untagged messages

[hermit921]

At 01:40 PM 2/5/2004, Leland J. Steinke wrote:
>hermit921 wrote:
>>
>>Here is an example with headers and body, with a few changes to protect my
>>names and IP addresses.
>>
>>>Received: from mail3.me.com (mail3.me.com [a.b.c.d])
>>>         by mail.me.com (AIX4.3/8.9.3/8.9.3) with ESMTP id BAA97118
>>>         for <user at me.com>; Wed, 4 Feb 2004 01:37:42 -0800
>>>Received: from 66.148.68.10 (server10.enter7.com [66.148.68.10])
>>>         by mail3.me.com (Postfix) with SMTP id 7AC0B124003
>>>         for <bin at me.com>; Wed,  4 Feb 2004 01:37:35 -0800 (PST)
>>>Date: Wed, 04 Feb 2004 04:37:38 -0500
>>>From: "Norris <nvjzrbinj"@enter7.com
>>>Message-Id: <20040204093735.7AC0B124003 at mail3.me.com>
>>>To: undisclosed-recipients:;
>>>X-UIDL: >-9"!NO+!!Gmf"!$TC!!
>>>
>>>
>>>nurtoplpn at enter7.com
>
>Here is the complete message as quarantined on our MS server:
>
>==8<===8<===
>Received: from CM-vina1-134-59.cm.vtr.net (CM-vina1-134-59.cm.vtr.net
>[200.104.134.59])
>         by mx05.pa.net (Postfix) with SMTP id 6A140111526
>         for <xxxxxx at pa.net>; Wed,  4 Feb 2004 17:41:35 -0500 (EST)
>Received: from 183.240.155.128 by 200.104.134.59; Wed, 04 Feb 2004 21:38:34
>-0100
>Message-ID: <X[20
>Date: Wed,  4 Feb 2004 17:41:35 -0500 (EST)
>From: Russell_Omari053 at yahoo.com
>To: undisclosed-recipients:;
>==8<===8<===
>
>What I downloaded is as follows:
>
>==8<===8<===
> From - Wed Feb  4 17:42:24 2004
>X-Mozilla-Status2: 00000000
>Return-Path: <russell_omari053 at yahoo.com>
>Delivered-To: steinkel at pa.net
>Received: from [local delivery stuff irrelevant to the discussion]
>Received: from CM-vina1-134-59.cm.vtr.net (CM-vina1-134-59.cm.vtr.net
>[200.104.134.59])
>        by mx05.pa.net (Postfix) with SMTP id 6A140111526
>        for <xxxxx at pa.net>; Wed,  4 Feb 2004 17:41:35 -0500 (EST)
>Received: from 183.240.155.128 by 200.104.134.59; Wed, 04 Feb 2004 21:38:34
>-0100
>Message-ID: <X[20
>Date: Wed,  4 Feb 2004 17:41:35 -0500 (EST)
>From: Russell_Omari053 at yahoo.com
>To: undisclosed-recipients: ;
>
>
>Russell_Omari053 at yahoo.com
>==8<===8<===
>
>I notice that your From: header has an unmatched "<".  Coincidence?  I just
>hand-jammed a message over port 25 with a Message-ID similar to the one I
>received but all MS headers came through on the delivered message.
>
>Still a mystery.
>
>Leland

Good catch.  I checked the other message given me yesterday and it is
missing the same >.  But then I noticed it is inside the "" prepended to
@enter7.com.  Doesn't that make it some normal character and not a
delimiter? I can't see this From field in the maillog, so I can't tell how
often it happens.


>well, I shoved my original message through the mailscanner gauntlet again
>and here is what happened.
>
>The envelope sender was replicated as the (originally null) message body
>and the MS headers were nowhere to be seen.  I do not believe that this is
>a postfix issue, since I "netcat"ted the message to our smtp delivery
>server (also running postfix) directly and the message came through with no
>message body added.
>
>We are running 4.25-14.  If MailScanner were written in C, I would suspect
>pointer arithmetic gone awry.  Must...  test... more... tomorrow...
>
>Leland

I am glad you can replicate this problem of missing MS headers.  My mail
knowledge is insufficient for such things.

hermit921