Exchange 2003 strips X-headers?

[Anders Andersson, IT]

> -----Ursprungligt meddelande-----
> Från: Peter Bonivart [mailto:peter at UCGBOOK.COM] 
> Did anyone see this behavior? We have a customer who is 
> migrating from Exchange 5.5 to 2003 and the test mailboxes on 
> the 2003 servers do not contain any X-headers from previous 
> servers, i.e. all info from MailScanner like spam score and 
> so on. Is it something that can be changed in Exchange 2003? 
> I don't want it like this, it will affect analyzing problems.

Ive seen that after we did the migration ie not in native mode yet but soon.
I didnt find any real reason for it but after restarting IMC on 5.5 and the
new 2003 server we got them back. I think it has something to do with the
old problem that 5.5 removes headers after resending a mail. Since 5.5 dont
use smtp internaly I think it get confused when sending to 2003.
So the solution for e was to to restart the servises and we got the headers
back  =)
> 
> Here's an example of a spam e-mail:
> 
> --->
> Microsoft Mail Internet Headers Version 2.0
> Received:  from XXX (x.y.z [x.x.x.x]) by x.y.z with SMTP 
> (Microsoft Exchange Internet Mail Service Version 
> 5.5.2657.72) id KGM62R9D; Thu, 10 Jun 2004 07:08:49 +0200
> Received:  from x.y.z [x.x.x.x] by [x.x.x.x]; using TFS 
> Secure Messaging on Thu, 10 Jun 2004 7:12:51 +0200
> Received:  from x.y.z (x.y.z [x.x.x.x]) by x.y.z 
> (8.12.10+Sun/8.12.9) with ESMTP id i5A58X7u028498 for 
> <someone at somewhere.xyz>; Thu, 10 Jun 2004 07:08:33 +0200 (CEST)
> Received:  from x.x.x.x ([x.x.x.x]) by x.y.z
> (8.12.10/8.12.8) with SMTP id i5A58Dbl016607 for 
> <someone at somewhere.xyz>; Thu, 10 Jun 2004 07:08:25 +0200 (CEST)
> Received:  from x.x.x.x by x.x.x.x Thu, 10 Jun 2004 00:02:25 -0600
> Content-class: urn:content-classes:message
> Subject: {Spam?} Important
> MIME-Version: 1.0
> Content-Type: application/ms-tnef;
>         name="winmail.dat"
> Content-Transfer-Encoding: binary
> Date: Thu, 10 Jun 2004 08:03:25 +0200
> Message-ID: <wprzsgknkruYcko6war0srvtuo at ae.com>
> X-MS-Has-Attach:
> X-MS-TNEF-Correlator: <wprzsgknkruYcko6war0srvtuo at ae.com>
> Thread-Topic: {Spam?} Important
> Thread-Index: AcROqQQpLzyl8RnPRkiFKz8/tuFVpQ==
> X-MimeOLE: Produced By Microsoft Exchange V6.5.6944.0
> From: "Ruiz Jon" <Rudddate at lycos.com>
> To: <someone at somewhere.xyz>
> Reply-To: "Ruiz Jon" <Rudddate at lycos.com>
> <---
> 
> --
> /Peter Bonivart

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).