Windows Vista Forums
Vista Forums Home Join Vista Forums Donate Vista Tutorials Tags

Welcome to Vista Forums we are your forum to discuss Windows Vista x64 and x86 systems. Whether you need help or just want to post an idea you have on Vista, this is the forum for you.
Register at Vista forums...the world biggest Windows Vista resource Join Vista Forums Now

Go Back   Vista Forums > Windows Live > Live Mail

X-Message-Info and Message-ID?

Closed Thread
 
Thread Tools Display Modes
Old 03-06-2008   #1 (permalink)
HotmailHeader
Guest


 

X-Message-Info and Message-ID?

I have seen following data in the header of hotmail, what are they? I am
wondering if they are hash codes related specific ISP or a computer hardware
infomation from which the email was originally sent out?

Thanks!

X-Message-Info:
LsUYwwHHNt30K9L3krFLO4Llph5BluV/cERX64OoJr8f/TLMjEwToyqQcubJytm/
....
....
Message-ID: <BAY132-F27D788FCE22605EB467783BA4C0@xxxxxx>
Old 03-07-2008   #2 (permalink)
N. Miller
Guest


 

Re: X-Message-Info and Message-ID?

On Thu, 6 Mar 2008 12:47:01 -0800, HotmailHeader wrote:
Quote:

> I have seen following data in the header of hotmail, what are they? I am
> wondering if they are hash codes related specific ISP or a computer hardware
> infomation from which the email was originally sent out?
>
> Thanks!
>
> X-Message-Info:
> LsUYwwHHNt30K9L3krFLO4Llph5BluV/cERX64OoJr8f/TLMjEwToyqQcubJytm/
> ...
> ...
> Message-ID: <BAY132-F27D788FCE22605EB467783BA4C0@xxxxxx>
All servers assign a Message-ID: line if the client does not. Whether
assigned by a client, or a server, the Message-ID: line is intended to
prevent confusion by servers when handling messages. This is true for both
e-mail, and news.

The X-Message-Info: header line is unique to Hotmail, and probably has some
internal meaning to their administrators. Some clients allow for adding
custom X-Header lines; I can do it with Pegasus Mail for e-mail, and with
40tude Dialog for news. I just did that with this article, but I don't think
you will be able to see it with your news reader:

X-Newsreader: Microsoft CDO for Windows 2000

Which means you read and post using a web browser. Anybody reading this
article using MS Outlook Express, Mozilla Thunderbird, or any other capable
news client, will see the custom X-Header line I created.

In any case, X-Header lines only mean anything in context of the client, or
service which adds them. If you don't manage the server which adds such
lines, or know how/why the service which adds them does so, you will need to
contact the service administrators. None of the Hotmail administrators are
known to read, or post, to these groups.

--
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum
Old 03-07-2008   #3 (permalink)
Ildhund
Guest


 

Re: X-Message-Info and Message-ID?

"N. Miller" <anonymous@xxxxxx> wrote in message
news:c27nnlzbbvbm$.dlg@xxxxxx
Quote:

> On Thu, 6 Mar 2008 12:47:01 -0800, HotmailHeader wrote:
>
Quote:

>> I have seen following data in the header of hotmail, what are they? I am
>> wondering if they are hash codes related specific ISP or a computer
>> hardware
>> infomation from which the email was originally sent out?
>>
>> Thanks!
>>
>> X-Message-Info:
>> LsUYwwHHNt30K9L3krFLO4Llph5BluV/cERX64OoJr8f/TLMjEwToyqQcubJytm/
>> ...
>> ...
>> Message-ID: <BAY132-F27D788FCE22605EB467783BA4C0@xxxxxx>
>
> All servers assign a Message-ID: line if the client does not. Whether
> assigned by a client, or a server, the Message-ID: line is intended to
> prevent confusion by servers when handling messages. This is true for both
> e-mail, and news.
>
> The X-Message-Info: header line is unique to Hotmail, and probably has
> some
> internal meaning to their administrators. Some clients allow for adding
> custom X-Header lines; I can do it with Pegasus Mail for e-mail, and with
> 40tude Dialog for news. I just did that with this article, but I don't
> think
> you will be able to see it with your news reader:
>
> X-Newsreader: Microsoft CDO for Windows 2000
>
> Which means you read and post using a web browser. Anybody reading this
> article using MS Outlook Express, Mozilla Thunderbird, or any other
> capable
> news client, will see the custom X-Header line I created.
>
> In any case, X-Header lines only mean anything in context of the client,
> or
> service which adds them. If you don't manage the server which adds such
> lines, or know how/why the service which adds them does so, you will need
> to
> contact the service administrators. None of the Hotmail administrators are
> known to read, or post, to these groups.
You may be able to insert X-user-defined headers into newsgroup postings in
WLMail, too. Have a look.
--
Noel


Old 03-07-2008   #4 (permalink)
fakehotmail
Guest


 

Re: X-Message-Info and Message-ID?

Is that to say X-Message-Info line could be nothing to do with the hardware
info. of original PC from which the email was sent?

BTW, can hotmail be easily faked? say, Origianl-Sender-IP, sender-from,
etc., in the hearder?

Thanks a lot!

"N. Miller" wrote:
Quote:

> On Thu, 6 Mar 2008 12:47:01 -0800, HotmailHeader wrote:
>
Quote:

> > I have seen following data in the header of hotmail, what are they? I am
> > wondering if they are hash codes related specific ISP or a computer hardware
> > infomation from which the email was originally sent out?
> >
> > Thanks!
> >
> > X-Message-Info:
> > LsUYwwHHNt30K9L3krFLO4Llph5BluV/cERX64OoJr8f/TLMjEwToyqQcubJytm/
> > ...
> > ...
> > Message-ID: <BAY132-F27D788FCE22605EB467783BA4C0@xxxxxx>
>
> All servers assign a Message-ID: line if the client does not. Whether
> assigned by a client, or a server, the Message-ID: line is intended to
> prevent confusion by servers when handling messages. This is true for both
> e-mail, and news.
>
> The X-Message-Info: header line is unique to Hotmail, and probably has some
> internal meaning to their administrators. Some clients allow for adding
> custom X-Header lines; I can do it with Pegasus Mail for e-mail, and with
> 40tude Dialog for news. I just did that with this article, but I don't think
> you will be able to see it with your news reader:
>
> X-Newsreader: Microsoft CDO for Windows 2000
>
> Which means you read and post using a web browser. Anybody reading this
> article using MS Outlook Express, Mozilla Thunderbird, or any other capable
> news client, will see the custom X-Header line I created.
>
> In any case, X-Header lines only mean anything in context of the client, or
> service which adds them. If you don't manage the server which adds such
> lines, or know how/why the service which adds them does so, you will need to
> contact the service administrators. None of the Hotmail administrators are
> known to read, or post, to these groups.
>
> --
> Norman
> ~Oh Lord, why have you come
> ~To Konnyu, with the Lion and the Drum
>
Old 03-07-2008   #5 (permalink)
R. C. White
Guest


 

Re: X-Message-Info and Message-ID?

Hi, Norman.
Quote:

> X-Newsreader: Microsoft CDO for Windows 2000
Quote:

> means you read and post using a web browser. Anybody reading this
> article using MS Outlook Express, Mozilla Thunderbird, or any other
> capable
> news client, will see the custom X-Header line I created.
Oh, you mean:
Quote:

> X-Approved-By: Billy Gates
Right? ;^}

WLM 2008 here. ;<)

RC
--
R. C. White, CPA
San Marcos, TX
rc@xxxxxx
Microsoft Windows MVP
(Running Windows Live Mail 2008 in Vista Ultimate x64 SP1)

"N. Miller" <anonymous@xxxxxx> wrote in message
news:c27nnlzbbvbm$.dlg@xxxxxx
Quote:

> On Thu, 6 Mar 2008 12:47:01 -0800, HotmailHeader wrote:
>
Quote:

