Trace email from original source

[dmbfanatpsu]

The details are:
using exchange 2000
PC's running office 2003

Now for the question....If someone sends me an email, is their a way I can check to see what IP address it came from?(such as the persons machine IP address)?

The reason I ask this is because someone has sent me an emial and I need to see what machine it was sent from.

THX

 

[Goner05]

You can open the message
go to View - Options
In the message header there should be some like this in the header

Received: from (computername)
(The senders ISP DNS address (IP of computer message was sent from)(xx.xxx.xxx.xxx])
by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.18 (built Jul 28 2003))
with ESMTP id <0IHX00K1KZNDPF@l-daemon>

This should be right before the message part of the body, and this is assuming that the IP was not spoofed or forged.

Goner05

 

[dmbfanatpsu]

O.K. I checked that, but it is grayed out. Is this setting an option on the exchange server or could it be that it is "locked down"?

 

[Goner05]

opps what I posted only works from e-mail outside of the company. Within the company I'll have to look.

Goner05

 

[dmbfanatpsu]

ok no problem. any help is much appreciated!
thx

 

[paulha]

Try right click the message in the inbox, then select options ?

Paul

 

[NortonES2]

Try right click the message in the inbox, then select options ?

Paul

That's the same as Goner05's answer.

-------------------------------

If it doesn't leak oil it must be empty!!

 

[paulha]

slightly different if you ask me

 

[xmsre]

It is the same thing. It won't have an internet header if it was never converted from mapi to mime. This tells you a couple of things, first of all the email came from another user on the same server.

Try the message tracking logs on the Exchange server. Client IP is the third field.