On Thu, Jan 21, 2010 at 2:43 PM, Brian Evans - Postfix List
<grkni...@scent-team.com> wrote:

> This is a client IP not a sender, e. g. 'MAIL FROM: br...@example.com'
>
> The IP should go into a file referenced by a check_client_access
> restriction.

I think I still don't have a understanding at how to properly read /
understand message headers in order to create good filters in Postfix.
I am very sorry for my confusion but can someone please tell me what
the difference is between these two IP's I show in the headers. I am
guessing one IP is the actual 'senders' IP address in which is
initiating SMTP from using a client like Outlook / Thunderbird and the
other IP I am guessing is the address of the senders SMTP server which
establishes a connection with my Postfix MTA, right? Do I at least
have this correct?

I am looking at these headers:

*******************************************************************************

Return-path: <b.148.1296207.0e628e696f0d1...@mail.wfmc.org>
X-original-to: car...@iamghost.com
Delivered-to: car...@iamghost.com
Received: from localhost (localhost.localdomain [127.0.0.1]) by
mail.iamghost.com (Postfix) with ESMTP id 8A54C77A8E9 for
<car...@iamghost.com>; Fri, 22 Jan 2010 05:29:33 -0500 (EST)
Received: from mail.iamghost.com ([127.0.0.1]) by localhost
(iamghost.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id
eY2CHd1Jva+X for <car...@iamghost.com>; Fri, 22 Jan 2010 05:29:31
-0500 (EST)
Received: from civismtp.uas.coop (civismtp.uas.coop [67.212.170.242])
by mail.iamghost.com (Postfix) with ESMTP id C00DB77A862 for
<car...@iamghost.com>; Fri, 22 Jan 2010 05:29:30 -0500 (EST)
Received: from wfmc.org (HELO www.wfmc.org) (192.220.23.216)
(smtp-auth username editor, mechanism cram-md5) by civismtp.uas.coop
(qpsmtpd/0.40) with ESMTPA; Fri, 22 Jan 2010 03:50:52 -0600
Mime-version: 1.0
Reply-to: r.148.1296207.0e628e696f0d1...@mail.wfmc.org
From: "BPM Times" <edi...@bpm.com>
Subject: BPM Times January 2010
List-unsubscribe: "" <mailto:u.148.1296207.0e628e696f0d1...@mail.wfmc.org>
To: "car...@iamghost.com" <car...@iamghost.com>
Content-type: multipart/alternative;
boundary="=_6f6883e747bd1842f9d8a495eff04b03"
Date: 01/22/2010 05:29:29 AM
Message-id: <20100122095052.183d3192c...@civismtp.uas.coop>

*******************************************************************************

There are two (2) 'Received: from' lines which both have two
completely different IP's. One has a HELO & 'smtp-auth' username
(editor) which I assume this line to be the client sending the
message, not the MTA, is this correct?

Any clarification is greatly appreciated.

Reply via email to