Exchange: 5.5, SP4
O/S: Win2k, SP4
Domain: NT 4.0
Here is what we get in the body of an e-mail, from our external
mail-relayer, when we block an e-mail with a disallowed attachment type:
Sender: [EMAIL PROTECTED]
IP Address: 67.168.41.21
Recipient: <internal e-mail address>
Subject: Re: Re: Document
MessageID: 581BE2DE93C
The majority of these are viruses of course. So, here is my question...
Is there any tool or PERL script out there that could go through each e-mail
in my Virus Admin mailbox, strip out the IP address and append it to a flat
text file?
This would allow me to sort the IP's numerically, see where the majority of
them are coming from and see if any of them belong to any of our parent
company's corporate IP range.
I'd like to do the same kind of thing, with our Spam Submission folder, only
I would like to look through the headers and pull out certain data, then
append it to a .csv file.
Is this possible? If so, can someone point me in the right direction for
documentation or send me any scripts that might be useful? I don't even
have any idea what keywords I'd start searching on for documentation or
tools for this.
TIA,
Jim Blunt
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
