Exchange 2007 and Spam

I have spam coming from internal clients and I need to see if there is a virus.  But I need to find the IP the message is coming from.

How can I do that??
Who is Participating?
MesthaConnect With a Mentor Commented:
Highly unlikely to be coming from an internal machine.
I have covered why in this blog posting:

Then I wrote this follow up in February:
Did the spam originate from inside your network:

The server is being abused directly and you need to work out how.


You can try enabling verbose logging on the Recieve Connectors and Checking the logs.

Chris DentPowerShell DeveloperCommented:

The sender IP should be in the message header, do you have a copy of the original message with headers intact?

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

dblake15Author Commented:
Where would I find the message header??  I looked under the view source and nothing in there of value.
Chris DentPowerShell DeveloperCommented:

You have it in Outlook? View / Options (depending on the version).

dblake15Author Commented:
No that is not showing me anything except hiding the To field.

I have the exchange admin saying that he saw it come through our connector but I see no info that this is true.  
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.