Joey a écrit :
> Can someone tell me why headers shows received from 127.0.0.1 in the
> middle? 

Do you mean the middle of the beginning? :-) when you read Received
headers, stop at the first server that is not under your control. All
other headers have been added by remote servers (whether legitimately or
not).

> Is this a filter thing, or is it someone connecting to that
> server making it look like that IP?
> 
>  
> 
> Thanks!
> 
>  
> 
> Microsoft Mail Internet Headers Version 2.0
> 
> Received: from mail.myserver4mail.net ([205.205.205.205]) by
> myserver4mail.com with Microsoft SMTPSVC(6.0.3790.3959);
> 
>                  Sat, 18 Oct 2008 18:27:14 -0400
> 

your MS server (myserver4mail.com) got the mail from [your] postfix
running on 205.205.205.205. This postfix helo-ed as mail.myserver4mail.net.

> Received: by mail.myserver4mail.net (Postfix, from userid 10816)
> 
>                 id C7FAF264013; Sat, 18 Oct 2008 18:23:58 -0400 (EDT)

your filter submitted mail to your postfix using the sendmail command,
executed as uid 10816.


> 
> Received: from dellconsumer.outbound.ed10.com
> (dellconsumer.outbound.ed10.com [209.202.164.173])
> 
>                 by mail.myserver4mail.net (Postfix) with ESMTP id
> E0D9A26400A
> 
>                 for <[EMAIL PROTECTED]>; Sat, 18 Oct 2008 18:23:40
> -0400 (EDT)
> 

[your] postfix received the message from E-dialog server (ed10.com), on
behalf of Dell, as can be coonfirmed by:

$ host dellhome.usa.dell.com
dellhome.usa.dell.com mail is handled by 10 mail-router.e-dialog.com.
$ host -t txt dellhome.usa.dell.com
dellhome.usa.dell.com descriptive text "spf2.0/pra
a:dellconsumer.outbound.ed10.com -all"


> DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
> 
>                 s=ED2007-07; d=dellhome.usa.dell.com;
> 
>                
> h=Received:Date:Content-Type:Content-Transfer-Encoding:MIME-Version:From:Reply-To:To:Subject:Message-Id:X-Mail-From:X-RCPT-To:X-Mailer;
> 
>                
> b=eAOmL9C1Tece+TgjQsAZ+j6Dq673ohpyt2v/Xv7usOKDk5Qwc5w1+mOwwU5lUs+w
> 
>                
> gFMacqRI/YHmA66s2ZMNJ1C0koVQB4qXMXKAU9j9KgM42BeJh/eBJLPF+hM6NPkw
> 

At a first glance, E-dialog server signs (DK) on behalf of Dell.

If you enable the DKIM plugin in SA, you will have DKIM related infos in
the X-Spam-Status header.

> Received: from [127.0.0.1] ([127.0.0.1:49705])
> 
>                 by bm1-25.bo3.e-dialog.com (envelope-from
> <[EMAIL PROTECTED]>)
> 
>                 (ecelerity 2.2.2.30 r(24133/24168)) with ECSTREAM
> 
>                 id 2D/39-25970-3663AF84; Sat, 18 Oct 2008 15:17:55 -0400
>


E-dialog server received the message from a mailing application running
on the same host.


> [snip] 

Reply via email to