GFI
English Deutsch Français Italiano Nederlands Español
Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

Determine who added autowhitelist entry

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> Determine who added autowhitelist entry Page: [1]
Login
Message << Older Topic   Newer Topic >>
Determine who added autowhitelist entry - 19.Jun.2008 9:20:56 AM   
unyalli

 

Posts: 12
Joined: 15.Aug.2007
Status: offline
In the below text from the AutoWhiteList.gfi_log.txt debug file I see who was added but not who sent the email. Is there a way of finding out who sent to this address causing this?


"AutoWhiteList","[FlushCache] inserting <us.sales@hotpicksusa.com> into table <autowhitelist>"
Post #: 1
RE: Determine who added autowhitelist entry - 20.Jun.2008 8:38:07 AM   
joestern

 

Posts: 232
Joined: 18.Sep.2003
From: Philadelphia, PA
Status: offline
To find out who in my organization sent a message to us.sales@hotpicksusa.com, I would search the SMTP log for that day. On my server, it is stored in \\mailsvr\c$\WINDOWS\system32\logfiles\SMTPSVC1\.

My technique is to open the file in Notepad (if it's large, it takes a few moments) and remove the following text from the top:

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2008-06-20 00:00:10
#Fields:

Next, open the file in Excel 2007. If you don't have Office 2007, you can rename the file from .log to .txt and open it in Access. Access won't recognize ".log" files as text.

Once the log file is open in the editor of your choice, search for us.sales@hotpickusa.com.

(in reply to unyalli)
Post #: 2
RE: Determine who added autowhitelist entry - 23.Jun.2008 10:50:10 AM   
John Letourneau

 

Posts: 923
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
unyalli,

What build of GFI MailEssentials are you currently running?  Looking at my logs in house I can see very clearly who sent the message, where the message was sent to, the message ID and pretty much all of the information you would need to find this out.

_____________________________

Regards,
John Letourneau - Technical Support Representative
GFI Software - www.gfi.com

(in reply to joestern)
Post #: 3
Page:   [1]
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> Determine who added autowhitelist entry Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


   © 2008. All rights reserved. GFI Software Home Products Download Trials Support Ordering Site Map About Us Contact us
GFI solutions: Exchange anti spam filter - exchange anti virus - isa server - network vulnerability scanner - event log management - USB security software - exchange archiving - fax server software