Exchange Server Forums

How to identify authenticated mail

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> How to identify authenticated mail

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

How to identify authenticated mail - 11.Aug.2008 5:18:44 AM

manasleo

Posts: 11
Joined: 9.Aug.2008
Status: offline

Hi,

I am administering an Exchange server 2003.
I found out that it is possible to send unauthorised mails by connecting to the exchange server through telnet.
I want to know if there is anything by which I can find out out if an email is sent by a valid user or not.

Regards

Post #: 1

Featured Links*

RE: How to identify authenticated mail - 11.Aug.2008 6:37:17 AM

Jugal

Posts: 69
Joined: 24.Oct.2007
From: Delhi, India
Status: offline

Yes, there are methods through which you can get the IP or something to identify the message. But even through Subject line and the recipient it is destined to, you can find that the particular mails is legitimate or not.

But if you want to save your system, then use good antispamming devices and A good firewall. and WATCH IT REGULARLY.

_____________________________

Regards,
Jugal; MS Exchange Architect & Designer

If an advice works, report this to the fourm.

Want a quicker answer - than describe your issue in as much detail as possible and exactly what steps you have already taken.

(in reply to manasleo)

Post #: 2

RE: How to identify authenticated mail - 11.Aug.2008 9:12:16 AM

uemurad

Posts: 5489
Joined: 7.Jan.2004
From: California, USA
Status: offline

What immediately comes to mind is that a user sending a message via Outlook will connect using MAPI and via telnet using SMTP. Therefore, if you look at the SMTP log of your Exchange server, you will be able to see those messages being sent via telnet and the IP address from which they were sent (and won't see the messages sent from Outlook).

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to manasleo)

Post #: 3

RE: How to identify authenticated mail - 14.Aug.2008 4:33:46 PM