Hi Guys. The IP Addresses 1.2.3.4 and 10.20.30.40 are changed by me to protect the innocent ;) The real IP Addresses are of course not internal. 1.2.3.4 and 10.20.30.40 are really 80.*.*.*
I don't know why 10.20.30.40 (the user's IP) even appears in the Mail Header because there runs no Mailserver at 10.20.30.40 - just the user's Thunderbird installation. But because it is a dynamic IP, there used to be a spam-sending Mailserver on that IP. Currently I think the Mailserver at 1.2.3.4 (the user's email provider) isn't correctly configured - because 10.20.30.40 shouldn't appear in the Mail Header. There are no open relays in that path - 1.2.3.4 (the user's email provider) is running a (more or less) correctly configured mailserver und the user needs to authentificate with that server to send emails. And on 1.2.3.4 (the user's IP) are no mailservers running. Thanks. -- View this message in context: http://old.nabble.com/How-to-ignore-multiple-Received%3A-headers-tp32766061p32766898.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
