That sample has NOTHING about what we thought about the sample.
It’s all pre-filter, pre-verdict, pre … just about everything.

It’s useless from a diagnostic POV.

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Open a ticket for Hotmail<http://go.microsoft.com/fwlink/?LinkID=614866> ?

From: mailop <[email protected]> On Behalf Of Stefan Bauer via mailop
Sent: Thursday, July 9, 2020 10:49 PM
To: mailop <[email protected]>
Subject: [EXTERNAL] Re: [mailop] Post-processing Journal-Mails coming from 
O365, forwardedMail


I did in my first mail.



https://nopaste.linux-dev.org/?1321451<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnopaste.linux-dev.org%2F%3F1321451&data=02%7C01%7Cmichael.wise%40microsoft.com%7Cac0281f4902049eabc2408d82495ad39%7C72f988bf86f141af91ab2d7cd011db47%7C0%7C0%7C637299572564046392&sdata=lcbKf39f5auhcOiehT9yfrEBGgGiK6%2FmLHAbqAF0FxY%3D&reserved=0>



Stefan




-----Ursprüngliche Nachricht-----
Von: Luis E. Muñoz via mailop <[email protected]<mailto:[email protected]>>
Gesendet: Freitag 10 Juli 2020 02:49
An: mailop <[email protected]<mailto:[email protected]>>
Betreff: Re: [mailop] Post-processing Journal-Mails coming from O365, 
forwardedMail


On 8 Jul 2020, at 22:36, Stefan Bauer via mailop wrote:

> there is a feature in O365 that forwards mails (in/out/both..) to an
> archive-mailbox for long-term archiving.
>
> We grab this mails via pop. However our available mail-readers
> (Thunderbird, Kopano) show the original mail as attachment.
>
> This is the „envelope wrapper“ format. It contains the _final_
> recipient(s) of the email (eg after aliasing, distribution list
> expansion etc), and contains the original email - headers and body -
> unchanged. The advantage is that the archiving process does not need
> to do any of the logic Exchange does (no further LDAP lookups etc).

Can someone donate a test message through pastebin? I would like to take
a look at one directly.

Best regards

-lem

_______________________________________________
mailop mailing list
[email protected]<mailto:[email protected]>
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
_______________________________________________
mailop mailing list
[email protected]
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to