>> I have seen following data in the header of hotmail, what are they? I am
>> wondering if they are hash codes related specific ISP or a computer
>> hardware
>> infomation from which the email was originally sent out?
>>
>> Thanks!
>>
>> X-Message-Info:
>> LsUYwwHHNt30K9L3krFLO4Llph5BluV/cERX64OoJr8f/TLMjEwToyqQcubJytm/
>> ...
>> ...
>> Message-ID: <BAY132-F27D788FCE22605EB467783BA4C0@xxxxxx>
>
> All servers assign a Message-ID: line if the client does not. Whether
> assigned by a client, or a server, the Message-ID: line is intended to
> prevent confusion by servers when handling messages. This is true for both
> e-mail, and news.
>
> The X-Message-Info: header line is unique to Hotmail, and probably has
> some
> internal meaning to their administrators. Some clients allow for adding
> custom X-Header lines; I can do it with Pegasus Mail for e-mail, and with
> 40tude Dialog for news. I just did that with this article, but I don't
> think
> you will be able to see it with your news reader:
>
> X-Newsreader: Microsoft CDO for Windows 2000
>
> Which means you read and post using a web browser. Anybody reading this
> article using MS Outlook Express, Mozilla Thunderbird, or any other
> capable
> news client, will see the custom X-Header line I created.
>
> In any case, X-Header lines only mean anything in context of the client,
> or
> service which adds them. If you don't manage the server which adds such
> lines, or know how/why the service which adds them does so, you will need
> to
> contact the service administrators. None of the Hotmail administrators are
> known to read, or post, to these groups.
>
> --
> Norman
Old 03-07-2008   #6 (permalink)
N. Miller
Guest


 

Re: X-Message-Info and Message-ID?

On Fri, 7 Mar 2008 08:59:19 -0000, Ildhund wrote:
Quote:

> You may be able to insert X-user-defined headers into newsgroup postings in
> WLMail, too. Have a look.
Is that a documented option? Or an undocumented registry hack?

--
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum
Old 03-07-2008   #7 (permalink)
N. Miller
Guest


 

Re: X-Message-Info and Message-ID?

On Fri, 7 Mar 2008 07:21:01 -0800, fakehotmail wrote:
Quote:

> "N. Miller" wrote:
Quote:
Quote:

>> On Thu, 6 Mar 2008 12:47:01 -0800, HotmailHeader wrote:
Quote:
Quote:
Quote:

>>> I have seen following data in the header of hotmail, what are they? I am
>>> wondering if they are hash codes related specific ISP or a computer hardware
>>> infomation from which the email was originally sent out?
Quote:
Quote:

>> The X-Message-Info: header line is unique to Hotmail, and probably has some
>> internal meaning to their administrators. Some clients allow for adding
>> custom X-Header lines; I can do it with Pegasus Mail for e-mail, and with
>> 40tude Dialog for news.
Quote:

> Is that to say X-Message-Info line could be nothing to do with the hardware
> info. of original PC from which the email was sent?
I have no idea what that information means. Only a Hotmail administrator
would know for sure. I suppose I could run that information through a b64
decoder to see if anything use was encoded that way. But I am not that
curious.
Quote:

> BTW, can hotmail be easily faked? say, Origianl-Sender-IP, sender-from,
> etc., in the hearder?
I'd say not. Despite client software which can add custom "X-Header" lines,
and any attempt to add such lines as are characteristic of specific clients,
or services, the "Received: from * by *" header line stamped by your service
domain gateway (MX) server, and any subsequent internal servers, which are
your trusted mail hosts, will almost always give the game away.

