Solved

Email hearder encoded

Posted on 2014-02-28
9
608 Views
Last Modified: 2014-06-10
Hi,

Sometimes I receive email in my Outlook client that has an encoded header followed be a string of encryption.  The body of the email is readable though.  It looks similar to this below.  I am using Icewarp email server and the sender of this particular email was from Exchange or Office 365, not sure.  Is this caused from the sender?  Or is there something I can do on my end to stop the issue?  It doesn't happen all of the time- its at random from different sending domains.

SFV:NSPM;SFS:(10009001)(189002)(199002)(69234005)(40134004)(2656002)(74316001)(81686001)(19580405001)(86362001)(81816001)(54316002)(56776001)(15975445006)(18206015023)(93516002)(76482001)(63696002)(77096001)(15395725003)(87266001)(16236675002)(518
      56001)(76786001)(46102001)(76796001)(94316002)(66066001)(65816001)(19617315010)(54356001)(80022001)(53806001)(19580395003)(4396001)(19300405004)(74706001)(74876001)(83322001)(95416001)(33646001)(76576001)(19618595001)(83072002)(19618635001)(949460
      01)(80976001)(87936001)(15202345003)(92566001)(49866001)(56816005)(47736001)(47976001)(76176001)(77982001)(90146001)(59766001)(85852003)(17760045001)(79102001)(69226001)(74502001)(19609705001)(31966008)(74662001)(74366001)(85306002)(93136001)(8134
      2001)(50986001)(47446002)(81542001
0
Comment
Question by:W2Market
  • 5
  • 4
9 Comments
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 39896852
Did it have "X-Forefront-Antispam-Report-Untrusted: " in front of it?  More info: http://www.gossamer-threads.com/lists/spamassassin/users/180618

What problem is it causing you?
0
 

Author Comment

by:W2Market
ID: 39900530
It does not have "X-Forefront-Antispam-Report-Untrusted:  in any of it.

It is not causing any problems that I can tell.  As an email provider though, I want to determine if this is happening from the sender or if there is something I can do on my mail server to stop it.  Basically I just want an explanation on what is causing it so that I can relay that to my clients.
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 39901069
I wouldn't worry about it then.  Since it is apparently put there by someone else's spam/anti-spam tracking software, you would have to stop accepting email from them to stop it.  Seems like everyone wants to put their 'stamp' in the headers to show that they have checked it.  Often short messages have more characters in the headers than in the text of the message.  Many anti-virus programs put a couple of lines in the headers too.
0
 

Author Comment

by:W2Market
ID: 39901097
It is more in depth than that.  I think that it has to do with base64 encoding and the email client not able to decode the message properly.  does anyone have experiance with Exchange that could enlighten me on this?  I read this on Microsoft's site and it sounds ver similar to my issue:
This problem occurs because Exchange Server 2003 sets the PR_INTERNET_CPID property to the UTF-8 character set. The PR_INTERNET_CPID property is a superset for any header field character set and body field character set. When a message uses two different language groups, Outlook tries to display the body of the message in UTF-8. Therefore, the body of the message is garbled.
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 39901113
This search https://www.google.com/search?q=SFV%3ANSPM%3BSFS%3A will bring up a lot of pages referencing 'SFV:NSPM;SFS:'.

MXToolbox has a lot email related features on their site including this Email Header Analyzer:  http://mxtoolbox.com/EmailHeaders.aspx
0
 

Author Comment

by:W2Market
ID: 39943117
I spoke with our Firewall/SpamFilter provider and it is possible that it is a bug in the software version.  After it checks for Spam it is not always closing the header properly so the entire message gets corrupt.  I will be upgrading the software soon to see if it will fix it.
0
 
LVL 83

Assisted Solution

by:Dave Baldwin
Dave Baldwin earned 500 total points
ID: 39943165
I've seen that problem with some anti-virus programs in the past.  Emails in that case were appearing blank until you looked at the source and could that all the content was there but not displayed because of broken headers or boundaries.
0
 

Accepted Solution

by:
W2Market earned 0 total points
ID: 40114938
The Problem ended up being a bug in our firewall software that was corrupting the email header.  After upgrading to the latest version it was fixed!
0
 

Author Closing Comment

by:W2Market
ID: 40124007
The issue was being caused by our own firewall.
0

Featured Post

Save on storage to protect fatherhood memories

You're the dad who has everything. This Father's Day, make sure your family memories are protected. My Passport Ultra has automatic backup and password protection to keep your cherished photos and videos safe. With up to 3TB, you have plenty of room to hold the adventures ahead.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now