The actual to address is sent in the before the headers you actually see. You can think of it like an actual envelope. The server sees this envelope and checks the address. If it matches an account, it opens the envelope, takes the letter, and stuffs it into your mailbox. The headers you see are more like the formal address portion on a business letter. It may or may not match the actual address on the envelope.
In order to see the envelope you can turn the SIMS logging up to low level, and then search the logs later for the message id to see the actual conversation your sims server had with the sending server. HTH, Kevin On Wednesday, August 14, 2002, at 01:50 PM, NetHead wrote: > I am stumped by some e-mails that are getting through to me but do not > seem to be addressed to me. > > Here is the header from one such mail: > > -----begin header----- > Return-Path: [EMAIL PROTECTED] > Received: from [207.236.148.106] (HELO vnet-srv-01.voloper.net) by > pecandeluxe.com (Stalker SMTP Server 1.8b9d14) with ESMTP id > S.0000020874; Wed, 14 Aug 2002 02:43:48 -0500 > Received: from volo-test-01.voloper.com ([10.0.1.6]) by > vnet-srv-01.voloper.net with Microsoft SMTPSVC(5.0.2195.5329); Wed, 14 > Aug 2002 03:43:02 -0400 > Received: from smtp-gw-4.msn.com [80.18.36.121] by > volo-test-01.voloper.com with ESMTP (SMTPD32-7.07 EVAL) id A9A34010E; > Wed, 14 Aug 2002 03:41:23 -0400 > Message-ID: <00007c1c5270$00000245$[EMAIL PROTECTED]> > To: <Valued Customers> > From: "Blanche Mccutchen" <[EMAIL PROTECTED]> > Subject: Fw: Debt Solving Solution as promised SC > Date: Wed, 14 Aug 2002 02:43:45 -1700 > MIME-Version: 1.0 > Content-Type: text/html; charset="iso-8859-1" > Content-Transfer-Encoding: quoted-printable > Return-Path: [EMAIL PROTECTED] > X-OriginalArrivalTime: 14 Aug 2002 07:43:02.0677 (UTC) > FILETIME=[381A5450:01C24366] > -----end header----- > > There is no "To" that I can see in this e-mail (other than "<Valued > Customers>"). Yet somehow, SIMS is receiving this and sending it to MY > mail account. Now I have seen similar headers that I can understand how > the mail is getting through: > > -----begin header----- > Return-Path: [EMAIL PROTECTED] > Received: from [200.75.39.113] (HELO mindspring.com) by pecandeluxe.com > (Stalker SMTP Server 1.8b9d14) with SMTP id S.0000020727 for > <[EMAIL PROTECTED]>; Tue, 13 Aug 2002 14:16:32 -0500 > Reply-To: <[EMAIL PROTECTED]> > Message-ID: <034e55c08a6b$8558c4d7$8dc37bb4@lgauni> > From: <[EMAIL PROTECTED]> > To: > Subject: Web Sites For Only $499.00! > Date: Tue, 13 Aug 2002 07:16:21 +1200 > MiME-Version: 1.0 > Content-Type: text/plain; charset="iso-8859-1" > Content-Transfer-Encoding: 8bit > X-Priority: 3 (Normal) > X-MSMail-Priority: Normal > X-Mailer: AOL 7.0 for Windows US sub 118 > Importance: Normal > -----end header----- > > See, in this one, even though "To:" is blank, there is this line: > Received: from [200.75.39.113] (HELO mindspring.com) by > pecandeluxe.com (Stalker SMTP > Server 1.8b9d14) with SMTP id S.0000020727 for > <[EMAIL PROTECTED]>; Tue, 13 > Aug 2002 > that makes sense. Somewhere in the message, there was a vaild address. > But how did SIMS know to send me the other? I have "Relay for clients > only" turned on and I have "Verify Return-path" turned on. I am not, > however, using any blacklists. I have the following statement in my > routings: > <unknown>=error; > Unknown is a valid account name, but it is not "enabled" (however, I did > notice that I left the "Can connect" box checked...). I used to route > mis-addressed mail to the "postmaster" account (for reasons lost in the > mists of time when e-mail was new). But I got so sick and tired of the > spam that I set up the routing above to "bounce" the mail back to the > sender. > > Is there something else I am missing? > > > > > > ================================================ > | Doug Starkey | > | Network Administrator | > | Pecan Deluxe Candy Company | > | 2570 Lone Star Drive | > | Dallas, TX 75212-6308 | > | e-mail: [EMAIL PROTECTED] | > | voice: 214-631-3669 Ext. 108 | > | fax: 214-631-5833 | > ================================================ > > > ############################################################# > This message is sent to you because you are subscribed to > the mailing list <[EMAIL PROTECTED]>. > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> > To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> > Send administrative queries to <[EMAIL PROTECTED]> > ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
