All of this, but also the only header you can trust is the one added by your own mail server. So the IP address you logged as delivering the email to YOU is the only one that is for all intents-and-purposes, 'real'. Additional information is nice, true, but it's also unverifiable, especially if you don't trust the source. Anything coming from AWS/EC2 is iffy-at-best, says the cynic in me.
Mark. > * Best practice, don't relay information about internal network structure > to the public, so no internal trace header > * you can only "trust" headers that are signed and pass validation > * totally legit to generate mails on the outbound server > > Kind regards, > > / Tobias Herkula > Manager Detection Anti Spam > Cyren (Berlin) > > ________________________________________ > From: mailop <mailop-boun...@mailop.org> on behalf of Michael Peddemors > <mich...@linuxmagic.com> > Sent: Wednesday, September 26, 2018 9:42:56 PM > To: mailop@mailop.org > Subject: [mailop] *Grumble* When is Amazon AWS going to properly inject > trace headers.. > > Just a rant.. > > Really hard to differentiate the good/bad/ugly .. > > I am pretty sure the message is not generated on the outbound relay.. > I don't really care HOW the record it, but as long as they record it.. > > > Traffic leaving AWS.. > (a14-188.smtp-out.amazonses.com) > > Not a single received/trace header to be seen.. > > DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; > s=lqlkfglxmkqqaie63ahwxqbtpuibzecv; d=instructure.com; > t=1537990176; > > h=Date:From:Reply-To:To:Message-ID:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding; > bh=XYPsipG8tQ8ES1Ao8uS1HsWBUYvG8wDJFWyNsnVKghA=; > b=RDb5aDuHy6D68gQItHw6vPezbfSou69QkfE15pTdTf8zRlYUyQOWlaf/sc1CDcCq > EWRyC95CrcF7UJhJk1EkAwo7DFKjHidQFmEof7C3OT9LjSlP8ZSGGjcndlF/c0TtxbE > 4ql1nPaaw9bRVVKu7FzcVv5wLjZPL5a/A1WD7n74= > DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; > s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; > t=1537990176; > > h=Date:From:Reply-To:To:Message-ID:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID; > bh=XYPsipG8tQ8ES1Ao8uS1HsWBUYvG8wDJFWyNsnVKghA=; > b=fPRUbKlHPLqj82LVsaAmjq1tpbGD2IPIUosKVyqTjLOXG+WaPp0gg1gymtlVDAEY > 5we+vhzW3s+zAyLsvTh1bJB3iuCBH9DYOPOyLaoxU8ZEiRceFGSOPgYJDcHiMQy+glf > J5IkKw/ms/9hx2LFA5JR5dHqxsv+829hjwEPS5is= > Date: Wed, 26 Sep 2018 19:29:35 +0000 > > > -- > "Catch the Magic of Linux..." > ------------------------------------------------------------------------ > Michael Peddemors, President/CEO LinuxMagic Inc. > Visit us at http://www.linuxmagic.com @linuxmagic > A Wizard IT Company - For More Info http://www.wizard.ca > "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd. > ------------------------------------------------------------------------ > 604-682-0300 Beautiful British Columbia, Canada > > This email and any electronic data contained are confidential and intended > solely for the use of the individual or entity to which they are > addressed. > Please note that any views or opinions presented in this email are solely > those of the author and are not intended to represent those of the > company. > > _______________________________________________ > mailop mailing list > mailop@mailop.org > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop > > _______________________________________________ > mailop mailing list > mailop@mailop.org > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop > _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop