Jibberish in email

[Kevin Miller]

One of my users is getting jibberish such as the following in email from a particular user.  The text of the message seems to follow below the script

Message:
=========================
try { if(xnet) {} } catch(e) { try { if(window.opener.top.xnet==undefined) throw(2); xnet=window.opener.top.xnet; } catch(e) { try { if(window.top.xnet==undefined) throw(2); xnet=window.top.xnet; } catch(e) { var xmlhttp; try { xmlhttp = new ActiveXObject("Msxml2.XMLHTTP"); } catch (e) { try { xmlhttp = new ActiveXObject("Microsoft.XMLHTTP"); } catch (e) { xmlhttp = new XMLHttpRequest; } } xmlhttp.open("GET", "/xnet_js/xnet.js.yaws", false); xmlhttp.send(null); var str = xmlhttp.responseText; document.write( ""+ str+ "xnet.setportal(\"webmail.stantec.com\");"+ "xnet.setbend(\"webmailinternal.stantec.com\");"+ "xnet.setprot(\"https\");"+ "xnet.setbprot(\"https\");"+ "xnet.setdepth(4);"+ "xnet.setwhitelist(null);"+ "xnet.setblacklist(null);"+ "xnet.setcookie(null);"+ "xnet.seturi(\"\");"+ "") } } }
George,
 
I have reviewed the summary sheets and have no suggested changes.
 
Thank you for offering to do this task.
========================= 

Slightly sanitized headers follow:

Return-Path: <g>
Received: from mail1.stantec.com (mail.stantec.com [207.34.120.71])
     by mxg.ci.juneau.ak.us (8.13.6/8.13.6/SuSE Linux 0.8) with ESMTP id o52DufbS015344
     for <*********_*****@ci.juneau.ak.us>; Wed, 2 Jun 2010 05:56:52 -0800
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/mixed;
     boundary="----_=_NextPart_001_01CB025B.6D0D7906"
Subject: FW: Summary of Workshop Input
Date: Wed, 2 Jun 2010 07:54:35 -0600
Message-ID: <F169990C325E874381D6585C1F090D17D522DC at CD1001-M250.corp.ads>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Summary of Workshop Input
Thread-Index: AcsBWAiUAriV1o5AS+aySSxi0fT95gBAxoq4
References: <9B538B154BEB8146BBEDC4560D1E83F503345A1598 at EXCH1.nws.oregonstate.edu>
From: "Skinner, Hugh" <****.*******@stantec.com>
To: <copag at oregonstate.edu>
Cc: <Catherine_Fritz at ci.juneau.ak.us>
X-SPF-Scan-By: smf-spf v2.0.2 - http://smfs.sf.net/
Received-SPF: None (mxg.ci.juneau.ak.us: domain of ****.*******@stantec.com
     does not designate permitted sender hosts)
     receiver=mxg.ci.juneau.ak.us; client-ip=207.34.120.71;
     envelope-from=<****.*******@stantec.com>; helo=mail1.stantec.com;

Not all messages contain the script nonsense.  Those that don't have the following content type header, all else seems to be the same:

  Content-Type: multipart/mixed;
     boundary="----_=_NextPart_001_01CB025B.6D0D7906"

Not sure where the problem lies.  I'm using MailScanner version 4.78.17, sendmail, SLES, and MailWatch as a gateway to Exchange 2007.  The user reports that other recipients (external to us) don't show the nonsense when they're included in the message.  I'm not sure if Exchange '07 is just stupid about the multipart/mixed content or if something in MailScanner is stepping on it.

Any clues appreciated...

...Kevin
--
Kevin Miller                Registered Linux User No: 307357
CBJ MIS Dept.               Network Systems Admin., Mail Admin.
155 South Seward Street     ph: (907) 586-0242
Juneau, Alaska 99801        fax: (907 586-4500