Find sender IP address on exchange 2003
Here my problem
Someone or service send email on behlf of my user. I need to find who or what is sending this email. So I activate message tracking in exchange 2003 but when it's internal emails we don't see the ip adresse of the client PC.
Since this is an intermittent problem I need a solution that will allow me further consultation.
Thank
Someone or service send email on behlf of my user. I need to find who or what is sending this email. So I activate message tracking in exchange 2003 but when it's internal emails we don't see the ip adresse of the client PC.
Since this is an intermittent problem I need a solution that will allow me further consultation.
Thank
Alan Hardisty
Are you receiving mails from your users to your users or sending mail from your users to external users?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
The service that sends email is internal is probably use MAPI connexion so no headers. All the transaction Entire transaction happens internally.
Okay - so are you trying to find the computer or device that is sending the information to the server?
Can you describe in more details exactly what the problem is and what you are trying to do please.
Can you describe in more details exactly what the problem is and what you are trying to do please.
ASKER
My user periodically receives alerts from the exchange system administrator has about email
does not exist at the organization this message was sent to. But the user never send this message. I need to find who or what send this email.
In addition, the destination address is not an email address is a ldap address, reason why Exchange can not find the recipient (/O=domain/OU=x/CN=Configu
So something use my user sender address to send email to a no existing user on my excahnge environment. When exchange discover that the email don't exist send back a alert email to the sender email.
So I need a way to find wich ip address send this email? I don't know what this email is about since we only recived the alert email.
does not exist at the organization this message was sent to. But the user never send this message. I need to find who or what send this email.
In addition, the destination address is not an email address is a ldap address, reason why Exchange can not find the recipient (/O=domain/OU=x/CN=Configu
So something use my user sender address to send email to a no existing user on my excahnge environment. When exchange discover that the email don't exist send back a alert email to the sender email.
So I need a way to find wich ip address send this email? I don't know what this email is about since we only recived the alert email.
ASKER
Ok I found the information in the email header