Internet header question

J

JDTHREE [MVP]

Does anyone know of any tool that could be ran against an outlook
folder full of internet mail that would extract the SMTP address sent
from for all of them and export it to any format?

I'm going through spam from various users, and between the firewall
and the antivirus software on my exchange server I want to add the
IP's to a block list. But it's a pain opening them one at a time,
getting to options, copying the IP, and pasting it into an excel
spreadsheet.

Thanks for any suggestions.

John
 
B

Brian Tillman

JDTHREE said:
I'm going through spam from various users, and between the firewall
and the antivirus software on my exchange server I want to add the
IP's to a block list. But it's a pain opening them one at a time,
getting to options, copying the IP, and pasting it into an excel
spreadsheet.
Click to expand...

Why not add a SPAM filter like SpamBayes that will learn what SPAM looks
like an block it automatically?
 
J

JDTHREE [MVP]

Why not add a SPAM filter like SpamBayes that will learn what SPAM looks
like an block it automatically?
Click to expand...

Because I'm trying to keep known servers from even being able to
connect to the server, rather than have the server still have to
process the stuff.

John
 
R

Roady [MVP]

You can export the FromAddress column to a format like xls or csv which can
easily modify if desired. Use the mport and Export Wizard for this listed
under File

--
Roady [MVP]
www.howto-outlook.com

Tips of the month:
-Creating Signatures
-Create an Office XP CD slipstreamed with Service Pack 3
 
L

Lanwench [MVP - Exchange]

Rather than blocking addresses, I think you may find it's better to use a
good filtering software/service in front of the Exchange server. www.gfi.com
has MailEssentials, frequently recommended in the Exchange NGs when people
ask about anti-spam solutions.

If you don't want to manage something in-house or don't have the separate
hardware to support it, note that www.postini.com (a relay service) works
very well - I have several small offices set up to use it.
 
J

JDTHREE [MVP]

You can export the FromAddress column to a format like xls or csv which can
easily modify if desired. Use the mport and Export Wizard for this listed
under File
Click to expand...

I saw that, but I'm doing it based on SMTP headers - so I can get the
IP of the SMTP server that's sending the spam, and that's not an
option on the export function. :(

Thanks for the suggestion though.

John
 
J

JDTHREE [MVP]

Rather than blocking addresses, I think you may find it's better to use a
good filtering software/service in front of the Exchange server. www.gfi.com
has MailEssentials, frequently recommended in the Exchange NGs when people
ask about anti-spam solutions.

If you don't want to manage something in-house or don't have the separate
hardware to support it, note that www.postini.com (a relay service) works
very well - I have several small offices set up to use it.
Click to expand...

I understand all this. And I've used them in different situations.
But for this particular implementation, I have to deal with things via
blocking spamming IP addresses... I'll just keep pulling the IP's
manually out of each mail in the list since I've not been able to come
up with any way to automate the process.

Thanks though

John
 
M

Milly Staples [MVP - Outlook]

Why not post in a programming group to see if anyone there has successfully
written a little script (vb) to parse through the Internet Headers and pull
this data? Most of the folks in this group are generalists and may not have
the necessary skills to give you the answer you want to find. In a
programming group, the experts are more than willing to help you out and may
have something already written to do this. You never know?

--
Milly Staples [MVP - Outlook]

Post all replies to the group to keep the discussion intact. Due to
the (insert latest virus name here) virus, all mail sent to my personal
account will be deleted without reading.

After searching google.groups.com and finding no answer, JDTHREE [MVP]
asked:

| On Mon, 24 May 2004 15:53:26 -0400, "Lanwench [MVP - Exchange]"
|
|| Rather than blocking addresses, I think you may find it's better to
|| use a good filtering software/service in front of the Exchange
|| server. www.gfi.com has MailEssentials, frequently recommended in
|| the Exchange NGs when people ask about anti-spam solutions.
||
|| If you don't want to manage something in-house or don't have the
|| separate hardware to support it, note that www.postini.com (a relay
|| service) works very well - I have several small offices set up to
|| use it.
||
|| JDTHREE [MVP] wrote:
||| Does anyone know of any tool that could be ran against an outlook
||| folder full of internet mail that would extract the SMTP address
||| sent from for all of them and export it to any format?
|||
||| I'm going through spam from various users, and between the firewall
||| and the antivirus software on my exchange server I want to add the
||| IP's to a block list. But it's a pain opening them one at a time,
||| getting to options, copying the IP, and pasting it into an excel
||| spreadsheet.
|||
||| Thanks for any suggestions.
|||
||| John
||
|
| I understand all this. And I've used them in different situations.
| But for this particular implementation, I have to deal with things via
| blocking spamming IP addresses... I'll just keep pulling the IP's
| manually out of each mail in the list since I've not been able to come
| up with any way to automate the process.
|
| Thanks though
|
| John
 
J

JDTHREE [MVP]

I thought about that, but I figured that had anyone already hit this
limitation in outlook, that someone would've likely already come up
with a solution. And what better place to find it than the people in
the outlook group who would've been the most likely to have seen
something like that before? :)

I've only got about 2000 of them I have to pull out, and I'm about
half way through now, so it's not worth trying to come up with a new
way to do it if there's not already a way out there that's been done.

