> The IP Addresses 1.2.3.4 and 10.20.30.40 are changed by me to protect the > innocent ;) > The real IP Addresses are of course not internal. > 1.2.3.4 and 10.20.30.40 are really 80.*.*.*
yeah, I thought that 1.2.3.4 was the only changed. Private numbers can appear in mail clients when they are in NATed networks, that is what I said about 10.x.x.x. > I don't know why 10.20.30.40 (the user's IP) even appears in the Mail Header > because there runs no Mailserver at 10.20.30.40 - just the user's > Thunderbird installation. But because it is a dynamic IP, there used to be a > spam-sending Mailserver on that IP. thunderbird also talks SMTP when sending mails and is correct that client IP appears. > Currently I think the Mailserver at 1.2.3.4 (the user's email provider) > isn't correctly configured - because 10.20.30.40 shouldn't appear in the > Mail Header. answered.