From owner-freebsd-chat Sun Apr 1 7:44:38 2001 Delivered-To: freebsd-chat@freebsd.org Received: from smtp01.primenet.com (smtp01.primenet.com [206.165.6.131]) by hub.freebsd.org (Postfix) with ESMTP id 9CB0637B71B for ; Sun, 1 Apr 2001 07:44:35 -0700 (PDT) (envelope-from tlambert@usr05.primenet.com) Received: (from daemon@localhost) by smtp01.primenet.com (8.9.3/8.9.3) id HAA23242; Sun, 1 Apr 2001 07:42:58 -0700 (MST) Received: from usr05.primenet.com(206.165.6.205) via SMTP by smtp01.primenet.com, id smtpdAAADwaynT; Sun Apr 1 07:42:51 2001 Received: (from tlambert@localhost) by usr05.primenet.com (8.8.5/8.8.5) id HAA26355; Sun, 1 Apr 2001 07:44:11 -0700 (MST) From: Terry Lambert Message-Id: <200104011444.HAA26355@usr05.primenet.com> Subject: Re: Email Abuse Question "X-Originating IP" To: reed@reedmedia.net (Jeremy C. Reed) Date: Sun, 1 Apr 2001 14:44:10 +0000 (GMT) Cc: dchulhan@uwi.tt (Dale Chulhan - Home), chat@FreeBSD.ORG (chat@FreeBSD.ORG) In-Reply-To: from "Jeremy C. Reed" at Mar 31, 2001 06:23:24 PM X-Mailer: ELM [version 2.5 PL2] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > > I examined some Hotmail emails that were originating with an abuser > > about a year ago and could not find the X-Originating IP in emails sent > > to windows or macs (I did view source in both cases). Is it that this > > header only shows up on Unix machines? I've noticed that everyone who > > I don't think "X-" headers are platform specific. These headers are > generally added by the particular mail program generating or sending the > mail. As far as I can tell (but I didn't look very far), none of the mail > programs or mail processing tools I use (under Unix-type systems), use > that particular header. > > When I am curious about a particular IP, I look at the > "Received: from" lines in the headers. It is a common practice for webmail programs to expose their originating IP address in headers. Yahoo (Rocektmail) does this by faking up a "Received:" timestamp line, with the "from" element replaces by the bracketted IP address of the client from which the POST request originated. Others use the "X-OriginatingIP:" or a similar "X-" header, which can be anything you want to jam into an "X-" header. Terry Lambert terry@lambert.org --- Any opinions in this posting are my own and not those of my present or previous employers. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message