2nd try: Viewing email header in OWA?

[darrel]

We have some shared mailboxes that people access ONLY via OWA. We're getting
reports of some of these picking up considerable spam. These mailboxes are
only used to accept email coming form our online form. We want to make sure
the spam coming in isn't coming directly from our form (we don't think it
is, but want to make sure). To do this, we'd like to check the full email
headers of these spam messages, but I can't find any option in OWA to view
said headers. Is there a way to do this?

-Darrel

 

[Brian Tillman]

We have some shared mailboxes that people access ONLY via OWA. We're
getting reports of some of these picking up considerable spam. These
mailboxes are only used to accept email coming form our online form.
We want to make sure the spam coming in isn't coming directly from
our form (we don't think it is, but want to make sure). To do this,
we'd like to check the full email headers of these spam messages, but
I can't find any option in OWA to view said headers. Is there a way
to do this?

With OWA, I don't think you can see the headers.

Can this online form be accessed at all from the Internet?

 

[darrel]

With OWA, I don't think you can see the headers.

Ugh. Oh well.

Can this online form be accessed at all from the Internet?

Yes, it's on our web site. But only this email account is getting the spam
(dozens of accounts use the email form on our site). So, we're pretty sure
they leaked the email address out when replying to folks or the like and
that's how it got scraped up by the spammers.

-Darrel

 

[Brian Tillman]

Yes, it's on our web site. But only this email account is getting the
spam (dozens of accounts use the email form on our site). So, we're
pretty sure they leaked the email address out when replying to folks
or the like and that's how it got scraped up by the spammers.

What you say is conceivable, but I think it more likely that if the address
is on a web page that a 'bot harvested it there.

 

[darrel]

What you say is conceivable, but I think it more likely that if the

address is on a web page that a 'bot harvested it there.

The contact form that sends the email is on our web site, but the actual
email address, itself, isn't published anywhere on our site.

The concern was that perhaps our form wasn't secure, and spammers were
relaying through it. However, as only one account out of a few dozen are
getting these emails, the theory is that they're NOT coming from our form. I
was hoping I could just check the email headers to confirm.

-Darrel