The firewall is set OK - I can watch the logs and it shows the IP address of
the sender's machine but after it gets to Declude's hiJack, it shows as the
outgoing IP 127.0.0.1.

this is exactly how my AV machine works

81.255.84.76/smtpd receives on port 25

81.255.84.76/smtp sends the msg to AV on 127.0.0.1:10025

AV sends from 127.0.0.1:10026 to smtpd/81.255.84.76

Our AV runs as an MTA on 127.0.0.1 on postifx IP 81.255.84.76

so the headers look like this:


Received: from VirusGate.MEIway.com [81.255.84.76] by ms1.meiway.com with ESMTP (SMTPD32-7.07) id ABF2227F0388; Tue, 08 Mar 2005 15:51:30 +0100

**Received: from localhost (localhost.MEIWay.com [127.0.0.1])
        by VirusGate.MEIway.com (Postfix) with SMTP id DED7A38669A
        for <[EMAIL PROTECTED]>; Tue,  8 Mar 2005 16:03:20 +0100 (CET)
        (envelope-from [EMAIL PROTECTED])

**X-AV-Checked: Tue Mar  8 16:03:20 2005 virusgate.meiway.com

**Received: from mgw1.meiway.com (mgw1.meiway.com [81.255.84.75])
        by VirusGate.MEIway.com (Postfix) with ESMTP id D7A2138665B
        for <[EMAIL PROTECTED]>; Tue,  8 Mar 2005 16:03:20 +0100 (CET)
        (envelope-from [EMAIL PROTECTED])

Received: from list.ipswitch.com (list.ipswitch.com [156.21.1.21])
        by mgw1.meiway.com (Postfix) with ESMTP id 0C2D84718D9
        for <[EMAIL PROTECTED]>; Tue,  8 Mar 2005 16:03:17 +0100 (CET)
        (envelope-from [EMAIL PROTECTED]


3 headers marked "**" are added by the same machine with two IPs, 127.0.0.1 and 81.255.84.76.


Len
_____________________________________________________________________
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to