What is happening here is that rather than forwarding the E-mail (where you have a virtually identical copy of the E-mail, with the headers changed a bit), you are sending a copy of the E-mail (you are sending a brand new E-mail, that has the original E-mail as an attachment).When i received an email in web, the attachment link says, for example xxx.pps (MS PowerPoint). But when i forward the same mail, the atachment would change to xxx.e m l. This explains why the innocent looking mail was actually blocked by my rules.ima.
So instead of an E-mail that contains a plain text segment along with a .pps file attachment, you're sending a plain text segment along with an .eml attachment, and that .eml attachment is the original plain text segment with the .pps file.
Yes, it can get confusing. :) Both methods of forwarding E-mail work just fine. One reason you don't want to block .eml files is because all they are is E-mail (anything that could be dangerous in an .eml file can occur in a standard E-mail).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches both viruses and vulnerabilities in E-mail, with no annual licensing fees.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
