Unoffical empeg BBS

Quick Links: Empeg FAQ | RioCar.Org | Hijack | BigDisk Builder | jEmplode | emphatic
Repairs: Repairs

Topic Options
#325387 - 23/08/2009 13:03 Email Mystery
Dignan
carpal tunnel

Registered: 08/03/2000
Posts: 12318
Loc: Sterling, VA
On Friday I came across something that stumped me completely. Here's what happened.

A user called me to take a look at a few of her computer issues. One of them was something puzzling that was happening with her email.

Over the past couple days, a couple people in her family were emailing her to ask why she was sending very old emails. She looked at the emails they were talking about, and recognized them as emails she had indeed sent a long time ago (like 14 months). Here's where it gets weird:

- the emails were received by the family member in the middle of the night, but the user always turns her computer off at night.
- the user remembers sending the email out originally, but now the original doesn't show up in her sent items either on her email client or on her webmail client (it's a Verizon email address).
- they don't appear in sent items either on their original date or the new one.

Any ideas? I'm trying to think of other symptoms, but if you have any questions I'll try to answer them.

I also feel like I'm missing something obvious... smile
_________________________
Matt

Top
#325388 - 23/08/2009 13:11 Re: Email Mystery [Re: Dignan]
hybrid8
carpal tunnel

Registered: 12/11/2001
Posts: 7738
Loc: Toronto, CANADA
I don't think this has anything at all to do with your user, but may have everything to do with her recipients. Might be a fluke that more than one of them had this happen, but less of a fluke if those people are using the same email system (are they?)
_________________________
Bruno
Twisted Melon : Fine Mac OS Software

Top
#325389 - 23/08/2009 13:18 Re: Email Mystery [Re: hybrid8]
andy
carpal tunnel

Registered: 10/06/1999
Posts: 5914
Loc: Wivenhoe, Essex, UK
Maybe someone somewhere accidentally restored the spool folder on an email server with a very old backup ?

A copy of the full headers from the emails would help resolve the mystery.


Edited by andy (23/08/2009 13:19)
_________________________
Remind me to change my signature to something more interesting someday

Top
#325391 - 23/08/2009 18:18 Re: Email Mystery [Re: andy]
drakino
carpal tunnel

Registered: 08/06/1999
Posts: 7868
If you have access to one of the received e-mail, check the full headers. It should contain timestamps along with every mail server that touched the message, to help point to what happened.

Keep in mind that forwarding the message will not keep the headers.

Top
#325394 - 23/08/2009 18:35 Re: Email Mystery [Re: drakino]
wfaulk
carpal tunnel

Registered: 25/12/2000
Posts: 16706
Loc: Raleigh, NC US
Originally Posted By: drakino
forwarding the message will not keep the headers.

It will if you use a real email client (that is, pretty much anything but Outlook) and forward as an attachment.
_________________________
Bitt Faulk

Top
#325399 - 23/08/2009 21:28 Re: Email Mystery [Re: wfaulk]
Shonky
pooh-bah

Registered: 12/01/2002
Posts: 2009
Loc: Brisbane, Australia
In defence of Outlook:

1) if you create an email and drag and drop any other email into it, it will add it as an attachment.
2) if you select more than one email and forward it, it will forward them as attachments
3) under Tools->Options->Email Options, there is an option to attach when forwarding.
_________________________
Christian
#40104192 120Gb (no longer in my E36 M3, won't fit the E46 M3)

Top
#325400 - 24/08/2009 01:09 Re: Email Mystery [Re: Dignan]
jmwking
old hand

Registered: 27/02/2003
Posts: 768
Loc: Washington, DC metro
If you keep (and have access to) reasonably detailed smtp logs, you can see if the message originated from your network, even if you can't get your hands on the headers.

I had this happen once in a blue moon on my old system. Never figured exactly what was happening, but the messages did, in fact, originate internally. I suspected an odd interaction between the nightly backup, the nightly av scan, and the email datastore, but could never prove it and noone wanted to take ownership.

-jk

Top
#325404 - 24/08/2009 15:28 Re: Email Mystery [Re: Shonky]
wfaulk
carpal tunnel

Registered: 25/12/2000
Posts: 16706
Loc: Raleigh, NC US
Originally Posted By: Shonky
In defence of Outlook

Fair enough. Just tested it in Outlook '07 and you're right. I don't think it used to have that feature, though.

Of course, if you're using Exchange, there's no guarantees about the accuracy of the RFC2822 headers.
_________________________
Bitt Faulk

Top
#325405 - 24/08/2009 15:31 Re: Email Mystery [Re: wfaulk]
tonyc
carpal tunnel

Registered: 27/06/1999
Posts: 7058
Loc: Pittsburgh, PA
Quote:
Of course, if you're using Exchange, there's no guarantees about the accuracy of the RFC2822 headers.

On the contrary, I think it's pretty much guaranteed that it will bork them.
_________________________
- Tony C
my empeg stuff

Top
#325413 - 24/08/2009 21:10 Re: Email Mystery [Re: wfaulk]
Shonky
pooh-bah

Registered: 12/01/2002
Posts: 2009
Loc: Brisbane, Australia
Originally Posted By: wfaulk
Originally Posted By: Shonky
In defence of Outlook

Fair enough. Just tested it in Outlook '07 and you're right. I don't think it used to have that feature, though.

Of course, if you're using Exchange, there's no guarantees about the accuracy of the RFC2822 headers.


I was looking at Outlook 2003 actually. I'm pretty sure 2002 and 2000 also were OK. They had significant issues using Exchange remotely though. MS basically gives away Outlook 2003 licenses to Exchange users I think.

There are things I don't like for sure with Exchange/Outlook but I still find it does a lot. And in a >300k employee company, I don't have a lot of swing in the matter smile

As for the original issue, I can only suspect a backup restore.
_________________________
Christian
#40104192 120Gb (no longer in my E36 M3, won't fit the E46 M3)

Top