John


Why not post in a programming group to see if anyone there has successfully
written a little script (vb) to parse through the Internet Headers and pull
this data? Most of the folks in this group are generalists and may not have
the necessary skills to give you the answer you want to find. In a
programming group, the experts are more than willing to help you out and may
have something already written to do this. You never know?

--?
Milly Staples [MVP - Outlook]

Post all replies to the group to keep the discussion intact. Due to
the (insert latest virus name here) virus, all mail sent to my personal
account will be deleted without reading.

After searching google.groups.com and finding no answer, JDTHREE [MVP]
asked:

| On Mon, 24 May 2004 15:53:26 -0400, "Lanwench [MVP - Exchange]"
|
|| Rather than blocking addresses, I think you may find it's better to
|| use a good filtering software/service in front of the Exchange
|| server. www.gfi.com has MailEssentials, frequently recommended in
|| the Exchange NGs when people ask about anti-spam solutions.
||
|| If you don't want to manage something in-house or don't have the
|| separate hardware to support it, note that www.postini.com (a relay
|| service) works very well - I have several small offices set up to
|| use it.
||
|| JDTHREE [MVP] wrote:
||| Does anyone know of any tool that could be ran against an outlook
||| folder full of internet mail that would extract the SMTP address
||| sent from for all of them and export it to any format?
|||
||| I'm going through spam from various users, and between the firewall
||| and the antivirus software on my exchange server I want to add the
||| IP's to a block list. But it's a pain opening them one at a time,
||| getting to options, copying the IP, and pasting it into an excel
||| spreadsheet.
|||
||| Thanks for any suggestions.
|||
||| John
||
|
| I understand all this. And I've used them in different situations.
| But for this particular implementation, I have to deal with things via
| blocking spamming IP addresses... I'll just keep pulling the IP's
| manually out of each mail in the list since I've not been able to come
| up with any way to automate the process.
|
| Thanks though
|
| John
Click to expand...
 
B

Brian Tillman

JDTHREE said:
I understand all this. And I've used them in different situations.
But for this particular implementation, I have to deal with things via
blocking spamming IP addresses... I'll just keep pulling the IP's
manually out of each mail in the list since I've not been able to come
up with any way to automate the process.
Click to expand...

You really need to have an SMTP router that understands black hole lists and
RBLs.
 
J

JDTHREE [MVP]

You really need to have an SMTP router that understands black hole lists and
RBLs.
Click to expand...

They have a firewall that does RBL. They want to augment it with the
IP's of spam servers that still get through that aren't on the lists.

Trust me, I didn't just come up with this off the top of my head to
start a discussion here to attempt to teach me about spam. :)

John
 
R

Rob Schneider

What I'd do:

1. Copy all the mail from Outlook Folder to a IMAP Mail folder (to get
the mail into a standard mailbox text format for easy handling)
2. Write a small script in Python, using Python's email library package
to loop through all emails in the mailbox file, extract the header
information you want, and write it to another text file. (Python becuase
it has the email library easily available).

Hope this is useful to you. Let us know.

rms
 
J

JDTHREE [MVP]

Never used python, so it'll be a good experience anyway. Thanks for
the tip.

John
 
B

Brian Tillman

JDTHREE said:
They have a firewall that does RBL. They want to augment it with the
IP's of spam servers that still get through that aren't on the lists.
Click to expand...

Perhaps a discussion group whose main focus is that particular firewall
would be a better place for the question, then.
 
R

Rob Schneider

Give it a try. Nothing like a real project like this to give it a go.

It is Python's associated libraries that are impressive. Perl has even
more libraries available but I find Perl hard to get a handle on.

Both are 'free', both work extremely well, and both are relatively
undiscovered in the Windows world. I don't know why.

Will be curious to hear how you get on.

rms
 
J

JDTHREE [MVP]

Perhaps a discussion group whose main focus is that particular firewall
would be a better place for the question, then.
Click to expand...

The original question that was posted here was about pulling things
out of outlook, so this group was the exact place to post from. I
didn't start the discussion about the other firewall product.

John
 
Top