Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1133
  • Last Modified:

Proof of delivery

Hello all,

Someone says they sent us an e-mail months ago to one of our "main Mailboxes" that we did not see or find in our exchange server. We have e-mails from that "mailbox" that go back a couple of years  in ".PST" files that were moved from the server to save on space. We did not find that e-mail in the PST files either. They provided a "log" from their"email content gateway" (Mail Marshal) that supposedly confirms that it was delivered to our server. Our server was a Windows 2003 server with exchange 2003 that we just migrated (about a month ago) to a Windows 2008 R2 server with exchange 2010.

My questions are :
How can I officially confirm (and have proof) that the e-mail did not reach our servers? Does exchange 2003 have a feature I can use to see if it did reach the server and would I be able to use it now in the new server since it was migrated?
How reliable is this "Log" they provided and is it real proof?
What software (or service in exchange 2010) can I use to keep these type of records in the future to give actual proof that e-mails Did/didn't get delivered?
We have not decommissioned the old 2003 server yet so I would be able to get to it if needed.

Thank you in advance for your help! It's much appreciated!
0
1pcxpert
Asked:
1pcxpert
2 Solutions
 
Simon Butler (Sembee)ConsultantCommented:
Message Tracking will tell you if the email was processed by Exchange. However it is not enabled by default on Exchange 2003, and in most cases only keeps the log for a certain number of days. Message Tracking is enabled by default on Exchange 2010, but again only keeps the logs for a certain number of days.

Without seeing the log, it is hard to say what it proves or not. Furthermore, logs can be easily faked, they are in a standard format and it only takes a bit of copy and paste to change the dates and you have "proof".

Proving a negative with email is pretty difficult, because unless the email passes through your server nothing is logged. How can you prove nothing is there (and you haven't deleted the "proof").

Simon.
0
 
Dave BaldwinFixer of ProblemsCommented:
I thought we already settled this the last time you asked this same question.
0
 
btanExec ConsultantCommented:
Proof of sending is not proof of receipt.

There is no 100% sure method or proof that the email was actually sent:
- the route to the intended recipient was down,
- an incorrect email address was used by accident and returns back bounced
- a mailserver break out off the internet, dns conflict/errors/down,
- the internet pipe to the destination country is down
- your email address is marked as junk/spam

the list goes on....but you can search your mail server assuming the msg tracking is on
http://exchangeserverpro.com/exchange-2010-message-tracking-log-search-powershell
http://exchangeserverpro.com/searching-message-tracking-logs-by-sender-or-recipient-email-address

there is also queue (in exchange) which is a temporary location where messages that are waiting for processing are stored. In Exchange 2003 and earlier the queues were stored on the local disk in the c:\mailroot\queue directory, or a queue directory in the Exchange Server directory. Exchange Server 2007 and Exchange Server 2010 store their queues in an ESE database. This database is located in the “C:\Program Files\Microsoft\Exchange Server\TransportRoles\data\Queue” directory.

http://www.msexchange.org/articles_tutorials/exchange-server-2010/planning-architecture/smtp-routing-exchange-2010-part1.html

but really do not see reliability with claims unless third party comes in ..sort of like why we need a CA for PKI infra
0
 
1pcxpertAuthor Commented:
Thanks all for the info. Greatly appreciated.
0

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now