Security Basics mailing list archives

RE: Tracking down anonymous user


From: "Scott Ramsdell" <Scott.Ramsdell () cellnet com>
Date: Tue, 2 Jan 2007 13:51:22 -0500

Hello,

I wonder if the reason logging isn't showing the OP anything is that
Outlook wasn't used?

Given that Exchange is an open relay on the inside, these could be
command line generated messages.

Just telnet to your Exchange server on port 25 and away you go...

Kind Regards,
Scott Ramsdell

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Christopher Carnelian
Sent: Friday, December 29, 2006 11:25 AM
To: security-basics () securityfocus com
Subject: RE: Tracking down anonymous user

I am also having this issue this morning. There appears to be no header
information as the email was sent internally. We have not turned on
message tracking in exchange, but now it appears we might. I was able to
reply to an email and place someone else's name in the from field as a
test and it worked. The email looked like it is being sent from the
individual and upon going in to view>options, there is no header
information. Any help would be appreciated.

J Carnelian


Current thread: