Advice needed on big-sized replies

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Advice needed on big-sized replies

Nikolaos Milas
Hello,

Allow me to attract your attention to a NON-Postfix issue, but rather to
a more generic email issue on which I need to find the right direction
to search for an explanation. I hope your experience and expertise may
guide me to a solution.

The problem: I am sending an HTML email (using Thunderbird) to a
particular recipient; the email has a size of a couple of KB. When I get
a reply to it from the original recipient, it has grown to a size of 2.5
MB although I can't see anything that can explain this size. No photos,
no logos, no visible attachments.

Here is an excerpt from the source of such a message, which may help:

=======================================================================================
...
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [79.131.33.225]
Content-Type: multipart/alternative;
boundary="_000_C8F4E69CA0D6EB47859C539F6B7730BD01123B47B7hge2k10dag2co_"
MIME-Version: 1.0
X-Barracuda-Connect: hge2k10dag1.corp.hygeia-group.com[172.20.253.15]
X-Barracuda-Start-Time: 1518111391
X-Barracuda-Encrypted: ECDHE-RSA-AES256-SHA
X-Barracuda-URL: https://172.20.253.200:443/cgi-mod/mark.cgi
X-Barracuda-BRTS-Status: 1
X-Virus-Scanned: by bsmtpd at Hygeia.gr
X-Barracuda-Scan-Msg-Size: 1940978

--_000_C8F4E69CA0D6EB47859C539F6B7730BD01123B47B7hge2k10dag2co_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

...<here follow about 60 lines of code which it seems to me that
contains the main message>

--_000_C8F4E69CA0D6EB47859C539F6B7730BD01123B47B7hge2k10dag2co_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64

... <here follows a long content consisting of about 34000 lines which
seems to me inexplicable>

--_000_C8F4E69CA0D6EB47859C539F6B7730BD01123B47B7hge2k10dag2co_--

=======================================================================================

The whole message is available to anyone who would like to see it. I can
provide a link to a zipped eml file.

This is a "detective" story to me.

Thanks in advance to anyone who may be able to help!

Cheers,
Nick

Reply | Threaded
Open this post in threaded view
|

Re: Advice needed on big-sized replies

Wietse Venema
Nikolaos Milas:

> Hello,
>
> Allow me to attract your attention to a NON-Postfix issue, but rather to
> a more generic email issue on which I need to find the right direction
> to search for an explanation. I hope your experience and expertise may
> guide me to a solution.
>
> The problem: I am sending an HTML email (using Thunderbird) to a
> particular recipient; the email has a size of a couple of KB. When I get
> a reply to it from the original recipient, it has grown to a size of 2.5
> MB although I can't see anything that can explain this size. No photos,
> no logos, no visible attachments.
>
> Here is an excerpt from the source of such a message, which may help:
>
> =======================================================================================
> ...
> X-MS-Has-Attach:
> X-MS-TNEF-Correlator:
> x-originating-ip: [79.131.33.225]
> Content-Type: multipart/alternative;
> boundary="_000_C8F4E69CA0D6EB47859C539F6B7730BD01123B47B7hge2k10dag2co_"
> MIME-Version: 1.0
> X-Barracuda-Connect: hge2k10dag1.corp.hygeia-group.com[172.20.253.15]
> X-Barracuda-Start-Time: 1518111391
> X-Barracuda-Encrypted: ECDHE-RSA-AES256-SHA
> X-Barracuda-URL: https://172.20.253.200:443/cgi-mod/mark.cgi
> X-Barracuda-BRTS-Status: 1
> X-Virus-Scanned: by bsmtpd at Hygeia.gr
> X-Barracuda-Scan-Msg-Size: 1940978
>
> --_000_C8F4E69CA0D6EB47859C539F6B7730BD01123B47B7hge2k10dag2co_
> Content-Type: text/plain; charset="utf-8"
> Content-Transfer-Encoding: base64
>
> ...<here follow about 60 lines of code which it seems to me that
> contains the main message>

That could be the text version of the content.

> --_000_C8F4E69CA0D6EB47859C539F6B7730BD01123B47B7hge2k10dag2co_
> Content-Type: text/html; charset="utf-8"
> Content-Transfer-Encoding: base64
>
> ... <here follows a long content consisting of about 34000 lines which
> seems to me inexplicable>

And that could be the HTML version of the same content. After
base64 decoding, expect to see a lot of HTML tags, and perhaps
javascript.

        Wietse

> --_000_C8F4E69CA0D6EB47859C539F6B7730BD01123B47B7hge2k10dag2co_--
>
> =======================================================================================
>
> The whole message is available to anyone who would like to see it. I can
> provide a link to a zipped eml file.
>
> This is a "detective" story to me.
>
> Thanks in advance to anyone who may be able to help!
>
> Cheers,
> Nick
>
>
Reply | Threaded
Open this post in threaded view
|

Re: Advice needed on big-sized replies

stroller-6

> On 16 Feb 2018, at 00:23, Wietse Venema <[hidden email]> wrote:
>
>> Content-Transfer-Encoding: base64
>>
>> ...<here follow about 60 lines of code which it seems to me that
>> contains the main message>
>
> That could be the text version of the content.
>
>> --_000_C8F4E69CA0D6EB47859C539F6B7730BD01123B47B7hge2k10dag2co_
>> Content-Type: text/html; charset="utf-8"
>> Content-Transfer-Encoding: base64
>>
>> ... <here follows a long content consisting of about 34000 lines which
>> seems to me inexplicable>
>
> And that could be the HTML version of the same content. After
> base64 decoding, expect to see a lot of HTML tags, and perhaps
> javascript.
>
> Wietse
>
>> --_000_C8F4E69CA0D6EB47859C539F6B7730BD01123B47B7hge2k10dag2co_--
>>
>> =======================================================================================

I think OP will be able to read the parts if he runs uudecode on them, is that right?

As I recollect, in the past I have copied the whole message into a scratch file, then deleted everything except the marks "part", then run uudecode on it.

Stroller.


Reply | Threaded
Open this post in threaded view
|

Re: Advice needed on big-sized replies

Nikolaos Milas
In reply to this post by Wietse Venema
On 16/2/2018 2:23 πμ, Wietse Venema wrote:

> ...
> And that could be the HTML version of the same content. After
> base64 decoding, expect to see a lot of HTML tags, and perhaps
> javascript.
> ...

Thank you Wietse,

I did a base64 decoding of the HTML part and it translated to 6144 lines
of HTML code, of which the 6082 were style tags and Javascript (i.e. the
interesting part was only 62 lines = 1% of the whole HTML part)!!

O tempora, o mores!

Cheers,
Nick