Re: Is this from AIX?

You should look in the source of the email. Now, I am not talking about
any email they forwarded on to you but the original recipient. Forwarding
really changes the source. For example, on your email, in IBM Notes, I
can do View, Show, Page Source and I can see stuff like the details below.
If I was to forward this on to a coworker they wouldn't see much of this
at all.

These may be useful in tracking down the sender. Once you have that you
may be able to place it in context.

I can tell your path was something like:
mail1.idocket.com (vpn.idocket.com [12.52.9.254])
rivendell.midrange.com (50.73.104.37)
mail6.bemta8.messagelabs.com ([216.82.243.55])
internotes.dekko.com
And from internotes Notes routed it to the server holding my email.



Received: from mail6.bemta8.messagelabs.com ([216.82.243.55])
by internotes.dekko.com (IBM Domino Release 9.0.1FP6)
with ESMTP id 2017011312455993-443238 ;
Fri, 13 Jan 2017 12:45:59 -0500
Return-Path: <midrange-l-bounces+rob=dekko.com@xxxxxxxxxxxx>
Received: from [216.82.242.34] by server-5.bemta-8.messagelabs.com id
35/E3-29202-B5219785; Fri, 13 Jan 2017 17:46:03 +0000
X-Env-Sender: midrange-l-bounces+rob=dekko.com@xxxxxxxxxxxx
X-Msg-Ref: server-10.tower-73.messagelabs.com!1484329563!66776362!1
X-Originating-IP: [50.73.104.37]
X-SpamWhitelisted: domain whitelist
X-StarScan-Received:
X-StarScan-Version: 9.1.1; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 8047 invoked from network); 13 Jan 2017 17:46:03 -0000
Received: from mail1.midrange.com (HELO rivendell.midrange.com)
(50.73.104.37)
by server-10.tower-73.messagelabs.com with SMTP; 13 Jan 2017 17:46:03
-0000
Received: from rivendell.midrange.com (localhost [127.0.0.1])
by rivendell.midrange.com (Postfix) with ESMTP id
4A2ED764023;
Fri, 13 Jan 2017 11:45:58 -0600 (CST)
X-DomainKeys: Sendmail DomainKeys Filter v1.0.0 rivendell.midrange.com
4A2ED764023
DomainKey-Signature: a=rsa-sha1; s=dk; d=midrange.com; c=simple; q=dns;
b=beHls8cTRihrqBBzIoROjwD0SItm6nIDGAA1CsWRAxHAihhWD/RDfd6NcXirUp8wz
vp8FEYJ/iOpuaC3dZ0WhL4QNKTLVDhtPnhRRpDLQYxCRfkPsTuTM2j1dmcnmp60/kDe
JtMqSUR/Kk5P+SW5+vzChFq7HHW7PwnlYqddsnQ=
X-DKIM: Sendmail DKIM Filter v2.8.3 rivendell.midrange.com 4A2ED764023
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=midrange.com;
s=midrange; t=1484329558;
bh=ZZjhDvH6GXtIaR4IRmR8956Ftyt8NUsrKtnAswTBoN4=;
h=From:To:Subject:Date:Message-ID:MIME-Version:Reply-To:List-Id:
List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:
Content-Type:Content-Transfer-Encoding:Sender;
b=YbA7qJjF5I0nmR95nqYsk4NLW3ZShdBKTTk5cupfXfv80GqtBkP3Eef/OQVg5S5do
vhsGunbJpTUn73Zwb3ecxFPxcpMZHBC4hEZfCLwGnpBtu9gdskqCwdNCBnsMFQ+7F9
PDAdd1zCw28s9VRbte+xNoKib+6SjlNK9Hs3+6ew=
Received: from mail1.idocket.com (vpn.idocket.com [12.52.9.254])
by mail1.midrange.com (8.14.3/8.14.3) with ESMTP id
v0DHjkuV016487
for <midrange-l@xxxxxxxxxxxx>; Fri, 13 Jan 2017 11:45:52
-0600
(envelope-from: tomh@xxxxxxxxxxx)
Received: from TOMPC
by mail1.idocket.com (iDocket.com Mail Server v2015.10)
with ASMTP id
201701131149023053
for <midrange-l@xxxxxxxxxxxx>; Fri, 13 Jan 2017 11:49:02
-0600


Rob Berendt