Solved

Find sender IP address on exchange 2003

Posted on 2011-03-15
6
1,137 Views
Last Modified: 2012-06-21
Here my problem

Someone or service send email on behlf of my user. I need to find who or what is sending this email. So I activate message tracking in exchange 2003 but when it's internal emails we don't see the ip adresse of the client PC.

Since this is an intermittent problem I need a solution that will allow me further consultation.

Thank

0
Comment
Question by:Vbourbeau
  • 3
  • 2
6 Comments
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35137678
Are you receiving mails from your users to your users or sending mail from your users to external users?
0
 
LVL 6

Accepted Solution

by:
nettek0300 earned 500 total points
ID: 35137680
You can find this information out by viewing the email headers.
0
 

Author Comment

by:Vbourbeau
ID: 35137809
The service that sends email is internal is probably use MAPI connexion so no headers. All the transaction Entire transaction happens internally.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35137836
Okay - so are you trying to find the computer or device that is sending the information to the server?

Can you describe in more details exactly what the problem is and what you are trying to do please.
0
 

Author Comment

by:Vbourbeau
ID: 35137985
My user periodically receives alerts from the  exchange system administrator has about email
does not exist at the organization this message was sent to. But the user never send this message. I need to find who or what send this email.

 In addition, the destination address is not an email address is a ldap address, reason why Exchange can not find the recipient (/O=domain/OU=x/CN=Configuration/cn=Servers/cn=xx).

So something use my user sender address to send email to a no existing user on my excahnge environment. When exchange discover that the email don't exist send back a alert email to the sender email.

So I need a way to find wich ip address send this email? I don't know what this email is about since we only recived the alert email.
0
 

Author Comment

by:Vbourbeau
ID: 37109776
Ok I found the information in the email header
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
As tax season makes its return, so does the increase in cyber crime and tax refund phishing that comes with it
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

825 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question