Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Reporting on an internal sending IP

I have been struggling with the CLI, MFC and spamtowho tools, but either I am missing something, or neither tool will do what I want.

I have a small number of internal hosts which send all my domain's mail. How can I generate summary information a specific (internal) sender IP? I am interested in what the mails coming from some of these hosts actually are and can't make any assumptions about sender address, subject, destination etc. All mails will be hitting the internal interfaces of my Ironports, if that helps.

The only way I can think of doing what I want is to do a custom query against the MFC database (but wouldn't know where to start with that either!)

All ideas gratefully received :D

CreatePlease to create content