I'm stumped on tracking this one down to the origin. Hopefully someone
can help. A user is being accused of sending junk to our students. The
header is below. By all accounts, this looks like it came from the
user. I know anything going through Outlook or Outlook Web Access uses
MAPI and will therefore not have an internet header. So the existence
of a header tells me the user might have configured Outlook Express or
other IMAP client to send this message. Is there any way I can prove or
disprove this came from the user on my system? How else could someone
send this and also insert a copy into "Sent Items" without the
configuring a client to the mailbox?
Microsoft Mail Internet Headers Version 2.0
Received: from MSA.uwgb.edu ([143.200.128.162]) by msb.uwgb.edu with
Microsoft SMTPSVC(6.0.3790.1830);
Wed, 15 Jun 2005 10:19:51 -0500
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: application/ms-tnef;
name="winmail.dat"
Content-Transfer-Encoding: binary
Subject: FW: Don Dion's Retirement Income Guide Hotline, June 14, 2005
Date: Wed, 15 Jun 2005 10:12:29 -0500
Message-ID: <[EMAIL PROTECTED]>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
<[EMAIL PROTECTED]>
Thread-Topic: Don Dion's Retirement Income Guide Hotline, June 14, 2005
Thread-Index: AcVxFQbUNCKjO0WERJeVQdar7Q3rGQAp5b/w
From: Address omitted
To: Address omitted
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 15 Jun 2005 15:19:51.0986 (UTC)
FILETIME=[AD47F920:01C571BD]
------------------------------------------------------------------------
----
Thank you,
Pete Kretche
MCP, A+
Network Systems Administrator
UW - Green Bay
920.465.5014
[EMAIL PROTECTED]
"If you do everything right, nobody will realize you've done anything at
all."
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
