> I want to determine which is the offending IP. Thanks in advance for > you response.
You can only trust a Received: header that was added by a server you know and love. In this case, only 200.29.56.222 is a reliable source IP, since it was added by your server. Any other ones--and spammers know this well, often stacking fake Received: headers atop their messages to deceive you--could have been forged anywhere. They may exist, and may really have been used to submit the original message, but the time taken to substantiate this could be huge and not worth the payoff. If, however, you happen to trust 200.29.56.222 and know their IT staff, you then could steer them toward blocking the other IP. -Sandy ------------------------------------ Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] ------------------------------------ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
