Encoding problem

Aug 1, 2024
8
1
3
Hi guys,
iI have a problem that I don't know how to solve. We have a PMG server updated to the latest release 8.1.5, which forwards incoming mail to an Exchange 2019 CU14.

When an accented character is in the from field, emails arrive with an email sender that is not the original one.

Example:

FROM: Simone Postè <simone.poste@xxx.xx>

Becomes:

=?iso-8859-1?Q?Simone_Post=E8?= <simone.poste@xxx.xx>



Unfortunately many insert accented characters, at least in our case, is there a way to work around this?Thanks a lot to everyone!
 

Attachments

  • Senza titolo.png
    Senza titolo.png
    6 KB · Views: 12
Do you have such issue before updated tp 8.1.5? I am using 8.1.4 without issue.
 
could you please post (as text, not screenshot):
* the tracking center entry for this mail
* the complete headers of the mail (anonymize only what you have to and do so consistently), or even the complete mail as eml

Do you have such issue before updated tp 8.1.5? I am using 8.1.4 without issue.
there was no change between 8.1.4 and 8.1.5 in that area of the code

I hope this helps!
 
could you please post (as text, not screenshot):
* the tracking center entry for this mail
* the complete headers of the mail (anonymize only what you have to and do so consistently), or even the complete mail as eml


there was no change between 8.1.4 and 8.1.5 in that area of the code

I hope this helps!
Hi Stoiko, thanks for your help and sorry for my delay!

This is the log of tracking center:

2025-01-22T18:03:52.121017+01:00 proxmox postfix/smtpd[12995]: connect from authsmtp29.register.it[81.88.54.70]
2025-01-22T18:03:52.620361+01:00 proxmox postfix/smtpd[12995]: 976EE80D1D: client=authsmtp29.register.it[81.88.54.70]
2025-01-22T18:03:52.690827+01:00 proxmox postfix/cleanup[12961]: 976EE80D1D: message-id=<00f801db6cef$98427f80$c8c77e80$@externalcompany.it>
2025-01-22T18:03:54.431944+01:00 proxmox postfix/qmgr[769]: 976EE80D1D: from=<simone.poste@externalcompany.it>, size=583571, nrcpt=1 (queue active)
2025-01-22T18:03:54.473483+01:00 proxmox postfix/lmtp[12875]: 976EE80D1D: breaking line > 998 bytes with <CR><LF>SPACE
2025-01-22T18:03:54.494617+01:00 proxmox pmg-smtp-filter[12906]: 80BC1679124FA7394B: new mail message-id=<00f801db6cef$98427f80$c8c77e80$@externalcompany.it>#012
2025-01-22T18:03:59.572001+01:00 proxmox pmg-smtp-filter[12906]: 80BC1679124FA7394B: SA score=0/5 time=5.034 bayes=undefined autolearn=disabled hits=AWL(1.267),DKIM_SIGNED(0.1),DKIM_VALID(-0.1),DKIM_VALID_AU(-0.1),DKIM_VALID_EF(-0.1),HTML_MESSAGE(0.001),RCVD_IN_DNSWL_LOW(-0.7),RCVD_IN_HOSTKARMA_W(-2.5),RCVD_IN_MSPIKE_H5(0.001),RCVD_IN_MSPIKE_WL(0.001),SPF_HELO_PASS(-0.001),SPF_PASS(-0.001)
2025-01-22T18:03:59.573818+01:00 proxmox postfix/smtpd[12880]: connect from localhost.localdomain[127.0.0.1]
2025-01-22T18:03:59.574580+01:00 proxmox postfix/smtpd[12880]: 8C43180BD5: client=localhost.localdomain[127.0.0.1], orig_client=authsmtp29.register.it[81.88.54.70]
2025-01-22T18:03:59.575164+01:00 proxmox postfix/cleanup[12997]: 8C43180BD5: message-id=<00f801db6cef$98427f80$c8c77e80$@externalcompany.it>
2025-01-22T18:03:59.624773+01:00 proxmox postfix/qmgr[769]: 8C43180BD5: from=<simone.poste@externalcompany.it>, size=584735, nrcpt=1 (queue active)
2025-01-22T18:03:59.624843+01:00 proxmox postfix/smtpd[12880]: disconnect from localhost.localdomain[127.0.0.1] ehlo=1 xforward=1 mail=1 rcpt=1 data=1 commands=5
2025-01-22T18:03:59.624885+01:00 proxmox pmg-smtp-filter[12906]: 80BC1679124FA7394B: accept mail to <jessica.perini@mycompany.eu> (8C43180BD5) (rule: default-accept)
2025-01-22T18:03:59.626483+01:00 proxmox pmg-smtp-filter[12906]: 80BC1679124FA7394B: processing time: 5.146 seconds (5.034, 0.04, 0)
2025-01-22T18:03:59.626639+01:00 proxmox postfix/lmtp[12875]: 976EE80D1D: to=<jessica.perini@mycompany.eu>, relay=127.0.0.1[127.0.0.1]:10024, delay=7.4, delays=2.2/0/0.04/5.2, dsn=2.5.0, status=sent (250 2.5.0 OK (80BC1679124FA7394B))
2025-01-22T18:03:59.626793+01:00 proxmox postfix/qmgr[769]: 976EE80D1D: removed
2025-01-22T18:03:59.917595+01:00 proxmox postfix/smtp[12911]: 8C43180BD5: to=<jessica.perini@mycompany.eu>, relay=192.168.115.14[192.168.115.14]:25, delay=0.34, delays=0.05/0/0.09/0.21, dsn=2.6.0, status=sent (250 2.6.0 <00f801db6cef$98427f80$c8c77e80$@externalcompany.it> [InternalId=39423504809999, Hostname=MY_EXCHANGE2019.local] 586069 bytes in 0.137, 4158,886 KB/sec Queued mail for delivery)
2025-01-22T18:03:59.917672+01:00 proxmox postfix/qmgr[769]: 8C43180BD5: removed
2025-01-22T18:04:54.414225+01:00 proxmox postfix/smtpd[12995]: disconnect from authsmtp29.register.it[81.88.54.70] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7

