Messaging Gateway

 View Only
  • 1.  Brightmail Stuffing Attachments into Header?

    Posted Mar 01, 2011 11:54 AM

    We use a Brightmail implementation on Network Solutions hosts and its seems that Brightmail stuffs MIME encoded attachments into the header of emails (X-Brightmail-Tracker: AAAAAQAAAlk=).  Not only does this double the size of the email, but it makes removal of the attachment impossible in MS Outlook. Users are not happy as we handle lots of > 20MB attachments.

     

    First, can anyone confirm that Brightmail does this? Second, can anyone tell me if it is possible to get it to stop? Third, is there a way to get rid of the attachment in the header?

     

    Thanks,

    Howard



  • 2.  RE: Brightmail Stuffing Attachments into Header?

    Posted Mar 02, 2011 10:12 AM

    Hi,

    No Brightmail doesn't add any attachments, it may (depending on the integration of Symantec Brightmail Message Filter with your MTA) add the header line of text that you mentioned. This would not make any significant impact to the overall size of the message.

    Amanda



  • 3.  RE: Brightmail Stuffing Attachments into Header?

    Posted Mar 03, 2011 06:07 PM

    Many thanks Amanda.  I just talked to NS and they say that they do not use Brightmail.  Is it possible that this header is coming from my Norton instance on my workstation?

    I just check with a 6 MB test email.  It appeared without a big header on NS's webmail, but on my machine in Outlook it became 16 MB. When I remove the attachemtn it message becomes 7 MB with a header that is HUGE!

     

    Regards,

    Howard



  • 4.  RE: Brightmail Stuffing Attachments into Header?

    Posted Mar 04, 2011 10:34 AM

    Amanda,

     

    In case it helps, the header below is from an empty email (as dsiplayed by MS Outlook) by that is sized at 3 MB. The was an attachement in the 6MB  email that was 3 MB but was removed.

    ABC@DEF and UVW@XYZ below replaces the receiving and sending email.

    Regards,

    Howard

     

