tracking of sender station/IP address & etc...

[mbvales]

---

is there a way na ma track ang users IP kung asa nag originate ang anonymous email using webmail account like hotmail, yahoo or gmail or maski ang ISP na lng na iya gamit? kung within LAN lng na user pwde ba ma track kung asa na terminal iya gamit? Thanks

[mindless]

yes.. upgrade to Advance features with your email provider.. (off course this is not free)

[mbvales]

Nope the case here we are using our own mail server (exchange) ; I guess sa ISP side they can track down pero sa end-user side naa bay software or site na pwde nato ma trace? thanks

[eax]

Try : http://www.ntop.org

[buyer_any]

is there a way na ma track ang users IP kung asa nag originate ang anonymous email using webmail account like hotmail, yahoo or gmail or maski ang ISP na lng na iya gamit? kung within LAN lng na user pwde ba ma track kung asa na terminal iya gamit? Thanks

you mean digital signature, kindly check internet headers of the email message

[mbvales]

either way importante lng mahibal-an kung asa nag originate/location sa sender or kung asa na ISP cya connected thru sa iyang webmail address na gigamit. (the sender was spreading an abuse email)

[mbvales]

though we blocked these webmail addresses already to all our pop accounts; pero kabalo nman ta at anytime they can create a new one.

[buyer_any]

either way importante lng mahibal-an kung asa nag originate/location sa sender or kung asa na ISP cya connected thru sa iyang webmail address na gigamit. (the sender was spreading an abuse email)

IP addresses are very easy to get or fake for spammers who care about such things. There are hundreds of thousands of open proxies that will let anyone direct Web traffic through them. When I’m using an open proxy, my IP address is effectively masked. And I can use simple software to switch to a different open proxy (and thus a different IP address) every few minutes. So my spamming activity isn’t tied to a specific IP address.

[mbvales]

I have done a trace on the messages and unfortunately they did originate at Yahoo and Gmail web63206.mail.re1.yahoo.com
mail.gmail.com

It means the sender sent the mails through the web portal for Yahoo and Gmail and hence we cannot trace it back any further. My only option now is to report it to Yahoo and Gmail as mail abuse.