Scott... HOP is "0", no HOPHIGH. IPBYPASS 192.168.1.50 which is my backup spooler.
Complete "Received:" headers below: Received: from smtp.fidnet.com [216.229.64.74] by mail.csimo.com (SMTPD32-8.12) id AD2B20D0070; Thu, 22 Jul 2004 16:10:03 -0500 Received: (qmail 13061 invoked by uid 20954); 22 Jul 2004 21:09:57 -0000 Delivered-To: [EMAIL PROTECTED] Received: (qmail 13057 invoked from network); 22 Jul 2004 21:09:57 -0000 Received: from exprod6mx94.postini.com (HELO psmtp.com) (12.158.36.78) by smtp.fidnet.com with SMTP; 22 Jul 2004 21:09:57 -0000 Received: from source ([216.229.87.4]) by exprod6mx94.postini.com ([12.158.35.251]) with SMTP; Thu, 22 Jul 2004 16:09:56 CDT Received: from office [192.168.1.177] by mail.csimo.com (SMTPD32-8.12) id AD281C400BE; Thu, 22 Jul 2004 16:10:00 -0500 I'm not running the current version of Declude (don't have a service agreement). Thanks for your help! -Joe ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, July 22, 2004 5:09 PM Subject: Re: [Declude.JunkMail] Declude reporting wrong IP... why? > > >I've had a couple of reports that my messages were failing SPF. I sent a > >message to myself via a loop and am totally confused at the message header. > > > >The message was actually sent from my computer on private IP 192.168.1.177 > >to my IMail server at 216.229.87.4. For some reason Declude reports that > >I sent the message from 216.229.64.74. That IP is one of our IP's, but > >not at this location and the message never touched that subnet. > > What are your HOP, HOPHIGH, and IPBYPASS settings? > > >Top part of message header shows correct information: > > > >Received: from source ([216.229.87.4]) by exprod6mx94.postini.com > >([12.158.35.251]) with SMTP; > > Thu, 22 Jul 2004 16:09:56 CDT > >Received: from office [192.168.1.177] by mail.csimo.com > > (SMTPD32-8.12) id AD281C400BE; Thu, 22 Jul 2004 16:10:00 -0500 > > Are there any further Received: headers are there? > > > X-Declude-Sender: <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] [216.229.64.74] > >X-Note: This message was sent from 216-229-64-74-empty.fidnet.com > >([216.229.64.74]). > > Does the IP 216.229.64.74 appear anywhere in the headers? > > What version of Declude JunkMail are you running? > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
