Improve company productivity with a Business Account.Sign Up

x
?
Solved

Find sender IP address on exchange 2003

Posted on 2011-03-15
6
Medium Priority
?
1,195 Views
Last Modified: 2012-06-21
Here my problem

Someone or service send email on behlf of my user. I need to find who or what is sending this email. So I activate message tracking in exchange 2003 but when it's internal emails we don't see the ip adresse of the client PC.

Since this is an intermittent problem I need a solution that will allow me further consultation.

Thank

0
Comment
Question by:Vbourbeau
  • 3
  • 2
6 Comments
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35137678
Are you receiving mails from your users to your users or sending mail from your users to external users?
0
 
LVL 6

Accepted Solution

by:
nettek0300 earned 2000 total points
ID: 35137680
You can find this information out by viewing the email headers.
0
 

Author Comment

by:Vbourbeau
ID: 35137809
The service that sends email is internal is probably use MAPI connexion so no headers. All the transaction Entire transaction happens internally.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35137836
Okay - so are you trying to find the computer or device that is sending the information to the server?

Can you describe in more details exactly what the problem is and what you are trying to do please.
0
 

Author Comment

by:Vbourbeau
ID: 35137985
My user periodically receives alerts from the  exchange system administrator has about email
does not exist at the organization this message was sent to. But the user never send this message. I need to find who or what send this email.

 In addition, the destination address is not an email address is a ldap address, reason why Exchange can not find the recipient (/O=domain/OU=x/CN=Configuration/cn=Servers/cn=xx).

So something use my user sender address to send email to a no existing user on my excahnge environment. When exchange discover that the email don't exist send back a alert email to the sender email.

So I need a way to find wich ip address send this email? I don't know what this email is about since we only recived the alert email.
0
 

Author Comment

by:Vbourbeau
ID: 37109776
Ok I found the information in the email header
0

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

This article explains how to move an Exchange 2013/2016 mailbox database and logs to a different drive.
Let us take a look at the scenario, you have a database that is corrupt and you run the ESEUTIL command only to find you are unable to repair it. How do you now get the data back?
how to add IIS SMTP to handle application/Scanner relays into office 365.
This video discusses moving either the default database or any database to a new volume.

606 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question