Re: Default Sender

From: Jeff Stephenson [MSFT] (stephenson_at_online.microsoft.com)
Date: 12/07/04


Date: Tue, 7 Dec 2004 09:01:31 -0800

Yes, could you delete the log file you currently have, then send a message
that has the problem you're describing and post the log after your problem
occurs? As Neo says, there is no sending activity in this log.

-- 
Jeff Stephenson
Outlook Development
This posting is provided "AS IS" with no warranties, and confers no rights
On Tue, 7 Dec 2004 04:41:55 -0800, neo [mvp outlook] wrote:
> I asked someone in MS to look at the OPMLog (no promises), but I didn't 
> notice any SMTP action.  You did have something slated to send during the 
> time posted below via the "Mizzou" account?
> 
> "Ward" <Ward@discussions.microsoft.com> wrote in message 
> news:E6A0A2DA-21D7-4225-9CAD-01B0999C5CCA@microsoft.com...
>> It was already on... I only copied today's logging (I even cut most of 
>> today
>> to fit the content on this post).  Nearly all of these should send from
>> missouri.edu:
>>
>>
>> 2004.12.06 21:59:14 POP3 (pop.mothersshrine.org): Port: 110, Secure: no,
>> SPA: no
>> 2004.12.06 21:59:14 POP3 (pop.mothersshrine.org): Finding host
>> 2004.12.06 21:59:14 Hotmail: Synch operation started (flags = 00000001)
>> 2004.12.06 21:59:14 Hotmail: UploadItems: 0 messages to send
>> 2004.12.06 21:59:14 Hotmail: Synch operation completed
>> 2004.12.06 21:59:14 POP3 (pop.boxcarcentral.com): Connected to host
>> 2004.12.06 21:59:14 POP3 (pop.missouri.edu): Securing connection
>> 2004.12.06 21:59:14 POP3 (pop.mothersshrine.org): Connected to host
>> 2004.12.06 21:59:14 POP3 (pop.boxcarcentral.com): <rx> +OK POP3
>> server1.boxcarcentral-ebiz.com v2001.78rh server ready
>> 2004.12.06 21:59:14 POP3 (pop.boxcarcentral.com): Authorizing to server
>> 2004.12.06 21:59:14 POP3 (pop.boxcarcentral.com): [tx] USER ward.morris
>> 2004.12.06 21:59:14 POP3 (pop.missouri.edu): Connected to host
>> 2004.12.06 21:59:14 POP3 (pop.mothersshrine.org): <rx> +OK Hello there.
>> 2004.12.06 21:59:14 POP3 (pop.mothersshrine.org): Authorizing to server
>> 2004.12.06 21:59:14 POP3 (pop.mothersshrine.org): [tx] USER
>> webmaster@mothersshrine.org
>> 2004.12.06 21:59:14 POP3 (pop.boxcarcentral.com): <rx> +OK User name
>> accepted, password please
>> 2004.12.06 21:59:14 POP3 (pop.boxcarcentral.com): [tx] PASS *****
>> 2004.12.06 21:59:14 POP3 (pop.missouri.edu): <rx> +OK Microsoft Exchange
>> Server 2003 POP3 server version 6.5.7226.0 (um-exproto2.um.umsystem.edu)
>> ready.
>> 2004.12.06 21:59:14 POP3 (pop.missouri.edu): Authorizing to server
>> 2004.12.06 21:59:14 POP3 (pop.missouri.edu): [tx] USER wwmr3d@mizzou.edu
>> 2004.12.06 21:59:14 POP3 (pop.mothersshrine.org): <rx> +OK Password 
>> required.
>> 2004.12.06 21:59:14 POP3 (pop.mothersshrine.org): [tx] PASS *****
>> 2004.12.06 21:59:14 POP3 (pop.boxcarcentral.com): <rx> +OK Mailbox open,
0
>> messages
>> 2004.12.06 21:59:14 POP3 (pop.boxcarcentral.com): Authorized to host
>> 2004.12.06 21:59:14 POP3 (pop.boxcarcentral.com): Connected to host
>> 2004.12.06 21:59:14 POP3 (pop.boxcarcentral.com): [tx] STAT
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): <rx> +OK
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): [tx] PASS *****
>> 2004.12.06 21:59:15 POP3 (pop.boxcarcentral.com): <rx> +OK 0 0
>> 2004.12.06 21:59:15 POP3 (pop.boxcarcentral.com): ==== Comparing server 
>> and
>> local blobs ====
>> 2004.12.06 21:59:15 POP3 (pop.boxcarcentral.com):
>> ==========================================
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): <rx> +OK logged in.
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): Authorized to host
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): Connected to host
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): [tx] STAT
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): <rx> +OK User successfully
>> logged on.
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): Authorized to host
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): Connected to host
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): [tx] STAT
>> 2004.12.06 21:59:15 POP3 (pop.boxcarcentral.com): Do deletions: LoS: no
>> 2004.12.06 21:59:15 POP3 (pop.boxcarcentral.com): Disconnecting from
host
>> 2004.12.06 21:59:15 POP3 (pop.boxcarcentral.com): [tx] QUIT
>> 2004.12.06 21:59:15 POP3 (pop.boxcarcentral.com): <rx> +OK Sayonara
>> 2004.12.06 21:59:15 POP3 (pop.boxcarcentral.com): Disconnected from host
>> 2004.12.06 21:59:15 POP3 (pop.boxcarcentral.com): ========= No blob 
>> changes
>> =========
>> 2004.12.06 21:59:15 POP3 (pop.boxcarcentral.com):
>> ===================================
>> 2004.12.06 21:59:15 POP3 (pop.boxcarcentral.com): End execution
>> 2004.12.06 21:59:15 Boxcar: ReportStatus: RSF_COMPLETED, hr = 0x00000000
>> 2004.12.06 21:59:15 Boxcar: Synch operation completed
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): <rx> +OK 0 0
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): ==== Comparing server 
>> and
>> local blobs ====
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org):
>> ==========================================
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): <rx> +OK 0 0
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): ==== Comparing server and 
>> local
>> blobs ====
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu):
>> ==========================================
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): Do deletions: LoS: no
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): Disconnecting from
host
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): [tx] QUIT
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): Do deletions: LoS: no
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): Disconnecting from host
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): [tx] QUIT
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): <rx> +OK Bye-bye.
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): Disconnected from host
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): ========= No blob 
>> changes
>> =========
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org):
>> ===================================
>> 2004.12.06 21:59:15 POP3 (pop.mothersshrine.org): End execution
>> 2004.12.06 21:59:15 pop.mothersshrine.org: ReportStatus: RSF_COMPLETED,
hr 
>> =
>> 0x00000000
>> 2004.12.06 21:59:15 pop.mothersshrine.org: Synch operation completed
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): <rx> +OK Microsoft Exchange
>> Server 2003 POP3 server version 6.5.7226.0 signing off.
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): Disconnected from host
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): ========= No blob changes
>> =========
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu):
>> ===================================
>> 2004.12.06 21:59:15 POP3 (pop.missouri.edu): End execution
>> 2004.12.06 21:59:15 Mizzou: ReportStatus: RSF_COMPLETED, hr = 0x00000000
>> 2004.12.06 21:59:15 Mizzou: Synch operation completed
>> 2004.12.06 22:00:15 Mizzou: Synch operation started (flags = 00000001)
>> 2004.12.06 22:00:15 Mizzou: UploadItems: 0 messages to send
>> 2004.12.06 22:00:15 Mizzou: Synch operation completed
>> 2004.12.06 22:00:15 Mizzou: Synch operation started (flags = 00000030)
>> 2004.12.06 22:00:15 Mizzou: DoPOPDownload(flags = 00000030, max msg =
>> ffffffff): full items
>> 2004.12.06 22:00:15 POP3 (pop.missouri.edu): Begin execution
>> 2004.12.06 22:00:15 POP3 (pop.missouri.edu): =========  Initial blob
>> =========
