[KLUG Members] How to read mail header?

[Bruce Smith]

Be careful of mail headers!  Spammers commonly insert forged mail
headers in their emails to make it difficult to track them down.

If this is spam, I wouldn't trust anything but the header your MTA
inserted in the message.

Otherwise, it may have been sent from a box with the default name of
"localhost".

 - BS


> Hi
> I am trying to decipher one mail header. I am unable to understand following
> line.
> 
> Received: from 202-63-173-245.broadband.isp.exatt.net
>  (202-63-173-245.broadband.isp.exatt.net [202.63.173.245])
>  by mail.enterux.com (IMP) with HTTP for <geeks at enterux.com@localhost>; Sat,
>  31 Jul 2004 06:27:30 -0500
> What is the meaning of geeks at enterux.com@localhost ?
> 
> Thank you
> 
> Komal
> 
> Original mail header:-
> 
> Return-path: <geeks at enterux.com>
> Received: from ndl1mx1-a-fixed.sancharnet.in
>  (ndl1mx1-a-fixed.sancharnet.in [61.0.0.46])
>  by wppa.sancharnet.in (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep
> 8
>  2003)) with ESMTP id <0I1P00209PRRAD at wppa.sancharnet.in> for
>  agencies_ad1 at sancharnet.in; Sat, 31 Jul 2004 16:19:35 +0530 (IST)
> Received: from conversion-daemon.ndl1mx1-a-fixed.sancharnet.in by
>  ndl1mx1-a-fixed.sancharnet.in
>  (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep  8 2003))
>  id <0I1P00C01PI7LM at ndl1mx1-a-fixed.sancharnet.in>
>  (original mail from geeks at enterux.com) for agencies_ad1 at sancharnet.in
>  (ORCPT agencies_ad1 at sancharnet.in); Sat, 31 Jul 2004 16:10:55 +0530 (IST)
> Received: from ns3.micrologic.net (ns3.micrologic.net [66.98.156.37])
>  by ndl1mx1-a-fixed.sancharnet.in
>  (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep  8 2003))
>  with ESMTP id <0I1P001K0PO06O at ndl1mx1-a-fixed.sancharnet.in> for
>  agencies_ad1 at sancharnet.in (ORCPT agencies_ad1 at sancharnet.in); Sat,
>  31 Jul 2004 16:10:55 +0530 (IST)
> Received: (qmail 28040 invoked by uid 48); Sat, 31 Jul 2004 11:27:30 +0000
> Received: from 202-63-173-245.broadband.isp.exatt.net
>  (202-63-173-245.broadband.isp.exatt.net [202.63.173.245])
>  by mail.enterux.com (IMP) with HTTP for <geeks at enterux.com@localhost>; Sat,
>  31 Jul 2004 06:27:30 -0500
> Content-return: prohibited
> Date: Sat, 31 Jul 2004 06:27:30 -0500
> From: geeks at enterux.com
> Subject: Re: From Komal About Junior System Administrator
> In-reply-to: <000701c475ca$53007900$5227013d at komal>
> X-Originating-IP: 202.63.173.245
> To: komal <agencies_ad1 at sancharnet.in>
> Message-id: <1091273250.410b822261473 at mail.enterux.com>
> MIME-version: 1.0
> Content-type: text/plain; charset=ISO-8859-1
> Content-transfer-encoding: 8BIT
> User-Agent: Internet Messaging Program (IMP) 3.2.2
> References: <000701c475ca$53007900$5227013d at komal>
> Original-recipient: rfc822;agencies_ad1 at sancharnet.in
> 
> _______________________________________________
> Members mailing list
> Members at kalamazoolinux.org
> 
>