Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 1986 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to track an email?

csanches
Is there a way in the logs to check to see what computer an email was sent from?  
  
There's a gmail account being used to send bad emails to others, I'm just trying to figure out if its being done in our network, and if possible, which computer/user.

Thanks


This thread was automatically locked due to age.
Parents
  • 0
    Usually, these are the result of either an infected PC internally or someone externally faking another person's name.  Without a copy of such an email complete with full headers, it's hard to know.

    Copy the full header out of one of the bad emails and paste it into Email Header Analyzer, RFC822 Parser - MxToolbox.  If you need further help, please post the header.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    Usually, these are the result of either an infected PC internally or someone externally faking another person's name.  Without a copy of such an email complete with full headers, it's hard to know.

    Copy the full header out of one of the bad emails and paste it into Email Header Analyzer, RFC822 Parser - MxToolbox.  If you need further help, please post the header.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data