RE: Exchange/MAPI message origin

From: Stuart Fox (DSL AK) (StuartFat_private)
Date: Wed Feb 27 2002 - 16:48:15 PST

  • Next message: Settle, Sean: "RE: Exchange/MAPI message origin"

    > > Is there a tool to determine which computer a MAPI message was sent 
    > > from? We would like to be able to determine the origin machine of 
    > > email messages as needed but have not had much luck finding 
    > a tool to 
    > > give us this information.
    > 
    > Sean, get the full email-headers. Within those headers, you 
    > will find liens similar to:
    > 
    > Received: from lists.securityfocus.com 
    > (lists.securityfocus.com [66.38.151.19])
    >         by outgoing.securityfocus.com (Postfix) with QMQP
    >         id 2945FA3286; Wed, 27 Feb 2002 11:31:38 -0700 (MST)
    > 
    
    Trouble is, when using a MAPI client, you don't get those headers.   The
    Internet headers are only used for mail coming from or going to the
    Internet.  
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Feb 27 2002 - 19:02:44 PST