    X-Apparently-To: ABC@DEF via 76.13.9.23; Fri, 04 Mar 2011 07:01:53 -0800
    Received-SPF: none (mta1065.mail.sk1.yahoo.com: domain of UVW@XYZ does not designate permitted sender hosts)
    X-YMailISG: IPcz2escZApZss0Hu_bwHyFVrq8lbU2cOgfD1IACXPBIfr59
     pkjatzjToChk.YAqp5BXKW1Y6L4suv1j6MCrnCnLCWCJXpD4tMnHS9z1C1Lp
     ACRN1ibXxWA.8bMAuQUckGbsJ9mY_uBzNJW0pS1_zQFA.rnkjY3ZoDGYRpAd
     RY7jG1zbZRvAuNZ5jL9TWSRJ0ePgH9KWu.s3uXjsqjIbAqvTK2bQfUFIwjcb
     _WP97ugdNGziepXa45WhMDfkadn3j2Brok5fD5_jpNyQIh9MMhFEvPFIA_YB
     iqTHzxRNybDbqIziCf2dtJ4aQCBR3r6tuTFx7lH.aQNc5AhcXkXRjPyhyEBO
     o89RsKooBU88huY50MecT_PELAQQ98hYfjr8TrBrJNi2deHnOPyiuKGtjJP1
     6TNNvvGoqQBTpzIe4NYT0aENoDgBs938nKGhFnW2wNUO2Y2tjdA8UI8eV1GR
     6JbCZUcILaR3nXw.aSp2gF1_ipM0CezyZ9eH91GdgHVZmGMewa7SmQzaxZLs
     omVsjNm2m79Nju6eGneR3xTONilcx8XwhWprzQeFFlLs2Q3sM6ftfcewpELx
     h2vU9R9E8pl_UVMBkv87P2098edW7OaQ0_iMcKi13nL_8cycrr8UAfWUqpcI
     GOeReQplCBqS9sPzsH64VpQO1807xw_3aih8hbL7TuaLCDcOtYu_p7n.D8Oe
     A0uyKHKekjj4JSZKxw5UQNtcP4Vm0uzxASSjma9irJDhICwu32AI2AQ2BwsS
     OGr2gUP0ZkYcfmZiVNQ0imkyCp4CW7_rUJtrJcFKp38X1heg4oKszQ20DdIb
     kV3wBCCVSqkpgygQ_B9CrEeEvF0KOQkl.cC2XlK6.2I0yvVkSyLi0QJRIK2w
     WVwXDxZAWbRERKrdp.VR3j..ffzomHNYcM4Qb6o8h2TdoyfPvWIMeC3K7mO4
     tgJtFz8tYvr15p0EPQaOC6ykJI28IAKzdJrys7gNFi0UfwBoa8ApMZqBWH4f
     4DOiEZjR.NEo.2RGOVCqXdUJusp2VSMBy3svqEz8A8Zw93KJexnUs_8xSLvV
     10BveFAIe57FB7U.FKstgzF8tZ4ByivajJybqOcunD_Loj8H1URWV6789Q9y
     a3rli69DfKtX_vj3cxeWW7VCpXBj_am31MY9aaUigsghZe3CBg--
    X-Originating-IP: [205.178.146.64]
    Authentication-Results: mta1065.mail.sk1.yahoo.com  from=XYZ; domainkeys=neutral (no sig);  from=XYZ; dkim=neutral (no sig)
    Received: from 127.0.0.1  (EHLO omr14.networksolutionsemail.com) (205.178.146.64)
      by mta1065.mail.sk1.yahoo.com with SMTP; Fri, 04 Mar 2011 07:01:52 -0800
    Received: from cm-omr4 (mail.networksolutionsemail.com [205.178.146.50])
        by omr14.networksolutionsemail.com (8.13.6/8.13.6) with ESMTP id p24F1Nj4002117
        for <kidorf@yahoo.com>; Fri, 4 Mar 2011 10:01:27 -0500
    Authentication-Results:  cm-omr4 smtp.user=UVW@XYZ; auth=pass (LOGIN)
    X-Authenticated-UID: UVW@XYZ
    Received: from [98.109.137.2] ([98.109.137.2:9296] helo=Pioneer1)
        by cm-omr4 (envelope-from <UVW@XYZ>)
        (ecelerity 2.2.2.41 r(31179/31189)) with ESMTPA
        id 1F/FD-23858-FAEF07D4; Fri, 04 Mar 2011 10:01:27 -0500
    From: "MY NAME" <UVW@XYZ>
    To: <ABC@DEF>
    Subject: FW:
    Date: Fri, 4 Mar 2011 10:01:02 -0500
    Organization: ORGANIZATION
    Message-ID: <000001cbda7c$fac622c0$f0526840$@UVW@XYZ>
    MIME-Version: 1.0
    Content-Type: multipart/mixed;
        boundary="----=_NextPart_000_0001_01CBDA53.11F01AC0"
    X-Mailer: Microsoft Office Outlook 12.0
    Thread-Index: AcvaeviUnScYQMEAS0mgvZYqa0GexgAAfqnQ
    Content-Language: en-us
    X-Brightmail-Tracker: AAAAAQzCY6M=
    X-Brightmail-Tracker: AAAAAA==

    This is a multi-part message in MIME format.

