Exchange Server Forums

Finding the originating source of an email

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Exchange 2003 SBS >> Finding the originating source of an email

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Finding the originating source of an email - 25.Apr.2008 11:28:43 AM

Adam_231

Posts: 10
Joined: 17.Feb.2005
From: Belfast
Status: offline

Hi!

I have noticed in our 2003 Exchange (Sp2) queues that there are messages building up appearing to be from an 'info@domain.co.uk' address within our organisation. This address was published on our internet site (I know, I know, this isnt a good idea. It has since been removed). However, the address itself was only ever setup as a secondary email on another user account. This also has now been removed. So the address DOESNT exist in our organisation, i know this because when i try and email it it returns an NDR as you would expect.

My question is how do I find the source to resolve the problem? I can of course see the emails in the queues and see the routing with Message Tracking but I either can't or don't know how to extract the message itself from there to see the internet headers.

I have also checked that we ARENT relaying mail.

Any suggestions are welcome because this is cracking me up!!!

Adam

Post #: 1

Featured Links*

RE: Finding the originating source of an email - 28.Apr.2008 4:18:30 AM

Adam_231

Posts: 10
Joined: 17.Feb.2005
From: Belfast
Status: offline

Below is the result of the smtp logging. Does this suggest there is something on the server itself generating these mails? I have run a number of Anti-Virus apps, none of which find anything?

_____________________________________________________________________________________________

# Message Tracking Log File
# Exchange System Attendant Version 6.5.7638.1
# Date Time client-ip Client-hostname Partner-Name Server-hostname server-IP Recipient-Address Event-ID MSGID Priority Recipient-Report-Status total-bytes Number-Recipients Origination-Time Encryption service-Version Linked-MSGID Message-Subject Sender-Address

28/04/2008 0:18:35 GMT 127.0.0.1 domain.co.uk - SERVERNAME 127.0.0.1 random@address.com 1019 SERVERNAME70EkeCnKKErF00000608@mail.domain.co.uk 3 0 2406 1 - 0 Version: 6.0.3790.3959 - - info@domain.co.uk

28/04/2008 0:18:35 GMT 127.0.0.1 domain.co.uk - SERVERNAME 127.0.0.1 random@address.com 1025 SERVERNAME70EkeCnKKErF00000608@mail.domain.co.uk 3 0 2406 1 - 0 Version: 6.0.3790.3959 - - info@domain.co.uk

28/04/2008 0:18:35 GMT 127.0.0.1 domain.co.uk - SERVERNAME 127.0.0.1 random@address.com 1024 SERVERNAME70EkeCnKKErF00000608@mail.domain.co.uk 3 0 2406 1 - 0 Version: 6.0.3790.3959 - - info@domain.co.uk

_____________________________________________________________________________________________

Any help is appreciated!

Adam

(in reply to Adam_231)

Post #: 2

RE: Finding the originating source of an email - 29.Apr.2008 1:44:23 PM