This is header of the email delivered into mailbox of user (our server is an Exchange 2019 CU14)

Received: from MY_EXCHANGE2019.local (192.168.115.14) by
MY_EXCHANGE2019.local (192.168.115.14) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.2.1544.14 via Mailbox Transport; Wed, 22 Jan 2025 18:04:00 +0100
Received: from MY_EXCHANGE2019.local (192.168.115.14) by
MY_EXCHANGE2019.local (192.168.115.14) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.2.1544.14; Wed, 22 Jan 2025 18:03:59 +0100
Received: from proxmox.mycompany.it (192.168.115.4) by MY_EXCHANGE2019.local
(192.168.115.14) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.14 via Frontend
Transport; Wed, 22 Jan 2025 18:03:59 +0100
Received: from proxmox.mycompany.it (localhost.localdomain [127.0.0.1])
by proxmox.mycompany.it (Proxmox) with ESMTP id 8C43180BD5
for <jessica.perini@mycompany.eu>; Wed, 22 Jan 2025 18:03:59 +0100 (CET)
Received-SPF: pass (externalcompany.it: Sender is authorized to use 'simone.poste@externalcompany.it' in 'mfrom' identity (mechanism 'include:spf.webapps.net' matched)) receiver=proxmox.mycompany.it; identity=mailfrom; envelope-from="simone.poste@externalcompany.it"; helo=authsmtp.register.it; client-ip=81.88.54.70
Received: from authsmtp.register.it (authsmtp29.register.it [81.88.54.70])
by proxmox.mycompany.it (Proxmox) with ESMTPS id 976EE80D1D
for <jessica.perini@mycompany.eu>; Wed, 22 Jan 2025 18:03:52 +0100 (CET)
Received: from SPW10P ([93.XXX.224.XXX])
by cmsmtp with ESMTPSA
id ae8mtfBcAIF1gae8mtnSlz; Wed, 22 Jan 2025 18:03:45 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=externalcompany.it; s=key_qlkpmpqg5b; t=1737565425;
bh=/PrGl2I1OMRiP3+g/aW0wV7hMdUDSPWPY+3nBQRO7Uc=;
h=From:To:Cc:References:In-Reply-To:Subject:Date;
b=EZYmnPoVmxP7icUgkmA26mBox2IssB5ZNirhqmGoeFO7YKDzuBmP2oOntjGmxr+hY
ityVbhXunT+p4E5d4q6++IEHlMUeSwuIandBbznMXfqinYHx+qtNP5EDzxYmFGw3mH
zf5aLI3t3zthLPK8r7hvqxkWqOHPhT5WDeG7jG/ZGFeXw2RYE6rLOz04Z5ynOI5DH8
qPpqT/qewu0PTKYlBsp91ZgQ1NBmaszsk2iaeVgw5g6SgLaVM1zSLQSK6ZzVv138cQ
hSL3eohpLN/a+/t3fAd9LLpOPgApEixNevfllS3/DBWWoYu08qXjN++2rmy92iHKON
tv4+v11Fe7ojA==
X-Rid: smtp@externalcompany.it@93.XXX.224.XXX
From: =?utf-8?Q?Simone_Post=C3=A8?= <simone.poste@externalcompany.it>
To: "'Alessandra Monguzzi - My Company'" <Alessandra.Monguzzi@mycompany.eu>,
=?utf-8?Q?Simone_Post=C3=A8?=@proxmox.mycompany.it
Cc: "'Eva - Supporto'" <supporto@evasistemi.com>,
"Jessica Perini - My Company" <Jessica.Perini@mycompany.eu>
