Guest

Cisco Email Security Appliance

Create RFC-822 MIME Encoded Attachments on the ESA

Document ID: 117829

Updated: Jun 23, 2014

Contributed by Chris Haag and Robert Sherwin, Cisco TAC Engineers.

   Print

Introduction

This document describes how to submit both missed spam (false negatives) and messages that are incorrectly classified as spam (false positives) as an RFC-822 Multipurpose Internet Mail Extension (MIME) encoded attachment. This ensures that the submission can be processed quickly and efficiently. 

Note: This Knowledge Base article references software that is not maintained or supported by Cisco. The information is provided as a courtesy for your convenience. For further assistance, contact the software vendor.

Create RFC-822 MIME-Encoded Attachments

It is important to report these messages to these contacts:

Microsoft Outlook

The most effective way to submit this type of mail with Microsoft Outlook is to use the Cisco IronPort Email Security Plug-in, which can be downloaded from the Cisco Email Security Appliance Download Software page. You can also submit this type of mail with the submission buttons located in the toolbar.

Note: Refer to the Cisco Email Encryption Compatibilty Matrix in order to assure that your version of Microsoft Outlook and Microsoft Windows is supported.

Complete these steps in order to have all forwarded messages be in an RFC-822 MIME encoded attachment

For Microsoft Office 2003/2007:

  1. Click Tools > Options.
  2. Click Preferences > E-mail Options.
  3. In the drop-down section When forwarding a message, choose Attach original message.
  4. Click OK (twice).

For Microsoft Office 2010:

  1. Click File > Options.
  2. Select Mail and scroll to Replies and Forwards.
  3. For When forwarding a message, choose Attach original message.
  4. Click OK.

If you prefer the in-line style forwarding, you can force Microsoft Outlook to use RFC-822 for a given message(s) with this process:

  1. Navigate to the folder that contains the submission. For example, your Inbox.
  2. Hold down the control key (Ctrl) and highlight at least two messages.
  3. Right-click the highlighted messages and choose Forward
  4. Click Send.
  5. If you have only one example, delete the additional message.

Lotus Notes

This was tested vith Lotus Notes Versions 6.5.x and 7.0.x.

The most effective way to submit this type of mail with Lotus Notes is to use the Cisco IronPort Email Security Plug-in, which can be downloaded from the Cisco Email Security Appliance Download Software page.You can also submit this type of mail with the submission buttons located in the toolbar.

Note: Refer to the Cisco Email Encryption Compatibilty Matrix, because Lotus Notes is only supported through the 7.1 Release of the Cisco IronPort Email Security Plug-in.

From your Lotus Notes inbox:

  1. Open the false negative (missed spam) or false positive message.
  2. Click View > Show > Page Source.
  3. Copy all of the data into a text file and save the file with .eml extension. Repeat for each message.
  4. Create a new message.
  5. Attach the .eml file(s) and send the new message.

Microsoft Outlook Express 6

  1. Open Outlook Express 6.
  2. Right-click the message that you want to submit and choose Forward As Attachment.

Entourage (Apple Mac)

  1. Open Entourage.
  2. Right-click the message to submit and choose Forward As Attachment.

Apple Mail.app

  1. Open Apple Mail.app.
  2. Select File > Save As, Format - Raw Message Source. Repeat for each spam message.
  3. Create a new message.
  4. Attach raw source file(s) to the new message.

Mozilla Thunderbird

  1. Open Thunderbird.
  2. Select the message (message is highlighted).
  3. Then click Message > Forward As > Attachment.
    • The message appears at the top, next to File Edit View Go.

Windows Live Mail

  1. Open the message.
  2. Click the arrow in the top-left corner in order to open a menu.
  3. Select Save as file and save the message on your local computer in .eml format.
  4. Create a new message.
  5. Attach the saved .eml file and send.

Note: For additional email applications that are not referenced in this article, contact the application vendor for further assistance. In most cases, the proper solution requires you to forward the message as an attachment. Consult the application help and support for additional steps, as needed.

Updated: Jun 23, 2014
Document ID: 117829