RME syslog automated action

Unanswered Question
Feb 12th, 2009
User Badges:

Hi All,

I have a strange issue on the syslog automate action. For some reason the From address got altered (was [email protected]) to prvs=CiscoWorks=[email protected]. So I double check the CiscoWorks Email ID: Common Services -> Server -> System Preferences and it still showing [email protected]

So I am very puzzled because I have outlook rule setup to redirect [email protected] as sender.

Any suggestions are great appreciates.

Best Regards,


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Joe Clarke Thu, 02/12/2009 - 16:27
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

This looks like Exchange's doing. I highly doubt LMS is doing this, but you can check by starting a sniffer trace filtering all TCP port 25 traffic between the LMS server and your SMTP server. Then, generate a syslog which will trigger this automated action. Then check the sniffer trace to see what LMS is sending to the SMTP server.

jayshihlin Thu, 02/12/2009 - 16:54
User Badges:

Thanks again for promptly respond! That is great suggestion and I will take a sniff and see the packet.

Thanks again!



This Discussion