From: JGurtz on
A related post in a programing forum is here (with no answer):
http://social.msdn.microsoft.com/Forums/en-US/vsto/thread/61a98015-24a4-472c-a100-37b1e99d4ce4

After upgrading to 2010 recently I have discovered a significant problem in
trying to submit spam/ham reports to the Cisco/Ironport automated submission
system (they want RFC 822 attachment). Crucialy, they are missing the

No matter what method I try (ctrl+alt+f, or drag msg attaching to new msg,
or using spamgrabber COM add-in) some Internet headers are being stripped
when I forward the message as an attachment.

Headers AFTER forwarded:

Received: from mxgateway.npumail.com ([192.168.2.10]) by
exchgsrv.nputilities.local with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 May
2010 18:19:03 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: base64
Received: from tus1smtoutpex02.symantec.com ([216.10.195.242]) by
mxgateway.npumail.com with ESMTP; 18 May 2010 18:18:57 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5
Received: from tus1opsmtapin02.ges.symantec.com
(tus1opsmtapin02.ges.symantec.com [192.168.214.44]) by (Symantec Brightmail
Gateway out) with SMTP id C9.4B.27235.F5D03FB4; Tue, 18 May 2010 14:57:52
-0700 (MST)
Received: from reserved-155-64-230-18.ges.symantec.com ([155.64.230.18]
helo=TUS1XCHECNPIN01.enterprise.veritas.com) by
tus1opsmtapin02.ges.symantec.com with esmtp (Exim 4.67) (envelope-from
<Chris_Austin(a)symantec.com>) id 1OEUmY-0000F2-7K; Tue, 18 May 2010 14:56:58
-0700
Received: from TUS1XCHEVSPIN04.enterprise.veritas.com ([155.64.230.53]) by
TUS1XCHECNPIN01.enterprise.veritas.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 14:56:57 -0700
Content-class: urn:content-classes:message
Subject: Learn How Symantec spams its customers Webcast.
Date: Tue, 18 May 2010 17:58:10 -0400
Message-ID:
<1BF6BA633BDC0E48B81213232B41E615A997B6(a)TUS1XCHCLUPIN09.enterprise.veritas.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Learn How Symantec spams its customers Webcast.
Thread-Index: Acr2qeWaE/cQLtszSauixh7WqOhtNwACya8w
From: "Chris Austin" <Chris_Austin(a)symantec.com>
To: "Chris Austin" <Chris_Austin(a)symantec.com>


ACTUAL Headers:

Microsoft Mail Internet Headers Version 2.0
Received: from mxgateway.npumail.com ([192.168.2.10]) by
exchgsrv.nputilities.local with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 18:19:03 -0400
Subject: Learn How Symantec spams its customers Webcast.
Authentication-Results: mxgateway.npumail.com; dkim=neutral (message not
signed) header.i=none
Received-SPF: None identity=pra; client-ip=216.10.195.242;
receiver=npumail.com;
envelope-from="Chris_Austin(a)symantec.com";
x-sender="Chris_Austin(a)symantec.com";
x-conformance=sidf_compatible
Received-SPF: Pass identity=mailfrom; client-ip=216.10.195.242;
receiver=npumail.com;
envelope-from="Chris_Austin(a)symantec.com";
x-sender="Chris_Austin(a)symantec.com";
x-conformance=sidf_compatible;
x-record-type="v=spf1"
Received-SPF: None identity=helo; client-ip=216.10.195.242;
receiver=npumail.com;
envelope-from="Chris_Austin(a)symantec.com";
x-sender="postmaster(a)tus1smtoutpex02.symantec.com";
x-conformance=sidf_compatible
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
AvQCAHmv8kvYCsPymWdsb2JhbACBPoFVBJoBbxUBAQEBAQgLCgcRIqsgg1ONHYJ1gTFqBINA
X-IronPort-AV: E=Sophos;i="4.53,258,1272859200";
d="scan'208,217";a="1861722"
Received: from tus1smtoutpex02.symantec.com ([216.10.195.242])
by mxgateway.npumail.com with ESMTP; 18 May 2010 18:18:57 -0400
X-AuditID: d80ac3f2-b7cd2ae000006a63-3a-4bf30d5f67ff
Received: from tus1opsmtapin02.ges.symantec.com
(tus1opsmtapin02.ges.symantec.com [192.168.214.44])
by (Symantec Brightmail Gateway out) with SMTP id C9.4B.27235.F5D03FB4;
Tue, 18 May 2010 14:57:52 -0700 (MST)
Received: from reserved-155-64-230-18.ges.symantec.com ([155.64.230.18]
helo=TUS1XCHECNPIN01.enterprise.veritas.com)
by tus1opsmtapin02.ges.symantec.com with esmtp (Exim 4.67)
(envelope-from <Chris_Austin(a)symantec.com>)
id 1OEUmY-0000F2-7K; Tue, 18 May 2010 14:56:58 -0700
Received: from TUS1XCHEVSPIN04.enterprise.veritas.com ([155.64.230.53]) by
TUS1XCHECNPIN01.enterprise.veritas.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 14:56:57 -0700
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01CAF6D5.03EE53D6"
X-MimeOLE: Produced By Microsoft Exchange V6.5
Date: Tue, 18 May 2010 14:58:10 -0700
Message-ID:
<1BF6BA633BDC0E48B81213232B41E615A997B6(a)TUS1XCHCLUPIN09.enterprise.veritas.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Learn How Symantec spams its customers Webcast.
Thread-Index: Acr2qeWaE/cQLtszSauixh7WqOhtNwACya8w
From: "Chris Austin" <Chris_Austin(a)symantec.com>
To: "Chris Austin" <Chris_Austin(a)symantec.com>
X-OriginalArrivalTime: 18 May 2010 21:56:57.0277 (UTC)
FILETIME=[08FD5ED0:01CAF6D5]
X-Brightmail-Tracker: AAAAAA==
Return-Path: MAILER-DAEMON(a)mxgateway.npumail.com

------_=_NextPart_001_01CAF6D5.03EE53D6
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: base64

------_=_NextPart_001_01CAF6D5.03EE53D6
Content-Type: text/html;
charset="UTF-8"
Content-Transfer-Encoding: base64


------_=_NextPart_001_01CAF6D5.03EE53D6--

From: Brian Tillman [MVP-Outlook] on
"JGurtz" <JGurtz(a)discussions.microsoft.com> wrote in message
news:62FB285D-1E90-474F-ADB3-A37E163F84B0(a)microsoft.com...

> No matter what method I try (ctrl+alt+f, or drag msg attaching to new msg,
> or using spamgrabber COM add-in) some Internet headers are being stripped
> when I forward the message as an attachment.

Outlook is simply not good at retaining all the headers and, in particular,
the MIME separators. I don't think Outlook retains all of the information in
the message store. There's a registry key that may help. See this:
http://www.slipstick.com/mail1/viewheaders.htm.

Here's some VBA code that may help:
http://www.slovaktech.com/code_samples.htm#InternetHeaders.
--
Brian Tillman [MVP-Outlook]