References: <00cc01d9eca3$1cb6d9b0$56248d10$@externalcompany.it> <bea57a06f7da41369cfeafa8540a70f5@mycompany.eu> <009301da0b55$76b68610$64239230$@externalcompany.it> <3952703c856949e580bf56556043ea3a@mycompany.eu> <006d01da38e6$b9baedc0$2d30c940$@externalcompany.it> <17b4a749c20a4c05b41302cf6c5bb3f5@mycompany.eu> <00cc01da6352$697b5750$3c7205f0$@externalcompany.it> <3d39895acc8e447ab388251bb7b365d2@mycompany.eu> <00a301da68d1$083ba0b0$18b2e210$@externalcompany.it> <3d00701b099c419db461fcc3bdb63beb@mycompany.eu> <008901da7af2$cf5269d0$6df73d70$@externalcompany.it> <06b8016422a74920beb2deb6c4ed6e83@mycompany.eu> <006901daad32$a6e7a560$f4b6f020$@externalcompany.it> <627053a2a6f64df6a560c0b6f4008a36@mycompany.eu> <007601dacbbd$44125300$cc36f900$@externalcompany.it> <c71f839393b845e5a183b4c19ff72ce4@mycompany.eu> <010901dad9bc$62971b00$27c55100$@externalcompany.it> <d95105c00cdf48078720299fe55fca3e@mycompany.eu> <006801db036c$d39e2670$7ada7350$@externalcompany.it> <40
b9cb188254449
6 bca3f4ac9767ef85@mycompany.eu> <bac3069d5bc6430ba6afe87defcaf4bf@mycompany.eu> <012501db0dc8$3efc3d20$bcf4b760$@externalcompany.it> <313343f59e42489185ebc22f4cd9c1fb@mycompany.eu> <00d401db24a8$ca213080$5e639180$@externalcompany.it> <1e075c90d48846e490194e42ecf05092@mycompany.eu> <002201db3cfd$b564b4b0$202e1e10$@externalcompany.it> <c6f7ea36f6fa41ceb56599f236b902e0@mycompany.eu> <006d01db5129$47a9a210$d6fce630$@externalcompany.it> <cb26487a5f5841f1b897dd977fd5ed7d@mycompany.eu>
In-Reply-To: <cb26487a5f5841f1b897dd977fd5ed7d@mycompany.eu>
Subject: RE: - Storno bolletta web
Date: Wed, 22 Jan 2025 18:03:44 +0100
Message-ID: <00f801db6cef$98427f80$c8c77e80$@externalcompany.it>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_00F9_01DB6CF7.FA496EC0"
X-Mailer: Microsoft Outlook 16.0
thread-index: AQJRvREPn4RNZZG/sRz0jU4H96PN+QIWgslgAbsrYw4C+hEmJQJt8oomASoie5oCg8oz4wH4eXU7AhBCUn8AMHJLxACeNvl2AoneTTMCvx4rdwIfytgHAjFNVbsBoAiLOQGGuopdAh2dTlMCSF6nOQIdf+WJASdjh3OwRsBz8IAtkmEAgAAuu0CAMKIDgIAABxNggCdNvQCAAQopsIA3azqAgAAhaLA=
Content-Language: it
X-CMAE-Envelope: MS4xfNdA9MsLuquJc37ut/+VNwzJQvLc7OVqcLcJ0wl6pcg4GpiGI4ZEuyzbQwyPNLfiU4aTYyYqhByr7KJuP56PFX7EgT0Hnzx+/xBHrKFmzAXCgE27e1OL
NFfhPotDbArdSPH9PqmwB7K6hz+pmGxtrhY2A/fbkFCqE6mbpo85X0Qdg1H9/Bwq9gNnT0ixxpXsW03lEW9TLjvtn456V9AbFyAAmC0HkC+p56ISYMVLfQUI
2s+l8EcyLf3cdL4CtC8m5bcYLFbyHkbiis9IH+ZvmgXN1HwHMD6zMfYPKsddvjVm
X-SPAM-LEVEL: Spam detection results: 0
AWL 1.267 Adjusted score from AWL reputation of From: address
DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid
DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain
DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain
HTML_MESSAGE 0.001 HTML included in message
RCVD_IN_DNSWL_LOW -0.7 Sender listed at https://www.dnswl.org/, low trust
RCVD_IN_HOSTKARMA_W -2.5 Sender listed in HOSTKARMA-WHITE
RCVD_IN_MSPIKE_H5 0.001 Excellent reputation (+5)
RCVD_IN_MSPIKE_WL 0.001 Mailspike good senders
SPF_HELO_PASS -0.001 SPF: HELO matches SPF record
SPF_PASS -0.001 SPF: sender matches SPF record
Return-Path: simone.poste@externalcompany.it
X-MS-Exchange-Organization-Network-Message-Id: 6f7d83ab-e483-44b1-ab1d-08dd3b06c3cb
X-MS-Exchange-Organization-AuthSource: MY_EXCHANGE2019.local
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.4820782
X-MS-Exchange-Processed-By-BccFoldering: 15.02.1544.014

