>>Received: from guava.uch.edu [168.200.2.37] by stat.com with ESMTP
>>  (SMTPD32-8.02) id A94AD300BE; Sat, 23 Aug 2003 13:06:34 -0700
>>Received: from mail pickup service by guava.uch.edu with Microsoft
>>SMTPSVC;
>>         Sat, 23 Aug 2003 14:06:33 -0600
>>Received: from uchaex2.uch.ad.pvt ([168.200.32.18]) by guava.uch.edu
>>with
>>Microsoft SMTPSVC(5.0.2195.5329); Sat, 23 Aug 2003 14:06:23 -0600
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
>>Received: by uchaex2.uch.ad.pvt with Internet Mail Service
> (5.5.2653.19)

I understand everyone's logic that this might indeed be a bounce,
however, this is the part that keeps confusing me ...

The header shows 168.200.2.27 sent it to me, but guava.uch.edu (which
is their SMTP machine MX) got it from 168.200.32.18 about 11 seconds
earlier (if their clocks are accurate).

168.200.32.18 is in their block too, so I'm assuming that is the
machine that originate the message.

If 168.200.2.27 is their inbound SMTP server, wouldn't you just see
that as the only IP number, and not the second IP number?

David

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to