E-mail Redirection?

johnpoz

where are the headers of the email? This is kind of useless.. Really need to see the HEADERS!!!

killmasta93

Hi johnpoz thank you so much for the reply sorry forgot to add the headers does this help?

http://pastebin.com/kYMnsjx8

so jvalencias@domain.com sent me this email which for some reason has this odd jperez@danisa.com.co

Not sure where it comes from or how. Maybe email spoofing?

Thank you :)

KOM

X-SID-PRA: jdvalencias@domain.com

This is the primary address contact record for your email server's SenderID configuration. This doesn't mean that this person sent you the email. It means that questions about your mail server's SenderID config should be sent to jdvalencias@domain.com (which is likely bogus). Ignore it, or find your mail server's config and change it. It's just a text field and can be blank.

killmasta93

Hi KOM thank you for the reply

Sorry for not being clear jdvalencias@domain.com sent me the e-mail (killmasta93@hotmail.com) because I needed to see the source code from the previous e-mail which has the jperez@danisa.com.co.

So this is the order on how the e-mail been sent

Patri@hotmail.com–--to----administracion@domain.com-----forwards to-----jdvalencias@domain.com------forwards to-----killmasta93@hotmail.com

I guess the Real question is why on the source code appears jperez@danisa.com.co.

Thank you

doktornotor

We need to see the headers, not some mail client screenshots.

johnpoz

I don't see anything in the headers for that email. So you can put anything you want in a body of a message.. Who sent the original message?

Source was created by
name=Generator content="Microsoft Word 15

in the source there is clearly a link that has different name on it than in the link


[cvalencias@domain.com](jperez@danisa.com.co)

killmasta93

Thanks for the reply johnpoz

So I got another Email with headers directly from outlook and the source code

Administracion@domain.com–--to-----Jvalencias@domain.com

What I also found out was interesting all the E-mails that get sent to this @domain.com for some reason has

[cvalencias@domain.com](jperez@danisa.com.co)

Even if cvalenvias@domain.com never gets mentioned on the email

What is also funny is that jperez@danisa.com.co uses the same E-mail providers (UNE) as cvalencias@domain.com :o

Im considering to change E-mail providers :(

http://pastebin.com/6dsQisU9 –--- New source code on outlook

http://pastebin.com/8FSwmaH5 ------- New header

Thank you again and sorry for the confusion.

johnpoz

so can I send you an email and see if gets added?

killmasta93

sure let me PM you :)

Thank you

johnpoz

not seeing any PM…

killmasta93

sorry for the delay just sent it ;)

Thank you

johnpoz

Ok just sent message to all of them in same format

to: emailaddress
subject: test message to emailaddress

This is test message per thread on pfsense forum about strange email getting added to messages.

Let me know what you get..