Follow

What does a Microsoft Junk Mail Reporting (JMR) Abuse Reporting Format (ARF) email look like?

There are two Abuse Reporting Format (ARF) email report formats used in the Microsoft Junk Mail Reporting (JMR) program:

  • RFC822
  • The original format 

The RFC822 format
Microsoft recommends this format because complaints are forwarded as an attachment.

From: address is [email protected]
 
Date: Tue, 21 sep 10 22:05:22 -0700
From: [email protected]
Subject: complaint about message from <IP>

To: <FBL EMAIL ADDRESS>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=3D3D"D255B82B-6C8B-45AE-AC2F-1F4270312A"
Return-Path: [email protected]
Message-ID:
X-OriginalArrivalTime: 22 Sep 2010 05:05:22.0268 (UTC) FILETIME=3D3D[C26839:01CB5A13]
 
--D255B82B-6C8B-45AE-AC2F-1F427033312A
Content-Type: message/rfc822
Content-Disposition: inline
 
X-HmXmrOriginalRecipient: <RECIPIENT'S EMAIL ADDRESS>
X-Reporter-IP: <IP>
X-Message-Delivery:
X-Message-Status: n
X-SID-PRA:
X-AUTH-Result: NONE
X-Message-Info:
Received: from <SENDER SERVER> ([IP]) by SNT0-MC3-F43.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
         Tue, 21 Sep 2010 15:51:58 -0700
Received: from <SENDER SERVER> (localhost.localdomain [127.0.0.1])
        by <SENDER SERVER> (8.13.8/8.13.8) with ESMTP id o8LMpvCS005259
        for <RECIPIENT'S EMAIL ADDRESS>; Tue, 21 Sep 2010 18:51:57 -0400
Received: (from [email protected])
        by <SENDER SERVER> (8.13.8/8.13.8/Submit) id o8LMpvNB005258;
       Tue, 21 Sep 2010 18:51:57 -0400
Date: Tue, 21 Sep 2010 18:51:57 -0400
Message-Id:
To:<RECIPIENT'S EMAIL ADDRESS IS LISTED>
Subject: <SUBJECT LINE>
MIME-Version: 1.0
Content-type: text/html; charset=3D3Diso-8859-1
From: <SENDER EMAIL ADDRESS>
Reply-To: <SENDER EMAIL ADDRESS>
X-Mailer: PHP/5.1.6
Return-Path: <SENDER EMAIL ADDRESS>
X-OriginalArrivalTime: 21 Sep 2010 22:51:58.0217 (UTC) FILETIME=3D3D[988D57=
9:01CB59DF]
 
<ORIGINAL HTML CONTENT>
 --D255B82B-6C8B-45AE-AC2F-1F427033312A--

Original format
According to Windows Live, the complaint is forwarded as-is as Windows Live received it. The From address is the Hotmail customer's alias. 
                        
Return-Path: <>
X-Original-To:
Delivered-To:
Date: Sun, 12 Oct 2008 10:05:15
To: <sender's RP redirect email address>
Subject: <sender's original subject line>
From: <sender's email address>
Message-Id:
 
X-MailFrom: [email protected]
X-RcptTo:
Received:
X-HmXmrOriginalRecipient: <original recipient's hotmail email address>
X-Reporter-IP:
X-Message-Delivery:
X-Message-Status: n:0
X-SID-PRA:
X-Message-Info:
Received: from () by bay0-mc4-f3.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
             Sun, 12 Oct 2008 08:07:35 -0700
DomainKey-Signature:
Date: Sun, 12 Oct 2008 08:07:31 PDT
From: <sender's email address>
Subject: <sender's original subject line>
To: <original recipient's hotmail email address>
X-Header-CompanyDBUserName:
List-Unsubscribe:
Reply-To:
X-Header-MasterId:
X-Header-Versions:
Message-ID:
MIME-Version: 1.0
Content-Type: text/html; charset=us-ascii
Return-Path:
X-OriginalArrivalTime: 12 Oct 2008 15:07:36.0117 (UTC) FILETIME=[42918650:01C92C7C]
 
<ORIGINAL HTML CONTENT>

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request