Security Basics mailing list archives

RE: Tracking down anonymous user


From: "Murda Mcloud" <murdamcloud () bigpond com>
Date: Sat, 30 Dec 2006 07:25:07 +1000

Curiouser and curiouser.
Seems that mail sent from one mailbox to another on the same server will not
have the header. As someone suggested having message tracking enabled may
solve this problem. I guess no 'internet headers' for something that doesn't
go across the 'net.
Can't think off hand of another way to track who it was-SMTP logs maybe?
Do a google for tracking internal exchange mail. Heaps of people asking the
same thing.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Christopher Carnelian
Sent: Saturday, December 30, 2006 3:25 AM
To: security-basics () securityfocus com
Subject: RE: Tracking down anonymous user

I am also having this issue this morning. There appears to be no header
information as the email was sent internally. We have not turned on
message tracking in exchange, but now it appears we might. I was able to
reply to an email and place someone else's name in the from field as a
test and it worked. The email looked like it is being sent from the
individual and upon going in to view>options, there is no header
information. Any help would be appreciated.

J Carnelian


Current thread: