>So from the information below which IP address is first received header?
>Received: from mailhost1.attcanada.net [206.191.82.42] by mail.scm.ca with
>ESMTP
> (SMTPD32-6.06) id A87C25A70096; Thu, 02 May 2002 10:25:32 -0600
>Received: from Eoqjmed ([142.154.13.134]) by mailhost1.attcanada.net
> (InterMail v03.02.07.03 118-128) with SMTP
> id <20020502155838.RXR28252@Eoqjmed> for <[EMAIL PROTECTED]>;
> Thu, 2 May 2002 15:58:38 +0000
>From: ppayant <[EMAIL PROTECTED]>
The first one is the "Received: from mailhost1.attcanada.net
[206.191.82.42]..." header, so the remote IP is 206.191.82.42.
>And what is the Envelope from variable that Andy mentioned.
The %MAILFROM% variable will display the return address of the E-mail. You
can use %REMOTEIP% to display the IP address of the remote mailserver.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .