Hi all,is there an source of getting details of email origin as from which ip address , domain or location .I have checked through Internet Headers it shows MX records IP(mail server), ISP IP but no details from email sender.Using Outloo 2007, Exchange 2003. Any one idea please share.Thanks,Bala.

If the header is being stripped or it is being masked then no, but there should be a Message-ID in the header that will have some funky characters and then the server name of the mail server.i.e. Message-ID: B3992920683A82F0679CCC75E06603C9C44D82@server.domain.comSF - MCITP:EMA, MCTS: MOSS 2007, OCS 2007, Exchange 2007

Thanks for quick reply,Will it show ip address ? can you please be more clear..

Typically it will show the server name. If you can determine the name of the public domain you could do a whois to figure out where it originiated from, unless the email is being spoofed from another server.....Then you need to use the header info, but it sounds like it is being stripped. SF - MCITP:EMA, MCTS: MOSS 2007, OCS 2007, Exchange 2007

Hi Bala, If the sender submit the mail via Mapi, you can't see any IP information of the sender in message header. If the sender submit the email via SMTP, you could see his IP in the message header, but the IP can be an internal IP or the external IP of his Internet access. Thanks, Elvis

Right click the message in outlook and click Message Options, there you can see all the Internet headers...

Hi all,Thanks to everyone for your solution or ideas.Thanks,Bala.

Also you can use below cool tool to analyse the message header. It is really nice tool http://www.mxtoolbox.com/Public/Tools/EmailHeaders.aspx Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

Thanks for info Vinod.Bala.