I am persisting journaled / enveloped messages out of exchange using PR_CLIENT_SUBMIT_DATE as part of the file naming convention. I noticed that some of the emails have bogus PR_CLIENT_SUBMIT_DATE values like from 2008, 2036, etc. Internal company mails don't seem to have this problem. Most of the bizarre date emails are external or spam. Has anone else noticed this issue from exchange 2003 emails? thanks scottm
"Scott McFadden" wrote in news:ePDRCAkUHHA.1000@TK2MSFTNGP05.phx.gbl: > I > noticed that some of the emails have bogus PR_CLIENT_SUBMIT_DATE > values like from 2008, 2036, etc. Internal company mails don't seem > to have this problem. Most of the bizarre date emails are external or > spam. Has anone else noticed this issue from exchange 2003 emails? I see this sort of problem even reading emails using Outlook -- the problem is that the other person's server has their clock set wrongly, and if it's from a spammer, chances are they don't really care too much about getting all the details of sending mail exactly right.. (it can actually actually a useful spam filter -- anything that claims to have been originally sent more than a week ago or a day into the future is almost certainly junk. It's not guaranteed, possibly it got stalled somewhere en route, but I never saw any false positives) -- dan