Received: from i >> >> OpenRelay Server: pc-80-193-4-51-nm.blueyonder.co.uk [80.193.4.51] >> >> So why is this blueyonder address in there then ? > > It is the sender's hostname and IP address which in the "Received:" line > is stored right after the sender's greeting string. Read it > like this: > > ignore-senders-greeting-string-here > (pc-80-193-4-51-nm.blueyonder.co.uk [80.193.4.51])(authenticated > bits=0) by mail.pcc.edu.cn (8.12.3/8.12.3) with ESMTP id > h0LItEL9003808for <tuesday350@hotmail.com>; Wed, 22 Jan 2003 02:55:23 > +0800 > > Which translates to: > > Message _from_ (pc-80-193-4-51-nm.blueyonder.co.uk [80.193.4.51]) > received _by_ mail.pcc.edu.cn _for_ <tuesday350@hotmail.com> on > Wed, 22 Jan 2003 02:55:23 +0800 So am I correct in thinking, the mail originated from a blueyonder dialup/broadband account? > There are plenty of sources and FAQs on reading SPAM/UCE mail > headers findable via Google. I have been and alot of them contradict each other, I managed to find two sites, both reviewing the same email header and both said completely different things, hence why I posted to the list to be sute, I was reading them right. Cheers again Mark -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list
