How do I work out who sent an email from a transitory address?
Look for Alert number 8501 which is of the form:
message sent transitory QSXRDJSF@dev1.dom (email@example.com) firstname.lastname@example.org email@example.com
This message was sent by transitory address QSXRDJSF@dev1.dom (firstname.lastname@example.org) to email@example.com. The message id was firstname.lastname@example.org.
In this example email@example.com sent the message using the transitory address QSXRDJSF@dev1.dom