Jim- Contact me off-list...hcoleman ( at ) state.mt.us
Hunter -----Original Message----- From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED] Sent: Thursday, March 11, 2004 1:55 PM To: Exchange Discussions Subject: Stripping data out of e-mails in mailbox... Exchange: 5.5, SP4 O/S: Win2k, SP4 Domain: NT 4.0 Here is what we get in the body of an e-mail, from our external mail-relayer, when we block an e-mail with a disallowed attachment type: Sender: [EMAIL PROTECTED] IP Address: 67.168.41.21 Recipient: <internal e-mail address> Subject: Re: Re: Document MessageID: 581BE2DE93C The majority of these are viruses of course. So, here is my question... Is there any tool or PERL script out there that could go through each e-mail in my Virus Admin mailbox, strip out the IP address and append it to a flat text file? This would allow me to sort the IP's numerically, see where the majority of them are coming from and see if any of them belong to any of our parent company's corporate IP range. I'd like to do the same kind of thing, with our Spam Submission folder, only I would like to look through the headers and pull out certain data, then append it to a .csv file. Is this possible? If so, can someone point me in the right direction for documentation or send me any scripts that might be useful? I don't even have any idea what keywords I'd start searching on for documentation or tools for this. TIA, Jim Blunt _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