The address that the user see into the email, and when he replied, is:

1737627503393.png



Thank you very much for your help!
 
=?utf-8?Q?Simone_Post=C3=A8?=@proxmox.mycompany.it
it the domain really @proxmox.mycompany.it?

anyways - from a quick look at the headers - I'm not sure that the issue is something caused by PMG:
* The From header is correctly displayed by your mail-client (based on the screenshot): Simone Postè <simone.poste@externalcompany.it> (note that the e-mail address does not contain è but e
* The To header is "garbled" - but there there is only the email-address: =?utf-8?Q?Simone_Post=C3=A8?=@proxmox.mycompany.it - for the addresses themselves (not the full name in front of them) - I don't think that any decoding would happen.

So I'd ask Simone Postè how they send the mail - and how it looks in their mail-client.
The logs don't show that the mail was sent to any address @proxmox.mycompany.it only to <jessica.perini@mycompany.eu> - so my first guess is that the sender simply pasted a wrong/strangely formated e-mail in their client - or something along the way added this weird e-mail to the to-header

You could ask them to send the same mail to some domain which is not behind PMG and see how that arrives.
 
Hi Stoiko, thank you very much!

proxmox.mycompany.it is the hostname, anonymized, of our PMG.

What happens is that the mail address from "Simone Postè <simone.poste@externalcompany.it>" becomes =?utf-8?Q?Simone_Post=C3=A8?=@proxmox.mycompany.it when the email is delivered to our Exchange 2019, passing by PMG

And I can't figure out if it's something I can fix on the proxmox side or it's an Exchange issue...Thank you for all the help you're giving me
 
What happens is that the mail address from "Simone Postè <simone.poste@externalcompany.it>" becomes =?utf-8?Q?Simone_Post=C3=A8?=@proxmox.mycompany.it when the email is delivered to our Exchange 2019, passing by PMG
unless something went wrong with the information you shared -that's not completely the case - see the screenshot above - the From header is fine and displayed ok - the issue is in the To-header

The logs don't indicate that PMG does something to the TO-header (also the rule-system does not offer a rewrite on that level) - so my guess remains, that the sender of the email simply pasted the "broken" email before sending it.

you could try to ask them to send an email to your e-mail behind PMG, and CC it to something external (e.g. a external e-mail you have (protonmail, gmail, o365)) - and compare the headers of both

I hope this helps!