Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Exchange routing problem

Posted on 2000-05-01
5
Medium Priority
?
407 Views
Last Modified: 2013-12-23
Message header follows. As near as we can tell, there is no way we should have received this mail. It is really cause for concern. Hopefully I'm not exposing any security information on this forum with the info in this header.
Obviously, we're asking the question because the message was intended to stay in its own domain, and somehow leaked to the outside world and landed in ours.

TIA

slang9

Received: from mail.woodruff-sawyer.com (w-s.woodruff-sawyer.com [207.171.210.22]) by gl-2.genelabs.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21)
 id JD9ZCNGZ; Sun, 30 Apr 2000 15:17:31 -0700
Received: by MAIL with Internet Mail Service (5.5.2448.0)
 id <JDAAQ8BA>; Sun, 30 Apr 2000 15:21:02 -0700
Message-ID: <2D1B9C611DABD21183C4009027283C5E6EC069@MAIL>
From: Andy Barrengos <abarrengos@woodruff-sawyer.com>
To: "'Laura A. Larsen (Business Fax)'" <IMCEARFAX-Laura+20A+2E+20Larsen+40_FN=1+20+28510+29+20777-7001@woodruff-sawyer.com>

0
Comment
Question by:slang9
5 Comments
 
LVL 23

Expert Comment

by:Tim Holman
ID: 2769305
I don't quite understand the problem.
It's an email from woodruff-sawyer to someone called Laura !
0
 
LVL 3

Author Comment

by:slang9
ID: 2769612
Correct, internal at woodruff-sawyer to another person at woodruff-sawyer.
We are not that firm, but it landed in our Exchange server and went to a user named Bruce.
0
 
LVL 9

Expert Comment

by:Ronin
ID: 2769743
I suppose that the problem in misconfiguration of the domain woodruf domain.
0
 
LVL 23

Expert Comment

by:Tim Holman
ID: 2770136
Contact the postmaster of this domain, and ask him/her, or even this Andy Barrengos chap ?
This message looks like a fax, sent to the woodruff fax server and relayed out to fax recipients.
0
 
LVL 6

Accepted Solution

by:
danich earned 400 total points
ID: 2786141
Whenever you are troubleshooting the IMS, you must turn on either archiving or protocol log (latter requires SMTP interface events as well) in Diagnostics logging. Either of these give you the true story; what the user sees as headers does not show everything.

Most likely your local user was BCC:ed for some reason. The actual recipient was a fax address of another person at Woodruff, and there was a BCC: line. This does not get exposed in the message the user sees (for obvious reasons), but will be captured in the archive or, better, the protocol log.
0

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A brief overview to explain gateways, default gateways and static routes OR NO - you CANNOT have two default gateways on the same server, PC or other Windows-based network device. In simple terms a gateway is formed when a computer such as a serv…
Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question