[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Email header information not visible to Admin1 yet is visible to Admin2 (at another company).

Posted on 2014-07-21
4
Medium Priority
?
273 Views
Last Modified: 2014-08-06
Howdy Guys, I've spent too much time on this and now it's time to ask if any of you have run across this?
What's the cause? How to correct? Why the difference in ordering of the information if we are both using OL 2013?

User A received an email (msg1), to trouble shoot I forwarded it (as an attachment) to myself (admin 1).  When I view the msg , there is no information regarding disposition of the attachments.  I thought I was seeing the entire  until I enlisted the assistance of the admin from the senders company (admin2).  I forwarded msg1 to admin2, he views its  and sees more information that shows the disposition of the attachments.  The very information I needed.  

e: Our exchange servers have been upgraded to EX2k7 Sp3 RU13 since receiving the email.

The portion I don't see that concerns me the most is in bold, in the as seen by admin2 section.

I am using Outlook 2013 to view the header info, as is admin2.

Thanks,
  SFraz777  


As viewed by myself (admin1):
*************************************************************************************************
Received: from server1.mydomain.net (192.x.x.x) by server2.mydomain.net
 (192.x.x.x) with Microsoft SMTP Server (TLS) id 8.3.83.0; Mon, 14 Jul
 2014 16:45:46 -0700
Received: from barracuda.sendersdomain.net (216.x.x.x) by
 externalname.mydomain.com (192.x.x.x.x) with Microsoft SMTP Server id 8.3.83.0; Mon,
 14 Jul 2014 16:45:46 -0700
X-ASG-Debug-ID: 1405381506-487c00040000-ljo6eS
X-Barracuda-URL: http://192.x.x.x:8000/cgi-bin/mark.cgi
Received: from server.sendersdomain.com (localhost [127.0.0.1])      by
 barracuda.sendersdomain.net (Spam & Virus Firewall) with ESMTP      id
 05BFB1288CB; Mon, 14 Jul 2014 16:45:06 -0700 (PDT)
Received: from server.sendersdomain.com ([192.x.x.x]) by
 barracuda.sendersdomain.net with ESMTP id Te1LCjooxDUKngzp; Mon, 14 Jul
 2014 16:45:06 -0700 (PDT)
X-Barracuda-Envelope-From: sender@sendersdomain.net
X-Barracuda-RBL-Trusted-Forwarder: 192.x.x.x
X-Barracuda-RBL-Trusted-Forwarder: 192.x.x.x
X-Barracuda-RBL-Trusted-Forwarder: 192.x.x.x
X-ASG-Whitelist: Client
Received: from server.sendersdomain.com ([fe80::X:X:X:X]) by
 server.sendersdomain.com ([fe80::X:X:X:X%10]) with mapi; Mon, 14
 Jul 2014 16:45:02 -0700
From: Senders Name <sender@sendersdomain.net>
To: Receipient <recipient1@mydomain.COM>
CC: someone else <someonelse1@sendersdomain.net>, "Someone Else2"
      <someoneelse2@aherdomain.com>, Aher Recipient <recipient2@mydomain.com>,
      "someoneelse3" <someoneelse3@ssendersdomain.net>
Date: Mon, 14 Jul 2014 16:44:58 -0700
X-ASG-Orig-Subj: RE: Message 3 of 3
Subject: RE: Message 3 of 3
Thread-Topic: Message 3 of 3
Thread-Index: Ac+fvZ7pp58Kj9gcRZKGkj5V1//2MQ==
Message-ID: <81ADD836D8A74441970D0E7DF81888564BACA90E62@server.sendersdomain.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: multipart/mixed;
      boundary="_007_81ADD836D8A74441970D0E7DF81888564BACA90E62sendersstringident_"
MIME-Version: 1.0
X-Barracuda-Connect: UNKNOWN[192.x.x.x]
X-Barracuda-Start-Time: 1405381511
X-Barracuda-Virus-Scanned: by Barracuda Spam & Virus Firewall at sendersdomain.net
Return-Path: sender@sendersdomain.net




