>I didn't save the message, the filename was weird like DOJEKGJE.EXE
>(characters made up) but it was unintelligible.

If it was an .EXE exension, then it would very likely be a virus.

>The first was this (with many more lines)
>
>1 6592
>2 7298
>3 7299
>4 7300
>5 7301
>6 7302
>7 7303
>8 7304
>9 7305
>10 7306
>11 7307
>12 7308

This looks suspiciously like part of a POP3 transaction.  A common way that a mail 
client will retrieve the E-mails is to send the username/password, and then issue a 
"LIST" command -- which will output a number indicating the sequence (starting at 1, 
incrementing by 1 for each E-mail) followed by the size.  If he (or someone else) had 
a bunch of E-mails about that length (7K or so including headers), this is almost 
certainly from a POP3 transaction.

Of course, that wouldn't explain whether the numbers came from the receiving client, 
IMail, or (less likely) the sending client.

>there are NO headers.  Nothing..  Nada.  Zilch...  absence of presence.
>void... null value

If that is truly the case, then IMail would be at fault.  It is required to at least 
add the "Received:" header, and it will also add a few others (Message-ID: and Date:, 
if not present, for example).

>> You can open it, look for the problem E-mail, and just above the
>> first header will be a line beginning with "From <" that will have the
>> date/time that IMail received it.  You can then check the log file for that
>> time and find the E-mail.
>
>I'll see what I can find, but with the absense of any header at all,
> it's difficult.

Imail will at least have a "From <..." line -- that's not part of the standard E-mail 
headers (there should normally be a "From: ..." later in the headers, but there will 
always be a "From <..." that IMail adds -- that's how it knows where a new E-mail 
begins in the mailbox).  The end of that "From <..." line will show the date/time, so 
you can check the logs to get a better idea of where the E-mail came from and whether 
or not it was corrupted at that point (you'll see the size in the logs, and can check 
to see if it matches the size of what is in the mailbox).


--
                      -Scott

Declude: Anti-virus and Anti-spam solutions for IMail.  http://www.declude.com
--

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to