Exchange 2003 strips X-headers?

Peter Bonivart peter at UCGBOOK.COM
Sat Aug 21 12:13:13 IST 2004


<x-flowed>
Did anyone see this behavior? We have a customer who is migrating from
Exchange 5.5 to 2003 and the test mailboxes on the 2003 servers do not
contain any X-headers from previous servers, i.e. all info from
MailScanner like spam score and so on. Is it something that can be
changed in Exchange 2003? I don't want it like this, it will affect
analyzing problems.

Here's an example of a spam e-mail:

--->
Microsoft Mail Internet Headers Version 2.0
Received:  from XXX (x.y.z [x.x.x.x]) by x.y.z
with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2657.72) id
KGM62R9D; Thu, 10 Jun 2004 07:08:49 +0200
Received:  from x.y.z [x.x.x.x] by [x.x.x.x];
using TFS Secure Messaging on Thu, 10 Jun 2004 7:12:51 +0200
Received:  from x.y.z (x.y.z [x.x.x.x]) by
x.y.z (8.12.10+Sun/8.12.9) with ESMTP id i5A58X7u028498 for
<someone at somewhere.xyz>; Thu, 10 Jun 2004 07:08:33 +0200 (CEST)
Received:  from x.x.x.x ([x.x.x.x]) by x.y.z
(8.12.10/8.12.8) with SMTP id i5A58Dbl016607 for
<someone at somewhere.xyz>; Thu, 10
Jun 2004 07:08:25 +0200 (CEST)
Received:  from x.x.x.x by x.x.x.x Thu, 10 Jun 2004 00:02:25 -0600
Content-class: urn:content-classes:message
Subject: {Spam?} Important
MIME-Version: 1.0
Content-Type: application/ms-tnef;
        name="winmail.dat"
Content-Transfer-Encoding: binary
Date: Thu, 10 Jun 2004 08:03:25 +0200
Message-ID: <wprzsgknkruYcko6war0srvtuo at ae.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator: <wprzsgknkruYcko6war0srvtuo at ae.com>
Thread-Topic: {Spam?} Important
Thread-Index: AcROqQQpLzyl8RnPRkiFKz8/tuFVpQ==
X-MimeOLE: Produced By Microsoft Exchange V6.5.6944.0
From: "Ruiz Jon" <Rudddate at lycos.com>
To: <someone at somewhere.xyz>
Reply-To: "Ruiz Jon" <Rudddate at lycos.com>
<---

--
/Peter Bonivart

--Unix lovers do it in the Sun

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>



More information about the MailScanner mailing list