[exim] Incoming mails sometimes with no headers.

Top Page
Delete this message
Reply to this message
Author: Jan Kriesten
Date:  
To: exim-users
Subject: [exim] Incoming mails sometimes with no headers.

Hey!

I've got something quite strange going on with our exim installation:

Occasionally, the inbound header is stripped (no to, from, subject) and
the only thing left is like following:

===
Return-Path: <ab@???>
Received: from service ([unix socket])
     by service (Cyrus v2.4.20) with LMTPA;
     Thu, 06 Jun 2019 13:07:34 +0200
X-Sieve: CMU Sieve 2.4
Envelope-to: fe@???
Delivery-date: Thu, 06 Jun 2019 13:07:34 +0200
Received: from us-smtp-delivery.somedomain.com ([xxx.xxx.xxx.xxx])
    by service with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
    (Exim 4.92)
    (envelope-from <ab@???>)
    id 1hYqF3-0007I9-JF
    for fe@???; Thu, 06 Jun 2019 13:07:34 +0200
===


I run exim 4.92 w/ SpamAssassin and the spam-Check already is missing
the headers, too:

[Exim-log]
2019-06-06 13:07:34 1hYqF3-0007I9-JF <= ab@???
H=uus-smtp-delivery.somedomain.com [xxx.xxx.xxx.xxx] P=esmtps
X=TLSv1.2:ECDHE-RSA-AES256-SHA384:256 CV=no S=9865
2019-06-06 13:07:34 1hYqF3-0007I9-JF => fe <fe@???> R=cyrus_vdom
T=cyrus_ltcp C="250 2.1.5 Ok SESSIONID=<cyrus-28007-1559819254-1>"

[spamd-log]
Jun 6 13:07:34 service spamd[23669]: spamd: result: . -94 -
MISSING_DATE,MISSING_FROM,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,TVD_SPACE_RATIO,USER_IN_WHITELIST
scantime=0.2,size=9949,user=nobody,uid=65534,required_score=5.0,rhost=127.0.0.1,raddr=127.0.0.1,rport=36240,mid=(unknown),autolearn=disabled

[cyrus-log]
Jun 6 13:07:34 service cyrus/lmtpunix[28007]: Delivered:
<cmu-lmtpd-28007-1559819254-0@service> to mailbox: user.fe

So, it looks to me, that those headers are already missing when
delivered to our server.

However, this mail got BCC'ed to a GMail-Host and there all headers were
availabe!

It seems to have something to do with adding BCC or CC to the recipient
list on the sender site, but I haven't been able to really find the
point on where and why it is failing.

Anyone any ideas?

Best regards, Jan.