Never mind. I haven't had enough coffee yet this morning. I forgot that email traversing internal servers will generate internet headers. I beg the flame gods to let me off easy on this one as I'm sticking by my lack of caffeine excuse.
------------------------------------------------------------------------ ---- Thank you, Pete Kretche MCP, A+ Network Systems Administrator UW - Green Bay 920.465.5014 [EMAIL PROTECTED] "If you do everything right, nobody will realize you've done anything at all." -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kretche, Peter Sent: Monday, June 20, 2005 9:25 AM To: Exchange Discussions Subject: Spam appears in my sent items, did it come from my account? I'm stumped on tracking this one down to the origin. Hopefully someone can help. A user is being accused of sending junk to our students. The header is below. By all accounts, this looks like it came from the user. I know anything going through Outlook or Outlook Web Access uses MAPI and will therefore not have an internet header. So the existence of a header tells me the user might have configured Outlook Express or other IMAP client to send this message. Is there any way I can prove or disprove this came from the user on my system? How else could someone send this and also insert a copy into "Sent Items" without the configuring a client to the mailbox? Microsoft Mail Internet Headers Version 2.0 Received: from MSA.uwgb.edu ([143.200.128.162]) by msb.uwgb.edu with Microsoft SMTPSVC(6.0.3790.1830); Wed, 15 Jun 2005 10:19:51 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: application/ms-tnef; name="winmail.dat" Content-Transfer-Encoding: binary Subject: FW: Don Dion's Retirement Income Guide Hotline, June 14, 2005 Date: Wed, 15 Jun 2005 10:12:29 -0500 Message-ID: <[EMAIL PROTECTED]> X-MS-Has-Attach: X-MS-TNEF-Correlator: <[EMAIL PROTECTED]> Thread-Topic: Don Dion's Retirement Income Guide Hotline, June 14, 2005 Thread-Index: AcVxFQbUNCKjO0WERJeVQdar7Q3rGQAp5b/w From: Address omitted To: Address omitted Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 15 Jun 2005 15:19:51.0986 (UTC) FILETIME=[AD47F920:01C571BD] ------------------------------------------------------------------------ ---- Thank you, Pete Kretche MCP, A+ Network Systems Administrator UW - Green Bay 920.465.5014 [EMAIL PROTECTED] "If you do everything right, nobody will realize you've done anything at all." _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