    ------=_NextPart_000_0001_01CBDA53.11F01AC0
    Content-Type: multipart/alternative;
        boundary="----=_NextPart_001_0002_01CBDA53.11F01AC0"


    ------=_NextPart_001_0002_01CBDA53.11F01AC0
    Content-Type: text/plain;
        charset="us-ascii"
    Content-Transfer-Encoding: 7bit

     


    ------=_NextPart_001_0002_01CBDA53.11F01AC0
    Content-Type: text/html;
        charset="us-ascii"
    Content-Transfer-Encoding: quoted-printable

    <html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
    xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
    xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
    xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
    xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta =
    http-equiv=3DContent-Type content=3D"text/html; =
    charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 12 =
    (filtered medium)"><style><!--
    /* Font Definitions */
    @font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
    @font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
    /* Style Definitions */
    p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
    a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
    a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
    span.EmailStyle17
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:windowtext;}
    span.EmailStyle18
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
    .MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
    @page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
    div.WordSection1
        {page:WordSection1;}
    --></style><!--[if gte mso 9]><xml>
    <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
    </xml><![endif]--><!--[if gte mso 9]><xml>
    <o:shapelayout v:ext=3D"edit">
    <o:idmap v:ext=3D"edit" data=3D"1" />
    </o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue =
    vlink=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal><span =
    style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p></div></body></html>
    ------=_NextPart_001_0002_01CBDA53.11F01AC0--

    ------=_NextPart_000_0001_01CBDA53.11F01AC0
    Content-Type: image/gif;
        name="DSC_0020 crop.gif"
    Content-Transfer-Encoding: base64
    Content-Disposition: attachment;
        filename="DSC_0020 crop.gif"

    R0lGODlhwAccBvcAAA0ODHSIUzZIKYGMpDlJZFBoM5GrfUAUPKjHsnqIfFppZnFIKyUnHKeLe49w
    ZqOsptXJ1VcpG5JnQ0NIRm9QR820p5twhbGcgiYtPGEzPoGcfEYNI2FvhCk5ItrezMisgbKIW3Nb
    StPHs5N7aVpnVIRPZuTn30JZSGF6aJ53S0JZKxkWJL+zxaqMjnqJj1w5JKG8qNC0xbuTpa2ckCco
    KjNAVdTKwWJ5VHdaK3g0XMq/mzI7Q5ZdSlNHLHqbak5aZ1ZNR9vY1aqca2BAPrV+andtZ5WBhRsa


    ... [ lots of encoded data removed ]


    AiiAQhOAAehwCaoAST+s6aDFjRLIWCtczKUgS2PoRU0Mxx0sgKhwyoI2wCMljgPgwjSgYrlsWMjU
    rd6mAUvgCwTxYFZAzr9xj0f0CXSRjEAMxYmCXEDSEoHIXgD8Ts22YU2GzaK8dI1aMMb9wEbYtAEl
    kIHK2RfniMso3s/dOAMYeMOheINM6IldNMY1Go4R2kVMwFAgSwgXeuCmKMEpGIV+TZfQtBhHZNh4
    sQefEAIERKsLFoPiKczThYJU2IpHiHMt1vODDSKfBFwNB59IAM/wZM+3tKWmKkNAAAA7

    ------=_NextPart_000_0001_01CBDA53.11F01AC0--
     



  • 5.  RE: Brightmail Stuffing Attachments into Header?

    Posted Mar 10, 2011 10:04 AM

    Hi,

    I'm not sure if you're looking at the default webmail view, but typically the full internet headers are not visible.

    So just to clarify, the header added by Brightmail (which may be included in your desktop Norton depending on the version) is not a MIME attachment, it's an X-header, just 2 lines of text in this email header.

    The attachment in the email above is an image, DSC_0020 crop.gif which is not added Brightmail. If you can't see the attachment in the email, there may be issues with the MTA or MUA recognising the MIME Content-Type header in this email.

    Amanda



  • 6.  RE: Brightmail Stuffing Attachments into Header?

    Posted Apr 24, 2011 09:52 PM

    Yes, Amanda, in Outlook I look at athe headers in the "Message Options" dialog.

     

    Oddly, the entie original meddage appeads inthe "Internet Headers". Text, attachments, everything. It doubles the size of the email!  The DSC_0200 crop.gif, was a test image that I was using.

     

    The ext adn the other stuff shouldn;t be in the header, I would guess! Do you have anyidea how it got there?

     

    Howard