[hatters]

A friend of mine has received an email reply (from the recipient, including the original) to an email that he did not send. At the time that the original was sent his laptop was not in his possession but at his workplace. Obviously someone at his workplace knew his userid and password and he is anxious to find out the IP address of the original sending email to facilitate his investigation.

The original email has been deleted by the sender so all he has is the reply including the original.

Is it possible to get the "properties" of the original email including the IP address from where it was sent?