I will try to get the sender to resend the testmail asap.
I got the mail to export from owa in eml without converting anything.
This is really strange.. :-/
I got the mail to export from owa in eml without converting anything.
Code:
Received: from mailserver.destination.org (x.x.x.x) by
mailserver.destination.org (x.x.x.x) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1779.2
via Mailbox Transport; Thu, 12 Nov 2020 09:52:44 +0100
Received: from mailserver.destination.org (x.x.x.x) by
mailserver.destination.org (x.x.x.x) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
15.1.1779.2; Thu, 12 Nov 2020 09:52:44 +0100
Received: from external-pmg-dns-name (x.x.x.x) by
mailserver.destination.org (x.x.x.x) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1779.2
via Frontend Transport; Thu, 12 Nov 2020 09:52:44 +0100
Received: from external-pmg-dns-name (localhost.localdomain [127.0.0.1])
by external-pmg-dns-name (Proxmox) with ESMTP id C72491082613
for <recipient@destination.org>; Thu, 12 Nov 2020 09:52:44 +0100 (CET)
Received: from mout.example1.org (mout.example1.org [x.x.x.x])
by external-pmg-dns-name (Proxmox) with ESMTP id 08DFA10825FF
for <recipient@destination.org>; Thu, 12 Nov 2020 09:52:44 +0100 (CET)
Received: from winhex19beeu5.wineu.mail ([10.72.140.13]) by mrieue.server.lan
(mrieue001 [172.19.128.220]) with ESMTPS (Nemesis) id
0La4vW-1jsDTx03qA-00m1TC for <recipient@destination.org>; Thu, 12 Nov 2020
09:52:43 +0100
Received: from winhex19beeu11.wineu.mail (10.72.140.16) by
winhex19beeu5.wineu.mail (10.72.140.13) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.2.529.5;
Thu, 12 Nov 2020 09:52:42 +0100
Received: from winhex19beeu11.wineu.mail ([fe80::fcee:d718:f360:a4a5]) by
winhex19beeu11.wineu.mail ([fe80::fcee:d718:f360:a4a5%11]) with mapi id
15.02.0529.010; Thu, 12 Nov 2020 09:52:42 +0100
From: Sender <user1@user-domain.de>
To: "Recipient" <recipient@destination.org>
Subject: test
Thread-Topic: test
Thread-Index: Ada40St0ghqnSi4tTtyu4ApD1OrITg==
X-MS-Exchange-MessageSentRepresentingType: 1
Date: Thu, 12 Nov 2020 08:52:42 +0000
Message-ID: <ac629a9927ec45b68b4ce30cb15350fa@user-domain.de>
Accept-Language: de-DE, en-GB, en-US
Content-Language: de-DE
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AuthSource: mailserver.destination.org
X-MS-Has-Attach: yes
X-MS-Exchange-Organization-Network-Message-Id:
c1a61c01-60be-448c-4331-08d886e8528a
X-MS-TNEF-Correlator:
X-MS-Exchange-Organization-RecordReviewCfmType: 0
x-provags-id: V02::oa4qrm7RfKXjP7TH2dd3BB1SY/MNkI5BV94Qu3ILQlAlM
VK1yAcXrolCb+9a3QmpELXebm0XBzNBhir122inMdaDo60sPsm
vXzvFr3r+2+82bVlx4jmMmIAlX95z06s0JLyWZg2op/PWdfpmx
qnJ7qUGODkxE92gMo4dZjFHXv76HnZ4/jSAhVoLsbgg/o44
x-spam-level: Spam detection results: 1 AWL 0.158
Adjusted score from AWL reputation of From: address KAM_DMARC_STATUS
0.01 Test Rule for DKIM or SPF Failure with Strict Alignment
KAM_LAZY_DOMAIN_SECURITY 1 Sending domain does not have any anti-forgery
methods RCVD_IN_DNSWL_NONE -0.0001 Sender listed at
https://www.dnswl.org/, no trust RCVD_IN_MSPIKE_H2 -0.001 Average
reputation (+2) SPF_HELO_NONE 0.001 SPF: HELO does not publish an
SPF Record SPF_NONE 0.001 SPF: sender does not publish an SPF
Record
x-originating-ip: [10.72.140.251]
received-spf: none (user-domain.de: No applicable sender policy available)
receiver=external-pmg-dns-name; identity=mailfrom;
envelope-from="user1@user-domain.de"; helo=mout.example1.org;
client-ip=x.x.x.x
Content-Type: multipart/mixed;
boundary="_004_ac629a9927ec45b68b4ce30cb15350fauser-domainde_"
MIME-Version: 1.0
--_004_ac629a9927ec45b68b4ce30cb15350fauser-domainde_
Content-Type: multipart/alternative;
boundary="_000_ac629a9927ec45b68b4ce30cb15350fauser-domainde_"
--_000_ac629a9927ec45b68b4ce30cb15350fauser-domainde_
Content-Type: text/plain; charset="us-ascii"
--_000_ac629a9927ec45b68b4ce30cb15350fauser-domainde_
Content-Type: text/html; charset="us-ascii"
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.E-MailFormatvorlage17
{mso-style-type:personal-compose;
font-family:"Arial",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"><o:p> </o:p></span></p>
</div>
</body>
</html>
--_000_ac629a9927ec45b68b4ce30cb15350fauser-domainde_--
--_004_ac629a9927ec45b68b4ce30cb15350fauser-domainde_
Content-Type: application/msword; name="test.doc"
Content-Description: test.doc
Content-Disposition: attachment; filename="test.doc"; size=30299;
creation-date="Thu, 12 Nov 2020 08:52:39 GMT";
modification-date="Thu, 12 Nov 2020 08:52:24 GMT"
Content-Transfer-Encoding: base64
..........
This is really strange.. :-/