>> 2004.12.06 22:00:15 POP3 (pop.missouri.edu):
>> ===================================
>> 2004.12.06 22:00:15 POP3 (pop.missouri.edu): Port: 995, Secure: SSL,
SPA: 
>> no
>> 2004.12.06 22:00:15 POP3 (pop.missouri.edu): Finding host
>> 2004.12.06 22:00:15 Boxcar: Synch operation started (flags = 00000001)
>> 2004.12.06 22:00:15 Boxcar: UploadItems: 0 messages to send
>> 2004.12.06 22:00:15 Boxcar: Synch operation completed
>> 2004.12.06 22:00:15 Boxcar: Synch operation started (flags = 00000030)
>> 2004.12.06 22:00:15 Boxcar: DoPOPDownload(flags = 00000030, max msg =
>> ffffffff): full items
>> 2004.12.06 22:00:15 POP3 (pop.boxcarcentral.com): Begin execution
>> 2004.12.06 22:00:15 POP3 (pop.boxcarcentral.com): =========  Initial
blob
>> =========
>> 2004.12.06 22:00:15 POP3 (pop.boxcarcentral.com):
>> ===================================
>> 2004.12.06 22:00:15 POP3 (pop.boxcarcentral.com): Port: 110, Secure: no,
>> SPA: no
>> 2004.12.06 22:00:15 POP3 (pop.boxcarcentral.com): Finding host
>> 2004.12.06 22:00:15 pop.mothersshrine.org: Synch operation started
(flags 
>> =
>> 00000001)
>> 2004.12.06 22:00:15 pop.mothersshrine.org: UploadItems: 0 messages to
send
>> 2004.12.06 22:00:15 pop.mothersshrine.org: Synch operation completed
>> 2004.12.06 22:00:15 pop.mothersshrine.org: Synch operation started
(flags 
>> =
>> 00000030)
>> 2004.12.06 22:00:15 pop.mothersshrine.org: DoPOPDownload(flags =
00000030,
>> max msg = ffffffff): full items
>> 2004.12.06 22:00:15 POP3 (pop.mothersshrine.org): Begin execution
>> 2004.12.06 22:00:15 POP3 (pop.mothersshrine.org): =========  Initial
blob
>> =========
>> 2004.12.06 22:00:15 POP3 (pop.mothersshrine.org):
>> ===================================
>> 2004.12.06 22:00:15 POP3 (pop.mothersshrine.org): Port: 110, Secure: no,
>> SPA: no
>> 2004.12.06 22:00:15 POP3 (pop.mothersshrine.org): Finding host
>> 2004.12.06 22:00:15 Hotmail: Synch operation started (flags = 00000001)
>> 2004.12.06 22:00:15 Hotmail: UploadItems: 0 messages to send
>> 2004.12.06 22:00:15 Hotmail: Synch operation completed
>> 2004.12.06 22:00:15 POP3 (pop.missouri.edu): Securing connection
>> 2004.12.06 22:00:15 POP3 (pop.boxcarcentral.com): Connected to host
>> 2004.12.06 22:00:15 POP3 (pop.mothersshrine.org): Connected to host
>> 2004.12.06 22:00:15 POP3 (pop.boxcarcentral.com): <rx> +OK POP3
>> server1.boxcarcentral-ebiz.com v2001.78rh server ready
>> 2004.12.06 22:00:15 POP3 (pop.boxcarcentral.com): Authorizing to server
>> 2004.12.06 22:00:15 POP3 (pop.boxcarcentral.com): [tx] USER ward.morris
>> 2004.12.06 22:00:15 POP3 (pop.missouri.edu): Connected to host
>> 2004.12.06 22:00:15 POP3 (pop.boxcarcentral.com): <rx> +OK User name
>> accepted, password please
>> 2004.12.06 22:00:15 POP3 (pop.boxcarcentral.com): [tx] PASS *****
>> 2004.12.06 22:00:15 POP3 (pop.missouri.edu): <rx> +OK Microsoft Exchange
>> Server 2003 POP3 server version 6.5.7226.0 (um-exproto2.um.umsystem.edu)
>> ready.
>> 2004.12.06 22:00:15 POP3 (pop.missouri.edu): Authorizing to server
>> 2004.12.06 22:00:15 POP3 (pop.missouri.edu): [tx] USER wwmr3d@mizzou.edu
>> 2004.12.06 22:00:15 POP3 (pop.mothersshrine.org): <rx> +OK Hello there.
>> 2004.12.06 22:00:15 POP3 (pop.mothersshrine.org): Authorizing to server
>> 2004.12.06 22:00:15 POP3 (pop.mothersshrine.org): [tx] USER
>> webmaster@mothersshrine.org
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): <rx> +OK
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): [tx] PASS *****
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): <rx> +OK Password 
>> required.
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): [tx] PASS *****
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): <rx> +OK Mailbox open,
0
>> messages
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): Authorized to host
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): Connected to host
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): [tx] STAT
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): <rx> +OK User successfully
>> logged on.
