Re: Where is this message coming from?

Tech-Archive recommends: Speed Up your PC by fixing your registry

Not enough info to tell.

Can you either:
1) post the actual header from the e-mail
2) increase the information being logged, and post more of the log?

--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)


"ngan" <ngan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5B3222A0-BF0A-4481-8BC8-903966BE4ED6@xxxxxxxxxxxxxxxx
Can someone translate the log below. I received an email from
MoSaHVG@xxxxxxxxx and the Internet header had the message ID coming from
our
exchange server. Below is part of the log. Is it using our server as a
relay, a spoof, or is it actually coming from within our organization?

Thanks.


2006-7-8 17:21:14
GMT 80.53.183.30 mateusz - SEXTUS 192.168.1.9 bui@xxxxxxxxx 1019
SEXTUSY4VkHC8DWtqch00001519@xxxxxxxxxxxxxx 0 0 6353 1 2006-7-8
17:21:12 GMT 0 Version: 6.0.3790.1830 - - MoSaHVG@xxxxxxxxx -

2006-7-8 17:21:14
GMT 80.53.183.30 mateusz - SEXTUS 192.168.1.9 bui@xxxxxxxxx 1025
SEXTUSY4VkHC8DWtqch00001519@xxxxxxxxxxxxxx 0 0 6353 1 2006-7-8
17:21:12 GMT 0 Version: 6.0.3790.1830 - - MoSaHVG@xxxxxxxxx -

2006-7-8 17:21:14
GMT 80.53.183.30 mateusz - SEXTUS 192.168.1.9 bui@xxxxxxxxx 1024
SEXTUSY4VkHC8DWtqch00001519@xxxxxxxxxxxxxx 0 0 6353 1 2006-7-8
17:21:12 GMT 0 Version: 6.0.3790.1830 - - MoSaHVG@xxxxxxxxx


.

Relevant Pages

  • Re: PHP Mail() and Exchange Server
    ... The exchange server is apparantly set to DENY email relays. ... In other words it does not accept mails from others that its own domains, to prevent people using it for mass spam relay. ...
    (php.general)
  • Broken pipes and single quotes
    ... Once in a while my ever smooth running mail relay (sending to and from our ... internal Exchange server) starts creating a queue and refuses more or less to ... That email shows a large number of recipients on the To: header (approx. ... and the thingy that refuses this message to be relayed are the single quotes ...
    (comp.mail.sendmail)
  • Re: Setting the Reply-To address
    ... Recipient Policy" for that user account, on the E-mail addresses tab, and ... come back to the Exchange server directly -- they go to a POP mailbox ... Ben Winzenz wrote: ... incorrect Reply-To header. ...
    (microsoft.public.exchange.admin)
  • Re: Virus Related E-Mail
    ... what message are checking for get the header ?. ... so I assume you are using Groupshield. ... > the virus is then sent by Groupshiled, ... > Not allow anyone but the Exchange server to use the port 25. ...
    (microsoft.public.exchange.admin)
  • Re: Setting the Reply-To address
    ... come back to the Exchange server directly -- they go to a POP mailbox ... Ben Winzenz wrote: ... That is what mail clients use when they reply to a ... (Note that this may or may not relate to the "Reply-To" SMTP header. ...
    (microsoft.public.exchange.admin)