do on my end to stop the issue?  It doesn't happen all of the time- its at random from different sending domains.

SFV:NSPM;SFS:(10009001)(189002)(199002)(69234005)(40134004)(2656002)(74316001)(81686001)(19580405001)(86362001)(81816001)(54316002)(56776001)(15975445006)(18206015023)(93516002)(76482001)(63696002)(77096001)(15395725003)(87266001)(16236675002)(518
      56001)(76786001)(46102001)(76796001)(94316002)(66066001)(65816001)(19617315010)(54356001)(80022001)(53806001)(19580395003)(4396001)(19300405004)(74706001)(74876001)(83322001)(95416001)(33646001)(76576001)(19618595001)(83072002)(19618635001)(949460
      01)(80976001)(87936001)(15202345003)(92566001)(49866001)(56816005)(47736001)(47976001)(76176001)(77982001)(90146001)(59766001)(85852003)(17760045001)(79102001)(69226001)(74502001)(19609705001)(31966008)(74662001)(74366001)(85306002)(93136001)(8134
      2001)(50986001)(47446002)(81542001
0
Comment
Question by:W2Market
  • 5
  • 4
9 Comments
 
LVL 82

Expert Comment

by:Dave Baldwin
Comment Utility
Did it have "X-Forefront-Antispam-Report-Untrusted: " in front of it?  More info: http://www.gossamer-threads.com/lists/spamassassin/users/180618

What problem is it causing you?
0
 

Author Comment

by:W2Market
Comment Utility
It does not have "X-Forefront-Antispam-Report-Untrusted:  in any of it.

It is not causing any problems that I can tell.  As an email provider though, I want to determine if this is happening from the sender or if there is something I can do on my mail server to stop it.  Basically I just want an explanation on what is causing it so that I can relay that to my clients.
0
 
LVL 82

Expert Comment

by:Dave Baldwin
Comment Utility
I wouldn't worry about it then.  Since it is apparently put there by someone else's spam/anti-spam tracking software, you would have to stop accepting email from them to stop it.  Seems like everyone wants to put their 'stamp' in the headers to show that they have checked it.  Often short messages have more characters in the headers than in the text of the message.  Many anti-virus programs put a couple of lines in the headers too.
0
 

Author Comment

by:W2Market
Comment Utility
It is more in depth than that.  I think that it has to do with base64 encoding and the email client not able to decode the message properly.  does anyone have experiance with Exchange that could enlighten me on this?  I read this on Microsoft's site and it sounds ver similar to my issue:
This problem occurs because Exchange Server 2003 sets the PR_INTERNET_CPID property to the UTF-8 character set. The PR_INTERNET_CPID property is a superset for any header field character set and body field character set. When a message uses two different language groups, Outlook tries to display the body of the message in UTF-8. Therefore, the body of the message is garbled.
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 82

Expert Comment

by:Dave Baldwin
Comment Utility
This search https://www.google.com/search?q=SFV%3ANSPM%3BSFS%3A will bring up a lot of pages referencing 'SFV:NSPM;SFS:'.

MXToolbox has a lot email related features on their site including this Email Header Analyzer:  http://mxtoolbox.com/EmailHeaders.aspx
0
 

Author Comment

by:W2Market
Comment Utility
I spoke with our Firewall/SpamFilter provider and it is possible that it is a bug in the software version.  After it checks for Spam it is not always closing the header properly so the entire message gets corrupt.  I will be upgrading the software soon to see if it will fix it.
0
 
LVL 82

Assisted Solution

by:Dave Baldwin
Dave Baldwin earned 500 total points
Comment Utility
I've seen that problem with some anti-virus programs in the past.  Emails in that case were appearing blank until you looked at the source and could that all the content was there but not displayed because of broken headers or boundaries.
0
 

Accepted Solution

by:
W2Market earned 0 total points
Comment Utility
The Problem ended up being a bug in our firewall software that was corrupting the email header.  After upgrading to the latest version it was fixed!
0
 

Author Closing Comment

by:W2Market
Comment Utility
The issue was being caused by our own firewall.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now