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): Authorized to host
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): Connected to host
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): [tx] STAT
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): <rx> +OK 0 0
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): ==== Comparing server 
>> and
>> local blobs ====
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com):
>> ==========================================
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): Do deletions: LoS: no
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): Disconnecting from
host
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): [tx] QUIT
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): <rx> +OK 0 0
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): ==== Comparing server and 
>> local
>> blobs ====
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu):
>> ==========================================
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): <rx> +OK Sayonara
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): Disconnected from host
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): ========= No blob 
>> changes
>> =========
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com):
>> ===================================
>> 2004.12.06 22:00:16 POP3 (pop.boxcarcentral.com): End execution
>> 2004.12.06 22:00:16 Boxcar: ReportStatus: RSF_COMPLETED, hr = 0x00000000
>> 2004.12.06 22:00:16 Boxcar: Synch operation completed
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): Do deletions: LoS: no
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): Disconnecting from host
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): [tx] QUIT
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): <rx> +OK logged in.
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): Authorized to host
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): Connected to host
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): [tx] STAT
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): <rx> +OK Microsoft Exchange
>> Server 2003 POP3 server version 6.5.7226.0 signing off.
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): Disconnected from host
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): ========= No blob changes
>> =========
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu):
>> ===================================
>> 2004.12.06 22:00:16 POP3 (pop.missouri.edu): End execution
>> 2004.12.06 22:00:16 Mizzou: ReportStatus: RSF_COMPLETED, hr = 0x00000000
>> 2004.12.06 22:00:16 Mizzou: Synch operation completed
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): <rx> +OK 0 0
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): ==== Comparing server 
>> and
>> local blobs ====
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org):
>> ==========================================
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): Do deletions: LoS: no
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): Disconnecting from
host
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): [tx] QUIT
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): <rx> +OK Bye-bye.
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): Disconnected from host
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): ========= No blob 
>> changes
>> =========
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org):
>> ===================================
>> 2004.12.06 22:00:16 POP3 (pop.mothersshrine.org): End execution
>> 2004.12.06 22:00:16 pop.mothersshrine.org: ReportStatus: RSF_COMPLETED,
hr 
>> =
>> 0x00000000
>> 2004.12.06 22:00:16 pop.mothersshrine.org: Synch operation completed
>>
>> "neo [mvp outlook]" wrote:
>>
>>> Could you turn on diagnosting logging and post the OPMLog?
>>>
>>> http://support.microsoft.com/default.aspx?scid=kb;en-us;300479
>>>
>>> /neo
>>>
>>> ps - A MS informed us of a bug in the sending code, but he mentioned
that 
>>> it
>>> only showed itself under SMTP authentication.  Maybe I can get him to 
>>> look
>>> at your log file when it shows itself.
>>>
>>> "Ward" <Ward@discussions.microsoft.com> wrote in message
>>> news:C4570976-E8D9-411F-93A1-1FACFFD64117@microsoft.com...
>>> >I do not need to authenticate and I have SP 1 installed.
>>> >
>>> > "neo [mvp outlook]" wrote:
>>> >
>>> >> Out of curiosity, do you have to authenticate to your SMTP server to 
>>> >> send
>>> >> mail and do you have SP 1 for Office/Outlook 2003 installed?
>>> >>
>>> >> "Ward" <Ward@discussions.microsoft.com> wrote in message
>>> >> news:A80E5729-1EC2-41CB-B710-85585E997EA7@microsoft.com...
>>> >> >I have multiple email accounts set-up through Outlook 2003.  I have 
>>> >> >not
>>> >> >had
>>> >> >a
>>> >> > problem until recently.  Even though I have a default sender set,
>>> >> > Outlook
>>> >> > randomly (more often chooses the next on the list) chooses a
sender
>>> >> > from
>>> >> > all
>>> >> > my accounts.
>>> >>
>>> >>
>>> >>
>>>
>>>
>>>


Relevant Pages

  • Re: Forensic Survey, help needed for a research/training program
    ... forensics or network based forensics? ... Host based forensic questions ... system rather than shutting it down or disconnecting it from the network? ... Given a log file for an incident, what can you look for to determine ...
    (Security-Basics)
  • Forensic Survey, help needed for a research/training program
    ... forensics or network based forensics? ... Host based forensic questions ... system rather than shutting it down or disconnecting it from the network? ... Given a log file for an incident, what can you look for to determine ...
    (Security-Basics)
  • Re: FP2000 and SP2
    ... However has the host actually looked at the server's log file for the issue? ... Also if the host is testing within their network, it is a invalid test, as it is not the same as a ... FrontPage Resources, WebCircle, MS KB Quick Links, etc. ...
    (microsoft.public.frontpage.client)
  • Re: ISA Server 2004 Log Manipulation
    ... which when exploited will enable a malicious user to manipulate ... the Destination Host parameter of the log file. ... or record separator characters in the log file)? ...
    (Bugtraq)