Operator Posted February 11, 2007 Share Posted February 11, 2007 Does anybody know how to trace an email from an internal LAN user, e.g. where both on the same LAN and the email routes through an exchange 2003 server. I'd like to be able to see the originating client IP. Quote Link to comment Share on other sites More sharing options...
Sparda Posted February 12, 2007 Share Posted February 12, 2007 Finding out it's IP shouldn't be too hard. It should be in the header of the email. Quote Link to comment Share on other sites More sharing options...
Operator Posted February 12, 2007 Author Share Posted February 12, 2007 normally yea, but in does not seem to in office 2007. could just be that outlook doesn't show it? it shows the mail headers from external hosts but not from internal. Quote Link to comment Share on other sites More sharing options...
Deveant Posted February 12, 2007 Share Posted February 12, 2007 send a reply, and monitor ur TCP/IP Traffic, find were u send it to. Quote Link to comment Share on other sites More sharing options...
moonlit Posted February 12, 2007 Share Posted February 12, 2007 send a reply, and monitor ur TCP/IP Traffic, find were u send it to. A mailserver near you? :p Quote Link to comment Share on other sites More sharing options...
Operator Posted February 12, 2007 Author Share Posted February 12, 2007 lol, yea i imagine if i watched my tcp/ip traffic it would have destination ip of the mail server. not the end user. plus i don't want to see it when i send the email, i want to see the ip of the user that sends it to me. Quote Link to comment Share on other sites More sharing options...
VaKo Posted February 12, 2007 Share Posted February 12, 2007 The mail headers should show who sent the email Quote Link to comment Share on other sites More sharing options...
Darren Kitchen Posted February 12, 2007 Share Posted February 12, 2007 In Outlook (2000 and 2003 at least) right click on the message and click Options. You'll see the headers there. Also, do you have access to the Exchange server? The Message Tracking Center in the Exchange console can help too. Quote Link to comment Share on other sites More sharing options...
Operator Posted February 12, 2007 Author Share Posted February 12, 2007 thanks for the replies guys. If i right click an internal email and go options the headers box is completely empty. I do have access to the exchange server so I'll check out what you suggested Quote Link to comment Share on other sites More sharing options...
Darren Kitchen Posted February 12, 2007 Share Posted February 12, 2007 If i right click an internal email and go options the headers box is completely empty. this would indicate that the message originated from someone else within the domain Quote Link to comment Share on other sites More sharing options...
Operator Posted February 12, 2007 Author Share Posted February 12, 2007 this would indicate that the message originated from someone else within the domain lol, yea thats the whole point. The person is on the same LAN/domain as me. sorry if i wasn't clear, internal to me means same LAN and domain. Quote Link to comment Share on other sites More sharing options...
Deveant Posted February 13, 2007 Share Posted February 13, 2007 still i say trace them, pretty much trace it to the mail server, then wait for it to be requested. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.