My internet provider is telling me I am sending spam. Which log can I look at to see outgoing emails? I am interested in ip of sender, from email and to email. Is it possible to get this?
I am using Exchange 2013.
Technology Tips and News
My internet provider is telling me I am sending spam. Which log can I look at to see outgoing emails? I am interested in ip of sender, from email and to email. Is it possible to get this?
I am using Exchange 2013.
Here you go..
Search by Message ID
Get-ExchangeServer | get-messagetrackinglog -MessageID <messageID> -Start 5/16/2012 12:01:00 AM -End 5/16/2012 11:59:00 PM | fl Timestamp,ClientIp,ClientHostname,ServerIp,ServerHostname,Source,EventId,MessageId,Recipients,RecipientStatus,TotalBytes,MessageSubject,Sender,ReturnPath,MessageLantency
Search by Sender
Get-ExchangeServer | get-messagetrackinglog -sender user@domain.com -Start 11/15/2012 12:00:00 AM -End 11/16/2012 11:59:00 PM | fl Timestamp,ClientIp,ClientHostname,ServerIp,ServerHostname, Source,EventId,MessageId,Recipients,RecipientStatus,TotalBytes,MessageSubject,Sender
Search by Recipient
Get-ExchangeServer | get-messagetrackinglog -recipient user@domain.com -sender user@domain.com -Start 11/15/2012 12:00:00 AM -End 11/16/2012 11:59:00 PM | fl Timestamp,ClientIp,ClientHostname,ServerIp,ServerHostname, Source,EventId,MessageId,Recipients,RecipientStatus,TotalBytes,MessageSubject,Sender
Search by Sender, Recipient and Subject
Get-ExchangeServer | get-messagetrackinglog -sender user@domain.com -recipient user@domain.com -Start 12/13/2012 12:01:00 AM -End 12/13/2012 11:59:00 PM -messagesubject test | fl Timestamp,ClientIp,ClientHostname,ServerIp,ServerHostname, Source,EventId,MessageId,Recipients,RecipientStatus,TotalBytes,MessageSubject,Sender,ReturnPath,MessageLantency
Search by Sender and Subject
Get-ExchangeServer | get-messagetrackinglog -sender user@domain.com -messagesubject subject -Start 5/16/2012 12:00:00 AM -End 5/16/2012 11:59:00 PM | fl Timestamp,ClientIp,ClientHostname,ServerIp,ServerHostname,