Subject: invalid headers?

From: Matt Ackeret <[email-masked]>
Date: Thu, 8 May 2003 12:16:43 -0700 (PDT)

So on one message I'm seeing some of the headers in the message even
with headers hidden.  Here's a chunk of it:

Date: Thu, 08 May 2003 20:57:07 +0530
From: Raghunatha Reddy <[email-masked]>
To: [email-masked]
Cc: raghunat reddy <[email-masked]>
Subject: How to change the proxy settings through program

Received: from blr-ec-bh2.wipro.com ([10.200.50.92]) by ecvwall4 with
  InterScan Messaging Security Suite; Thu, 08 May 2003 20:50:54 +0530
Received: from blr-ec-msg02.wipro.com ([10.200.51.99]) by
  blr-ec-bh2.wipro.com with Microsoft SMTPSVC(5.0.2195.5329); Thu, 8 May
  2003 20:57:14 +0530

I checked the same message in a GUI mail reader and they show up there too..

Here's a bit on the boundary:

Is that "InterScan" part an invalid header?  Can/should they be contacted about
it somehow?

---

From: daniel lance herrick <[email-masked]>
Date: Thu, 8 May 2003 15:40:24 -0400 (EDT)

> So on one message I'm seeing some of the headers in the message even

You won't like this answer:

You're not seeing headers, you are seeing body.

To try to be more helpful:

The blank line between Subject: and Received: in
your quoted material below is the boundary between
headers and body. Something copied header material
into the body of the message.

The Received: headers are added to the message one
at a time, each being added at the top of the
message, one being added by each entity that
handles the message. The culprit could be the
Interscan Messaging Security Suite or any entity
that handled the message after that header was
available to copy (in other words, the authors of
the Received: headers before the Interscan
Received: header or some stealthy violater of the
standards that handled the message and did not add
a Received: header).

> Received: from ecvwall4 (ecvwall4.wipro.com [10.200.52.14])
>  by wiproecmx2.wipro.com (8.11.3/8.11.3) with SMTP id h48FQw504211 for
>  <[email-masked]>; Thu, 08 May 2003 20:56:58 +0530 (IST)
>     InterScan
>  Messaging Security Suite; Thu, 08 May 2003 20:50:54 +0530
> Received: from blr-ec-msg02.wipro.com ([10.200.51.99])
>  by blr-ec-bh2.wipro.com with Microsoft SMTPSVC(5.0.2195.5329); Thu,
>  08 May 2003 20:57:14 +0530
> Received: from wipro.com ([192.6.8.110]) by blr-ec-msg02.wipro.com with
>  Microsoft SMTPSVC(5.0.2195.5329); Thu, 08 May 2003 20:57:14 +0530
>
>
> Is that "InterScan" part an invalid header?
> Can/should they be contacted about it somehow?

The "InterScan" part is valid.

Headers may be continued on the following lines by
beginning the second and later lines with
whitespace. Your "bit on the boundary" contains
four Received: headers, one with one continuation
line and three, including the InterScan one, with
two continuation lines.

If you copy the message to a scratch mailbox and
then look into the mailbox with a text editor
(emacs, vi, notepad, ed) you'll see two copies of
the offending headers, one copy in the headers and
one copy in the body of the message.

dan