 As viewed by admin2:
*************************************************************************************************
Received: from server1.mydomain.NET (192.x.x.x) by server2.mydomain.NET
(192.x.x.x) with Microsoft SMTP Server (TLS) id 8.3.83.0; Mon, 14 Jul
2014 16:45:46 -0700
Received: from barracuda.sendersdomain.net (216.x.x.x) by
externalname.mydomain.com (192.x.x.x) with Microsoft SMTP Server id 8.3.83.0; Mon,
14 Jul 2014 16:45:46 -0700
Received: from server.sendersdomain.com (localhost [127.0.0.1])              by
barracuda.sendersdomain.net (Spam & Virus Firewall) with ESMTP         id
05BFB1288CB; Mon, 14 Jul 2014 16:45:06 -0700 (PDT)
Received: from server.sendersdomain.com ([192.x.x.x]) by
barracuda.sendersdomain.net with ESMTP id Te1LCjooxDUKngzp; Mon, 14 Jul
2014 16:45:06 -0700 (PDT)
Received: from server.sendersdomain.com ([fe80::x:x:x:x]) by
server.sendersdomain.com ([fe80::x:x:x:x%10]) with mapi; Mon, 14
Jul 2014 16:45:02 -0700
From: Senders Name <sender@sendersdomain.net>
To: Recipient <recipient1@mydomain.COM>
CC: someone else <someoneelse@sendersdomain.net>, "Someone Else2"
                <someone.else2@aherdomain.com>, Aher Recipient <recipient2@mydomain.com>,
            "someone else3 <someoneelse3@sendersdomain.net>
Date: Mon, 14 Jul 2014 16:44:58 -0700
Subject: RE: Message 3 of 3
Thread-Topic: Message 3 of 3
Thread-Index: Ac+fvZ7pp58Kj9gcRZKGkj5V1//2MQ==
Message-ID: <81ADD836D8A74441970D0E7DF81888564BACA90E62@server.sendersdomain.com>
Accept-Language: en-US
Content-Language: en-US
x-microsoft-classified: true
: Attachment Removed
x-microsoft-classDesc: An attachment was removed from this e-mail message
because the attachment was determined to pose a possible security risk.
x-microsoft-classID: a4bb0cb2-4395-4d18-9799-1f904b20fe92
X-MS-Exchange-Organization-AuthSource: server1.mydomain.NET

X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
acceptlanguage: en-US
x-barracuda-connect: UNKNOWN[192.x.x.x]
x-asg-orig-subj: RE: Message 3 of 3
x-asg-debug-id: 1405381506-487c00040000-ljo6eS
x-barracuda-url: http://192.x.x.x:8000/cgi-bin/mark.cgi
x-barracuda-virus-scanned: by Barracuda Spam & Virus Firewall at sendersdomain.net
x-barracuda-start-time: 1405381511
x-asg-whitelist: Client
x-barracuda-rbl-trusted-forwarder: 192.x.x.x
x-barracuda-envelope-from: sender@sendersdomain.net
Content-Type: multipart/mixed;
                boundary="_007_81ADD836D8A74441970D0E7DF81888564BACA90E62sendersstringident_"
MIME-Version: 1.0
0
Comment
Question by:SFraz777
  • 3
4 Comments
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 40212600
Just to confirm. Did he get this expanded header information from the message you forwarded him? Or did he get it by going to his own user/system/original sent message?

I am just wondering if the attachment was removed on his side when it was sending out from his system. I see a Barracuda in play here. Is that yours or his? His outbound filtering may have stripped the attachment. So, it may have reached your network without an attachment. Your Exchange server may have had no knowledge an attachment ever existed.
0
 

Author Comment

by:SFraz777
ID: 40212945
The expanded header information is from the message I forwarded to him (as an attachment).
Expanded header indicates that the attachments were stripped out by my ET server ("server.mydomain.net").
The Barracuda devices belong to the message originator.
The message did arrive with a header.
0
 

Accepted Solution

by:
SFraz777 earned 0 total points
ID: 40235321
Install Thunderbird and use the "View Source" option.  You can then view the entire header,  The extension ExQuilla may be required for your environment.
0
 

Author Closing Comment

by:SFraz777
ID: 40243204
This is the only way I have found to view the entire header since Outlook apparently does not always display all the information.  This method has been tested and the information outlook is filtering is viewable.  No one here offered any solutions and this conclusion was reached with the assistance of a colleague elsewhere.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to effectively resolve the number one email related issue received by helpdesks.
In this post, I will showcase the steps for how to create groups in Office 365. Office 365 groups allow for ease of flexibility and collaboration between staff members.
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.
Suggested Courses
Course of the Month18 days, 16 hours left to enroll

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question