[Mimedefang] Mangled Message

[jbird at micron.com]

	We started seeing problems similar to those that you describe
after upgrading from Exchange 5.5 to Exchange 2000.  Ultimately the
problem (for us anyway) was that a certain email client was building
really long header lines.  A 1000+ character To: line.  Once the client
was fixed to properly wrap the To: line we no longer had problems with
header lines ending up in the body.  The strange thing was that the
first Exchange server to receive the message had no problems.  However
if some recipients were on other Exchanges servers (first Exchange
routes a copy to a second server) the recipients on the second server
saw the problem.

Hope that helps.

John Bird

-----Original Message-----
From: mimedefang-bounces at lists.roaringpenguin.com
[mailto:mimedefang-bounces at lists.roaringpenguin.com] On Behalf Of Fred
Felgenhauer
Sent: Wed, 12 May, 2004 11:24
To: mimedefang at lists.roaringpenguin.com
Subject: [Mimedefang] Mangled Message


Has anyone seen this happen?  All of the header info appears in the
message body.

Since the X-Spam-Flag header is in the body and not the header, the

message is not Spam anymore!

Below is how the message shows up in the mail client.

This only happens rarely on one box.

MD/SA/Sendmail box relays to Exchange 2000 with rule.dll server side

rules looking for X-Spam-Flag Header.

Anybody seen anything similar?


From: Henry Parsons [mailto:ncyyytytgte at yahoo.co.uk]
Sent: None
To: Matson, Bruce H.
Subject: free digital cable celibacy grout whirligig

Date: Mon, 10 May 2004 02:00:53 +0600 EST
Message-ID: <9406903.94.211 at tout24-vk84.overture.com>
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------=_1084173322-19309-485"
X-Spam-Score: 14.8 (**************)
CLICK_BELOW,EXCUSE_14,FOR_FREE,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_B
ASE64_ILLEGAL,MIME_BASE64_TEXT,MIME_HTML_NO_CHARSET,MIME_HTML_ONLY,MIME_
HTML_ONLY_MULTI,NEW_DOLLARS,NEW_EXCLAM,NEW_FREE,NEW_LCOST,OFFERS_ETC,RCV
D_IN_RFCI,REMOVE_PAGE,SUB_FREE_OFFER
X-Spam-Flag: YES
X-Scanned-By: MIMEDefang 2.39
Return-Path: ncyyytytgte at yahoo.co.uk
X-OriginalArrivalTime: 10 May 2004 07:15:22.0606 (UTC)
FILETIME=[8EEED8E0:01C4365E]

This is a multi-part message in MIME format...

------------=_1084173322-19309-485
Content-Type: multipart/alternative; boundary="--076203815710757793"
Content-Transfer-Encoding: binary

This is a multi-part message in MIME format...

----076203815710757793
Content-Type: text/html;
Content-Transfer-Encoding: base64
Content-Disposition: inline

TmV4dCBHZW5lcmF0aW9uIFBQViBEZXZpY2UuLi4uLg0KDQpObyBNb3JlIFBh
eWluZyBmb3IgTW92aWVzICYgRXZlbnRzIG9uIENBQkxFIQ0KDQpGcmVlIFRW
IGlzIEhlcmUhDQoNCk5FVyEhISEgLS0tICAgIEVsaW1pbmF0ZSBDYWJsZSBC

_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang
mailing list MIMEDefang at lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang