How do I work out who sent an email from a transitory address?
Look for Alert number 8501 which is of the form:
message sent transitory QSXRDJSF@dev1.dom (firstname.lastname@example.org) email@example.com firstname.lastname@example.org
This message was sent by transitory address QSXRDJSF@dev1.dom (email@example.com) to firstname.lastname@example.org. The message id was email@example.com.
In this example firstname.lastname@example.org sent the message using the transitory address QSXRDJSF@dev1.dom