I see now that this is an ezmlm submission. I missed that previously. I
don't use ezmlm (I do use mailman with QMT), so I don't know off hand.
This appears to be coming from squirrelmail. I would change squirrelmail
configuration so that submissions are authenticated. Then your message
headers will show authentication account, as will the submission log.
See the wiki dovecot page for the appropriate config_local.php settings
for squirrelmail.
Thanks.
--
-Eric 'shubes'
On 09/24/2013 08:41 PM, Aneesh Hariyappan wrote:
hi Eric,
Please find the following header of one the mails. From address
shows [email protected] <mailto:[email protected]> , but i dont
have any user with that email address in my domain
RFC822 Message body
Return-Path:
<kims-return-1865-kimshisnet.com-02602=kimshisnet....@kimshisnet.com
<mailto:[email protected]>>
Delivered-To: [email protected] <mailto:[email protected]>
Received: (qmail 22178 invoked by uid 89); 25 Oct 2011 10:48:21 -0000
Mailing-List: contact [email protected]
<mailto:[email protected]>; run by ezmlm
Precedence: bulk
X-No-Archive: yes
List-Post: <mailto:[email protected] <mailto:[email protected]>>
List-Help: <mailto:[email protected]
<mailto:[email protected]>>
List-Unsubscribe: <mailto:[email protected]
<mailto:[email protected]>>
List-Subscribe: <mailto:[email protected]
<mailto:[email protected]>>
Delivered-To: mailing list [email protected] <mailto:[email protected]>
Received: (qmail 22167 invoked by uid 89); 25 Oct 2011 10:48:21 -0000
Message-ID: <[email protected]
<mailto:[email protected]>>
Date: Tue, 25 Oct 2011 16:18:21 +0530
Subject: happyt diwali
From: "SYAM S" <[email protected] <mailto:[email protected]>>
To: [email protected] <mailto:[email protected]>
User-Agent: SquirrelMail/1.4.19-1.3.15
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary="----=_20111025161821_72111"
X-Priority: 3 (Normal)
Importance: Normal
On Tue, Sep 24, 2013 at 10:27 PM, Eric Shubert <[email protected]
<mailto:[email protected]>> wrote:
On 09/23/2013 11:13 PM, Aneesh Hariyappan wrote:
Hi,
Is there any way i can track who send mail to a group and from
where it
was send?
My scenario is as follows.
One of my users change his from email address to [email protected]
<mailto:[email protected]>
<mailto:[email protected] <mailto:[email protected]>> in personal info
and send a mail to group.
Where should i look to find the actual user and sender machine ip
--
Regards ,
Aneesh K H
The submission/smtp log should show the account it was sent from.
Also, if you have access to one of the messages sent, its headers
will show the account used to authenticate the submission.
--
-Eric 'shubes'
------------------------------__------------------------------__---------
To unsubscribe, e-mail:
qmailtoaster-list-unsubscribe@__qmailtoaster.com
<mailto:[email protected]>
For additional commands, e-mail:
qmailtoaster-list-help@__qmailtoaster.com
<mailto:[email protected]>
--
Regards ,
Aneesh K H
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
