>Received: from 211.101.130.229 [64.228.99.24] by gndtech.com
>
>is the real ip it came from the 211.101.130.229 or the 64.228.99.24
Technically, it depends on the software running on gndtech.com. If that's a standard
mail server, such as IMail, the part in brackets in the IP address, and the part
before it is what the *host name* the spammer claimed to be. So, they are really
coming from 64.228.99.24, but are claiming to be coming from a machine with a host
name of 211.101.130.229 (which isn't a valid domain name, and is probably a made-up IP
address).
--
-Scott
Declude: Anti-virus and Anti-spam solutions for IMail. http://www.declude.com
--
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
