Another test, this time to update the X-AOL-IP: header, which in my last few false-negatives have the standard X-Originating-IP: header ... I don't know if AOL has deprecated the X-AOL-IP: header or whether it is used under different client circumstances.
<header name='X-Originating-IP:' received='.aol.com [' ordinal='0' /> Thanks, Andrew.
Received: from ims-d13.mx.aol.com [205.188.249.150] by mail.bentallkennedy.com (Alligate(TM) SMTP Gateway v3.11.1.27) with ESMPT id <b2422ac5b51ee835.91caf27363339...@mail.bentallkennedy.com> for <mun...@bentall.com>; Mon, 24 Oct 2011 07:57:29 -0700 Received: from oms-ma01.r1000.mx.aol.com (oms-ma01.r1000.mx.aol.com [64.12.140.129]) by ims-d13.mx.aol.com (8.14.1/8.14.1) with ESMTP id p9OEsXBo016219; Mon, 24 Oct 2011 10:54:37 -0400 Received: from mtaomg-da05.r1000.mx.aol.com (mtaomg-da05.r1000.mx.aol.com [172.29.51.141]) by oms-ma01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 737A438000083; Mon, 24 Oct 2011 10:54:37 -0400 (EDT) Received: from core-dnc002b.r1000.mail.aol.com (core-dnc002.r1000.mail.aol.com [172.29.176.5]) by mtaomg-da05.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id E6EA2E00009B; Mon, 24 Oct 2011 10:54:36 -0400 (EDT) To: g...@lawkessler.com, ga...@coastalnet.com, gaum...@uniserve.com, gayanboral...@yahoo.com, gaye....@usbank.com, mun...@bentall.com, gcr...@jfbb.com, gcr...@macquarie.com, geanne_blaz...@hodgsonruss.com Content-Transfer-Encoding: quoted-printable Subject: X-MB-Message-Source: WebUI X-MB-Message-Type: User MIME-Version: 1.0 From: ghang...@aol.com Content-Type: text/plain; charset="us-ascii"; format=flowed X-Mailer: AOL Webmail 34290-PHONE Received: from 92.231.217.255 by webmail-d011.sysops.aol.com (205.188.180.146) with HTTP (WebMailUI); Mon, 24 Oct 2011 10:54:36 -0400 Message-Id: <8ce6073fbc96840-1fb8-40...@webmail-d011.sysops.aol.com> X-Originating-IP: [92.231.217.255] Date: Mon, 24 Oct 2011 10:54:36 -0400 (EDT) x-aol-global-disposition: S X-SPAM-FLAG:YES X-AOL-SCOLL-SCORE: 0:2:173591936:93952408 X-AOL-SCOLL-URL_COUNT: 0 X-AOL-REROUTE: YES x-aol-sid: 3039ac1d338d4ea57c2c1502 Return-Path: ghang...@aol.com
############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. This list is for discussing Message Sniffer, Anti-spam, Anti-Malware, and related email topics. For More information see http://www.armresearch.com To unsubscribe, E-mail to: <sniffer-...@sortmonster.com> To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com> To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com> Send administrative queries to <sniffer-requ...@sortmonster.com>