Email trace

Email trace

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Email trace Wulagi 11-06-2007
|--> Re: Email trace James Matthews11-06-2007
Posted by =?Utf-8?B?V3VsYWdp?= on November 6, 2007, 6:43 am
If you were  Registered and logged in, you could reply and use other advanced thread options
We run ISA as a proxy server for our institution. Our ISP provides a static
IP address. We only use Exchange for internal email. Our system is a Windows
server 2003 and all users have to use an account to get onto the system and
access the internet. We use DHCP with assigned IP addresses on each computer.
External email is only available through third party external email such as
Yahoo. We have a problem of a user sending threatening and abusive email via
a Yahoo account to an external address. We can't identify the Yahoo address.
Wh have traced the emails back to the static IP address that is our internet
port and thus know that it is coming from our network (we have 60 computers
on the network and up to 300 users). Is there any way for us to identify what
machine (an account if possible) the emails are originating from?

Posted by James Matthews on November 6, 2007, 1:37 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
The person can also bounch it around so there is really no way...

--

http://search.goldwatches.com/
http://www.jewelerslounge.com/
> We run ISA as a proxy server for our institution. Our ISP provides a
> static
> IP address. We only use Exchange for internal email. Our system is a
> Windows
> server 2003 and all users have to use an account to get onto the system
> and
> access the internet. We use DHCP with assigned IP addresses on each
> computer.
> External email is only available through third party external email such
> as
> Yahoo. We have a problem of a user sending threatening and abusive email
> via
> a Yahoo account to an external address. We can't identify the Yahoo
> address.
> Wh have traced the emails back to the static IP address that is our
> internet
> port and thus know that it is coming from our network (we have 60
> computers
> on the network and up to 300 users). Is there any way for us to identify
> what
> machine (an account if possible) the emails are originating from?


Posted by =?Utf-8?B?ZnBqcjg0Mw==?= on November 8, 2007, 12:14 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I would offer that you could use a network sniffer that records all packets
and can reconstruct user activity. Set it to filter on words like Yahoo.
Set it up to capture all your Internet traffic.

I don't know much about proxy servers but maybe the ISA can already do
something like that.

"Wulagi" wrote:

> We run ISA as a proxy server for our institution. Our ISP provides a static
> IP address. We only use Exchange for internal email. Our system is a Windows
> server 2003 and all users have to use an account to get onto the system and
> access the internet. We use DHCP with assigned IP addresses on each computer.
> External email is only available through third party external email such as
> Yahoo. We have a problem of a user sending threatening and abusive email via
> a Yahoo account to an external address. We can't identify the Yahoo address.
> Wh have traced the emails back to the static IP address that is our internet
> port and thus know that it is coming from our network (we have 60 computers
> on the network and up to 300 users). Is there any way for us to identify what
> machine (an account if possible) the emails are originating from?

Similar ThreadsPosted
Tryingto trace an unauthorized login October 17, 2008, 8:08 pm
TCP Chimney - what is it and why did I have to disable it prior to a netmon trace? April 2, 2008, 11:55 am
How to enable Auditing to trace who disabled user's account. January 20, 2006, 12:05 pm
MS Outlook automatically change email pop server email January 14, 2006, 9:13 pm
Uploading an email from email client to web based host September 22, 2006, 9:46 am
Re: Forum software email security: email obfuscation October 14, 2006, 12:46 pm
Need to to Trace an IP address from a MAC address November 14, 2005, 8:48 am
Re: Confidentiality of email June 23, 2005, 9:26 am
Re: Confidentiality of email June 23, 2005, 9:34 am
RE: Confidentiality of email June 23, 2005, 10:02 am

The site map in XML format XML site map

Contact Us | Privacy Policy