Exhibit A:
----------
| Return-Path: <%User_ID%@aosake.net>
| Received: from rly-md09.mx.aol.com (rly-md09.mail.aol.com [172.20.29.147])
| by air-md09.mail.aol.com (v121.4) with ESMTP id MAILINMD094-92347d1728628e;
| Fri, 07 Mar 2008 11:51:32 -0500
| Received: from smtp116.sbc.mail.sp1.yahoo.com (smtp116.sbc.mail.sp1.yahoo.com [69.147.64.89])
| by rly-md09.mx.aol.com (v121.4) with ESMTP id MAILRELAYINMD093-92347d1728628e;
| Fri, 07 Mar 2008 11:51:19 -0500
| Received: (qmail 50902 invoked from network); 7 Mar 2008 16:44:38 -0000
| Received: from unknown (HELO aosake.net) (hard2findanamenotused@xxxxxx with login)
| by smtp116.sbc.mail.sp1.yahoo.com with SMTP; 7 Mar 2008 16:44:32 -0000
| X-YMail-OSG: O4uOsc4VM1m7GMeADhEJiO67qqWKAzzpbsABrlgFDHLs7Vl.Fz2Eko2SrDOyb15jOFRw_nldgQ--
| X-Yahoo-Newman-Property: ymail-3
| Received: from Spooler by aosake.net (Mercury/32 v4.52) ID MO0000B2;
| 7 Mar 2008 08:44:11 -0800
| Received: from spooler by aosake.net (Mercury/32 v4.52); 7 Mar 2008 08:43:38 -0800
| From: "Proper Name" <somedoofus@xxxxxx>
| To: %User_ID%@netscape.net
| Date: Fri, 07 Mar 2008 08:45:00 -0800
| MIME-Version: 1.0
| Subject: [TEST] Hotmail forgery?
| Priority: normal
| X-Originating-IP: 68-35-195-2
| X-Originating-Email: somedoofus@xxxxxx
| X-Sender: somedoofus@xxxxxx
| X-mailer: Pegasus Mail for Windows (4.41)
| Content-type: text/plain; charset=US-ASCII
| Content-transfer-encoding: 7BIT
| Content-description: Mail message body
| Message-ID: <A120664762C@xxxxxx>
| X-AOL-IP: 69.147.64.89
| X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_helo : n
| X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_822_from : n

Despite the Hotmail headers, this is not a Hotmail message.

--
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum
Old 03-07-2008   #8 (permalink)
Ildhund
Guest


 

Re: X-Message-Info and Message-ID?

"N. Miller" <anonymous@xxxxxx> wrote in message
news:1a9xgzckr9b7.dlg@xxxxxx
Quote:

> On Fri, 7 Mar 2008 08:59:19 -0000, Ildhund wrote:
>
Quote:

>> You may be able to insert X-user-defined headers into newsgroup postings
>> in
>> WLMail, too. Have a look.
>
> Is that a documented option? Or an undocumented registry hack?
Neither. Just put something in the Keywords: field, and you can then add
whatever you like after that, with each header line preceded by a soft
return. I just tried it out for fun.
--
Noel


Old 03-07-2008   #9 (permalink)
fakehotmail
Guest


 

Re: X-Message-Info and Message-ID?

except Header, is there any other info. coming with the email that can be
used to track the path of the original sender? I know there are many hotmail
hackers out there stating they can hack the password, is that ture? and I am
receiving spams everyday.

Can you run b64 decoder to check it or point me out how to run it on my own?

Thanks alot!

"N. Miller" wrote:
Quote:

> On Fri, 7 Mar 2008 07:21:01 -0800, fakehotmail wrote:
>
Quote:

> > "N. Miller" wrote:
>
Quote:
Quote:

> >> On Thu, 6 Mar 2008 12:47:01 -0800, HotmailHeader wrote:
>
Quote:
Quote:

> >>> I have seen following data in the header of hotmail, what are they? I am
> >>> wondering if they are hash codes related specific ISP or a computer hardware
> >>> infomation from which the email was originally sent out?
>
Quote:
Quote:

> >> The X-Message-Info: header line is unique to Hotmail, and probably has some
> >> internal meaning to their administrators. Some clients allow for adding
> >> custom X-Header lines; I can do it with Pegasus Mail for e-mail, and with
> >> 40tude Dialog for news.