Issues with incoming emails from HTML email.

[Dustin Anderson]

So, we are getting emails from a vendor that seems to send the HTML body not as an attachment, but basically plane text. I'm not sure if there is a character or something that can escape in the ESA and cause the issues. I'm not sure if this is normal, or just bad programming on their side.

18 Oct 2024 11:26:05 (GMT -05:00)	(ICID 149920292) Unknown command: .
18 Oct 2024 11:26:05 (GMT -05:00)	(ICID 149920292) Unknown command: </b></font></td></tr></table></table></body></html>.
18 Oct 2024 11:26:05 (GMT -05:00)	(ICID 149920292) Unknown command: ------=_NextPart_000_9E4D_01DB217A.6BDCC9C0--.
18 Oct 2024 11:26:05 (GMT -05:00)	(ICID 149920292) Unknown command: ..

17 Oct 2024 16:16:38 (GMT -05:00)	(ICID 149805889) Unknown command: Passengers.
17 Oct 2024 16:16:38 (GMT -05:00)	(ICID 149805889) Unknown command: Certain.
17 Oct 2024 16:16:38 (GMT -05:00)	(ICID 149805889) Unknown command: Please.
17 Oct 2024 16:16:38 (GMT -05:00)	(ICID 149805889) Unknown command: ..
17 Oct 2024 16:16:38 (GMT -05:00)	Incoming connection (ICID 149805889) disconnected address Unknown. Maximum number of bad SMTP commands exceeded.

[Ken Stieers · Accepted solution]

Wow!
That feels like they're missing a BUNCH of stuff in the email conversation.
You can add an Injection Debug log subscription to get the full SMTP conversation.

As part of the setup you tell it what host (ip, ip range, hostname or partial hostname [needs ptr record]) you want it to record and how many sessions to record.

[Dustin Anderson]

Perfect, I'll try that. Looks like they use the same server luckily. I was afraid they would be using outlook lol.